Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
File: VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json)
Hash identifier: TCLY8/0V5vfPSDEGxOTfhYTGvQVyt7IpP3xls06JURA=
Subject key identifier: E7:90:0C:84:25:BD:2A:F7:C5:EE:04:1C:AF:F2:54:72:F2:F1:BC:50
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial: 0198737429E14B6F00E4F096EB8C84F66164
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
Manifest number: 1245
Signing time: Mon 04 Aug 2025 05:00:49 +0000
Manifest this update: Mon 04 Aug 2025 05:00:49 +0000
Manifest next update: Tue 05 Aug 2025 05:00:49 +0000
Files and hashes: 1: L_f_G_DAS-PndMSomCegEakGUXo.roa (hash: MKZgnF0UjBLWLCCPlTkl22mDtPBHewVcfvCoOfEvyCg=)
2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: nu+K0lBuiuuOidgTH3QiQNcgxJiDAIE1f8Dr28cnGIM=)
3: t4fAOG9AgiRHWlfB8UV9ooeeONs.roa (hash: w4jU0T+F9ztiRct/8n0JoEkH/SfGukns0aANZIKuY2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:74:29:e1:4b:6f:00:e4:f0:96:eb:8c:84:f6:61:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Validity
Not Before: Aug 4 05:00:49 2025 GMT
Not After : Aug 5 05:00:49 2025 GMT
Subject: CN=e7900c8425bd2af7c5ee041caff25472f2f1bc50
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:8c:bc:50:2c:9d:b0:e4:04:ea:85:d6:c8:67:
f1:94:c4:ab:c7:11:c1:6d:ba:88:f1:3d:7f:ef:a2:
dc:f7:8d:1d:b7:7f:ba:5a:44:4b:68:3b:fb:d0:03:
58:8e:9c:93:76:66:c1:0a:e1:9b:0d:05:38:e4:7e:
91:a3:e3:27:d6:fa:bd:6c:1f:83:2e:91:45:11:1b:
67:df:3f:96:26:91:87:45:83:5b:2b:85:d6:9a:3a:
2f:08:75:23:c9:ee:fd:c5:35:7d:f8:0e:dc:63:b5:
cd:14:f0:60:ac:a3:ef:4d:30:be:d9:b2:1c:28:06:
4c:1e:5d:d6:d2:b2:a1:ef:ff:ed:29:af:b0:a5:be:
13:96:8f:86:e4:0a:58:9e:b5:c4:2e:e6:4b:21:9b:
34:20:a7:ab:10:d2:0c:98:e2:77:d4:dc:55:24:1d:
e9:57:e7:e6:b2:a4:da:c0:85:2b:e3:8a:30:89:8a:
60:6a:9d:03:99:79:c7:43:ee:85:e6:a6:27:ff:f7:
f5:a8:4b:a8:dd:a0:34:04:76:14:49:2e:f9:df:78:
86:2a:44:2e:4f:43:28:d6:8f:b3:1a:8b:ed:53:75:
11:64:af:0f:09:59:ce:9a:c9:f6:4e:99:ea:d7:d9:
91:5d:52:a9:31:7c:8b:74:64:12:05:73:67:d1:84:
a6:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:90:0C:84:25:BD:2A:F7:C5:EE:04:1C:AF:F2:54:72:F2:F1:BC:50
X509v3 Authority Key Identifier:
keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:8f:6d:19:63:25:58:97:ec:b7:a5:1b:69:41:b0:07:ed:28:
50:ad:37:28:8c:81:46:b3:4c:1c:22:a2:2f:c3:12:c3:43:73:
70:fa:4f:f2:bf:77:a7:d4:7c:16:4d:6f:ed:e9:12:f0:29:65:
93:ba:e8:99:b4:09:62:b0:0e:c9:19:7d:e2:a2:c0:59:dc:2d:
84:96:ec:0f:48:fb:f4:1e:f6:80:8a:c2:a8:f2:0e:be:66:05:
74:d0:08:1b:d2:41:ab:5d:c8:d5:0a:18:18:0e:2b:e1:42:05:
6c:54:2d:a1:98:40:6c:64:3e:5a:73:94:3a:91:09:c1:df:e4:
a2:d7:2b:cf:5b:bb:9c:42:9f:6e:f6:48:6a:ad:c4:ae:58:6a:
15:e4:76:65:30:37:82:5d:6d:86:d0:64:4e:fb:54:84:1a:2d:
90:2d:5e:1e:bd:b9:ec:63:21:98:c4:41:96:f8:4a:32:67:da:
25:1c:a7:23:97:e2:ac:9d:09:f0:b8:02:67:ea:ef:0e:5c:9b:
d3:9e:d3:d2:69:e9:58:9d:74:6a:ac:03:c7:cb:78:e3:36:52:
d9:a9:07:05:af:b5:38:8f:c9:39:2b:84:6b:0e:17:4d:41:06:
87:4c:04:8a:2c:0c:5a:e7:f3:a1:36:8c:0a:42:6d:2f:d6:a9:
43:ed:c1:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzdCnhS28A5PCW64yE9mFkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZDZmZjEzNGJkNjU2ZjBjZTE0ZDQxMGIwMmJlYzU1MWVi
NjlhMmMwHhcNMjUwODA0MDUwMDQ5WhcNMjUwODA1MDUwMDQ5WjAzMTEwLwYDVQQD
EyhlNzkwMGM4NDI1YmQyYWY3YzVlZTA0MWNhZmYyNTQ3MmYyZjFiYzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYy8UCydsOQE6oXWyGfxlMSrxxHB
bbqI8T1/76Lc940dt3+6WkRLaDv70ANYjpyTdmbBCuGbDQU45H6Ro+Mn1vq9bB+D
LpFFERtn3z+WJpGHRYNbK4XWmjovCHUjye79xTV9+A7cY7XNFPBgrKPvTTC+2bIc
KAZMHl3W0rKh7//tKa+wpb4Tlo+G5ApYnrXELuZLIZs0IKerENIMmOJ31NxVJB3p
V+fmsqTawIUr44owiYpgap0DmXnHQ+6F5qYn//f1qEuo3aA0BHYUSS7533iGKkQu
T0Mo1o+zGovtU3URZK8PCVnOmsn2Tpnq19mRXVKpMXyLdGQSBXNn0YSmmQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOeQDIQlvSr3xe4EHK/yVHLy8bxQMB8GA1UdIwQY
MBaAFFTW/xNL1lbwzhTUELAr7FUetposMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDIt
NjQyNzhjMGQ4ZWJmLzEvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDItNjQyNzhjMGQ4ZWJm
LzEvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXo9tGWMl
WJfst6UbaUGwB+0oUK03KIyBRrNMHCKiL8MSw0NzcPpP8r93p9R8Fk1v7ekS8Cll
k7rombQJYrAOyRl94qLAWdwthJbsD0j79B72gIrCqPIOvmYFdNAIG9JBq13I1QoY
GA4r4UIFbFQtoZhAbGQ+WnOUOpEJwd/kotcrz1u7nEKfbvZIaq3ErlhqFeR2ZTA3
gl1thtBkTvtUhBotkC1eHr257GMhmMRBlvhKMmfaJRynI5firJ0J8LgCZ+rvDlyb
057T0mnpWJ10aqwDx8t44zZS2akHBa+1OI/JOSuEaw4XTUEGh0wEiiwMWufzoTaM
CkJtL9apQ+3B2g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:17:54 2025 by rpki-client