Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
File: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft (raw, json)
Hash identifier: 32D1HZfC5ctvxB5i37q6PhXYk96OlIHlp/Lxc4DwpS4=
Subject key identifier: 52:8A:88:45:37:8A:7E:4F:54:D5:71:E4:7F:88:9A:FA:C5:84:3A:7D
Authority key identifier: 57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
Certificate issuer: /CN=57130f799f8a8985502a2ea3356037674085cfca
Certificate serial: 01987C4059B525B26DC2CEC91EACE1C3706D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
Manifest number: 1623
Signing time: Tue 05 Aug 2025 22:00:48 +0000
Manifest this update: Tue 05 Aug 2025 22:00:48 +0000
Manifest next update: Wed 06 Aug 2025 22:00:48 +0000
Files and hashes: 1: 0cSnkMJkJHeFaYdY1KT0ScO6smc.roa (hash: Gcz0UPXLhZmjDb4FihMibqoJMQnP847xcHc8Qvl5GWc=)
2: 10H4MUNhSSva047O9EEp6SPRBJE.roa (hash: JmvtAf/+biHEI+go7XB/O90LiW31KmrT39neQ8bWDTc=)
3: 78KScp2LVWw2hOVmr_h_Gkcv34A.roa (hash: Ptq/z1pA4OnP8t08S5vn7Az3pzr/nZN/5vkEHzVtW1s=)
4: GhEBs7fMOUU2KjePNnbULHKRHoA.roa (hash: Dow24ARSNfhxgpUv5NrsgvZFPFxhNN0Fkn5hgDvl4wg=)
5: H9Yj6XrfYViqOy5X6VeUZJTi5tI.roa (hash: 4orcq82HkX9/XUoOT4IA7nH/E15MI2gX+xqdM0ifFYg=)
6: VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl (hash: 1uqap4ty1749jUYICxzwHLn+RHCE7Co06PD8aH6yQpw=)
7: tkuxtWzbusmwWQub2z4rjkdwXdc.roa (hash: JTVZbUmozTnvdMYKVuksSNIaPHfDAOZ4PEG/FbAO7wg=)
8: wPqYVNKJADvVgGucnETD7HuiSvs.roa (hash: 0eyTJy9gG8F8Xex/RtpsLoJCxS1EJ4y1hxoKVvkvOZ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 22:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7c:40:59:b5:25:b2:6d:c2:ce:c9:1e:ac:e1:c3:70:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57130f799f8a8985502a2ea3356037674085cfca
Validity
Not Before: Aug 5 22:00:48 2025 GMT
Not After : Aug 6 22:00:48 2025 GMT
Subject: CN=528a8845378a7e4f54d571e47f889afac5843a7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:29:45:a1:c1:9a:92:d3:1a:91:e3:e5:f6:4b:
a7:46:b2:7c:5e:14:98:48:c3:a0:5f:98:5d:3d:ec:
97:7a:3f:d0:de:b7:cb:5a:c1:0a:cc:6f:38:ff:ef:
92:df:22:47:e9:4b:8a:8e:cc:a3:cd:a8:48:5e:0f:
bf:49:7a:29:33:0e:7b:60:a2:a1:4b:b8:55:89:f5:
eb:3c:53:18:71:12:b2:a8:79:ec:b6:e5:53:3e:b3:
1c:5d:ed:62:ea:5e:12:03:15:04:e0:39:f3:a9:9d:
6e:a7:ae:46:be:8d:09:67:65:48:f3:cf:56:23:35:
a3:7b:1a:1a:4b:8a:71:19:5b:65:49:d0:d6:db:6c:
13:81:35:15:8d:82:df:a7:58:b6:d1:d9:1e:50:6b:
b5:f2:b1:8f:67:17:de:42:18:e8:cc:45:e9:c2:0e:
40:b5:9f:98:c3:55:24:f8:ff:1f:bf:14:6e:99:43:
ae:2a:a0:85:b2:d4:16:47:bf:28:fc:87:45:80:25:
44:67:15:60:9c:a7:1a:46:6b:8b:f2:8b:0d:9c:42:
61:57:7f:34:46:c8:29:90:c0:57:16:84:6b:56:6e:
d4:84:ff:88:fc:29:ed:27:91:5e:4c:c6:d2:f1:73:
e9:68:d2:c4:7f:3b:17:15:f4:ba:7b:20:78:aa:ea:
99:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
52:8A:88:45:37:8A:7E:4F:54:D5:71:E4:7F:88:9A:FA:C5:84:3A:7D
X509v3 Authority Key Identifier:
keyid:57:13:0F:79:9F:8A:89:85:50:2A:2E:A3:35:60:37:67:40:85:CF:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/5181de-44cd-4654-96fc-d3b90a9b9b41/1/VxMPeZ-KiYVQKi6jNWA3Z0CFz8o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:90:cb:22:cb:56:92:f8:3d:8e:7e:65:ee:e7:7b:a6:fb:06:
e2:90:1c:e5:30:20:30:5e:41:c6:46:72:72:60:93:7f:27:65:
81:05:7c:5a:2d:c8:2a:d4:39:4e:5b:58:43:86:46:97:6b:13:
e0:10:bb:f2:ee:6a:a4:b6:92:b4:de:58:4f:ff:97:46:8b:e3:
fe:a2:25:9a:1b:0e:d7:d5:69:6e:4d:d3:20:ef:c1:79:4f:bd:
c8:bf:6f:56:ae:09:aa:93:28:8f:a0:3c:d5:6f:cf:0c:8e:8d:
16:d4:c6:07:fd:12:25:d3:c6:d0:ca:b7:b0:2f:7b:c4:cc:9e:
08:da:6e:08:cc:ff:b4:68:fc:21:17:eb:b0:53:9e:08:2b:8e:
51:77:56:78:83:fb:6e:25:ff:2b:5e:c1:25:cb:f8:4f:74:03:
8a:d7:fb:6b:38:aa:34:91:8d:5b:2e:e5:74:b7:f3:db:19:7d:
4c:a7:4c:03:92:f4:07:1e:89:ae:53:20:b8:fc:8a:d8:d9:f6:
5a:56:80:5f:5b:5b:7c:52:22:2a:ed:50:c0:c8:49:f8:f9:9e:
54:d2:b6:c4:45:61:42:f8:54:2a:74:21:3e:bc:75:e3:18:d9:
3e:0a:e0:6b:c0:d7:fb:0b:f7:ea:f1:a5:fe:2a:b8:e6:57:cd:
84:48:7a:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh8QFm1JbJtws7JHqzhw3BtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTMwZjc5OWY4YTg5ODU1MDJhMmVhMzM1NjAzNzY3NDA4
NWNmY2EwHhcNMjUwODA1MjIwMDQ4WhcNMjUwODA2MjIwMDQ4WjAzMTEwLwYDVQQD
Eyg1MjhhODg0NTM3OGE3ZTRmNTRkNTcxZTQ3Zjg4OWFmYWM1ODQzYTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyilFocGaktMakePl9kunRrJ8XhSY
SMOgX5hdPeyXej/Q3rfLWsEKzG84/++S3yJH6UuKjsyjzahIXg+/SXopMw57YKKh
S7hVifXrPFMYcRKyqHnstuVTPrMcXe1i6l4SAxUE4DnzqZ1up65Gvo0JZ2VI889W
IzWjexoaS4pxGVtlSdDW22wTgTUVjYLfp1i20dkeUGu18rGPZxfeQhjozEXpwg5A
tZ+Yw1Uk+P8fvxRumUOuKqCFstQWR78o/IdFgCVEZxVgnKcaRmuL8osNnEJhV380
RsgpkMBXFoRrVm7UhP+I/CntJ5FeTMbS8XPpaNLEfzsXFfS6eyB4quqZHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFKKiEU3in5PVNVx5H+ImvrFhDp9MB8GA1UdIwQY
MBaAFFcTD3mfiomFUCouozVgN2dAhc/KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMt
ZDNiOTBhOWI5YjQxLzEvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi81MTgxZGUtNDRjZC00NjU0LTk2ZmMtZDNiOTBhOWI5YjQx
LzEvVnhNUGVaLUtpWVZRS2k2ak5XQTNaMENGejhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnZDLIstW
kvg9jn5l7ud7pvsG4pAc5TAgMF5BxkZycmCTfydlgQV8Wi3IKtQ5TltYQ4ZGl2sT
4BC78u5qpLaStN5YT/+XRovj/qIlmhsO19Vpbk3TIO/BeU+9yL9vVq4JqpMoj6A8
1W/PDI6NFtTGB/0SJdPG0Mq3sC97xMyeCNpuCMz/tGj8IRfrsFOeCCuOUXdWeIP7
biX/K17BJcv4T3QDitf7aziqNJGNWy7ldLfz2xl9TKdMA5L0Bx6JrlMguPyK2Nn2
WlaAX1tbfFIiKu1QwMhJ+PmeVNK2xEVhQvhUKnQhPrx14xjZPgrga8DX+wv36vGl
/iq45lfNhEh6eg==
-----END CERTIFICATE-----
Generated at Wed Aug 6 04:14:26 2025 by rpki-client