Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier: YZ5khu9PT/jXVF5ci9u+yAcEuStBz/XWyZl79duZUjM=
Subject key identifier: 66:00:EF:8B:8D:AA:C7:47:68:8B:F2:42:3E:BC:17:A7:AE:24:57:26
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial: 01988DD8B0A558652A832AD8548AE8E8F7D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number: 04F1
Signing time: Sat 09 Aug 2025 08:00:45 +0000
Manifest this update: Sat 09 Aug 2025 08:00:45 +0000
Manifest next update: Sun 10 Aug 2025 08:00:45 +0000
Files and hashes: 1: G_IYoZfZUxFUxoKj63LyULDLjWc.roa (hash: p32xiHa5RLyOZriAfbie5PUear7BZRAYgBWelDYnr3o=)
2: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (hash: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=)
3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: MUKM9Uu9F3fdhyfn6pLJJRl9NkyisypPbOEPxKJP37k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:d8:b0:a5:58:65:2a:83:2a:d8:54:8a:e8:e8:f7:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Validity
Not Before: Aug 9 08:00:45 2025 GMT
Not After : Aug 10 08:00:45 2025 GMT
Subject: CN=6600ef8b8daac747688bf2423ebc17a7ae245726
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:48:3f:db:46:b8:ad:26:45:7f:eb:09:db:08:
54:62:7a:b1:cf:3d:f9:68:0e:f1:6a:20:12:75:39:
05:91:02:ed:2e:81:15:c0:11:82:7a:6f:a5:98:82:
f8:1f:bb:76:63:8b:27:f7:ff:42:f8:3f:c1:70:26:
2a:33:98:3a:0d:06:e2:ea:5c:4f:1c:03:4a:72:54:
bc:3f:f9:83:92:76:bf:69:bd:08:96:11:05:92:66:
22:e5:63:28:54:8c:05:95:8f:f4:44:0d:aa:4c:c6:
80:72:3c:74:30:bd:b9:11:b1:40:b2:94:d6:e1:4a:
ae:70:be:18:fc:41:78:ec:09:19:dc:96:0f:75:eb:
88:27:6a:1e:7c:3a:dd:7e:9e:45:88:0e:59:90:a2:
e6:9b:5e:9a:b2:58:16:de:83:b4:59:aa:fa:30:9a:
5c:cf:22:80:5a:1b:9f:42:72:f6:05:c2:d2:9f:bb:
8b:cb:eb:17:b1:b6:d7:ab:1c:2b:84:a5:43:71:61:
a7:e4:dd:36:92:4d:27:6e:97:e2:88:e3:69:6d:64:
d2:e4:30:2d:45:80:e2:d1:28:6e:f9:24:4d:e2:a6:
37:94:b4:47:c9:f9:cb:c8:34:05:a5:16:c2:10:92:
8d:59:a4:5c:a7:30:28:b0:07:63:a1:bd:e4:88:43:
06:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:00:EF:8B:8D:AA:C7:47:68:8B:F2:42:3E:BC:17:A7:AE:24:57:26
X509v3 Authority Key Identifier:
keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f0:d1:60:3d:fa:19:24:ad:52:97:cb:4d:62:9c:56:fe:e0:
7e:dc:2d:a8:d6:57:7e:33:95:55:1f:79:47:17:45:89:9b:c2:
5b:07:18:87:3b:74:3b:b1:67:36:00:94:76:d5:f3:0e:c4:07:
f1:c4:ac:1c:dc:72:78:71:c9:f8:32:a0:1f:d3:c5:71:fd:b0:
c9:b2:7d:d5:7b:59:bd:07:b9:de:75:32:06:38:98:d5:db:66:
aa:3c:dc:fa:9d:54:8a:78:52:22:76:8d:66:04:0e:41:c5:a7:
5f:c4:e7:42:68:bd:af:d0:3d:95:33:1b:fa:a4:14:cd:c7:b8:
2b:5b:06:dd:14:6b:01:e9:fb:93:38:53:f8:28:cc:f7:47:f4:
a4:b6:c2:60:4c:41:d4:a6:dd:e1:88:e8:f4:58:47:fc:b9:47:
85:48:6f:21:86:bb:03:dc:f8:91:d5:15:58:08:c7:49:b1:8f:
00:0d:7b:86:32:92:8e:a5:73:b6:43:ca:08:d6:dd:37:ee:c8:
df:c8:a9:1c:80:47:87:39:24:dd:0e:c1:f9:b8:15:18:f8:f0:
a3:c4:ca:f2:dc:3a:94:e6:d5:85:7e:a5:08:10:05:bb:61:da:
ec:a2:29:01:03:5e:42:6c:18:99:33:cc:d4:2e:62:e3:be:70:
30:50:50:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiN2LClWGUqgyrYVIro6PfRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNWMwODMyM2FjMjdhYjY1NTNhNWE2OWE3M2E1OGY4MDI0
MjNkNjgwHhcNMjUwODA5MDgwMDQ1WhcNMjUwODEwMDgwMDQ1WjAzMTEwLwYDVQQD
Eyg2NjAwZWY4YjhkYWFjNzQ3Njg4YmYyNDIzZWJjMTdhN2FlMjQ1NzI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAukg/20a4rSZFf+sJ2whUYnqxzz35
aA7xaiASdTkFkQLtLoEVwBGCem+lmIL4H7t2Y4sn9/9C+D/BcCYqM5g6DQbi6lxP
HANKclS8P/mDkna/ab0IlhEFkmYi5WMoVIwFlY/0RA2qTMaAcjx0ML25EbFAspTW
4UqucL4Y/EF47AkZ3JYPdeuIJ2oefDrdfp5FiA5ZkKLmm16aslgW3oO0War6MJpc
zyKAWhufQnL2BcLSn7uLy+sXsbbXqxwrhKVDcWGn5N02kk0nbpfiiONpbWTS5DAt
RYDi0Shu+SRN4qY3lLRHyfnLyDQFpRbCEJKNWaRcpzAosAdjob3kiEMGIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYA74uNqsdHaIvyQj68F6euJFcmMB8GA1UdIwQY
MBaAFL1cCDI6wnq2VTpaaac6WPgCQj1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMt
NDY0MWFiNmU0YmZiLzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMtNDY0MWFiNmU0YmZi
LzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/DRYD36
GSStUpfLTWKcVv7gftwtqNZXfjOVVR95RxdFiZvCWwcYhzt0O7FnNgCUdtXzDsQH
8cSsHNxyeHHJ+DKgH9PFcf2wybJ91XtZvQe53nUyBjiY1dtmqjzc+p1UinhSInaN
ZgQOQcWnX8TnQmi9r9A9lTMb+qQUzce4K1sG3RRrAen7kzhT+CjM90f0pLbCYExB
1Kbd4Yjo9FhH/LlHhUhvIYa7A9z4kdUVWAjHSbGPAA17hjKSjqVztkPKCNbdN+7I
38ipHIBHhzkk3Q7B+bgVGPjwo8TK8tw6lObVhX6lCBAFu2Ha7KIpAQNeQmwYmTPM
1C5i475wMFBQgQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:44 2025 by rpki-client