Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
File: vlR-u1wFb3ApbkCGISYfPE4tQjk.mft (raw, json)
Hash identifier: 3Cb7GTytPPWBnB3GuRPi1BqJeEhca//T+5O8PLG6Ylo=
Subject key identifier: 8A:E9:9C:E6:C6:C0:D3:CB:A7:C2:68:5F:BF:24:20:A4:7B:93:82:4A
Authority key identifier: BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
Certificate issuer: /CN=be547ebb5c056f70296e408621261f3c4e2d4239
Certificate serial: 01987D8B0C0220CCA953B349F17E690570F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
Manifest number: 0B02
Signing time: Wed 06 Aug 2025 04:02:01 +0000
Manifest this update: Wed 06 Aug 2025 04:02:01 +0000
Manifest next update: Thu 07 Aug 2025 04:02:01 +0000
Files and hashes: 1: CKAk2cC-uYUGuYFqMOzXbvUXtPM.roa (hash: BpxkyCoQfkm6yG5imjMFMQgDsZS9FxcArr/Be2DDC9M=)
2: vlR-u1wFb3ApbkCGISYfPE4tQjk.crl (hash: cm/B3keecOXK3hlx0vdMrz2MLGHbECkNb8H/zmsimJs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 04:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:7d:8b:0c:02:20:cc:a9:53:b3:49:f1:7e:69:05:70:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be547ebb5c056f70296e408621261f3c4e2d4239
Validity
Not Before: Aug 6 04:02:01 2025 GMT
Not After : Aug 7 04:02:01 2025 GMT
Subject: CN=8ae99ce6c6c0d3cba7c2685fbf2420a47b93824a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:b1:5a:d9:54:a8:68:4c:47:cc:dd:43:e8:59:
0e:c7:5d:ef:2d:ed:eb:1d:53:9d:39:b9:2b:e4:84:
f4:80:30:4b:b9:e3:51:cd:70:91:d5:57:ad:d2:0b:
14:f5:af:59:59:4d:19:5a:9d:ff:6b:99:74:d5:fe:
fc:5d:3f:f1:5a:8b:76:29:84:d2:7c:fd:0a:2f:cf:
0f:c6:03:02:c1:f8:97:0c:91:57:7f:9e:5e:d9:43:
53:21:41:cb:38:ab:f4:4c:8f:b2:63:57:15:c8:11:
34:aa:98:97:a3:93:85:a3:0d:c5:76:0f:90:0f:af:
70:85:59:55:35:88:45:7a:35:4f:ef:17:6e:18:eb:
5a:12:d7:46:64:31:07:3d:83:24:0d:4a:a7:c1:be:
76:12:d0:a1:ff:c6:31:e5:aa:58:9b:29:57:f5:20:
bf:ba:54:16:23:a6:f1:a1:2c:42:98:2e:21:4f:2b:
12:f9:b6:af:2a:cf:b5:e9:aa:37:fc:b1:13:34:28:
d5:c1:c4:20:ce:37:ca:1b:50:93:80:e5:f8:79:b7:
52:4d:80:cd:82:21:18:d6:67:7d:df:78:2d:05:dd:
7a:ee:bf:a5:8f:99:48:24:57:24:8a:5a:40:52:6c:
7b:16:b1:02:1a:25:17:60:31:88:d4:d9:36:ac:f1:
a3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E9:9C:E6:C6:C0:D3:CB:A7:C2:68:5F:BF:24:20:A4:7B:93:82:4A
X509v3 Authority Key Identifier:
keyid:BE:54:7E:BB:5C:05:6F:70:29:6E:40:86:21:26:1F:3C:4E:2D:42:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vlR-u1wFb3ApbkCGISYfPE4tQjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/759288-10de-4916-b4d9-d0b9dc3aca23/1/vlR-u1wFb3ApbkCGISYfPE4tQjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:59:60:49:82:53:4d:bc:db:8e:fe:da:55:58:1b:33:d0:63:
9c:55:94:9a:09:e0:cc:00:8e:aa:c0:73:36:69:5a:eb:34:d3:
b7:b3:7a:69:8d:56:fc:de:6e:aa:2d:37:9e:d5:14:37:29:b1:
3f:e4:6b:34:29:52:f2:78:e6:9f:47:2f:f4:0c:96:4c:3f:10:
6e:26:eb:99:75:fd:ce:2b:32:c4:cf:e6:82:41:df:2e:90:47:
13:1b:90:9f:71:5e:42:17:e6:ab:3f:26:f8:5c:da:b0:4b:1a:
73:4d:60:cc:51:3f:d4:24:7d:c1:9f:17:ad:87:9f:bb:d6:6c:
8c:21:ac:da:bd:46:7b:00:7f:8d:ea:24:02:b2:d5:09:89:ee:
29:16:80:79:ea:b0:c8:f3:90:6c:b4:bb:b5:41:40:55:29:f5:
ef:23:37:d3:47:91:54:aa:92:66:4c:fe:83:b9:66:0b:e2:91:
e2:02:b7:d6:21:52:5a:6d:95:9a:8e:6e:e1:49:47:66:e5:00:
9f:05:09:48:39:49:75:12:4f:46:c0:1c:b2:33:8a:a2:75:40:
cd:56:1f:b1:96:4a:0c:e2:33:75:58:74:c8:49:45:32:48:1f:
79:2d:3e:28:94:b2:50:d5:64:eb:e1:f8:58:f5:14:75:bc:c0:
34:20:62:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh9iwwCIMypU7NJ8X5pBXDyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNTQ3ZWJiNWMwNTZmNzAyOTZlNDA4NjIxMjYxZjNjNGUy
ZDQyMzkwHhcNMjUwODA2MDQwMjAxWhcNMjUwODA3MDQwMjAxWjAzMTEwLwYDVQQD
Eyg4YWU5OWNlNmM2YzBkM2NiYTdjMjY4NWZiZjI0MjBhNDdiOTM4MjRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArLFa2VSoaExHzN1D6FkOx13vLe3r
HVOdObkr5IT0gDBLueNRzXCR1Vet0gsU9a9ZWU0ZWp3/a5l01f78XT/xWot2KYTS
fP0KL88PxgMCwfiXDJFXf55e2UNTIUHLOKv0TI+yY1cVyBE0qpiXo5OFow3Fdg+Q
D69whVlVNYhFejVP7xduGOtaEtdGZDEHPYMkDUqnwb52EtCh/8Yx5apYmylX9SC/
ulQWI6bxoSxCmC4hTysS+bavKs+16ao3/LETNCjVwcQgzjfKG1CTgOX4ebdSTYDN
giEY1md933gtBd167r+lj5lIJFckilpAUmx7FrECGiUXYDGI1Nk2rPGjOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrpnObGwNPLp8JoX78kIKR7k4JKMB8GA1UdIwQY
MBaAFL5UfrtcBW9wKW5AhiEmHzxOLUI5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC83NTkyODgtMTBkZS00OTE2LWI0ZDkt
ZDBiOWRjM2FjYTIzLzEvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC83NTkyODgtMTBkZS00OTE2LWI0ZDktZDBiOWRjM2FjYTIz
LzEvdmxSLXUxd0ZiM0FwYmtDR0lTWWZQRTR0UWprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApllgSYJT
Tbzbjv7aVVgbM9BjnFWUmgngzACOqsBzNmla6zTTt7N6aY1W/N5uqi03ntUUNymx
P+RrNClS8njmn0cv9AyWTD8QbibrmXX9zisyxM/mgkHfLpBHExuQn3FeQhfmqz8m
+FzasEsac01gzFE/1CR9wZ8XrYefu9ZsjCGs2r1GewB/jeokArLVCYnuKRaAeeqw
yPOQbLS7tUFAVSn17yM300eRVKqSZkz+g7lmC+KR4gK31iFSWm2Vmo5u4UlHZuUA
nwUJSDlJdRJPRsAcsjOKonVAzVYfsZZKDOIzdVh0yElFMkgfeS0+KJSyUNVk6+H4
WPUUdbzANCBizQ==
-----END CERTIFICATE-----
Generated at Wed Aug 6 12:42:27 2025 by rpki-client