Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
File: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft (raw, json)
Hash identifier: yzuwt23RlYyZOhvF1MliUAlsy6hQp5cE5dGAsMB7pl0=
Subject key identifier: A5:4D:DC:1A:17:16:75:1F:C7:63:46:89:4E:A9:63:B8:AA:51:4C:41
Authority key identifier: 56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
Certificate issuer: /CN=561c7ccc52376787374092eafac2623e0571a81e
Certificate serial: 0198D705854C01A3990B57168CD4CF4F150E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
Manifest number: 1133
Signing time: Sat 23 Aug 2025 13:01:59 +0000
Manifest this update: Sat 23 Aug 2025 13:01:59 +0000
Manifest next update: Sun 24 Aug 2025 13:01:59 +0000
Files and hashes: 1: HGBJjgjbxKOwS-tzE8qO9Sb0DTk.roa (hash: IycrXxPRq8sHYUqWekjaODjaqQ8VZx13yD5H8Pnu6n8=)
2: Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl (hash: V8Cf9CxrCZmJexebQ0Y/Q/IxWtP/J7tUbU5FlpfZKy8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d7:05:85:4c:01:a3:99:0b:57:16:8c:d4:cf:4f:15:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=561c7ccc52376787374092eafac2623e0571a81e
Validity
Not Before: Aug 23 13:01:59 2025 GMT
Not After : Aug 24 13:01:59 2025 GMT
Subject: CN=a54ddc1a1716751fc76346894ea963b8aa514c41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:4d:b1:ef:9d:a1:09:3a:f3:1b:41:26:5d:05:
ac:53:21:81:96:cd:8b:87:e5:65:a9:ad:52:f4:5e:
dc:c6:b0:5e:02:0f:6d:c5:48:33:4b:55:e0:4c:a0:
6a:29:42:18:93:2f:4b:30:d2:dd:7c:fc:15:47:f9:
96:fb:c9:51:a8:f6:33:85:56:47:9f:27:22:17:2f:
7c:6a:a0:b8:eb:04:b0:d8:ff:a1:8d:ac:6e:6b:86:
27:d7:ae:ab:1c:12:35:a3:a0:18:37:f7:de:15:fb:
2e:2b:8d:28:cc:76:26:59:dc:28:e5:3b:a2:05:9c:
7e:fa:27:cb:ea:74:21:78:9f:4d:fa:48:f9:80:11:
e9:ae:65:9a:6c:8c:69:96:21:df:0a:80:22:98:f6:
1e:5c:3f:9d:ff:0b:ab:75:3e:d7:68:5d:8f:5e:57:
d7:35:2c:a7:0a:b3:55:7e:33:d8:65:79:93:ee:83:
88:6a:e2:30:83:55:ce:69:5d:66:35:f6:f2:02:b9:
db:7d:43:af:7f:ba:26:df:68:7d:28:ea:a2:22:b2:
81:9f:4d:27:3d:ba:62:7b:74:04:e2:a1:65:db:70:
5c:dc:2e:32:a4:a2:81:cd:4d:f9:ef:f1:15:14:85:
cb:46:07:72:1a:99:20:e4:3b:4e:59:d3:43:f4:be:
da:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:4D:DC:1A:17:16:75:1F:C7:63:46:89:4E:A9:63:B8:AA:51:4C:41
X509v3 Authority Key Identifier:
keyid:56:1C:7C:CC:52:37:67:87:37:40:92:EA:FA:C2:62:3E:05:71:A8:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/dca257-d163-4ed9-94ad-c170091283eb/1/Vhx8zFI3Z4c3QJLq-sJiPgVxqB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:36:a9:2f:f5:96:c2:71:0e:95:01:ee:f6:bd:42:99:22:0e:
5c:23:93:fb:b7:5e:5d:3a:d1:b1:7b:9f:91:ce:7d:94:3f:73:
75:a9:fd:30:b2:96:e1:4a:ef:61:00:10:ea:65:69:fd:82:bd:
31:f4:c5:bc:6a:05:97:c2:75:e9:4e:4d:bf:3c:ce:37:78:99:
f9:35:79:ba:17:37:b9:01:38:19:1b:e9:8b:e6:7a:de:74:6f:
c7:85:1a:0e:f7:11:d0:8d:a6:f7:16:21:ce:80:2f:c4:68:a5:
47:37:80:d2:10:60:16:9c:91:06:0c:6e:f7:2c:84:98:cf:e0:
8f:3f:c4:86:76:ec:6a:70:fb:b1:64:cc:cc:f4:05:c7:96:8c:
73:e3:a0:97:84:40:be:b4:b9:48:c7:d3:fc:a4:fe:91:42:48:
29:29:0e:e7:7e:18:ed:0d:85:51:93:19:58:f2:b2:21:06:60:
cb:ee:31:85:9c:38:f3:bd:92:3e:6b:c3:94:44:f7:18:e9:e6:
aa:1e:5d:bb:e1:f4:56:56:8e:d8:9c:f9:87:d2:33:de:5d:c4:
e7:3c:35:09:5e:e5:31:22:53:50:fa:dc:2e:75:af:47:97:cd:
63:47:22:c3:eb:b9:af:3e:89:ca:13:02:d4:6e:f4:85:fd:f9:
fd:52:9c:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjXBYVMAaOZC1cWjNTPTxUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MWM3Y2NjNTIzNzY3ODczNzQwOTJlYWZhYzI2MjNlMDU3
MWE4MWUwHhcNMjUwODIzMTMwMTU5WhcNMjUwODI0MTMwMTU5WjAzMTEwLwYDVQQD
EyhhNTRkZGMxYTE3MTY3NTFmYzc2MzQ2ODk0ZWE5NjNiOGFhNTE0YzQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz02x752hCTrzG0EmXQWsUyGBls2L
h+Vlqa1S9F7cxrBeAg9txUgzS1XgTKBqKUIYky9LMNLdfPwVR/mW+8lRqPYzhVZH
nyciFy98aqC46wSw2P+hjaxua4Yn166rHBI1o6AYN/feFfsuK40ozHYmWdwo5Tui
BZx++ifL6nQheJ9N+kj5gBHprmWabIxpliHfCoAimPYeXD+d/wurdT7XaF2PXlfX
NSynCrNVfjPYZXmT7oOIauIwg1XOaV1mNfbyArnbfUOvf7om32h9KOqiIrKBn00n
Pbpie3QE4qFl23Bc3C4ypKKBzU357/EVFIXLRgdyGpkg5DtOWdND9L7akwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVN3BoXFnUfx2NGiU6pY7iqUUxBMB8GA1UdIwQY
MBaAFFYcfMxSN2eHN0CS6vrCYj4FcageMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kY2EyNTctZDE2My00ZWQ5LTk0YWQt
YzE3MDA5MTI4M2ViLzEvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kY2EyNTctZDE2My00ZWQ5LTk0YWQtYzE3MDA5MTI4M2Vi
LzEvVmh4OHpGSTNaNGMzUUpMcS1zSmlQZ1Z4cUI0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAejapL/WW
wnEOlQHu9r1CmSIOXCOT+7deXTrRsXufkc59lD9zdan9MLKW4UrvYQAQ6mVp/YK9
MfTFvGoFl8J16U5NvzzON3iZ+TV5uhc3uQE4GRvpi+Z63nRvx4UaDvcR0I2m9xYh
zoAvxGilRzeA0hBgFpyRBgxu9yyEmM/gjz/EhnbsanD7sWTMzPQFx5aMc+Ogl4RA
vrS5SMfT/KT+kUJIKSkO534Y7Q2FUZMZWPKyIQZgy+4xhZw4872SPmvDlET3GOnm
qh5du+H0VlaO2Jz5h9Iz3l3E5zw1CV7lMSJTUPrcLnWvR5fNY0ciw+u5rz6JyhMC
1G70hf35/VKc2Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 19:14:51 2025 by rpki-client