
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: f+9qRhb/YZLf4umSGRwNygx91qtmJwNNqMcURLUXbk8=
Subject key identifier: 76:08:C0:24:3E:8C:38:55:2E:71:F4:69:AD:7E:22:2F:F6:17:F9:37
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 01988467B7A3941132676E6606BC9F65712C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0AAC
Signing time: Thu 07 Aug 2025 12:00:46 +0000
Manifest this update: Thu 07 Aug 2025 12:00:46 +0000
Manifest next update: Fri 08 Aug 2025 12:00:46 +0000
Files and hashes: 1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=)
2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: tbQ4DeNI141QQLbI/8T23U6LjjPIMpCo+AhcFS+fPg4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 12:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:84:67:b7:a3:94:11:32:67:6e:66:06:bc:9f:65:71:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Aug 7 12:00:46 2025 GMT
Not After : Aug 8 12:00:46 2025 GMT
Subject: CN=7608c0243e8c38552e71f469ad7e222ff617f937
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:03:fd:5b:e4:38:f7:a2:ea:f2:38:74:a0:c9:
8a:3c:68:32:5a:ee:1d:a5:f3:9c:82:3e:e7:4e:4f:
88:d3:22:35:06:e7:37:53:85:73:5d:25:f8:7c:a5:
f6:3c:3f:1a:f5:be:a2:c5:eb:04:c3:90:d9:f1:0a:
a0:1d:7b:4f:3e:10:78:66:76:0a:b2:2e:40:43:5e:
f6:83:23:b8:76:85:6b:02:cf:fa:b5:5d:0f:9d:12:
1e:db:19:08:b8:55:ea:19:cf:a2:b8:81:a6:ad:f7:
4f:3a:85:76:b3:d1:bf:c5:82:79:92:fd:da:c3:70:
7a:e5:51:09:b7:42:72:ef:61:76:e6:83:0e:51:8d:
52:c5:01:84:90:dc:2f:a3:69:2d:77:bb:b8:94:bb:
dc:25:bb:3e:29:0f:ba:50:14:c0:15:7d:a9:c6:f5:
71:b7:64:1e:f0:82:ac:f7:94:e3:2b:81:cf:99:52:
e3:70:c2:29:15:46:ff:07:e6:ac:f9:f2:27:5d:26:
9b:21:7c:c7:3f:3c:f9:44:b4:c3:fe:49:88:1d:54:
2c:ff:16:19:95:04:2b:00:8a:51:b6:99:ac:b6:0c:
05:4c:16:c4:69:2f:4e:1a:e6:80:04:65:23:04:a1:
ce:77:53:8d:10:d4:0b:c7:ff:ac:1d:e7:75:95:c8:
db:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:08:C0:24:3E:8C:38:55:2E:71:F4:69:AD:7E:22:2F:F6:17:F9:37
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:03:1b:eb:04:2b:b0:e3:e0:7e:a4:4c:13:49:c0:df:f6:24:
0e:69:6b:d9:e0:6b:ce:86:ce:03:6f:a4:7f:0c:ac:11:17:43:
1f:6f:23:db:a5:68:08:42:f5:f1:0d:b1:03:a2:53:3e:4a:e0:
b7:f4:66:fb:10:4e:5f:e7:94:af:54:67:46:38:ca:75:c7:48:
68:be:3c:d4:05:1c:85:b5:c5:7d:dd:a1:54:5a:1e:2f:ec:e9:
ae:88:f7:db:66:23:dc:22:38:f6:15:58:39:df:ab:7a:4d:42:
e4:9d:c3:ff:9a:1e:c8:ed:6b:31:b4:d6:98:62:b8:1d:96:64:
bf:4f:fd:e3:19:2e:1c:0a:5b:c5:26:a5:85:ce:74:73:99:07:
3c:3e:37:98:98:34:94:b2:fe:81:78:81:7a:95:61:2e:28:50:
93:13:62:3b:26:39:0d:09:ca:ac:44:6f:ac:b4:65:be:14:6c:
d7:81:59:de:94:90:c4:b6:3c:61:1d:ef:65:79:6b:c9:75:fa:
3d:c9:ee:d0:12:00:c9:93:7f:2c:85:26:20:0b:4f:82:3d:61:
3e:a5:13:15:7c:52:62:d9:eb:fd:ee:ec:0a:9d:77:10:f1:a8:
a9:a3:aa:4a:34:d5:2d:42:1f:d1:eb:4d:94:0b:92:c6:68:0d:
52:c4:4c:9a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiEZ7ejlBEyZ25mBryfZXEsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNjE0NGI0NTliY2UxMzlmMjczNGE0NGZiZGI0NmM5ODEz
MjliMmIwHhcNMjUwODA3MTIwMDQ2WhcNMjUwODA4MTIwMDQ2WjAzMTEwLwYDVQQD
Eyg3NjA4YzAyNDNlOGMzODU1MmU3MWY0NjlhZDdlMjIyZmY2MTdmOTM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0wP9W+Q496Lq8jh0oMmKPGgyWu4d
pfOcgj7nTk+I0yI1Buc3U4VzXSX4fKX2PD8a9b6ixesEw5DZ8QqgHXtPPhB4ZnYK
si5AQ172gyO4doVrAs/6tV0PnRIe2xkIuFXqGc+iuIGmrfdPOoV2s9G/xYJ5kv3a
w3B65VEJt0Jy72F25oMOUY1SxQGEkNwvo2ktd7u4lLvcJbs+KQ+6UBTAFX2pxvVx
t2Qe8IKs95TjK4HPmVLjcMIpFUb/B+as+fInXSabIXzHPzz5RLTD/kmIHVQs/xYZ
lQQrAIpRtpmstgwFTBbEaS9OGuaABGUjBKHOd1ONENQLx/+sHed1lcjbDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHYIwCQ+jDhVLnH0aa1+Ii/2F/k3MB8GA1UdIwQY
MBaAFL5hRLRZvOE58nNKRPvbRsmBMpsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2Yt
MTdlZmE1N2IzOWQ3LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2YtMTdlZmE1N2IzOWQ3
LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbQMb6wQr
sOPgfqRME0nA3/YkDmlr2eBrzobOA2+kfwysERdDH28j26VoCEL18Q2xA6JTPkrg
t/Rm+xBOX+eUr1RnRjjKdcdIaL481AUchbXFfd2hVFoeL+zproj322Yj3CI49hVY
Od+rek1C5J3D/5oeyO1rMbTWmGK4HZZkv0/94xkuHApbxSalhc50c5kHPD43mJg0
lLL+gXiBepVhLihQkxNiOyY5DQnKrERvrLRlvhRs14FZ3pSQxLY8YR3vZXlryXX6
Pcnu0BIAyZN/LIUmIAtPgj1hPqUTFXxSYtnr/e7sCp13EPGoqaOqSjTVLUIf0etN
lAuSxmgNUsRMmg==
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:16:00 2025 by rpki-client