Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
File: vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft (raw, json)
Hash identifier: evVYG70GD1WB+COPAdYDl8JDIAQ9Y8bryvSYjR6TO/s=
Subject key identifier: 67:68:9B:B4:B3:7F:00:57:82:8C:85:36:CB:54:DB:C7:73:0A:78:2A
Authority key identifier: BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
Certificate issuer: /CN=bdd244214d76468d3fb72abad1892ef23dede978
Certificate serial: 01988A334C96B6DAE3447B922CBCA6FD2557
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
Manifest number: 167B
Signing time: Fri 08 Aug 2025 15:01:14 +0000
Manifest this update: Fri 08 Aug 2025 15:01:14 +0000
Manifest next update: Sat 09 Aug 2025 15:01:14 +0000
Files and hashes: 1: MpUBZneqVecXcQlX3BSOAck4dLY.roa (hash: ENeJkPrdxxjivDiJnHpO/+CgDbk8hQrCxtDjeE3d5+0=)
2: vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl (hash: 52tckmzrow+mnt8XbI2c89QeRJZZFVaZ0gVjNn+k7a4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8a:33:4c:96:b6:da:e3:44:7b:92:2c:bc:a6:fd:25:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdd244214d76468d3fb72abad1892ef23dede978
Validity
Not Before: Aug 8 15:01:14 2025 GMT
Not After : Aug 9 15:01:14 2025 GMT
Subject: CN=67689bb4b37f0057828c8536cb54dbc7730a782a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:7d:ad:be:d4:c0:48:de:9e:7d:41:eb:56:f8:
95:84:6f:b8:96:fb:34:53:84:15:ed:db:4f:e3:b9:
57:9a:75:1e:9f:81:b2:33:bd:30:d3:63:2f:9d:26:
ed:1f:9d:cb:20:83:9e:5d:ec:54:5f:4f:48:1f:a1:
ff:bf:4f:aa:4f:07:aa:10:b6:f4:f4:15:98:6c:bf:
7d:c1:56:e2:b2:7f:19:e9:e7:47:d7:55:aa:a8:92:
ac:93:45:c7:96:5a:c2:f0:4a:ad:bb:0b:59:a5:7c:
fd:b4:b3:61:6f:4b:1b:21:15:f2:52:ec:75:c6:eb:
08:4c:7c:a1:09:92:35:03:9f:b9:e8:ff:48:ff:47:
32:77:78:cf:98:07:ca:7b:73:85:99:98:08:df:93:
c6:30:b8:1f:7a:c6:16:1d:48:71:8f:04:a3:85:ae:
eb:66:ad:c3:48:92:8f:b6:c3:41:df:7d:aa:61:2f:
cd:d5:43:ee:b7:39:34:cf:bb:cf:48:d9:1e:b0:46:
2d:89:57:d7:b2:a1:ab:3f:51:41:07:41:cc:28:d1:
f2:2c:c6:fe:04:3a:8d:f9:64:13:cd:8f:95:ba:95:
dc:08:fd:cf:cc:9d:c7:23:2a:50:02:d9:36:48:bb:
d3:88:79:63:6e:11:7a:f2:a9:75:94:41:6c:cb:62:
ca:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:68:9B:B4:B3:7F:00:57:82:8C:85:36:CB:54:DB:C7:73:0A:78:2A
X509v3 Authority Key Identifier:
keyid:BD:D2:44:21:4D:76:46:8D:3F:B7:2A:BA:D1:89:2E:F2:3D:ED:E9:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vdJEIU12Ro0_tyq60Yku8j3t6Xg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/756eef-6629-463a-99ff-46a43ef0221b/1/vdJEIU12Ro0_tyq60Yku8j3t6Xg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:00:23:cf:6c:da:8d:38:7f:f9:27:72:74:33:81:27:78:50:
5f:bb:e3:56:a4:70:04:d7:06:82:4d:e7:d3:a0:9d:69:97:e8:
1e:c2:e7:bd:d7:c4:ae:d9:e1:e1:af:16:9d:7f:46:14:4f:6a:
75:bb:f6:21:cc:09:fa:ee:38:d7:da:da:12:26:c4:e3:94:27:
1b:d6:10:3d:27:f1:3b:d8:1e:3c:e6:2a:16:02:19:7b:f4:24:
1f:d8:7d:cb:37:9e:76:a1:f5:1f:ea:10:36:d4:8d:b8:be:f3:
12:49:b4:54:7c:b4:f3:34:42:7f:81:b5:b5:64:b6:02:ac:7f:
04:d2:b5:2f:b7:a3:1f:13:67:3b:14:60:53:c1:ab:42:57:49:
af:fe:8f:f2:2b:6b:42:c1:96:06:4f:81:1f:90:fd:ba:51:d0:
13:82:ee:bd:f4:a6:76:2d:66:48:f0:be:b0:84:80:d4:63:1e:
60:2f:6d:e1:9e:b7:1d:12:a3:8d:4d:06:12:75:93:29:30:18:
75:0d:c8:f3:43:d4:2d:ab:bf:db:4d:37:d2:c6:97:c8:61:e3:
19:15:6b:08:2b:ba:52:36:01:ad:8d:47:04:63:5e:6a:d8:1a:
96:b1:69:cc:a3:d1:3c:a2:0e:c4:42:bf:4f:62:fa:a9:e5:fb:
1c:a4:16:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiKM0yWttrjRHuSLLym/SVXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZDI0NDIxNGQ3NjQ2OGQzZmI3MmFiYWQxODkyZWYyM2Rl
ZGU5NzgwHhcNMjUwODA4MTUwMTE0WhcNMjUwODA5MTUwMTE0WjAzMTEwLwYDVQQD
Eyg2NzY4OWJiNGIzN2YwMDU3ODI4Yzg1MzZjYjU0ZGJjNzczMGE3ODJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8H2tvtTASN6efUHrVviVhG+4lvs0
U4QV7dtP47lXmnUen4GyM70w02MvnSbtH53LIIOeXexUX09IH6H/v0+qTweqELb0
9BWYbL99wVbisn8Z6edH11WqqJKsk0XHllrC8EqtuwtZpXz9tLNhb0sbIRXyUux1
xusITHyhCZI1A5+56P9I/0cyd3jPmAfKe3OFmZgI35PGMLgfesYWHUhxjwSjha7r
Zq3DSJKPtsNB332qYS/N1UPutzk0z7vPSNkesEYtiVfXsqGrP1FBB0HMKNHyLMb+
BDqN+WQTzY+VupXcCP3PzJ3HIypQAtk2SLvTiHljbhF68ql1lEFsy2LKhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGdom7SzfwBXgoyFNstU28dzCngqMB8GA1UdIwQY
MBaAFL3SRCFNdkaNP7cqutGJLvI97el4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYt
NDZhNDNlZjAyMjFiLzEvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83NTZlZWYtNjYyOS00NjNhLTk5ZmYtNDZhNDNlZjAyMjFi
LzEvdmRKRUlVMTJSbzBfdHlxNjBZa3U4ajN0NlhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdQAjz2za
jTh/+SdydDOBJ3hQX7vjVqRwBNcGgk3n06CdaZfoHsLnvdfErtnh4a8WnX9GFE9q
dbv2IcwJ+u4419raEibE45QnG9YQPSfxO9gePOYqFgIZe/QkH9h9yzeedqH1H+oQ
NtSNuL7zEkm0VHy08zRCf4G1tWS2Aqx/BNK1L7ejHxNnOxRgU8GrQldJr/6P8itr
QsGWBk+BH5D9ulHQE4LuvfSmdi1mSPC+sISA1GMeYC9t4Z63HRKjjU0GEnWTKTAY
dQ3I80PULau/20030saXyGHjGRVrCCu6UjYBrY1HBGNeatgalrFpzKPRPKIOxEK/
T2L6qeX7HKQWAg==
-----END CERTIFICATE-----
Generated at Fri Aug 8 21:01:08 2025 by rpki-client