Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft
File: VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft (raw, json)
Hash identifier: 8twdw2G4UkjSiWQ+dhv9jFwpdcQQZHY0bwLqMOP2X30=
Subject key identifier: 89:76:3C:EB:0D:28:36:C5:B3:BB:0D:A2:67:0A:CF:F5:02:DC:14:31
Authority key identifier: 55:3F:4C:46:31:A3:38:5C:5E:39:5E:E1:D9:DA:A0:76:B0:BC:CF:F1
Certificate issuer: /CN=553f4c4631a3385c5e395ee1d9daa076b0bccff1
Certificate serial: 0198D6986D22AAC6D32C92A96C3130161C7A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft
Manifest number: 1130
Signing time: Sat 23 Aug 2025 11:02:50 +0000
Manifest this update: Sat 23 Aug 2025 11:02:50 +0000
Manifest next update: Sun 24 Aug 2025 11:02:50 +0000
Files and hashes: 1: VT9MRjGjOFxeOV7h2dqgdrC8z_E.crl (hash: ZZl41ENFtYU2n8BqQWRJoLX9sd2H40HYtCuKr8+YVVE=)
2: y1unGvVewluXyGeDL5LFoMVtcdw.roa (hash: /h17T8UK70DqWL88fo4si+DcDqq+rRewkenDmJ5Ct8Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft
rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:98:6d:22:aa:c6:d3:2c:92:a9:6c:31:30:16:1c:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=553f4c4631a3385c5e395ee1d9daa076b0bccff1
Validity
Not Before: Aug 23 11:02:50 2025 GMT
Not After : Aug 24 11:02:50 2025 GMT
Subject: CN=89763ceb0d2836c5b3bb0da2670acff502dc1431
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:71:98:0e:00:0a:c9:94:00:1e:b0:46:0f:c0:
b3:d2:06:43:24:8d:f3:5d:43:72:6b:95:87:8f:e7:
69:e5:34:10:a3:0b:c3:06:60:81:4c:35:1a:bd:5e:
36:6a:bc:64:96:08:78:21:33:6b:b7:28:1b:07:80:
50:06:ac:67:17:89:0c:18:0c:d3:b3:54:15:12:fc:
47:fa:9d:93:2a:bf:9f:2d:e0:20:49:0b:b8:cd:b0:
44:b6:81:05:e2:9b:05:c8:7b:6c:50:27:45:60:8f:
81:c5:f4:35:56:d3:e3:be:65:bd:78:d3:66:bd:41:
cc:b3:9d:64:cc:d3:c0:7c:d4:76:8f:fe:c0:4c:d0:
3d:a9:ea:57:dc:84:93:eb:ee:f2:c3:c0:37:9a:71:
f5:0f:65:26:d5:89:65:97:e2:63:19:2e:ab:9d:ea:
8f:de:22:4b:79:6c:cc:d3:43:e4:06:51:1e:ea:55:
d6:bc:9f:ac:a1:17:d8:9b:5b:91:0e:3c:34:e3:53:
8f:1c:de:58:7e:fc:b6:5a:1b:eb:9a:c0:94:90:50:
54:59:44:a6:d7:45:ff:0c:b7:72:8f:f7:e0:f2:89:
ae:46:2a:bc:74:db:54:73:17:ea:38:56:31:b2:4c:
05:f8:d7:de:51:13:57:4a:5b:63:d9:6e:e2:55:6e:
66:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
89:76:3C:EB:0D:28:36:C5:B3:BB:0D:A2:67:0A:CF:F5:02:DC:14:31
X509v3 Authority Key Identifier:
keyid:55:3F:4C:46:31:A3:38:5C:5E:39:5E:E1:D9:DA:A0:76:B0:BC:CF:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VT9MRjGjOFxeOV7h2dqgdrC8z_E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/9a8d08-e4bb-492f-9863-454f99c74f11/1/VT9MRjGjOFxeOV7h2dqgdrC8z_E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:12:c8:a5:6c:35:ee:9d:7a:bc:64:ec:8a:0a:d3:37:15:92:
72:96:a1:18:77:96:f2:27:8a:02:c5:e7:cb:72:4f:c1:cc:3b:
e8:1a:85:07:8d:42:2f:64:5d:f9:b2:c1:99:01:5c:d3:80:5b:
ba:d0:08:7c:e7:9a:ed:6c:17:42:10:2b:72:b6:44:51:6b:6e:
22:b4:2f:49:2f:09:a8:70:aa:37:6b:df:63:7b:07:ad:66:c9:
b9:00:3f:23:04:e8:c3:6e:18:05:81:c7:3e:61:7d:a7:a9:83:
84:0b:62:1f:d2:41:55:7f:ac:76:d7:86:87:35:60:27:65:97:
74:bb:6d:85:49:d7:f4:0a:e2:17:14:5a:38:a6:3f:35:11:3a:
af:04:95:ec:95:c7:69:70:2d:8b:19:9a:7e:63:44:5f:ce:ec:
cf:0c:9e:49:be:01:8b:69:f3:8f:0a:a1:bc:ec:0e:b7:a0:94:
10:05:fd:11:4b:8b:bb:69:9f:ea:72:26:74:56:e5:ba:6f:09:
e9:6c:a9:92:25:5f:e3:04:89:a2:39:42:f0:eb:53:af:bd:a0:
2e:84:54:37:68:5f:eb:fc:7f:cb:ab:5f:4e:2c:d4:cb:dd:1c:
92:33:8d:28:06:2e:f5:9c:45:0f:f9:8a:9d:1f:a4:34:7b:83:
dc:94:93:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWmG0iqsbTLJKpbDEwFhx6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1M2Y0YzQ2MzFhMzM4NWM1ZTM5NWVlMWQ5ZGFhMDc2YjBi
Y2NmZjEwHhcNMjUwODIzMTEwMjUwWhcNMjUwODI0MTEwMjUwWjAzMTEwLwYDVQQD
Eyg4OTc2M2NlYjBkMjgzNmM1YjNiYjBkYTI2NzBhY2ZmNTAyZGMxNDMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0nGYDgAKyZQAHrBGD8Cz0gZDJI3z
XUNya5WHj+dp5TQQowvDBmCBTDUavV42arxklgh4ITNrtygbB4BQBqxnF4kMGAzT
s1QVEvxH+p2TKr+fLeAgSQu4zbBEtoEF4psFyHtsUCdFYI+BxfQ1VtPjvmW9eNNm
vUHMs51kzNPAfNR2j/7ATNA9qepX3IST6+7yw8A3mnH1D2Um1Ylll+JjGS6rneqP
3iJLeWzM00PkBlEe6lXWvJ+soRfYm1uRDjw041OPHN5Yfvy2WhvrmsCUkFBUWUSm
10X/DLdyj/fg8omuRiq8dNtUcxfqOFYxskwF+NfeURNXSltj2W7iVW5mqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIl2POsNKDbFs7sNomcKz/UC3BQxMB8GA1UdIwQY
MBaAFFU/TEYxozhcXjle4dnaoHawvM/xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlQ5TVJqR2pPRnhlT1Y3aDJkcWdkckM4el9FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy85YThkMDgtZTRiYi00OTJmLTk4NjMt
NDU0Zjk5Yzc0ZjExLzEvVlQ5TVJqR2pPRnhlT1Y3aDJkcWdkckM4el9FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy85YThkMDgtZTRiYi00OTJmLTk4NjMtNDU0Zjk5Yzc0ZjEx
LzEvVlQ5TVJqR2pPRnhlT1Y3aDJkcWdkckM4el9FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtRLIpWw1
7p16vGTsigrTNxWScpahGHeW8ieKAsXny3JPwcw76BqFB41CL2Rd+bLBmQFc04Bb
utAIfOea7WwXQhArcrZEUWtuIrQvSS8JqHCqN2vfY3sHrWbJuQA/IwTow24YBYHH
PmF9p6mDhAtiH9JBVX+sdteGhzVgJ2WXdLtthUnX9AriFxRaOKY/NRE6rwSV7JXH
aXAtixmafmNEX87szwyeSb4Bi2nzjwqhvOwOt6CUEAX9EUuLu2mf6nImdFblum8J
6WypkiVf4wSJojlC8OtTr72gLoRUN2hf6/x/y6tfTizUy90ckjONKAYu9ZxFD/mK
nR+kNHuD3JST4g==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:32:55 2025 by rpki-client