Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
File: VbnN-LflPvzZeZsR50D1Vf1T9MY.mft (raw, json)
Hash identifier: JhBcqCtHkX4Ak/jtiFrjfEdaKHoB9JIRJ3WZh47WR78=
Subject key identifier: 2D:14:58:96:DC:93:F3:09:96:CA:F8:C9:60:8C:51:E8:ED:D7:23:68
Authority key identifier: 55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
Certificate issuer: /CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Certificate serial: 0198A15F8B242C785EDA33AE866930985C03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
Manifest number: 13CA
Signing time: Wed 13 Aug 2025 03:00:49 +0000
Manifest this update: Wed 13 Aug 2025 03:00:49 +0000
Manifest next update: Thu 14 Aug 2025 03:00:49 +0000
Files and hashes: 1: OEIiPrXdFUp5YXOck7o4s4rBGO0.roa (hash: zsHFam+CXLhObsumxLE2+jbhXix4p0SFjtst5VLxGeE=)
2: VbnN-LflPvzZeZsR50D1Vf1T9MY.crl (hash: JgpSm6GNAUbRK4cIZJnzNtN4UovKzeXwAd1Eqc/V91M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 13 Aug 2025 22:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:a1:5f:8b:24:2c:78:5e:da:33:ae:86:69:30:98:5c:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55b9cdf8b7e53efcd9799b11e740f555fd53f4c6
Validity
Not Before: Aug 13 03:00:49 2025 GMT
Not After : Aug 14 03:00:49 2025 GMT
Subject: CN=2d145896dc93f30996caf8c9608c51e8edd72368
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:03:54:59:3d:d8:e6:4b:bc:1d:60:71:9d:9f:
ef:25:a5:58:71:cf:41:af:dd:6e:b3:54:6d:ce:db:
93:34:d6:58:ae:77:40:d7:c9:ac:ae:6e:17:47:c3:
57:07:95:8c:17:42:a0:e1:3f:a3:26:61:62:b8:19:
5d:d6:ec:73:68:f6:40:a7:a0:0d:d6:2b:8d:45:e7:
86:36:3e:73:94:6c:05:54:be:94:c3:28:7e:f2:22:
7c:c9:db:d7:51:4b:36:3f:69:bf:62:23:16:ca:ae:
36:51:d9:48:62:79:2f:7a:96:61:24:e0:0f:23:ca:
ca:36:cf:85:97:76:b1:d4:b0:5f:bd:3c:3c:39:ab:
9a:64:ad:af:79:fe:5c:be:f6:ed:86:9b:99:91:c5:
43:47:e9:76:da:0c:ce:be:00:07:68:ac:0d:ca:a2:
3a:3e:1c:ee:24:c8:09:f9:68:0b:cf:91:ce:d7:9a:
bd:5d:ae:85:35:95:e2:f5:96:ca:86:cf:3c:d5:bd:
32:0a:ce:89:5d:49:50:12:f5:0d:6f:7e:71:f5:8e:
31:5f:a4:72:8f:18:71:79:83:bb:f7:1a:27:ac:e8:
a0:2d:0d:ba:c6:5d:ad:56:e6:34:30:db:91:13:63:
bd:77:66:9e:44:7c:cf:68:21:b7:31:ab:31:71:01:
e0:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:14:58:96:DC:93:F3:09:96:CA:F8:C9:60:8C:51:E8:ED:D7:23:68
X509v3 Authority Key Identifier:
keyid:55:B9:CD:F8:B7:E5:3E:FC:D9:79:9B:11:E7:40:F5:55:FD:53:F4:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VbnN-LflPvzZeZsR50D1Vf1T9MY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/77e92a-eae1-48c0-8d9c-6fc4cdcb3f17/1/VbnN-LflPvzZeZsR50D1Vf1T9MY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:67:37:87:0f:2b:1f:b6:c0:0f:9c:35:b6:b1:c2:b7:36:b6:
2d:e5:15:56:36:1d:77:21:b2:04:08:23:6b:9c:36:9b:1f:cf:
be:40:5b:2c:2f:b9:1d:1d:b1:72:70:79:90:3a:bc:49:23:00:
2b:be:8c:b0:c2:3c:c7:b0:30:56:8f:8b:b9:0a:0b:52:6b:4f:
f3:ca:3a:c7:94:6f:7e:4f:0e:34:99:44:0b:ae:77:3a:4d:94:
27:b4:b0:29:bc:30:a3:b9:1b:01:94:02:84:5a:e9:87:c8:4c:
92:04:dc:d8:1f:3f:ae:b3:8b:75:d3:10:69:8b:37:0a:96:c6:
5c:0b:00:6e:a9:94:18:5b:58:af:57:65:aa:bd:26:a1:91:54:
74:86:ab:f7:fe:31:a7:34:da:57:8d:aa:7b:e1:6d:4e:6f:08:
d7:28:da:46:5f:00:a4:0a:60:a5:3f:62:ce:96:31:d5:19:5d:
c1:bb:ce:83:4a:e6:49:58:68:55:08:2c:aa:e5:d8:07:a2:29:
4c:18:1a:b9:d9:aa:e2:2d:9a:8d:66:29:81:66:f7:dd:18:6d:
ba:e3:a2:30:aa:58:c1:cc:db:44:9b:29:e0:2c:01:cc:1e:cf:
7f:f2:44:b3:81:64:fd:a4:94:8c:b4:37:cf:ef:34:92:c4:ef:
11:d4:7d:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZihX4skLHhe2jOuhmkwmFwDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1YjljZGY4YjdlNTNlZmNkOTc5OWIxMWU3NDBmNTU1ZmQ1
M2Y0YzYwHhcNMjUwODEzMDMwMDQ5WhcNMjUwODE0MDMwMDQ5WjAzMTEwLwYDVQQD
EygyZDE0NTg5NmRjOTNmMzA5OTZjYWY4Yzk2MDhjNTFlOGVkZDcyMzY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4wNUWT3Y5ku8HWBxnZ/vJaVYcc9B
r91us1RtztuTNNZYrndA18msrm4XR8NXB5WMF0Kg4T+jJmFiuBld1uxzaPZAp6AN
1iuNReeGNj5zlGwFVL6Uwyh+8iJ8ydvXUUs2P2m/YiMWyq42UdlIYnkvepZhJOAP
I8rKNs+Fl3ax1LBfvTw8OauaZK2vef5cvvbthpuZkcVDR+l22gzOvgAHaKwNyqI6
PhzuJMgJ+WgLz5HO15q9Xa6FNZXi9ZbKhs881b0yCs6JXUlQEvUNb35x9Y4xX6Ry
jxhxeYO79xonrOigLQ26xl2tVuY0MNuRE2O9d2aeRHzPaCG3MasxcQHg9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0UWJbck/MJlsr4yWCMUejt1yNoMB8GA1UdIwQY
MBaAFFW5zfi35T782XmbEedA9VX9U/TGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS83N2U5MmEtZWFlMS00OGMwLThkOWMt
NmZjNGNkY2IzZjE3LzEvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS83N2U5MmEtZWFlMS00OGMwLThkOWMtNmZjNGNkY2IzZjE3
LzEvVmJuTi1MZmxQdnpaZVpzUjUwRDFWZjFUOU1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAamc3hw8r
H7bAD5w1trHCtza2LeUVVjYddyGyBAgja5w2mx/PvkBbLC+5HR2xcnB5kDq8SSMA
K76MsMI8x7AwVo+LuQoLUmtP88o6x5Rvfk8ONJlEC653Ok2UJ7SwKbwwo7kbAZQC
hFrph8hMkgTc2B8/rrOLddMQaYs3CpbGXAsAbqmUGFtYr1dlqr0moZFUdIar9/4x
pzTaV42qe+FtTm8I1yjaRl8ApApgpT9izpYx1RldwbvOg0rmSVhoVQgsquXYB6Ip
TBgaudmq4i2ajWYpgWb33RhtuuOiMKpYwczbRJsp4CwBzB7Pf/JEs4Fk/aSUjLQ3
z+80ksTvEdR9Cg==
-----END CERTIFICATE-----
Generated at Wed Aug 13 04:23:55 2025 by rpki-client