Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File: VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier: BRMZUQsY9yMZY5KEVMaP9J36fReq/4zpSVuB3g+Sqz8=
Subject key identifier: 33:B2:1B:FC:ED:A0:46:8A:AC:A2:58:EB:78:37:00:B7:84:4E:40:83
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial: 0198D4E0A8A981E1E069FABA75F70B802DB3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number: 1649
Signing time: Sat 23 Aug 2025 03:02:29 +0000
Manifest this update: Sat 23 Aug 2025 03:02:29 +0000
Manifest next update: Sun 24 Aug 2025 03:02:29 +0000
Files and hashes: 1: E6amiYi53XMdG38KpjAggGoL-xU.roa (hash: Z2VRJf48TJk3kvh/qYBt+PTaI/amPskBYdQSciVu6xk=)
2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: MFdSMcFO/FVkIAYrdVsqhCMZjSbX/mZ/Z/7nK0CLO5E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:a8:a9:81:e1:e0:69:fa:ba:75:f7:0b:80:2d:b3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Validity
Not Before: Aug 23 03:02:29 2025 GMT
Not After : Aug 24 03:02:29 2025 GMT
Subject: CN=33b21bfceda0468aaca258eb783700b7844e4083
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:86:85:0a:00:fa:34:d0:4a:df:74:e6:2a:a0:
05:db:01:44:d9:56:9d:0f:0d:2f:ac:75:ec:53:6d:
d8:fd:d6:2d:97:84:07:0d:67:d6:47:5b:9c:1d:ac:
94:9d:c1:c8:64:c6:d9:72:36:a2:a3:46:b2:57:c4:
18:79:12:ee:54:b1:2d:dd:cd:bc:1c:d2:f5:0e:11:
4b:e7:8e:ea:37:34:de:2e:2f:f3:62:c0:9e:d6:49:
ff:72:f0:16:79:67:49:b3:19:2e:81:a0:42:e4:cf:
a8:dc:ef:e1:e4:ff:e6:e1:c4:48:8a:e5:9c:7b:23:
18:13:d6:53:0c:15:18:c0:ba:0e:0e:c1:fd:3a:f3:
3a:59:e4:cc:24:a3:ab:cf:6c:18:c2:4c:ff:6e:ed:
83:d5:24:7b:81:d5:37:ac:bf:b5:6c:0a:f5:18:28:
b3:63:2e:70:5e:2d:a3:a3:b1:d2:87:f9:2a:3f:74:
e5:cf:98:5f:de:8a:7a:ce:62:c0:65:d9:26:fe:4c:
5b:84:02:25:4b:4e:72:d6:88:b7:02:ee:93:15:b6:
42:ae:f0:b1:e8:c8:ae:63:80:7d:59:5d:dc:0a:95:
f8:99:65:ee:cf:c5:4c:06:b2:7b:cf:f8:8e:50:9f:
8a:d5:3f:a5:81:e6:11:14:2a:2c:16:20:3a:ac:16:
78:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:B2:1B:FC:ED:A0:46:8A:AC:A2:58:EB:78:37:00:B7:84:4E:40:83
X509v3 Authority Key Identifier:
keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:e3:ab:97:fe:4f:d5:c5:50:d3:d5:5f:87:ff:54:df:a4:52:
29:28:d1:1a:15:7d:86:69:3e:a7:d2:96:6e:fb:0d:99:24:49:
d8:28:10:36:3c:02:02:32:f6:0b:6a:84:c3:11:81:0a:45:dd:
56:c5:48:38:34:87:07:40:b5:39:eb:b8:47:ba:0b:38:5a:46:
20:70:c8:17:f8:0c:b1:a7:e0:d7:0e:0a:88:52:fe:1e:aa:0f:
50:5f:12:b5:11:f4:32:0a:1b:de:61:d9:7a:2b:c1:0f:b5:4d:
c5:d1:65:f3:6f:42:d7:e9:36:a6:7e:ca:3e:00:ef:3c:ee:24:
47:57:62:9d:a1:57:95:c4:c1:a1:0d:29:34:bf:27:8e:7f:18:
99:d4:27:cb:dc:e9:a8:9c:13:81:a4:8a:dc:61:5f:4b:b4:ff:
3f:75:40:39:0f:80:6e:46:cc:8d:5d:b2:f5:fe:6f:95:9e:b2:
0c:5a:b5:84:a4:f3:04:e4:81:a3:a4:79:60:84:f3:00:2a:a0:
a8:4e:bd:2c:1b:9c:ca:55:17:e9:58:ac:d3:b3:46:da:ab:94:
84:f6:d2:4a:98:33:b9:d7:54:6f:24:40:98:33:93:13:b8:9e:
e7:4c:2f:46:70:48:fe:d7:da:de:25:e1:04:cd:fe:70:44:63:
b1:e2:4f:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4KipgeHgafq6dfcLgC2zMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzE4YWY2YTM2ZjY2YTkxOTM5MzY0YWFmYzg2NDQ1YWI4
YTZlMGUwHhcNMjUwODIzMDMwMjI5WhcNMjUwODI0MDMwMjI5WjAzMTEwLwYDVQQD
EygzM2IyMWJmY2VkYTA0NjhhYWNhMjU4ZWI3ODM3MDBiNzg0NGU0MDgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr4aFCgD6NNBK33TmKqAF2wFE2Vad
Dw0vrHXsU23Y/dYtl4QHDWfWR1ucHayUncHIZMbZcjaio0ayV8QYeRLuVLEt3c28
HNL1DhFL547qNzTeLi/zYsCe1kn/cvAWeWdJsxkugaBC5M+o3O/h5P/m4cRIiuWc
eyMYE9ZTDBUYwLoODsH9OvM6WeTMJKOrz2wYwkz/bu2D1SR7gdU3rL+1bAr1GCiz
Yy5wXi2jo7HSh/kqP3Tlz5hf3op6zmLAZdkm/kxbhAIlS05y1oi3Au6TFbZCrvCx
6MiuY4B9WV3cCpX4mWXuz8VMBrJ7z/iOUJ+K1T+lgeYRFCosFiA6rBZ4xwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDOyG/ztoEaKrKJY63g3ALeETkCDMB8GA1UdIwQY
MBaAFFRxivajb2apGTk2Sq/IZEWrim4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYt
YmVkNTVjNDdhNTc4LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYtYmVkNTVjNDdhNTc4
LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL+Orl/5P
1cVQ09Vfh/9U36RSKSjRGhV9hmk+p9KWbvsNmSRJ2CgQNjwCAjL2C2qEwxGBCkXd
VsVIODSHB0C1Oeu4R7oLOFpGIHDIF/gMsafg1w4KiFL+HqoPUF8StRH0Mgob3mHZ
eivBD7VNxdFl829C1+k2pn7KPgDvPO4kR1dinaFXlcTBoQ0pNL8njn8YmdQny9zp
qJwTgaSK3GFfS7T/P3VAOQ+AbkbMjV2y9f5vlZ6yDFq1hKTzBOSBo6R5YITzACqg
qE69LBucylUX6Vis07NG2quUhPbSSpgzuddUbyRAmDOTE7ie50wvRnBI/tfa3iXh
BM3+cERjseJP8g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:39 2025 by rpki-client