Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
File: VI91elbRdoDW1mkLGdnzkGGYADM.mft (raw, json)
Hash identifier: zXrznExFL4uJ/BjyFv3smEvit1p0faaWGDOmbEFOUWA=
Subject key identifier: 5C:C0:6B:B2:51:B9:2A:81:4F:37:BC:6C:33:6D:B4:DA:F9:8F:B3:BC
Authority key identifier: 54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
Certificate issuer: /CN=548f757a56d17680d6d6690b19d9f39061980033
Certificate serial: 0198D6CDD6667E491E0DF06E1C1D7C0BAF2F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
Manifest number: 10EC
Signing time: Sat 23 Aug 2025 12:01:10 +0000
Manifest this update: Sat 23 Aug 2025 12:01:10 +0000
Manifest next update: Sun 24 Aug 2025 12:01:10 +0000
Files and hashes: 1: 6_SJnfO-m7MtpNL_B9ARxP9ViqI.roa (hash: LdcfP3HEkmr8KWBN+enohwNkL/0YyHSs6bxWVW/irJI=)
2: GS0H0Drimc0sp3WE4CJI-1tpUww.roa (hash: K+fEr22QzZrMpwlikgBYkLomYyjXmKEsLjK8H0qHBus=)
3: VI91elbRdoDW1mkLGdnzkGGYADM.crl (hash: IaXwfD8vAGk+Pb5qsFCBgtxlluAidnpg4uYz6pZ4Km4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 12:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:d6:66:7e:49:1e:0d:f0:6e:1c:1d:7c:0b:af:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=548f757a56d17680d6d6690b19d9f39061980033
Validity
Not Before: Aug 23 12:01:10 2025 GMT
Not After : Aug 24 12:01:10 2025 GMT
Subject: CN=5cc06bb251b92a814f37bc6c336db4daf98fb3bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:56:89:48:8d:1f:08:2d:82:45:7a:12:da:9c:
dd:bc:41:50:c8:94:80:a1:a5:76:c8:5f:03:91:22:
46:ae:76:5b:02:b5:04:a9:b4:d8:11:24:4f:d7:13:
4a:2e:63:2f:b6:4a:b4:6e:ad:90:b5:75:88:a3:cc:
55:45:db:c8:95:81:8e:ab:f1:bb:2a:82:d7:7e:78:
77:18:78:bf:ef:2b:26:89:30:42:4a:4e:9b:c9:df:
57:e1:11:61:0c:4b:17:8a:ee:0b:1b:79:ce:cd:0a:
cb:ac:ce:1f:9f:13:17:c8:5f:52:78:5d:99:93:4d:
c4:0e:c3:f6:ea:8a:74:b0:48:9d:2c:b3:46:08:62:
bf:87:c6:97:cc:ed:cc:64:bb:cb:77:88:4e:85:5c:
a3:9a:4f:d2:40:c0:38:e5:fc:3d:bf:ef:76:32:fe:
69:21:44:46:04:a0:06:47:ed:1d:cc:25:e5:07:c1:
2f:c0:a1:e2:97:f8:16:f6:fd:6a:82:99:ec:28:1f:
70:8e:fb:94:82:7c:43:a8:c2:d9:9d:09:61:cd:03:
20:83:64:26:4d:6f:f6:53:47:7f:da:08:cd:f9:a8:
15:84:7b:22:2d:dd:0d:50:cf:47:9d:82:36:d5:91:
e2:43:89:4b:e2:35:ec:cb:63:53:f4:d4:aa:08:ff:
7f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:C0:6B:B2:51:B9:2A:81:4F:37:BC:6C:33:6D:B4:DA:F9:8F:B3:BC
X509v3 Authority Key Identifier:
keyid:54:8F:75:7A:56:D1:76:80:D6:D6:69:0B:19:D9:F3:90:61:98:00:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VI91elbRdoDW1mkLGdnzkGGYADM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/cf93ac-dedd-4130-b365-b8e6566a279a/1/VI91elbRdoDW1mkLGdnzkGGYADM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:5d:ac:c3:15:82:ec:79:2b:5e:f7:1e:e6:c6:cd:1a:9e:a3:
b9:1d:f0:b6:4e:c4:f6:a9:57:06:fc:f0:1d:a9:da:bf:a1:c9:
e8:c9:d8:ee:77:21:86:fe:46:41:a8:a0:41:4a:53:7f:b3:59:
17:95:2f:b9:93:50:6c:46:3a:ce:48:0f:34:77:f7:d2:68:b9:
24:0e:f0:40:5b:ae:fe:2d:1e:64:e8:8a:b0:32:4e:3a:52:2b:
6c:79:62:0b:52:08:d7:16:4f:ca:52:c2:52:e1:a8:f7:1a:f5:
9d:a5:10:a4:61:3f:cc:c2:82:3a:76:10:38:62:43:1b:2a:06:
f9:ab:83:b0:d6:c0:80:66:d9:43:f0:9a:e4:0d:3b:b9:91:56:
a1:38:36:1e:c0:6d:57:df:57:c0:33:e9:0b:91:5f:9e:de:a1:
63:6f:b2:f5:25:41:09:25:b5:07:dd:16:c0:5c:e0:58:80:76:
87:77:30:54:8e:f5:c9:0d:82:c5:96:34:7d:33:1b:f9:78:22:
75:d4:6a:7a:84:1b:49:db:8f:75:76:c2:d7:d9:61:fd:fd:53:
15:e8:1c:dd:05:d2:7f:f3:b6:41:b7:16:71:3e:65:9d:9d:ca:
c6:0d:dc:ec:07:09:d0:99:84:19:bc:e7:5d:78:77:b2:c8:02:
19:6f:be:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzdZmfkkeDfBuHB18C68vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0OGY3NTdhNTZkMTc2ODBkNmQ2NjkwYjE5ZDlmMzkwNjE5
ODAwMzMwHhcNMjUwODIzMTIwMTEwWhcNMjUwODI0MTIwMTEwWjAzMTEwLwYDVQQD
Eyg1Y2MwNmJiMjUxYjkyYTgxNGYzN2JjNmMzMzZkYjRkYWY5OGZiM2JjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3VaJSI0fCC2CRXoS2pzdvEFQyJSA
oaV2yF8DkSJGrnZbArUEqbTYESRP1xNKLmMvtkq0bq2QtXWIo8xVRdvIlYGOq/G7
KoLXfnh3GHi/7ysmiTBCSk6byd9X4RFhDEsXiu4LG3nOzQrLrM4fnxMXyF9SeF2Z
k03EDsP26op0sEidLLNGCGK/h8aXzO3MZLvLd4hOhVyjmk/SQMA45fw9v+92Mv5p
IURGBKAGR+0dzCXlB8EvwKHil/gW9v1qgpnsKB9wjvuUgnxDqMLZnQlhzQMgg2Qm
TW/2U0d/2gjN+agVhHsiLd0NUM9HnYI21ZHiQ4lL4jXsy2NT9NSqCP9/CwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFzAa7JRuSqBTze8bDNttNr5j7O8MB8GA1UdIwQY
MBaAFFSPdXpW0XaA1tZpCxnZ85BhmAAzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9jZjkzYWMtZGVkZC00MTMwLWIzNjUt
YjhlNjU2NmEyNzlhLzEvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9jZjkzYWMtZGVkZC00MTMwLWIzNjUtYjhlNjU2NmEyNzlh
LzEvVkk5MWVsYlJkb0RXMW1rTEdkbnprR0dZQURNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS12swxWC
7HkrXvce5sbNGp6juR3wtk7E9qlXBvzwHanav6HJ6MnY7nchhv5GQaigQUpTf7NZ
F5UvuZNQbEY6zkgPNHf30mi5JA7wQFuu/i0eZOiKsDJOOlIrbHliC1II1xZPylLC
UuGo9xr1naUQpGE/zMKCOnYQOGJDGyoG+auDsNbAgGbZQ/Ca5A07uZFWoTg2HsBt
V99XwDPpC5Ffnt6hY2+y9SVBCSW1B90WwFzgWIB2h3cwVI71yQ2CxZY0fTMb+Xgi
ddRqeoQbSduPdXbC19lh/f1TFegc3QXSf/O2QbcWcT5lnZ3Kxg3c7AcJ0JmEGbzn
XXh3ssgCGW++Dw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 17:14:05 2025 by rpki-client