Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
File: VKzhXkXvtaAGDAZeJ06o46-wJes.mft (raw, json)
Hash identifier: nkExSUc4O/cjJgjPnt6mo9Sx8fAvqmpZJt6okWayWEI=
Subject key identifier: 72:E9:22:03:EA:1C:65:B4:10:E0:E1:92:34:F4:6D:FD:B8:67:B9:21
Authority key identifier: 54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB
Certificate issuer: /CN=54ace15e45efb5a0060c065e274ea8e3afb025eb
Certificate serial: 0198D4E0B71B9EA7E0206B1CBD9F1CE3907D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
Manifest number: 1648
Signing time: Sat 23 Aug 2025 03:02:33 +0000
Manifest this update: Sat 23 Aug 2025 03:02:33 +0000
Manifest next update: Sun 24 Aug 2025 03:02:33 +0000
Files and hashes: 1: VKzhXkXvtaAGDAZeJ06o46-wJes.crl (hash: V4dohLupVfFlBGcsP24TUxgp3nx/8X1KiElEBv7JaM0=)
2: agadNAkdL8gZSJjhebbq78b-GQQ.roa (hash: AWs3/nEl7KZJPMZNEu10pqsOCcoVUqcD7DcXZsQJMg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b7:1b:9e:a7:e0:20:6b:1c:bd:9f:1c:e3:90:7d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ace15e45efb5a0060c065e274ea8e3afb025eb
Validity
Not Before: Aug 23 03:02:33 2025 GMT
Not After : Aug 24 03:02:33 2025 GMT
Subject: CN=72e92203ea1c65b410e0e19234f46dfdb867b921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:ae:24:fe:ec:cf:76:06:0b:99:55:66:7e:2b:
6d:1e:9f:0f:83:02:b4:f5:8d:69:f2:07:c2:96:4d:
39:c7:4c:ae:bd:3e:be:bc:35:5a:3c:e0:4f:4c:61:
be:61:13:be:74:a5:ca:2b:c1:33:9b:78:52:b2:86:
14:9c:01:96:61:8e:44:38:4c:2b:3c:e5:71:75:7a:
84:d0:81:f3:b1:59:a5:0e:42:d5:a1:ff:b4:4c:c4:
0f:49:1c:91:68:ce:37:30:e2:89:d5:cf:d1:cc:ef:
88:fc:22:a6:97:9c:e1:15:f6:ba:b6:9f:8f:4d:6b:
2a:30:c7:02:31:8f:77:62:da:16:ab:e8:c0:31:3d:
b2:a2:b8:d0:8c:dd:67:ca:ba:47:fd:67:21:55:48:
d8:5c:c8:9f:e1:38:f8:0e:4a:63:03:e4:66:07:1b:
6d:2f:82:81:20:38:fe:ac:51:e4:c4:8e:b7:a7:a7:
68:f3:d8:5e:e2:6a:2f:6e:04:fe:91:a9:1c:28:a1:
2c:dd:e2:4d:e2:b2:e4:cb:2f:5e:e6:37:81:ae:9d:
f7:31:66:9d:d7:57:08:0d:3d:9b:d5:55:8f:21:ab:
45:3b:b8:ad:26:21:fb:f0:d5:7e:9e:2d:bd:7e:21:
71:fd:1e:7b:84:db:14:d0:31:f6:a1:12:d9:f0:dc:
85:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:E9:22:03:EA:1C:65:B4:10:E0:E1:92:34:F4:6D:FD:B8:67:B9:21
X509v3 Authority Key Identifier:
keyid:54:AC:E1:5E:45:EF:B5:A0:06:0C:06:5E:27:4E:A8:E3:AF:B0:25:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKzhXkXvtaAGDAZeJ06o46-wJes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/8efa45-92a8-4513-9f9a-ad2b61380be1/1/VKzhXkXvtaAGDAZeJ06o46-wJes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:df:ca:af:9a:b3:a2:7f:b5:02:14:63:f4:d7:fb:c1:8f:88:
9d:30:15:2b:c3:be:bd:e6:d9:de:15:74:61:04:67:4f:2f:d0:
c7:2e:08:56:7d:ba:6f:85:fd:f0:c4:b0:ea:1c:85:21:ef:58:
bb:c1:55:7f:47:da:7e:8d:fa:c0:c9:2a:fd:92:7c:96:f9:35:
d1:ed:7b:ce:07:59:51:72:aa:10:98:6c:db:44:26:47:c8:21:
42:fa:d7:53:4a:ec:0c:91:ee:d3:0b:c0:f1:e8:41:82:aa:d4:
c0:b1:e7:ae:44:f2:87:da:bf:ba:cb:3a:08:95:29:b3:32:9b:
7d:98:6e:19:91:d1:5b:4b:8a:a9:4b:e9:6c:15:dc:f9:04:8e:
ae:67:77:51:16:94:72:d5:9a:24:e5:7a:f6:0a:25:5b:6b:8c:
dc:59:28:0d:8e:12:d9:3c:9a:4e:7f:fc:04:cd:8f:6c:61:7f:
67:6f:9a:27:b0:0a:57:ed:d7:33:76:98:fc:6e:93:2f:b3:26:
ff:43:22:5f:c1:19:9d:ad:33:14:a1:92:96:f7:17:a9:89:5e:
93:a8:9f:66:ca:4f:ae:1f:b3:d9:54:b2:5b:f9:7a:c5:46:71:
9e:0e:f4:75:6f:af:85:f9:64:b7:14:7c:0e:f6:53:c2:3e:3e:
1e:26:70:25
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4LcbnqfgIGscvZ8c45B9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YWNlMTVlNDVlZmI1YTAwNjBjMDY1ZTI3NGVhOGUzYWZi
MDI1ZWIwHhcNMjUwODIzMDMwMjMzWhcNMjUwODI0MDMwMjMzWjAzMTEwLwYDVQQD
Eyg3MmU5MjIwM2VhMWM2NWI0MTBlMGUxOTIzNGY0NmRmZGI4NjdiOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8K4k/uzPdgYLmVVmfittHp8PgwK0
9Y1p8gfClk05x0yuvT6+vDVaPOBPTGG+YRO+dKXKK8Ezm3hSsoYUnAGWYY5EOEwr
POVxdXqE0IHzsVmlDkLVof+0TMQPSRyRaM43MOKJ1c/RzO+I/CKml5zhFfa6tp+P
TWsqMMcCMY93YtoWq+jAMT2yorjQjN1nyrpH/WchVUjYXMif4Tj4DkpjA+RmBxtt
L4KBIDj+rFHkxI63p6do89he4movbgT+kakcKKEs3eJN4rLkyy9e5jeBrp33MWad
11cIDT2b1VWPIatFO7itJiH78NV+ni29fiFx/R57hNsU0DH2oRLZ8NyFowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHLpIgPqHGW0EODhkjT0bf24Z7khMB8GA1UdIwQY
MBaAFFSs4V5F77WgBgwGXidOqOOvsCXrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkt6aFhrWHZ0YUFHREFaZUowNm80Ni13SmVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny84ZWZhNDUtOTJhOC00NTEzLTlmOWEt
YWQyYjYxMzgwYmUxLzEvVkt6aFhrWHZ0YUFHREFaZUowNm80Ni13SmVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny84ZWZhNDUtOTJhOC00NTEzLTlmOWEtYWQyYjYxMzgwYmUx
LzEvVkt6aFhrWHZ0YUFHREFaZUowNm80Ni13SmVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOd/Kr5qz
on+1AhRj9Nf7wY+InTAVK8O+vebZ3hV0YQRnTy/Qxy4IVn26b4X98MSw6hyFIe9Y
u8FVf0fafo36wMkq/ZJ8lvk10e17zgdZUXKqEJhs20QmR8ghQvrXU0rsDJHu0wvA
8ehBgqrUwLHnrkTyh9q/uss6CJUpszKbfZhuGZHRW0uKqUvpbBXc+QSOrmd3URaU
ctWaJOV69golW2uM3FkoDY4S2TyaTn/8BM2PbGF/Z2+aJ7AKV+3XM3aY/G6TL7Mm
/0MiX8EZna0zFKGSlvcXqYlek6ifZspPrh+z2VSyW/l6xUZxng70dW+vhflktxR8
DvZTwj4+HiZwJQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:24:53 2025 by rpki-client