Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
File: VHGK9qNvZqkZOTZKr8hkRauKbg4.mft (raw, json)
Hash identifier: Azp0IzHyRPRcVx7kfFqOTIQRYEflOzBgoYLgEH3/ScY=
Subject key identifier: A8:A1:27:30:FE:E3:4F:25:58:78:18:3F:85:26:7E:5F:6E:B2:A5:CE
Authority key identifier: 54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
Certificate issuer: /CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Certificate serial: 0197B70F0C34D640024F1FEBB8D15A086104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:46 +0000
Manifest this update: Sat 28 Jun 2025 15:01:46 +0000
Manifest next update: Sun 29 Jun 2025 15:01:46 +0000
Files and hashes: 1: E6amiYi53XMdG38KpjAggGoL-xU.roa (hash: Z2VRJf48TJk3kvh/qYBt+PTaI/amPskBYdQSciVu6xk=)
2: VHGK9qNvZqkZOTZKr8hkRauKbg4.crl (hash: DK54sA1k3oMa/8anCkQ0ds+ruYhVLDmEOT+f+C65dOg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:0c:34:d6:40:02:4f:1f:eb:b8:d1:5a:08:61:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54718af6a36f66a91939364aafc86445ab8a6e0e
Validity
Not Before: Jun 28 15:01:46 2025 GMT
Not After : Jun 29 15:01:46 2025 GMT
Subject: CN=a8a12730fee34f255878183f85267e5f6eb2a5ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:f6:70:63:6f:79:ba:a4:c9:89:89:cc:7f:e0:
77:06:d2:d1:74:df:db:30:a9:8b:b7:96:f0:de:be:
35:6c:36:ee:46:13:55:95:1d:70:86:b6:5a:89:37:
39:1d:66:bc:b7:08:95:96:d6:dc:8d:17:97:89:90:
ee:e1:a1:13:ce:c4:ad:66:c4:9e:6d:de:2c:3e:0a:
db:4d:5a:8e:c7:ad:67:22:4c:32:23:c2:f0:85:9f:
4a:8b:94:af:aa:8c:03:10:ca:28:a8:ac:fa:c4:c4:
b1:bc:4b:07:ee:a5:e2:ef:75:c1:52:f6:cb:e3:75:
0c:33:4e:08:1a:c5:76:a9:1c:da:11:ab:64:26:48:
8b:1c:3d:fd:5d:8f:f5:e7:99:f8:c3:72:1a:37:40:
e6:e3:2d:ae:fb:17:fb:92:66:8b:83:6c:92:0d:77:
11:ab:57:a2:4a:2a:8f:b3:2c:76:fc:a9:71:bf:31:
dd:5d:26:59:dd:6d:8e:5a:4f:4c:21:c4:06:f9:cd:
50:cb:31:e5:76:85:80:91:14:63:cb:ac:73:60:79:
a0:61:5e:85:93:12:d6:03:5d:39:79:b1:83:b2:67:
98:25:98:6f:85:b3:6e:f5:33:6f:17:58:89:a1:1e:
7c:ac:29:e3:c8:b6:1f:12:4c:7f:81:eb:20:c2:0c:
87:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A8:A1:27:30:FE:E3:4F:25:58:78:18:3F:85:26:7E:5F:6E:B2:A5:CE
X509v3 Authority Key Identifier:
keyid:54:71:8A:F6:A3:6F:66:A9:19:39:36:4A:AF:C8:64:45:AB:8A:6E:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHGK9qNvZqkZOTZKr8hkRauKbg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/cd2f41-59e0-4b8b-8206-bed55c47a578/1/VHGK9qNvZqkZOTZKr8hkRauKbg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:d3:03:44:39:95:7d:00:c9:bc:28:32:98:04:78:6e:29:15:
7f:4c:26:19:19:b8:fd:b7:85:61:01:52:45:f6:3d:69:b2:55:
8e:8b:bd:59:d3:4e:0b:3b:28:2e:28:3e:50:f9:86:3c:af:04:
68:f1:e2:27:e3:77:36:50:64:9f:05:b7:9d:4d:86:df:2f:ed:
5e:fb:a4:fe:9e:61:19:44:06:55:21:8c:38:41:d1:81:4b:b0:
bf:65:3d:59:59:6e:5a:7a:94:07:68:96:19:4d:a1:4d:9e:e8:
a9:ae:5b:85:5b:85:29:62:d4:3a:4a:6b:b0:81:c3:7e:f8:88:
ed:96:4c:3b:0e:bb:66:bc:61:1d:0e:d6:1d:b1:e6:66:fd:ba:
85:37:9c:cc:a7:e7:df:d9:c1:54:3c:09:4c:2b:64:63:df:d4:
9b:67:7c:66:be:71:6a:bf:9f:76:0b:ca:aa:3c:68:e7:ba:96:
8f:f3:c0:d5:40:a0:93:28:c9:51:8e:ab:eb:1f:f5:1c:7a:43:
84:9d:f8:5a:a3:ec:c0:ef:66:48:7c:87:31:9f:5b:1f:37:22:
01:af:9b:83:b3:cb:09:bd:da:43:70:a7:f4:0c:91:d9:ff:d7:
4a:c9:78:fe:dd:a2:74:27:d6:0d:c7:9a:6a:96:49:36:cf:ec:
9c:8f:9b:bc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dww01kACTx/ruNFaCGEEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzE4YWY2YTM2ZjY2YTkxOTM5MzY0YWFmYzg2NDQ1YWI4
YTZlMGUwHhcNMjUwNjI4MTUwMTQ2WhcNMjUwNjI5MTUwMTQ2WjAzMTEwLwYDVQQD
EyhhOGExMjczMGZlZTM0ZjI1NTg3ODE4M2Y4NTI2N2U1ZjZlYjJhNWNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzfZwY295uqTJiYnMf+B3BtLRdN/b
MKmLt5bw3r41bDbuRhNVlR1whrZaiTc5HWa8twiVltbcjReXiZDu4aETzsStZsSe
bd4sPgrbTVqOx61nIkwyI8LwhZ9Ki5SvqowDEMooqKz6xMSxvEsH7qXi73XBUvbL
43UMM04IGsV2qRzaEatkJkiLHD39XY/155n4w3IaN0Dm4y2u+xf7kmaLg2ySDXcR
q1eiSiqPsyx2/KlxvzHdXSZZ3W2OWk9MIcQG+c1QyzHldoWAkRRjy6xzYHmgYV6F
kxLWA105ebGDsmeYJZhvhbNu9TNvF1iJoR58rCnjyLYfEkx/gesgwgyHWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKihJzD+408lWHgYP4Umfl9usqXOMB8GA1UdIwQY
MBaAFFRxivajb2apGTk2Sq/IZEWrim4OMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYt
YmVkNTVjNDdhNTc4LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy9jZDJmNDEtNTllMC00YjhiLTgyMDYtYmVkNTVjNDdhNTc4
LzEvVkhHSzlxTnZacWtaT1RaS3I4aGtSYXVLYmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnNMDRDmV
fQDJvCgymAR4bikVf0wmGRm4/beFYQFSRfY9abJVjou9WdNOCzsoLig+UPmGPK8E
aPHiJ+N3NlBknwW3nU2G3y/tXvuk/p5hGUQGVSGMOEHRgUuwv2U9WVluWnqUB2iW
GU2hTZ7oqa5bhVuFKWLUOkprsIHDfviI7ZZMOw67ZrxhHQ7WHbHmZv26hTeczKfn
39nBVDwJTCtkY9/Um2d8Zr5xar+fdgvKqjxo57qWj/PA1UCgkyjJUY6r6x/1HHpD
hJ34WqPswO9mSHyHMZ9bHzciAa+bg7PLCb3aQ3Cn9AyR2f/XSsl4/t2idCfWDcea
apZJNs/snI+bvA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:50:51 2025 by rpki-client