Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft
File: VmczL0gJQe01gDssBLhPNyjTkpc.mft (raw, json)
Hash identifier: 6IPsn6lI9fdk3ACbw3GmC0A9K81rSFsTLhD+SSMmSWw=
Subject key identifier: F2:E2:91:F3:33:D0:38:50:56:09:90:C6:F8:FC:0C:DC:6E:C2:1E:8A
Authority key identifier: 56:67:33:2F:48:09:41:ED:35:80:3B:2C:04:B8:4F:37:28:D3:92:97
Certificate issuer: /CN=5667332f480941ed35803b2c04b84f3728d39297
Certificate serial: 0198D705F444E6E73287C19A41585CFBDCF8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VmczL0gJQe01gDssBLhPNyjTkpc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft
Manifest number: 3B
Signing time: Sat 23 Aug 2025 13:02:28 +0000
Manifest this update: Sat 23 Aug 2025 13:02:28 +0000
Manifest next update: Sun 24 Aug 2025 13:02:28 +0000
Files and hashes: 1: VmczL0gJQe01gDssBLhPNyjTkpc.crl (hash: UQX1jj2ouupr4/z5aSybplAAkWaGkUvH0jh+7FoQBtI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VmczL0gJQe01gDssBLhPNyjTkpc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:f4:44:e6:e7:32:87:c1:9a:41:58:5c:fb:dc:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5667332f480941ed35803b2c04b84f3728d39297
Validity
Not Before: Aug 23 13:02:28 2025 GMT
Not After : Aug 24 13:02:28 2025 GMT
Subject: CN=f2e291f333d03850560990c6f8fc0cdc6ec21e8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:ac:2d:b5:30:49:06:2e:8a:e8:b9:09:ba:b3:
75:db:64:12:27:ec:46:88:fb:3b:e3:42:a1:5d:49:
aa:e0:06:5f:e4:fe:cd:f0:82:bc:33:33:f1:f8:e4:
6f:37:76:0b:39:eb:f6:64:3b:b6:d3:33:5b:f1:6c:
61:e4:1f:3b:d8:53:ba:b2:c4:1c:3b:c7:96:83:d2:
49:b3:3c:ec:26:fc:14:b0:47:07:72:fc:93:87:98:
b2:fe:44:67:2d:03:fb:ab:31:90:91:83:46:b5:b8:
27:35:b1:27:95:c3:93:b4:35:d5:5e:ad:05:c8:a2:
a4:bd:23:3d:24:d4:fb:c1:f3:d7:d4:b5:79:cc:1f:
6a:7b:e8:57:80:40:ae:09:86:ce:af:35:31:8c:ec:
d1:bd:86:61:cc:f4:01:18:b6:2c:a4:ab:b5:cd:32:
25:96:8f:0f:60:33:8c:80:02:83:ae:fd:03:3c:38:
b6:b4:ed:10:91:d1:f7:cc:4f:96:dd:dc:f0:fa:3f:
ab:5f:85:39:20:c4:7b:19:47:b2:8b:6a:d7:89:72:
ff:2e:dd:c4:d2:4d:d7:9f:16:3e:5b:46:1a:c8:52:
47:42:ba:e7:c2:39:c9:90:38:0a:15:54:f9:65:3f:
27:e3:71:e1:38:3c:2f:d3:42:0c:df:67:57:fc:a8:
69:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:E2:91:F3:33:D0:38:50:56:09:90:C6:F8:FC:0C:DC:6E:C2:1E:8A
X509v3 Authority Key Identifier:
keyid:56:67:33:2F:48:09:41:ED:35:80:3B:2C:04:B8:4F:37:28:D3:92:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VmczL0gJQe01gDssBLhPNyjTkpc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/2f90f1-e257-4e54-b25d-2594c2ff6cb7/1/VmczL0gJQe01gDssBLhPNyjTkpc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:06:d0:15:19:95:b4:e8:65:22:24:53:c2:4e:0c:25:5f:ff:
b9:cf:8a:6c:38:d7:33:26:6d:f0:97:14:9a:d0:0b:3f:a8:22:
30:5c:38:3b:07:3b:da:4b:84:f8:42:b9:f2:3e:df:82:c3:58:
39:83:c6:48:af:10:fe:95:28:fb:71:98:d4:a7:6a:89:ad:99:
74:52:bb:a8:c6:12:bd:8a:fd:b8:98:dc:bd:14:44:0a:6f:10:
ec:41:23:08:bf:91:5d:07:c6:14:f3:3d:bb:a5:e8:e7:1e:ed:
ce:ab:07:de:a7:0e:f1:80:37:8e:30:08:a1:7d:ed:14:10:2f:
7c:ac:7c:7e:06:57:58:b6:ff:0e:0b:f6:56:16:53:b2:14:57:
c6:8b:25:4c:b7:89:04:fd:6a:7e:cf:a9:3b:07:29:ad:aa:99:
07:de:29:25:2c:1d:f1:af:ec:58:8f:1b:5d:d0:69:dc:c5:6b:
70:d3:05:42:61:e3:f3:01:f2:0f:36:64:00:17:8c:4c:84:74:
9f:5d:85:34:df:92:e4:07:87:26:8c:a3:16:46:50:b0:2a:3c:
e7:80:1b:bc:d3:09:a8:c7:26:9b:c9:4f:2f:f3:14:24:c6:0f:
56:1b:86:a3:59:11:95:3d:53:35:fc:1b:c7:be:4c:09:98:86:
29:6f:a3:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBfRE5ucyh8GaQVhc+9z4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NjczMzJmNDgwOTQxZWQzNTgwM2IyYzA0Yjg0ZjM3Mjhk
MzkyOTcwHhcNMjUwODIzMTMwMjI4WhcNMjUwODI0MTMwMjI4WjAzMTEwLwYDVQQD
EyhmMmUyOTFmMzMzZDAzODUwNTYwOTkwYzZmOGZjMGNkYzZlYzIxZThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmawttTBJBi6K6LkJurN122QSJ+xG
iPs740KhXUmq4AZf5P7N8IK8MzPx+ORvN3YLOev2ZDu20zNb8Wxh5B872FO6ssQc
O8eWg9JJszzsJvwUsEcHcvyTh5iy/kRnLQP7qzGQkYNGtbgnNbEnlcOTtDXVXq0F
yKKkvSM9JNT7wfPX1LV5zB9qe+hXgECuCYbOrzUxjOzRvYZhzPQBGLYspKu1zTIl
lo8PYDOMgAKDrv0DPDi2tO0QkdH3zE+W3dzw+j+rX4U5IMR7GUeyi2rXiXL/Lt3E
0k3XnxY+W0YayFJHQrrnwjnJkDgKFVT5ZT8n43HhODwv00IM32dX/Khp2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLikfMz0DhQVgmQxvj8DNxuwh6KMB8GA1UdIwQY
MBaAFFZnMy9ICUHtNYA7LAS4Tzco05KXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm1jekwwZ0pRZTAxZ0Rzc0JMaFBOeWpUa3BjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi8yZjkwZjEtZTI1Ny00ZTU0LWIyNWQt
MjU5NGMyZmY2Y2I3LzEvVm1jekwwZ0pRZTAxZ0Rzc0JMaFBOeWpUa3BjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi8yZjkwZjEtZTI1Ny00ZTU0LWIyNWQtMjU5NGMyZmY2Y2I3
LzEvVm1jekwwZ0pRZTAxZ0Rzc0JMaFBOeWpUa3BjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMAbQFRmV
tOhlIiRTwk4MJV//uc+KbDjXMyZt8JcUmtALP6giMFw4Owc72kuE+EK58j7fgsNY
OYPGSK8Q/pUo+3GY1Kdqia2ZdFK7qMYSvYr9uJjcvRRECm8Q7EEjCL+RXQfGFPM9
u6Xo5x7tzqsH3qcO8YA3jjAIoX3tFBAvfKx8fgZXWLb/Dgv2VhZTshRXxoslTLeJ
BP1qfs+pOwcpraqZB94pJSwd8a/sWI8bXdBp3MVrcNMFQmHj8wHyDzZkABeMTIR0
n12FNN+S5AeHJoyjFkZQsCo854AbvNMJqMcmm8lPL/MUJMYPVhuGo1kRlT1TNfwb
x75MCZiGKW+jag==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:36:05 2025 by rpki-client