
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
File: VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft (raw, json)
Hash identifier: 0XnI4VMzguTdeoAbsalAtFEh0AX1jMhoN1oEFo9xW4g=
Subject key identifier: 7D:B2:A0:5E:3F:E6:D5:BA:D9:97:A0:92:B0:42:8E:35:0B:10:70:53
Authority key identifier: 55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E
Certificate issuer: /CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
Certificate serial: 0197BAB3F7560FCCFECA2EAD137ABF0CC830
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
Manifest number: 0E21
Signing time: Sun 29 Jun 2025 08:00:45 +0000
Manifest this update: Sun 29 Jun 2025 08:00:45 +0000
Manifest next update: Mon 30 Jun 2025 08:00:45 +0000
Files and hashes: 1: VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl (hash: 6z04Ij3K1QoULukQc2w6ZWCd+7wfG1twuPZeZiq+HOM=)
2: y77QbXKRiye418rSbAFqIemComQ.roa (hash: ssUcd0LDD/xfi2UdCI3WRFi3tuO7iUpDjNv4QY4EqSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl
rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b3:f7:56:0f:cc:fe:ca:2e:ad:13:7a:bf:0c:c8:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=555e0d730e1a56d57f827e2e5446d01d8d26158e
Validity
Not Before: Jun 29 08:00:45 2025 GMT
Not After : Jun 30 08:00:45 2025 GMT
Subject: CN=7db2a05e3fe6d5bad997a092b0428e350b107053
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7c:bb:7a:4f:a5:70:f4:60:29:3c:ea:0a:35:
2a:b3:5f:ca:27:25:9c:cc:5c:24:3a:73:dd:36:92:
55:43:22:ec:77:ad:db:7a:2f:db:87:11:4a:b5:b6:
79:41:d9:5b:0b:c7:60:6b:65:53:75:03:36:8f:7f:
d9:4b:98:4c:7c:46:09:53:b2:6f:59:d0:78:5e:ba:
19:85:13:e7:8d:22:c6:5e:84:4e:47:9f:21:15:0a:
8f:bb:f3:10:06:aa:04:0a:68:75:c1:d5:d6:f1:3d:
f3:9a:44:78:4d:fc:87:fb:e2:be:e9:f3:2b:1d:79:
2b:74:81:c1:6b:89:a5:cb:dd:39:36:25:cd:8c:f9:
4a:6d:cf:c0:fe:45:ef:9e:59:07:19:46:c1:18:05:
89:f3:46:8a:0d:11:8a:dd:ac:52:13:43:49:91:da:
3e:76:3c:ea:d8:6c:e7:a9:0f:41:1c:55:78:2f:81:
7e:ff:71:ae:53:fb:ba:0a:6b:9d:55:c8:81:55:7c:
1d:44:41:34:fc:b0:93:48:6f:26:98:bc:4e:83:b5:
1e:be:4d:5d:22:f8:40:95:55:5e:bb:fc:ad:ca:a3:
7a:80:cf:62:3b:c9:b9:37:49:5d:d3:3f:c6:bd:1d:
f0:4c:9d:24:89:a7:e1:9f:16:b1:81:f1:4f:14:b8:
76:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7D:B2:A0:5E:3F:E6:D5:BA:D9:97:A0:92:B0:42:8E:35:0B:10:70:53
X509v3 Authority Key Identifier:
keyid:55:5E:0D:73:0E:1A:56:D5:7F:82:7E:2E:54:46:D0:1D:8D:26:15:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/96ce99-7ebe-4e8a-94bd-0a1ca5490afd/1/VV4Ncw4aVtV_gn4uVEbQHY0mFY4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:e9:1c:c9:83:42:dd:36:bf:58:41:f7:b6:3a:78:a6:fb:73:
3b:3a:b9:fc:49:5f:12:73:5a:c3:87:b2:12:1f:79:93:35:ed:
3a:48:5a:6c:a0:af:98:19:1d:e4:82:81:9c:06:f7:d3:16:ea:
73:5c:cc:7d:a7:db:64:9e:ac:bd:ad:8e:93:d9:20:e3:7f:64:
2a:46:4d:7a:5f:7e:17:41:1a:ec:79:05:ff:cf:c6:d4:cc:5c:
83:b6:d8:b1:99:37:66:b3:23:36:53:3b:13:69:ed:ad:89:53:
dd:1b:ea:dc:07:fa:08:1b:dc:6d:cc:14:f9:1c:16:aa:9a:e1:
0d:30:f5:8d:7c:af:81:9b:73:13:d9:a3:c4:9d:b4:84:30:ea:
e8:ca:c7:c3:de:0f:c7:90:39:c5:c8:4f:d2:0e:84:ec:af:a1:
e5:06:c1:a7:57:00:b9:57:6e:8e:b4:d2:c7:d8:3b:04:bb:b1:
ae:1f:5d:a8:9d:4d:5d:68:8e:5c:af:03:c5:65:2e:89:cb:99:
9e:16:ef:9d:bf:5f:3c:70:24:72:95:b3:5a:d4:85:1c:e8:74:
62:65:1a:49:b2:eb:e6:2c:1e:3e:37:ac:97:75:c8:0b:11:bc:
b3:1e:ba:ec:a9:ad:5e:82:36:f4:db:ee:1e:60:d7:dd:ef:d9:
1e:cf:d9:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6s/dWD8z+yi6tE3q/DMgwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NWUwZDczMGUxYTU2ZDU3ZjgyN2UyZTU0NDZkMDFkOGQy
NjE1OGUwHhcNMjUwNjI5MDgwMDQ1WhcNMjUwNjMwMDgwMDQ1WjAzMTEwLwYDVQQD
Eyg3ZGIyYTA1ZTNmZTZkNWJhZDk5N2EwOTJiMDQyOGUzNTBiMTA3MDUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXy7ek+lcPRgKTzqCjUqs1/KJyWc
zFwkOnPdNpJVQyLsd63bei/bhxFKtbZ5QdlbC8dga2VTdQM2j3/ZS5hMfEYJU7Jv
WdB4XroZhRPnjSLGXoROR58hFQqPu/MQBqoECmh1wdXW8T3zmkR4TfyH++K+6fMr
HXkrdIHBa4mly905NiXNjPlKbc/A/kXvnlkHGUbBGAWJ80aKDRGK3axSE0NJkdo+
djzq2GznqQ9BHFV4L4F+/3GuU/u6CmudVciBVXwdREE0/LCTSG8mmLxOg7Uevk1d
IvhAlVVeu/ytyqN6gM9iO8m5N0ld0z/GvR3wTJ0kiafhnxaxgfFPFLh2KQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH2yoF4/5tW62ZegkrBCjjULEHBTMB8GA1UdIwQY
MBaAFFVeDXMOGlbVf4J+LlRG0B2NJhWOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlY0TmN3NGFWdFZfZ240dVZFYlFIWTBtRlk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYi85NmNlOTktN2ViZS00ZThhLTk0YmQt
MGExY2E1NDkwYWZkLzEvVlY0TmN3NGFWdFZfZ240dVZFYlFIWTBtRlk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYi85NmNlOTktN2ViZS00ZThhLTk0YmQtMGExY2E1NDkwYWZk
LzEvVlY0TmN3NGFWdFZfZ240dVZFYlFIWTBtRlk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiukcyYNC
3Ta/WEH3tjp4pvtzOzq5/ElfEnNaw4eyEh95kzXtOkhabKCvmBkd5IKBnAb30xbq
c1zMfafbZJ6sva2Ok9kg439kKkZNel9+F0Ea7HkF/8/G1Mxcg7bYsZk3ZrMjNlM7
E2ntrYlT3Rvq3Af6CBvcbcwU+RwWqprhDTD1jXyvgZtzE9mjxJ20hDDq6MrHw94P
x5A5xchP0g6E7K+h5QbBp1cAuVdujrTSx9g7BLuxrh9dqJ1NXWiOXK8DxWUuicuZ
nhbvnb9fPHAkcpWzWtSFHOh0YmUaSbLr5iwePjesl3XICxG8sx667KmtXoI29Nvu
HmDX3e/ZHs/ZpQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:33:05 2025 by rpki-client