Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
File: VtZBSGvcmNSn3gkopC19aOYBXzA.mft (raw, json)
Hash identifier: cvhGdsLeaAtyYHbxhHS8QC7fbq0U0Qde/jUkL8KEqqA=
Subject key identifier: 1F:7C:DA:17:F1:BB:B4:2C:F4:A8:D4:FF:03:B6:34:A6:F0:3A:F6:9B
Authority key identifier: 56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
Certificate issuer: /CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Certificate serial: 0198D54E3A36A3AF5D857CF6878F198A65C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
Manifest number: 038F
Signing time: Sat 23 Aug 2025 05:02:10 +0000
Manifest this update: Sat 23 Aug 2025 05:02:10 +0000
Manifest next update: Sun 24 Aug 2025 05:02:10 +0000
Files and hashes: 1: VtZBSGvcmNSn3gkopC19aOYBXzA.crl (hash: GeKSuai9mzTP6LjC1ZoqBRAbj80i/XzLebwqL2JHSgE=)
2: WUha7UrsdgndZN2i8LKGRI6xHz0.roa (hash: kPsS0TLTx3ZvH9JmthAMYgEGSgO6LHxlTkfSHRuTvZc=)
3: tVvHzq-R7jZQQO6A9FymJKjrqpM.roa (hash: 1HGSFKhnYNZwKzgU5CzjrfquOgI0d7tnitDk5qSfGuA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:3a:36:a3:af:5d:85:7c:f6:87:8f:19:8a:65:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d641486bdc98d4a7de0928a42d7d68e6015f30
Validity
Not Before: Aug 23 05:02:10 2025 GMT
Not After : Aug 24 05:02:10 2025 GMT
Subject: CN=1f7cda17f1bbb42cf4a8d4ff03b634a6f03af69b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:38:1c:5e:a0:9e:16:7d:a0:d2:59:5c:d0:e4:
ef:71:ca:f6:0e:61:f3:6f:7e:f1:cc:4d:ee:9c:fe:
ef:c2:0f:ea:5e:3e:3b:b9:e8:26:74:31:73:13:66:
8a:2b:f9:6e:15:7a:30:07:9b:2f:63:5f:e6:11:8f:
b1:12:97:a9:ea:06:1a:41:c2:cc:c3:76:4e:3e:1a:
e8:63:f8:e6:2b:30:b5:86:f1:3f:17:28:0c:80:69:
5f:b0:7b:9f:12:71:ba:64:98:b2:de:51:81:0f:8f:
2b:50:06:e9:4a:60:0d:e7:5f:6b:45:63:f1:9d:cb:
94:ec:ef:00:35:e3:f0:3d:37:e1:ad:c5:ff:00:cd:
ea:96:e6:2b:a1:47:b5:c2:5c:fc:d8:5b:3f:e7:83:
e9:8c:0b:1b:1f:1d:34:d3:f3:40:eb:ca:eb:07:90:
8e:f0:9d:2e:61:ed:d0:fe:d8:98:de:81:00:c1:67:
85:41:d0:25:77:a2:24:2e:cc:b5:08:36:29:30:50:
75:10:a1:37:88:7b:a5:4f:d0:67:7c:61:3a:3d:05:
18:78:d1:13:2d:5f:6e:8b:35:c3:e5:ce:7e:d2:cf:
86:e4:7d:65:53:55:3f:af:40:34:15:64:15:10:d8:
d9:b6:47:5a:6f:c2:ce:c0:50:8e:61:26:e0:fd:16:
98:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:7C:DA:17:F1:BB:B4:2C:F4:A8:D4:FF:03:B6:34:A6:F0:3A:F6:9B
X509v3 Authority Key Identifier:
keyid:56:D6:41:48:6B:DC:98:D4:A7:DE:09:28:A4:2D:7D:68:E6:01:5F:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtZBSGvcmNSn3gkopC19aOYBXzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b65126-31cb-4ae6-beca-e3e04bd4f242/1/VtZBSGvcmNSn3gkopC19aOYBXzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:c0:3c:88:a4:11:90:30:55:4e:59:ac:dc:c3:54:88:06:dd:
9a:e2:36:38:c5:8f:48:74:08:9a:29:8a:d7:45:15:d2:60:a3:
ab:13:03:e7:fb:6f:94:a6:cf:5f:85:c0:6d:4b:61:8e:32:a4:
7e:05:f7:94:87:1b:97:f5:2e:8e:dd:ed:6e:ba:b4:21:3a:d0:
11:ba:19:72:a6:ee:3e:dd:53:f1:5d:46:e8:1d:77:00:22:27:
71:37:2c:dd:b6:3c:a7:5e:71:cc:12:c0:33:b4:19:e4:38:d8:
4c:d9:8a:87:d4:4c:d8:81:cd:80:68:25:d4:50:4b:db:79:17:
de:32:89:f8:8e:ef:a2:42:73:60:e0:c2:8b:6f:e2:87:80:a7:
12:96:68:d2:cc:3d:5d:c9:d6:ae:11:a0:3b:ef:30:0d:37:86:
a6:e6:b9:99:80:b3:dd:81:07:22:34:42:b1:af:e8:20:6b:c1:
22:8f:3a:41:b5:a8:f8:e1:ec:63:ef:f1:50:f5:36:fc:28:f2:
b1:5c:21:4c:44:9d:3e:00:b1:a8:95:92:fd:0e:d6:bc:e0:a4:
c9:e3:59:15:6c:44:47:6b:09:c2:1e:65:29:06:65:bd:57:86:
34:8f:d5:83:a4:ac:ed:91:e7:a2:a2:41:c4:c0:6f:4a:c3:d3:
9c:05:e3:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTjo2o69dhXz2h48ZimXIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZDY0MTQ4NmJkYzk4ZDRhN2RlMDkyOGE0MmQ3ZDY4ZTYw
MTVmMzAwHhcNMjUwODIzMDUwMjEwWhcNMjUwODI0MDUwMjEwWjAzMTEwLwYDVQQD
EygxZjdjZGExN2YxYmJiNDJjZjRhOGQ0ZmYwM2I2MzRhNmYwM2FmNjliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8TgcXqCeFn2g0llc0OTvccr2DmHz
b37xzE3unP7vwg/qXj47uegmdDFzE2aKK/luFXowB5svY1/mEY+xEpep6gYaQcLM
w3ZOPhroY/jmKzC1hvE/FygMgGlfsHufEnG6ZJiy3lGBD48rUAbpSmAN519rRWPx
ncuU7O8ANePwPTfhrcX/AM3qluYroUe1wlz82Fs/54PpjAsbHx000/NA68rrB5CO
8J0uYe3Q/tiY3oEAwWeFQdAld6IkLsy1CDYpMFB1EKE3iHulT9BnfGE6PQUYeNET
LV9uizXD5c5+0s+G5H1lU1U/r0A0FWQVENjZtkdab8LOwFCOYSbg/RaYxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB982hfxu7Qs9KjU/wO2NKbwOvabMB8GA1UdIwQY
MBaAFFbWQUhr3JjUp94JKKQtfWjmAV8wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iNjUxMjYtMzFjYi00YWU2LWJlY2Et
ZTNlMDRiZDRmMjQyLzEvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iNjUxMjYtMzFjYi00YWU2LWJlY2EtZTNlMDRiZDRmMjQy
LzEvVnRaQlNHdmNtTlNuM2drb3BDMTlhT1lCWHpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAcA8iKQR
kDBVTlms3MNUiAbdmuI2OMWPSHQImimK10UV0mCjqxMD5/tvlKbPX4XAbUthjjKk
fgX3lIcbl/Uujt3tbrq0ITrQEboZcqbuPt1T8V1G6B13ACIncTcs3bY8p15xzBLA
M7QZ5DjYTNmKh9RM2IHNgGgl1FBL23kX3jKJ+I7vokJzYODCi2/ih4CnEpZo0sw9
XcnWrhGgO+8wDTeGpua5mYCz3YEHIjRCsa/oIGvBIo86QbWo+OHsY+/xUPU2/Cjy
sVwhTESdPgCxqJWS/Q7WvOCkyeNZFWxER2sJwh5lKQZlvVeGNI/Vg6Ss7ZHnoqJB
xMBvSsPTnAXjSQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:31:06 2025 by rpki-client