Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
File: _VOKrk7E0KLzwKZfifSHRrUV5Xs.mft (raw, json)
Hash identifier: Z+piC3lZ3sqMzRcaqD5mPOqGpttSArVAYAiuilAnREQ=
Subject key identifier: 4C:17:65:C9:F9:D1:BE:69:89:24:E9:94:11:1B:F5:BE:E5:90:66:5E
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 0198D5160F387024A207AFCB63AF67A2B80A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
Manifest number: 0CE2
Signing time: Sat 23 Aug 2025 04:00:49 +0000
Manifest this update: Sat 23 Aug 2025 04:00:49 +0000
Manifest next update: Sun 24 Aug 2025 04:00:49 +0000
Files and hashes: 1: YD_zTsYXZHwOdGihQ9GGGJD2yQ4.roa (hash: MiVKISLoY4yTYfozn6ttBVBGLS9pCG7wKWYNtkMouG8=)
2: _VOKrk7E0KLzwKZfifSHRrUV5Xs.crl (hash: ZUtjH/dCOwNSQ2j55TGdm2NszIgYgHaUmVy3HxQs2vM=)
3: wcV-PUcCwSD1_bZOyNtF92C9c9E.roa (hash: YHNUenZzn6rHgL2dA2+pXb/I7NXwkpjXztGNWnA0xb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 04:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:16:0f:38:70:24:a2:07:af:cb:63:af:67:a2:b8:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: Aug 23 04:00:49 2025 GMT
Not After : Aug 24 04:00:49 2025 GMT
Subject: CN=4c1765c9f9d1be698924e994111bf5bee590665e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:c2:7e:85:f9:cf:10:7a:46:f6:bb:4d:b7:4a:
10:c5:51:b4:ad:39:9e:64:4c:55:99:b8:64:78:19:
34:cb:ae:bb:86:05:60:94:03:66:2b:63:a6:39:c7:
12:0e:64:a3:27:cd:ab:3c:fd:83:9f:61:ce:fd:af:
c9:55:2e:d9:28:a1:0e:e2:c2:47:e6:62:91:ef:f9:
09:00:ae:90:71:7c:3e:24:c7:1c:26:fa:76:40:d6:
a5:7a:de:e2:61:bb:87:93:20:5c:77:7b:8b:98:ff:
40:57:85:45:10:7d:bf:7f:da:19:e2:0b:c8:b8:ab:
47:4c:56:41:25:8f:c9:9f:11:d1:da:33:42:68:0a:
53:a5:40:a8:ab:69:46:18:0d:2d:58:6d:4a:fb:d2:
2d:02:d2:6d:74:25:15:06:0f:2a:72:cc:c6:33:13:
64:a3:74:e6:05:a3:0a:41:68:90:41:0e:53:96:ac:
7c:b0:34:c2:ab:05:32:7c:53:9d:a0:92:a0:a1:ec:
2a:77:77:8a:8f:e1:93:00:07:14:2c:54:83:91:8e:
da:5b:7e:c6:2d:54:14:35:fd:05:10:21:bd:0a:62:
b3:3f:f5:29:d2:a3:c5:fe:28:89:f7:c9:51:78:ac:
d1:17:8e:20:06:5b:32:88:89:27:be:5a:f1:93:b5:
31:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4C:17:65:C9:F9:D1:BE:69:89:24:E9:94:11:1B:F5:BE:E5:90:66:5E
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:ae:d3:6a:a4:88:1e:55:e7:49:f2:13:ae:4b:80:73:11:0f:
9b:f1:cc:58:c4:02:af:7e:5e:7e:9a:69:82:35:fc:20:0d:d5:
01:2d:76:37:8e:3c:d4:29:ac:4d:a1:f9:dd:e3:48:2e:33:fb:
4a:f1:a7:14:0d:e5:6c:55:86:91:8a:59:4a:03:07:70:d6:9c:
5f:e5:e4:03:7f:55:65:f2:d7:8d:1e:f0:9e:c9:4e:8a:6e:18:
33:a7:cf:84:c2:56:ca:8a:d0:25:17:fe:6f:35:70:ab:3a:80:
66:e3:3c:61:f2:b5:e2:35:8f:55:a8:da:c4:00:10:4e:01:96:
66:9e:f7:61:6a:56:2f:35:db:48:39:94:83:9b:fb:14:b5:60:
2d:b7:37:fa:3d:be:c0:0a:bf:e4:01:92:78:b1:9a:5a:42:82:
12:04:6c:fb:c5:35:e5:04:1a:dd:08:01:ba:49:2e:c6:3c:d2:
34:34:8e:60:eb:ce:42:62:fc:f0:79:6b:9e:84:56:8e:1d:d5:
5f:45:6a:9c:f3:7a:de:bc:60:1b:0f:4b:73:61:fa:79:6c:ed:
c4:71:e5:79:38:7f:f2:ef:e7:8c:80:50:5f:07:6b:27:ff:d8:
66:e6:01:2a:eb:c7:6d:97:0c:19:b2:30:bc:7b:19:5b:03:d6:
65:91:e1:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVFg84cCSiB6/LY69norgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNTM4YWFlNGVjNGQwYTJmM2MwYTY1Zjg5ZjQ4NzQ2YjUx
NWU1N2IwHhcNMjUwODIzMDQwMDQ5WhcNMjUwODI0MDQwMDQ5WjAzMTEwLwYDVQQD
Eyg0YzE3NjVjOWY5ZDFiZTY5ODkyNGU5OTQxMTFiZjViZWU1OTA2NjVlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwsJ+hfnPEHpG9rtNt0oQxVG0rTme
ZExVmbhkeBk0y667hgVglANmK2OmOccSDmSjJ82rPP2Dn2HO/a/JVS7ZKKEO4sJH
5mKR7/kJAK6QcXw+JMccJvp2QNalet7iYbuHkyBcd3uLmP9AV4VFEH2/f9oZ4gvI
uKtHTFZBJY/JnxHR2jNCaApTpUCoq2lGGA0tWG1K+9ItAtJtdCUVBg8qcszGMxNk
o3TmBaMKQWiQQQ5Tlqx8sDTCqwUyfFOdoJKgoewqd3eKj+GTAAcULFSDkY7aW37G
LVQUNf0FECG9CmKzP/Up0qPF/iiJ98lReKzRF44gBlsyiIknvlrxk7UxkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEwXZcn50b5piSTplBEb9b7lkGZeMB8GA1UdIwQY
MBaAFP1Tiq5OxNCi88CmX4n0h0a1FeV7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1ZPS3JrN0UwS0x6d0taZmlmU0hSclVWNVhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hNjlmZDctOGUxZi00MTc2LWE1ZGYt
NDI4MzdjY2EwMGMzLzEvX1ZPS3JrN0UwS0x6d0taZmlmU0hSclVWNVhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9hNjlmZDctOGUxZi00MTc2LWE1ZGYtNDI4MzdjY2EwMGMz
LzEvX1ZPS3JrN0UwS0x6d0taZmlmU0hSclVWNVhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAna7TaqSI
HlXnSfITrkuAcxEPm/HMWMQCr35efpppgjX8IA3VAS12N4481CmsTaH53eNILjP7
SvGnFA3lbFWGkYpZSgMHcNacX+XkA39VZfLXjR7wnslOim4YM6fPhMJWyorQJRf+
bzVwqzqAZuM8YfK14jWPVajaxAAQTgGWZp73YWpWLzXbSDmUg5v7FLVgLbc3+j2+
wAq/5AGSeLGaWkKCEgRs+8U15QQa3QgBukkuxjzSNDSOYOvOQmL88HlrnoRWjh3V
X0VqnPN63rxgGw9Lc2H6eWztxHHleTh/8u/njIBQXwdrJ//YZuYBKuvHbZcMGbIw
vHsZWwPWZZHhWg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:27:22 2025 by rpki-client