Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
File: VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft (raw, json)
Hash identifier: AQsRXVI3UaXbyw3m1axUauVvV0eRFQ+QnU01gnMOTzs=
Subject key identifier: AD:55:3A:89:4F:84:67:8F:46:DA:E0:D4:D3:AF:74:D2:05:CB:5B:06
Authority key identifier: 54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
Certificate issuer: /CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Certificate serial: 0198D583599AA22290914707067E6B18234E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
Manifest number: 1405
Signing time: Sat 23 Aug 2025 06:00:11 +0000
Manifest this update: Sat 23 Aug 2025 06:00:11 +0000
Manifest next update: Sun 24 Aug 2025 06:00:11 +0000
Files and hashes: 1: 45perw_w1j6f13fS2dhRsqX1J5M.roa (hash: DYBg8sY6Y3Ov/VU9uOEBk40lHTsP43PpQZFd0Uj3ouA=)
2: VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl (hash: gMOnDDI21NNv2HAalBVU4wv3cxKgtYYgxkaLeXQ3bMM=)
3: lVcXLet5xDC9hx49fSzHNMkhKuQ.roa (hash: yDDXEEZlcdjv6pPGItKtHPkxBZnpxpZ1NCia9fyNgYI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:59:9a:a2:22:90:91:47:07:06:7e:6b:18:23:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54791dde2c9bdea366ce7ec6c5a800c5da633454
Validity
Not Before: Aug 23 06:00:11 2025 GMT
Not After : Aug 24 06:00:11 2025 GMT
Subject: CN=ad553a894f84678f46dae0d4d3af74d205cb5b06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:ef:7d:09:43:14:41:f9:9e:db:f0:4a:63:59:
74:3d:04:60:a6:48:f0:e8:f5:9b:06:bd:7a:a2:fb:
23:41:7b:87:97:f7:86:4d:54:02:c2:16:fe:3f:58:
0a:ad:d5:f2:24:91:71:dd:6c:74:55:f4:29:ca:95:
6a:68:25:fa:88:95:f4:bf:af:cf:96:92:2a:2c:fa:
09:84:ce:7a:18:42:90:8e:57:84:e8:20:2a:45:5e:
2e:9f:9d:b6:93:cb:7e:d8:7e:10:33:92:39:75:50:
58:85:e6:27:5f:10:17:f8:51:d0:73:24:3d:9e:8e:
22:81:34:61:10:c0:55:d2:bf:73:ec:27:d9:e9:0b:
bf:fb:67:91:88:3c:6b:e6:e8:62:f4:bf:e9:7e:cb:
32:1e:62:ff:7a:cf:38:0e:20:78:5c:c7:e5:2a:d3:
23:58:dc:f2:65:c7:ae:93:eb:61:d5:ea:56:c2:7b:
73:14:28:08:15:c9:dc:2e:e9:0b:3b:21:56:4a:d8:
e5:a7:ab:f1:8e:4d:5f:88:c7:7a:af:7f:87:fe:a5:
13:bd:56:54:da:d5:76:18:f7:d7:51:c6:2f:36:23:
e4:f0:51:4d:5e:5f:76:d7:30:77:20:9f:22:c8:da:
fb:1b:be:b6:be:f3:bd:63:0f:d9:83:21:e8:9e:21:
92:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:55:3A:89:4F:84:67:8F:46:DA:E0:D4:D3:AF:74:D2:05:CB:5B:06
X509v3 Authority Key Identifier:
keyid:54:79:1D:DE:2C:9B:DE:A3:66:CE:7E:C6:C5:A8:00:C5:DA:63:34:54
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHkd3iyb3qNmzn7GxagAxdpjNFQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/17e567-9e44-444a-ac64-18b34bea9b06/1/VHkd3iyb3qNmzn7GxagAxdpjNFQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:e9:cd:9b:d3:bf:85:0a:35:24:bc:17:25:65:cf:9a:ce:e3:
f5:a7:21:df:8e:1e:41:5c:ab:07:83:3a:5d:de:6a:3f:1f:04:
94:0a:65:0c:79:62:5d:64:84:82:91:a4:32:04:3b:e3:02:68:
9d:8d:91:c1:29:74:dd:51:0d:5c:a3:6d:74:ba:ff:1c:35:2e:
79:fb:6d:ef:43:3a:ec:4c:a5:c4:7c:bc:a9:95:7b:f2:9b:26:
f9:9d:9a:38:99:65:17:ec:7b:63:c4:f5:69:6a:7a:5d:31:39:
be:af:dd:60:4c:ce:81:b5:5d:56:cb:57:17:20:de:d0:d1:5b:
67:1a:c1:99:be:84:e9:1e:66:30:5d:fd:3f:35:56:fc:a0:93:
57:0b:9d:e3:a3:59:6d:18:c3:ed:98:08:aa:b6:42:b6:c2:b4:
64:73:d7:ff:5c:8e:f2:4e:e3:a8:f2:c3:87:12:ea:91:d9:bc:
4f:fa:0f:b3:bd:b6:76:57:c8:c5:43:71:c8:12:02:d6:ce:7b:
80:49:2c:84:91:7c:4d:b1:86:03:04:7b:3e:2c:f1:44:07:cc:
7f:21:53:05:1c:83:6c:9e:0e:bc:4a:15:cf:1e:46:04:ed:e5:
cb:e5:ed:40:39:34:04:bf:10:db:a6:57:e7:ca:3d:6f:7b:d6:
46:ed:52:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg1maoiKQkUcHBn5rGCNOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzkxZGRlMmM5YmRlYTM2NmNlN2VjNmM1YTgwMGM1ZGE2
MzM0NTQwHhcNMjUwODIzMDYwMDExWhcNMjUwODI0MDYwMDExWjAzMTEwLwYDVQQD
EyhhZDU1M2E4OTRmODQ2NzhmNDZkYWUwZDRkM2FmNzRkMjA1Y2I1YjA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvu99CUMUQfme2/BKY1l0PQRgpkjw
6PWbBr16ovsjQXuHl/eGTVQCwhb+P1gKrdXyJJFx3Wx0VfQpypVqaCX6iJX0v6/P
lpIqLPoJhM56GEKQjleE6CAqRV4un522k8t+2H4QM5I5dVBYheYnXxAX+FHQcyQ9
no4igTRhEMBV0r9z7CfZ6Qu/+2eRiDxr5uhi9L/pfssyHmL/es84DiB4XMflKtMj
WNzyZceuk+th1epWwntzFCgIFcncLukLOyFWStjlp6vxjk1fiMd6r3+H/qUTvVZU
2tV2GPfXUcYvNiPk8FFNXl921zB3IJ8iyNr7G762vvO9Yw/ZgyHoniGSPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1VOolPhGePRtrg1NOvdNIFy1sGMB8GA1UdIwQY
MBaAFFR5Hd4sm96jZs5+xsWoAMXaYzRUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhrZDNpeWIzcU5tem43R3hhZ0F4ZHBqTkZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8xN2U1NjctOWU0NC00NDRhLWFjNjQt
MThiMzRiZWE5YjA2LzEvVkhrZDNpeWIzcU5tem43R3hhZ0F4ZHBqTkZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8xN2U1NjctOWU0NC00NDRhLWFjNjQtMThiMzRiZWE5YjA2
LzEvVkhrZDNpeWIzcU5tem43R3hhZ0F4ZHBqTkZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFenNm9O/
hQo1JLwXJWXPms7j9ach344eQVyrB4M6Xd5qPx8ElAplDHliXWSEgpGkMgQ74wJo
nY2RwSl03VENXKNtdLr/HDUueftt70M67EylxHy8qZV78psm+Z2aOJllF+x7Y8T1
aWp6XTE5vq/dYEzOgbVdVstXFyDe0NFbZxrBmb6E6R5mMF39PzVW/KCTVwud46NZ
bRjD7ZgIqrZCtsK0ZHPX/1yO8k7jqPLDhxLqkdm8T/oPs722dlfIxUNxyBIC1s57
gEkshJF8TbGGAwR7PizxRAfMfyFTBRyDbJ4OvEoVzx5GBO3ly+XtQDk0BL8Q26ZX
58o9b3vWRu1SAg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:35:54 2025 by rpki-client