Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
File: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft (raw, json)
Hash identifier: vdgJY8NWaRAptLCMGv5btavHBAo55pVjW5HOFJik+0w=
Subject key identifier: E6:36:07:38:07:B2:60:A8:EF:98:E3:8A:14:1D:9D:12:94:B8:0F:4F
Authority key identifier: BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
Certificate issuer: /CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Certificate serial: 0197C2375DB810C88F3CD78DE9344D850594
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
Manifest number: 0BAC
Signing time: Mon 30 Jun 2025 19:01:37 +0000
Manifest this update: Mon 30 Jun 2025 19:01:37 +0000
Manifest next update: Tue 01 Jul 2025 19:01:37 +0000
Files and hashes: 1: 9UcomILdtAe6cNct4YOh4DKdhek.roa (hash: 5S+dEogRJfe8M30SkPrXb8z3+L8Fg1f4Nn7krQuU6Oo=)
2: vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl (hash: D6r/w3ZiGubQ2XQYnwzTI5V+Ulpa5ph4bvFhGjNwDuM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 15:11:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:37:5d:b8:10:c8:8f:3c:d7:8d:e9:34:4d:85:05:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be448c67a3ab0ea375fba848c9fe8c8eb1e84d6f
Validity
Not Before: Jun 30 19:01:37 2025 GMT
Not After : Jul 1 19:01:37 2025 GMT
Subject: CN=e636073807b260a8ef98e38a141d9d1294b80f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:ba:9a:ea:28:c8:a2:c3:9e:dd:fc:4a:cc:12:
4a:15:4e:23:7b:0b:60:a0:8b:ba:a2:45:48:bc:25:
94:2b:7d:28:23:98:70:3a:44:59:91:4e:57:33:e5:
41:be:06:54:d3:49:c9:74:4d:09:6d:81:5a:45:ca:
d8:ef:ba:16:8c:cb:3b:fb:64:7b:86:4d:97:bb:46:
98:0d:ad:13:59:3a:98:c5:c8:7a:12:b6:8d:1e:bb:
c5:5b:cf:69:77:34:77:15:d6:47:57:0c:95:4e:6a:
83:78:f1:bf:71:2c:e2:36:76:6b:41:6c:d3:a2:80:
d9:b8:3e:10:7f:57:23:19:83:ff:ed:39:48:0d:65:
a4:7e:49:e7:13:f6:02:65:c2:f7:54:ab:0f:5a:d6:
f9:60:34:a3:e9:53:a1:2c:78:9a:7e:00:f1:10:0f:
d2:b7:ae:8c:be:73:76:3e:1d:84:04:5a:ce:fb:bb:
27:f3:fe:b6:4c:1b:38:6d:4e:38:b6:6d:f3:db:33:
85:08:85:a0:0d:36:0b:dc:6e:91:2f:9d:67:f8:82:
99:8c:22:5c:1c:a5:85:f8:5a:9f:6c:17:b8:35:23:
fa:13:d1:03:6b:2b:bc:e7:d1:d7:33:ce:79:46:95:
9c:55:7b:91:c0:9e:5f:4e:49:ea:c6:eb:d2:7e:78:
26:c3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:36:07:38:07:B2:60:A8:EF:98:E3:8A:14:1D:9D:12:94:B8:0F:4F
X509v3 Authority Key Identifier:
keyid:BE:44:8C:67:A3:AB:0E:A3:75:FB:A8:48:C9:FE:8C:8E:B1:E8:4D:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/e20938-433c-4a26-8745-9d747d9a250a/1/vkSMZ6OrDqN1-6hIyf6MjrHoTW8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:05:13:4b:39:bf:9f:20:01:ac:a5:01:55:89:0c:6b:b7:3f:
4a:37:e3:4b:8a:b2:70:03:af:f6:d6:e0:88:91:a3:a2:31:2f:
b8:15:09:ae:01:e4:f8:d8:3b:c3:0b:c0:be:9d:f3:30:9e:c4:
9a:3a:57:18:3b:66:3e:6e:ef:ed:7d:68:89:e0:d7:c4:83:f1:
58:a5:2d:d8:f7:f3:1c:3d:9d:28:e0:f4:41:7f:e5:48:43:96:
fd:6e:53:8a:ac:24:94:5c:7f:e9:0b:bd:29:33:be:11:d8:39:
80:f7:9c:9e:5e:22:58:4c:98:6b:01:13:15:88:c6:c8:bc:64:
9e:0c:76:32:2f:5a:1e:90:05:f2:8f:37:cf:4d:9e:f8:3e:f5:
e2:f6:eb:69:92:82:9d:29:60:4a:98:49:e9:e7:ef:5a:0e:f9:
22:3c:19:32:f6:cb:18:03:e7:a7:af:7c:2f:ff:cd:02:14:66:
c4:d8:77:66:e6:0a:79:f0:51:65:63:d3:c8:b3:c9:15:ae:9f:
43:da:e6:95:77:4b:07:7f:3a:8c:1f:78:93:54:c6:78:5e:0c:
52:b1:10:2a:d3:0a:32:2f:cc:89:7c:1c:ee:58:01:62:2b:b1:
ff:e1:22:5b:f9:f0:26:de:2a:b0:fb:1e:91:62:0d:fa:68:73:
b4:97:e5:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfCN124EMiPPNeN6TRNhQWUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDQ4YzY3YTNhYjBlYTM3NWZiYTg0OGM5ZmU4YzhlYjFl
ODRkNmYwHhcNMjUwNjMwMTkwMTM3WhcNMjUwNzAxMTkwMTM3WjAzMTEwLwYDVQQD
EyhlNjM2MDczODA3YjI2MGE4ZWY5OGUzOGExNDFkOWQxMjk0YjgwZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3bqa6ijIosOe3fxKzBJKFU4jewtg
oIu6okVIvCWUK30oI5hwOkRZkU5XM+VBvgZU00nJdE0JbYFaRcrY77oWjMs7+2R7
hk2Xu0aYDa0TWTqYxch6EraNHrvFW89pdzR3FdZHVwyVTmqDePG/cSziNnZrQWzT
ooDZuD4Qf1cjGYP/7TlIDWWkfknnE/YCZcL3VKsPWtb5YDSj6VOhLHiafgDxEA/S
t66MvnN2Ph2EBFrO+7sn8/62TBs4bU44tm3z2zOFCIWgDTYL3G6RL51n+IKZjCJc
HKWF+FqfbBe4NSP6E9EDayu859HXM855RpWcVXuRwJ5fTknqxuvSfngmwwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOY2BzgHsmCo75jjihQdnRKUuA9PMB8GA1UdIwQY
MBaAFL5EjGejqw6jdfuoSMn+jI6x6E1vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtTTVo2T3JEcU4xLTZoSXlmNk1qckhvVFc4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9lMjA5MzgtNDMzYy00YTI2LTg3NDUt
OWQ3NDdkOWEyNTBhLzEvdmtTTVo2T3JEcU4xLTZoSXlmNk1qckhvVFc4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9lMjA5MzgtNDMzYy00YTI2LTg3NDUtOWQ3NDdkOWEyNTBh
LzEvdmtTTVo2T3JEcU4xLTZoSXlmNk1qckhvVFc4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjgUTSzm/
nyABrKUBVYkMa7c/SjfjS4qycAOv9tbgiJGjojEvuBUJrgHk+Ng7wwvAvp3zMJ7E
mjpXGDtmPm7v7X1oieDXxIPxWKUt2PfzHD2dKOD0QX/lSEOW/W5TiqwklFx/6Qu9
KTO+Edg5gPecnl4iWEyYawETFYjGyLxkngx2Mi9aHpAF8o83z02e+D714vbraZKC
nSlgSphJ6efvWg75IjwZMvbLGAPnp698L//NAhRmxNh3ZuYKefBRZWPTyLPJFa6f
Q9rmlXdLB386jB94k1TGeF4MUrEQKtMKMi/MiXwc7lgBYiux/+EiW/nwJt4qsPse
kWIN+mhztJfluw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 00:36:58 2025 by rpki-client