Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
File: VRIeW5L95kiJ9qqyzFzob8DloH4.mft (raw, json)
Hash identifier: r313Blz4gQ5KxfqomTl8t8XHpCL/5CHVT2A5vFykZrc=
Subject key identifier: 41:A0:99:6B:C5:79:93:64:36:69:EB:D2:94:69:DC:12:ED:1F:11:6D
Authority key identifier: 55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
Certificate issuer: /CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Certificate serial: 0197B6A0BB782AB6FE146DC1C972A243BE39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
Manifest number: 03F6
Signing time: Sat 28 Jun 2025 13:01:16 +0000
Manifest this update: Sat 28 Jun 2025 13:01:16 +0000
Manifest next update: Sun 29 Jun 2025 13:01:16 +0000
Files and hashes: 1: 3kr8jiGy7HT0Z986eqHHTqrUADA.roa (hash: MLirpl2z9NyzltBKgB+dkcH7YYTRCJswwoZsSxn21Jw=)
2: VRIeW5L95kiJ9qqyzFzob8DloH4.crl (hash: ZGbX6n6xuNlTtmsVlN8nmlqz7JNMr6LKVFb9l8k/0Hw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:bb:78:2a:b6:fe:14:6d:c1:c9:72:a2:43:be:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55121e5b92fde64889f6aab2cc5ce86fc0e5a07e
Validity
Not Before: Jun 28 13:01:16 2025 GMT
Not After : Jun 29 13:01:16 2025 GMT
Subject: CN=41a0996bc57993643669ebd29469dc12ed1f116d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:18:7c:6f:a4:fa:ec:ea:49:e9:97:b3:bd:45:
5f:f8:d4:9d:01:2a:53:2a:fa:4d:c1:1d:06:5e:c8:
c1:02:88:47:ec:ac:d6:c7:33:3c:4d:b1:ab:7a:be:
a7:ad:1c:41:84:19:5c:80:a7:96:39:43:7f:0a:df:
6a:d7:be:59:6e:91:ba:0b:3f:d4:06:40:89:0f:b7:
7d:60:56:74:94:85:2f:62:4d:b8:02:c2:66:c3:00:
fc:81:98:b8:6a:12:25:ba:4e:1f:e9:0d:b3:a6:79:
54:22:d5:6d:e0:56:35:c2:ac:35:6a:2d:cd:a7:5d:
90:56:fa:af:48:12:fa:33:97:6d:e6:9c:ef:86:02:
7a:26:7d:bc:08:f6:55:00:96:b9:6d:d7:ec:81:56:
c3:75:ca:bd:6c:e9:10:65:f2:40:91:4a:c5:18:08:
1b:2b:f2:d9:d4:5d:93:71:87:bf:1a:26:93:04:9a:
e4:25:b5:4f:56:46:58:81:c6:98:67:c3:84:86:ca:
59:bb:5b:61:de:69:51:91:50:64:8d:10:b9:22:2e:
a2:ea:ad:04:72:9e:85:d0:06:67:a4:bf:91:ff:57:
ac:f0:67:7d:24:7d:70:ff:dc:f0:74:52:65:1a:87:
93:6c:05:c5:b5:ff:f6:02:ce:d2:de:12:58:a1:59:
64:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:A0:99:6B:C5:79:93:64:36:69:EB:D2:94:69:DC:12:ED:1F:11:6D
X509v3 Authority Key Identifier:
keyid:55:12:1E:5B:92:FD:E6:48:89:F6:AA:B2:CC:5C:E8:6F:C0:E5:A0:7E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRIeW5L95kiJ9qqyzFzob8DloH4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/84de8a-7e05-4069-a523-c3b6345a0d05/1/VRIeW5L95kiJ9qqyzFzob8DloH4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:8d:28:29:a2:a8:e2:f7:b1:68:9a:24:e8:b0:f2:57:66:8c:
93:49:0c:65:11:70:67:49:4d:89:2d:5b:a8:5b:68:c6:31:3d:
d7:38:b9:e7:d1:18:cb:bf:99:dd:ab:6c:03:21:db:45:15:11:
74:1f:47:b6:c4:f7:49:5a:45:7f:d3:6e:bd:3c:d7:02:1f:3d:
9f:3b:65:37:96:ba:36:33:9b:df:ff:eb:21:18:9a:9c:c3:ae:
c5:b8:65:3c:34:86:86:97:d3:9f:16:c6:8f:47:7f:fe:b6:e2:
2d:5b:ee:d9:95:33:36:d9:d5:be:72:84:ef:6c:fc:3b:be:a0:
69:e3:40:e9:e0:53:bb:6a:bc:d6:12:60:a6:a3:87:f4:68:8b:
ed:69:c9:8f:e0:49:a0:5a:4e:78:1b:22:77:5e:8d:f8:b7:a7:
02:c2:0a:80:23:d7:d1:df:67:68:37:93:02:a5:4b:6e:9e:8d:
2b:0a:0e:ca:2a:f9:b4:f0:ab:74:8b:74:50:6c:f6:5b:a8:5c:
b5:d0:16:1b:4b:85:5e:b7:81:54:20:32:89:85:aa:c5:83:69:
61:80:e5:5a:ce:71:21:20:ef:cc:88:fb:31:a8:d4:8e:35:57:
55:22:d1:53:5c:e9:d9:e8:46:51:4f:79:18:54:42:09:a4:f1:
e5:e1:c9:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oLt4Krb+FG3ByXKiQ745MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTIxZTViOTJmZGU2NDg4OWY2YWFiMmNjNWNlODZmYzBl
NWEwN2UwHhcNMjUwNjI4MTMwMTE2WhcNMjUwNjI5MTMwMTE2WjAzMTEwLwYDVQQD
Eyg0MWEwOTk2YmM1Nzk5MzY0MzY2OWViZDI5NDY5ZGMxMmVkMWYxMTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4xh8b6T67OpJ6ZezvUVf+NSdASpT
KvpNwR0GXsjBAohH7KzWxzM8TbGrer6nrRxBhBlcgKeWOUN/Ct9q175ZbpG6Cz/U
BkCJD7d9YFZ0lIUvYk24AsJmwwD8gZi4ahIluk4f6Q2zpnlUItVt4FY1wqw1ai3N
p12QVvqvSBL6M5dt5pzvhgJ6Jn28CPZVAJa5bdfsgVbDdcq9bOkQZfJAkUrFGAgb
K/LZ1F2TcYe/GiaTBJrkJbVPVkZYgcaYZ8OEhspZu1th3mlRkVBkjRC5Ii6i6q0E
cp6F0AZnpL+R/1es8Gd9JH1w/9zwdFJlGoeTbAXFtf/2As7S3hJYoVlkXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEGgmWvFeZNkNmnr0pRp3BLtHxFtMB8GA1UdIwQY
MBaAFFUSHluS/eZIifaqssxc6G/A5aB+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy84NGRlOGEtN2UwNS00MDY5LWE1MjMt
YzNiNjM0NWEwZDA1LzEvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy84NGRlOGEtN2UwNS00MDY5LWE1MjMtYzNiNjM0NWEwZDA1
LzEvVlJJZVc1TDk1a2lKOXFxeXpGem9iOERsb0g0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgo0oKaKo
4vexaJok6LDyV2aMk0kMZRFwZ0lNiS1bqFtoxjE91zi559EYy7+Z3atsAyHbRRUR
dB9HtsT3SVpFf9NuvTzXAh89nztlN5a6NjOb3//rIRianMOuxbhlPDSGhpfTnxbG
j0d//rbiLVvu2ZUzNtnVvnKE72z8O76gaeNA6eBTu2q81hJgpqOH9GiL7WnJj+BJ
oFpOeBsid16N+LenAsIKgCPX0d9naDeTAqVLbp6NKwoOyir5tPCrdIt0UGz2W6hc
tdAWG0uFXreBVCAyiYWqxYNpYYDlWs5xISDvzIj7MajUjjVXVSLRU1zp2ehGUU95
GFRCCaTx5eHJVQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:42:08 2025 by rpki-client