Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
File: vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft (raw, json)
Hash identifier: 82SDZKDNjrzN1lNUr7Rq7IwOa6s/xSfrL++qzNXTQkA=
Subject key identifier: 4E:66:0E:26:55:9C:FB:C9:64:D4:94:39:80:6B:80:86:12:A8:2A:E2
Authority key identifier: BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
Certificate issuer: /CN=be722a99732c9c3cbc20b0a47292a823782603ac
Certificate serial: 0198D4E087C0B4C5BEF6AAC75C09888731FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
Manifest number: 15DA
Signing time: Sat 23 Aug 2025 03:02:21 +0000
Manifest this update: Sat 23 Aug 2025 03:02:21 +0000
Manifest next update: Sun 24 Aug 2025 03:02:21 +0000
Files and hashes: 1: KEoMu2N6_T8O9ufaf0Y2clZ16n8.roa (hash: TtnWx5gcstoPtaU3BdfsPkG0EZi+JY/3eJmxv3P7PTM=)
2: vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl (hash: vAZcihV2/AHL1291sEb46BRvWIZgBeS1hEj+201ImPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:87:c0:b4:c5:be:f6:aa:c7:5c:09:88:87:31:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be722a99732c9c3cbc20b0a47292a823782603ac
Validity
Not Before: Aug 23 03:02:21 2025 GMT
Not After : Aug 24 03:02:21 2025 GMT
Subject: CN=4e660e26559cfbc964d49439806b808612a82ae2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:f7:9d:99:eb:27:09:4a:03:7e:fc:90:35:48:
09:ec:64:e7:f1:1a:68:5e:d6:a5:95:e9:9c:ff:ae:
c8:b7:72:1c:a3:80:42:f1:4d:c2:c7:c9:ae:51:e9:
b1:25:c0:a0:c7:eb:d0:7b:23:94:d8:c9:89:63:3a:
a5:4a:68:2d:07:bc:38:f6:43:cc:de:62:4a:55:dc:
ae:fb:0b:31:a3:fb:d6:46:67:40:bd:97:4d:36:49:
b6:59:29:de:5e:79:f9:e6:c3:a6:e0:77:dc:59:61:
d8:9b:14:5f:7b:ed:14:16:f7:db:10:d2:c2:e5:ff:
af:bc:d4:fe:11:b6:91:30:3f:67:bd:d6:d3:00:24:
ca:82:71:5b:a4:b5:60:a5:37:a5:59:fe:f4:38:c5:
7f:5a:51:04:57:75:78:b9:2e:28:f2:7a:c0:27:c7:
89:e6:65:4f:0a:d0:a1:d4:76:ec:1a:c5:e6:7f:5c:
08:6b:6a:3a:6f:d8:30:71:03:e8:bf:0a:c0:12:17:
99:60:6b:fd:5b:b8:e9:73:36:58:32:34:21:e5:b5:
f5:3b:98:e6:fe:36:6a:7b:e8:63:37:2d:f5:76:f9:
74:f4:13:75:5f:7a:93:c9:34:7c:67:7f:93:c9:cd:
2c:4f:04:38:b7:55:ba:d6:70:05:85:6f:9a:76:8b:
ec:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:66:0E:26:55:9C:FB:C9:64:D4:94:39:80:6B:80:86:12:A8:2A:E2
X509v3 Authority Key Identifier:
keyid:BE:72:2A:99:73:2C:9C:3C:BC:20:B0:A4:72:92:A8:23:78:26:03:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vnIqmXMsnDy8ILCkcpKoI3gmA6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/041b9f-1a07-42e5-b487-29b97a1877fb/1/vnIqmXMsnDy8ILCkcpKoI3gmA6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:09:ea:20:98:1e:93:d8:8c:d0:57:12:6b:b8:31:8a:0b:5f:
84:3e:b4:8c:db:5e:4d:d0:20:aa:5c:da:6c:8b:b0:38:19:08:
a6:fe:49:6b:01:a6:4c:c2:a9:5d:34:29:f9:2a:18:e3:3c:75:
73:68:fa:ad:8f:a1:ff:3a:f8:1e:aa:62:22:c6:19:a0:89:24:
ba:c1:71:c5:6f:0d:bd:f2:b6:b2:1b:2a:0c:2e:9a:5e:f2:05:
cd:b1:fa:97:8e:fa:88:f9:2e:9d:08:78:16:7e:11:b2:a8:28:
68:40:63:8e:ae:64:75:de:04:e8:03:4c:3c:ec:72:05:87:37:
f6:e4:99:5d:1b:0b:2a:59:56:85:d3:88:7b:16:f6:0f:60:c6:
49:5a:54:41:91:11:40:2c:71:6e:87:7a:0d:7b:a3:9c:bd:58:
2e:36:29:24:cc:f3:69:51:c4:71:84:25:68:e5:5f:9a:77:a1:
16:2c:bc:df:02:b8:c6:29:a7:a0:ef:2e:c1:58:bf:cc:ba:b5:
8d:8c:b1:d2:62:43:ff:ef:07:09:a5:8e:3b:cb:26:b9:05:fe:
aa:9f:05:aa:9d:cc:45:fe:5f:f1:19:64:2c:99:93:fc:5f:65:
c5:b6:b0:54:4f:46:77:cf:7e:ab:8f:ae:74:2b:93:c9:f7:20:
32:50:b3:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4IfAtMW+9qrHXAmIhzH6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNzIyYTk5NzMyYzljM2NiYzIwYjBhNDcyOTJhODIzNzgy
NjAzYWMwHhcNMjUwODIzMDMwMjIxWhcNMjUwODI0MDMwMjIxWjAzMTEwLwYDVQQD
Eyg0ZTY2MGUyNjU1OWNmYmM5NjRkNDk0Mzk4MDZiODA4NjEyYTgyYWUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjPedmesnCUoDfvyQNUgJ7GTn8Rpo
Xtallemc/67It3Ico4BC8U3Cx8muUemxJcCgx+vQeyOU2MmJYzqlSmgtB7w49kPM
3mJKVdyu+wsxo/vWRmdAvZdNNkm2WSneXnn55sOm4HfcWWHYmxRfe+0UFvfbENLC
5f+vvNT+EbaRMD9nvdbTACTKgnFbpLVgpTelWf70OMV/WlEEV3V4uS4o8nrAJ8eJ
5mVPCtCh1HbsGsXmf1wIa2o6b9gwcQPovwrAEheZYGv9W7jpczZYMjQh5bX1O5jm
/jZqe+hjNy31dvl09BN1X3qTyTR8Z3+Tyc0sTwQ4t1W61nAFhW+adovsJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE5mDiZVnPvJZNSUOYBrgIYSqCriMB8GA1UdIwQY
MBaAFL5yKplzLJw8vCCwpHKSqCN4JgOsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm5JcW1YTXNuRHk4SUxDa2NwS29JM2dtQTZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8wNDFiOWYtMWEwNy00MmU1LWI0ODct
MjliOTdhMTg3N2ZiLzEvdm5JcW1YTXNuRHk4SUxDa2NwS29JM2dtQTZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8wNDFiOWYtMWEwNy00MmU1LWI0ODctMjliOTdhMTg3N2Zi
LzEvdm5JcW1YTXNuRHk4SUxDa2NwS29JM2dtQTZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZQnqIJge
k9iM0FcSa7gxigtfhD60jNteTdAgqlzabIuwOBkIpv5JawGmTMKpXTQp+SoY4zx1
c2j6rY+h/zr4HqpiIsYZoIkkusFxxW8NvfK2shsqDC6aXvIFzbH6l476iPkunQh4
Fn4RsqgoaEBjjq5kdd4E6ANMPOxyBYc39uSZXRsLKllWhdOIexb2D2DGSVpUQZER
QCxxbod6DXujnL1YLjYpJMzzaVHEcYQlaOVfmnehFiy83wK4ximnoO8uwVi/zLq1
jYyx0mJD/+8HCaWOO8smuQX+qp8Fqp3MRf5f8RlkLJmT/F9lxbawVE9Gd89+q4+u
dCuTyfcgMlCzVA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 06:51:53 2025 by rpki-client