Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
File: VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft (raw, json)
Hash identifier: i6qtaqzJbwti81FjpnoT5qQ37gkaPoCUfQAgYT0Dj04=
Subject key identifier: B1:D9:3B:2F:5F:34:20:71:BA:50:D7:90:54:DF:64:36:A1:3E:F4:7C
Authority key identifier: 54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
Certificate issuer: /CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Certificate serial: 0198D4E0B8E4C350FEA58DA6A508F239F098
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
Manifest number: 12DD
Signing time: Sat 23 Aug 2025 03:02:33 +0000
Manifest this update: Sat 23 Aug 2025 03:02:33 +0000
Manifest next update: Sun 24 Aug 2025 03:02:33 +0000
Files and hashes: 1: OUuP-6YCe14zgkfTQMdJLc2r9MQ.roa (hash: Aex7iaImK8VF1F7ddVhsOVcjsTFE1aBCNKfli39IJNE=)
2: VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl (hash: z0UtAMFrZlr7co4cfsF/ciesGvnVHlCKcmahLPVpoc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:02:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:e0:b8:e4:c3:50:fe:a5:8d:a6:a5:08:f2:39:f0:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54e660b48c8f04c9a32dcdea1cfeee5180446bd9
Validity
Not Before: Aug 23 03:02:33 2025 GMT
Not After : Aug 24 03:02:33 2025 GMT
Subject: CN=b1d93b2f5f342071ba50d79054df6436a13ef47c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:3e:b0:5f:25:e8:ba:94:f3:31:a6:5c:98:
94:76:f1:30:09:00:2e:ac:8e:53:64:34:f7:6e:08:
7b:e2:b4:96:11:8f:9c:20:9d:74:af:93:3d:67:4f:
de:27:d5:46:5f:10:bb:7e:d9:d4:39:57:f2:91:dc:
b8:89:a9:6e:73:dc:14:1d:67:a3:cc:df:7d:00:00:
90:84:e9:57:af:40:75:50:5d:43:5e:91:cc:ea:38:
ae:fc:59:24:33:d5:3c:3f:72:f3:05:c9:06:22:05:
7c:a5:ea:21:1e:05:4a:41:53:b7:81:b6:0d:af:4e:
ed:d2:0e:41:ca:48:d9:53:27:e1:e5:ee:2b:97:77:
d1:ed:97:3b:36:b5:f7:16:38:65:b9:88:b3:a9:82:
05:94:21:37:2d:d3:de:04:5c:2a:db:aa:36:c4:35:
bb:ea:b5:37:a7:db:02:85:ad:47:73:78:e0:ca:db:
51:2e:0f:26:a1:02:0c:1f:28:c1:fc:3e:0c:58:d7:
8a:ee:e2:02:6e:9c:5f:9e:a4:13:a0:dc:3d:8f:09:
3c:88:e3:fd:fc:7f:7a:30:79:f7:7a:f8:b5:41:f1:
01:ab:30:55:95:55:e9:72:7b:61:fa:26:6c:f6:60:
05:09:da:3a:ee:4a:72:18:7a:fc:eb:8d:93:8c:44:
a0:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B1:D9:3B:2F:5F:34:20:71:BA:50:D7:90:54:DF:64:36:A1:3E:F4:7C
X509v3 Authority Key Identifier:
keyid:54:E6:60:B4:8C:8F:04:C9:A3:2D:CD:EA:1C:FE:EE:51:80:44:6B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VOZgtIyPBMmjLc3qHP7uUYBEa9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/92e76f-16c3-45d2-8647-a89abe45edf6/1/VOZgtIyPBMmjLc3qHP7uUYBEa9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:53:8c:a2:01:d6:b6:ba:89:23:9c:7d:31:fe:29:8a:c1:cc:
ce:5a:f5:91:8e:0a:43:8b:cc:88:09:40:e1:6d:fa:79:5c:c7:
47:71:48:58:da:5a:1d:9f:3a:9a:01:a9:32:0f:09:0d:4b:fb:
bc:ef:16:33:5e:1f:b5:88:36:80:04:31:05:27:e6:82:0a:ce:
40:b7:3e:99:2b:f8:6a:b7:34:90:24:12:c9:4a:7e:03:37:e4:
fb:de:b6:1e:86:68:bd:a8:70:d5:cc:c9:22:b0:9e:19:98:75:
24:50:b2:67:fb:e1:8b:af:95:79:5d:8a:84:f1:10:f2:6f:9c:
a2:7a:df:fc:d9:0d:0a:de:a4:30:b4:9c:56:0f:98:97:23:b9:
f9:d6:43:2c:e3:bb:42:b1:81:4c:3a:90:bd:50:14:48:da:cd:
8b:4f:9b:4b:71:73:2d:15:b9:3c:6a:f7:3d:fc:63:c6:b9:f8:
43:dd:e1:75:d6:77:14:db:cf:62:fb:c0:0c:32:b0:db:a4:20:
33:3a:12:05:4b:2c:0c:4d:28:a7:cd:de:af:6d:87:bd:c8:ff:
e9:22:2a:74:27:f3:a6:ae:9f:d8:38:8a:0f:32:53:d5:b1:51:
83:1a:4b:ae:87:b6:5b:14:8c:1f:21:b4:16:dc:60:13:a1:e6:
54:f1:42:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU4Ljkw1D+pY2mpQjyOfCYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZTY2MGI0OGM4ZjA0YzlhMzJkY2RlYTFjZmVlZTUxODA0
NDZiZDkwHhcNMjUwODIzMDMwMjMzWhcNMjUwODI0MDMwMjMzWjAzMTEwLwYDVQQD
EyhiMWQ5M2IyZjVmMzQyMDcxYmE1MGQ3OTA1NGRmNjQzNmExM2VmNDdjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rg+sF8l6LqU8zGmXJiUdvEwCQAu
rI5TZDT3bgh74rSWEY+cIJ10r5M9Z0/eJ9VGXxC7ftnUOVfykdy4ialuc9wUHWej
zN99AACQhOlXr0B1UF1DXpHM6jiu/FkkM9U8P3LzBckGIgV8peohHgVKQVO3gbYN
r07t0g5BykjZUyfh5e4rl3fR7Zc7NrX3FjhluYizqYIFlCE3LdPeBFwq26o2xDW7
6rU3p9sCha1Hc3jgyttRLg8moQIMHyjB/D4MWNeK7uICbpxfnqQToNw9jwk8iOP9
/H96MHn3evi1QfEBqzBVlVXpcnth+iZs9mAFCdo67kpyGHr8642TjESghwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLHZOy9fNCBxulDXkFTfZDahPvR8MB8GA1UdIwQY
MBaAFFTmYLSMjwTJoy3N6hz+7lGARGvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk9aZ3RJeVBCTW1qTGMzcUhQN3VVWUJFYTlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85MmU3NmYtMTZjMy00NWQyLTg2NDct
YTg5YWJlNDVlZGY2LzEvVk9aZ3RJeVBCTW1qTGMzcUhQN3VVWUJFYTlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85MmU3NmYtMTZjMy00NWQyLTg2NDctYTg5YWJlNDVlZGY2
LzEvVk9aZ3RJeVBCTW1qTGMzcUhQN3VVWUJFYTlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJFOMogHW
trqJI5x9Mf4pisHMzlr1kY4KQ4vMiAlA4W36eVzHR3FIWNpaHZ86mgGpMg8JDUv7
vO8WM14ftYg2gAQxBSfmggrOQLc+mSv4arc0kCQSyUp+Azfk+962HoZovahw1czJ
IrCeGZh1JFCyZ/vhi6+VeV2KhPEQ8m+conrf/NkNCt6kMLScVg+YlyO5+dZDLOO7
QrGBTDqQvVAUSNrNi0+bS3FzLRW5PGr3Pfxjxrn4Q93hddZ3FNvPYvvADDKw26Qg
MzoSBUssDE0op83er22Hvcj/6SIqdCfzpq6f2DiKDzJT1bFRgxpLroe2WxSMHyG0
FtxgE6HmVPFCew==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:13:29 2025 by rpki-client