Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
File: vJxAOtAH4qJCprCQYaPBo2CmTVo.mft (raw, json)
Hash identifier: PODb2NBmQ80a7VLWUTaqfc4+/PpTEGA1MkNHoYz9bNQ=
Subject key identifier: 85:70:58:55:A7:22:0C:25:C4:1E:8E:8B:B5:F8:F2:FE:A9:B3:FD:1F
Authority key identifier: BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
Certificate issuer: /CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Certificate serial: 0198D629826BC9CCFD8BF04D1157113F95A8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
Manifest number: 0892
Signing time: Sat 23 Aug 2025 09:01:41 +0000
Manifest this update: Sat 23 Aug 2025 09:01:41 +0000
Manifest next update: Sun 24 Aug 2025 09:01:41 +0000
Files and hashes: 1: DI4aL2VDjSmaj-T6WF7qWyVxEy8.roa (hash: irLOs0EfjvwV0yEqJPJZBOPh+tRGrPv6PzJ4eB+9FwU=)
2: c4jk7gKONHNQDGzC6dsv2q8s7vI.roa (hash: a6L74Wo+bnsgWub76o3PYF/fgomhfzvN3TtRHLCaboU=)
3: tPkC9g1rh0B-WDtzyBxNorqbjqo.roa (hash: 3UTyjNkmps78kxWwCRVUmx8qZWeL7ho0lCKlGDqKCwQ=)
4: vJxAOtAH4qJCprCQYaPBo2CmTVo.crl (hash: EJ9QAdZ+3AmX0LMgY2nMQWJm8JSPgPNaTNCZIOkH25M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:29:82:6b:c9:cc:fd:8b:f0:4d:11:57:11:3f:95:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9c403ad007e2a242a6b09061a3c1a360a64d5a
Validity
Not Before: Aug 23 09:01:41 2025 GMT
Not After : Aug 24 09:01:41 2025 GMT
Subject: CN=85705855a7220c25c41e8e8bb5f8f2fea9b3fd1f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:53:5e:5e:35:da:01:a7:8e:2b:4c:7f:22:51:
cb:66:ef:17:de:e5:9b:32:ba:53:7e:a4:ed:f4:d2:
42:82:85:42:48:9a:97:9b:42:7e:bf:66:0a:71:d2:
68:8f:8f:90:03:34:1e:30:d0:b9:ef:4c:fc:34:66:
23:8b:a6:2c:49:44:10:5e:9d:31:c4:c5:86:50:86:
2b:68:0b:14:9b:f5:57:4b:a1:b6:96:f1:67:8d:b2:
b6:14:8a:1d:b0:8d:80:a1:6f:1f:c5:19:d1:c0:90:
8c:76:df:ce:64:93:80:e6:8c:a6:b8:18:65:74:22:
ac:f5:90:2c:1b:4a:d7:a4:c1:ff:e2:0f:67:2e:f4:
cf:c5:15:00:72:73:be:48:dd:c4:cf:ef:0b:61:0d:
1c:fc:48:45:45:d8:1d:14:b8:3b:73:53:61:67:70:
32:0e:bf:3b:0a:31:d4:08:83:f0:a0:24:10:00:12:
40:03:26:bc:eb:f0:74:06:10:d3:c3:9e:3a:86:8a:
a5:ef:45:f8:b7:d4:0c:93:cb:57:03:7f:07:04:46:
cf:57:8b:b6:82:9c:1a:2d:83:09:3b:39:f1:24:2f:
af:47:2f:c0:90:02:05:5e:eb:17:70:74:db:4b:c8:
00:d8:e3:f2:0e:32:7d:13:f2:b5:41:03:96:c9:fe:
88:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:70:58:55:A7:22:0C:25:C4:1E:8E:8B:B5:F8:F2:FE:A9:B3:FD:1F
X509v3 Authority Key Identifier:
keyid:BC:9C:40:3A:D0:07:E2:A2:42:A6:B0:90:61:A3:C1:A3:60:A6:4D:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJxAOtAH4qJCprCQYaPBo2CmTVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/4ae4c7-f286-4c6e-9514-88e6816271f7/1/vJxAOtAH4qJCprCQYaPBo2CmTVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:5c:54:5c:6e:0d:50:16:f2:62:e8:3b:21:5e:90:0d:fa:ab:
44:4e:be:fd:1d:18:ef:08:a3:a6:5c:18:ed:69:e5:1a:fc:73:
41:89:be:59:31:a6:d5:7b:ab:e1:cc:12:b2:80:19:a0:08:a9:
0b:52:e4:49:70:90:44:c6:bb:53:e0:43:d4:68:ea:91:af:0a:
58:fa:e6:1f:da:92:24:e3:d4:2b:3d:aa:ee:de:e3:a4:9f:39:
02:d7:5d:83:af:f6:6c:83:59:b3:9e:45:3c:47:92:11:cc:0e:
24:f5:7a:b6:ff:ea:e1:6c:13:00:d3:ce:49:69:e8:66:b8:49:
5f:dc:ed:62:19:cc:5e:c5:8d:05:ad:f6:3e:c2:b1:b8:49:1c:
8f:f3:ea:bd:fe:bc:b0:98:39:f6:81:b5:e3:bb:d9:f3:36:de:
22:b3:41:6e:eb:95:db:fe:e6:a3:89:1f:b2:7e:a2:02:46:0e:
3e:62:bc:b7:6e:a1:da:bc:6e:3c:0a:d6:20:0b:f6:8e:ff:09:
81:df:a0:ba:00:5e:87:70:5a:64:e8:40:97:15:23:86:55:7f:
3d:de:49:5f:64:25:1d:3c:4d:a0:d3:73:a5:f5:f8:4e:10:f2:
4d:19:40:58:d2:a8:83:d3:46:fd:7a:a5:ed:fc:b0:7c:55:16:
96:df:f0:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWKYJrycz9i/BNEVcRP5WoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWM0MDNhZDAwN2UyYTI0MmE2YjA5MDYxYTNjMWEzNjBh
NjRkNWEwHhcNMjUwODIzMDkwMTQxWhcNMjUwODI0MDkwMTQxWjAzMTEwLwYDVQQD
Eyg4NTcwNTg1NWE3MjIwYzI1YzQxZThlOGJiNWY4ZjJmZWE5YjNmZDFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1NeXjXaAaeOK0x/IlHLZu8X3uWb
MrpTfqTt9NJCgoVCSJqXm0J+v2YKcdJoj4+QAzQeMNC570z8NGYji6YsSUQQXp0x
xMWGUIYraAsUm/VXS6G2lvFnjbK2FIodsI2AoW8fxRnRwJCMdt/OZJOA5oymuBhl
dCKs9ZAsG0rXpMH/4g9nLvTPxRUAcnO+SN3Ez+8LYQ0c/EhFRdgdFLg7c1NhZ3Ay
Dr87CjHUCIPwoCQQABJAAya86/B0BhDTw546hoql70X4t9QMk8tXA38HBEbPV4u2
gpwaLYMJOznxJC+vRy/AkAIFXusXcHTbS8gA2OPyDjJ9E/K1QQOWyf6ILQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVwWFWnIgwlxB6Oi7X48v6ps/0fMB8GA1UdIwQY
MBaAFLycQDrQB+KiQqawkGGjwaNgpk1aMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQt
ODhlNjgxNjI3MWY3LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS80YWU0YzctZjI4Ni00YzZlLTk1MTQtODhlNjgxNjI3MWY3
LzEvdkp4QU90QUg0cUpDcHJDUVlhUEJvMkNtVFZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd1xUXG4N
UBbyYug7IV6QDfqrRE6+/R0Y7wijplwY7WnlGvxzQYm+WTGm1Xur4cwSsoAZoAip
C1LkSXCQRMa7U+BD1Gjqka8KWPrmH9qSJOPUKz2q7t7jpJ85Atddg6/2bINZs55F
PEeSEcwOJPV6tv/q4WwTANPOSWnoZrhJX9ztYhnMXsWNBa32PsKxuEkcj/Pqvf68
sJg59oG147vZ8zbeIrNBbuuV2/7mo4kfsn6iAkYOPmK8t26h2rxuPArWIAv2jv8J
gd+gugBeh3BaZOhAlxUjhlV/Pd5JX2QlHTxNoNNzpfX4ThDyTRlAWNKog9NG/Xql
7fywfFUWlt/wBw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:07:11 2025 by rpki-client