Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
File: VPK5p1k1doKsQZtcAhHMDkICUro.mft (raw, json)
Hash identifier: 1VEqJSwEKxLZ8QHfurEdRTh6+2QR1rwBFSOEIH7Lgd4=
Subject key identifier: 96:55:7B:F8:06:57:6B:A8:5A:FD:49:09:D8:31:76:EE:50:BB:F3:7E
Authority key identifier: 54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
Certificate issuer: /CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Certificate serial: 0197B820D4700AF8BCA7001A55C13B711878
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
Manifest number: 13D7
Signing time: Sat 28 Jun 2025 20:00:48 +0000
Manifest this update: Sat 28 Jun 2025 20:00:48 +0000
Manifest next update: Sun 29 Jun 2025 20:00:48 +0000
Files and hashes: 1: AqRcwBOoELP7sO7G2ArRpdIIf-8.roa (hash: Y1QC1/53Sd9JtcwMQ3kWoyldjEFlmNNOZ3rUXpglWPs=)
2: SPcGIGkkzQDmSeZ7dKXkZX_TMgQ.roa (hash: rHVmlh8TGkwEc4idYqR8fskh8r3CxSQPC0McskOxXCc=)
3: VPK5p1k1doKsQZtcAhHMDkICUro.crl (hash: HMYqTquy/RjJnNt64cLSxwEt955oqui9G29rIxDMSyQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:d4:70:0a:f8:bc:a7:00:1a:55:c1:3b:71:18:78
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54f2b9a759357682ac419b5c0211cc0e420252ba
Validity
Not Before: Jun 28 20:00:48 2025 GMT
Not After : Jun 29 20:00:48 2025 GMT
Subject: CN=96557bf806576ba85afd4909d83176ee50bbf37e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:57:16:db:10:7b:07:bc:dd:c2:ce:83:98:64:
e7:4d:2b:51:b7:bc:17:24:46:87:ee:a3:d3:84:86:
61:d5:fd:b1:33:2c:43:b6:8a:2b:66:aa:c2:75:a1:
9c:b6:68:91:1c:5b:29:09:11:e8:4a:88:ea:d5:b8:
b3:37:31:e6:2a:f1:51:fe:9a:b4:96:2b:5e:c4:c1:
35:76:50:85:71:60:2b:37:aa:0d:5c:5f:3a:60:87:
c4:ba:80:7f:4d:4c:db:03:ab:a1:94:b5:c5:87:5f:
5f:cb:12:bb:07:ec:6a:e9:f1:24:13:74:5a:08:31:
00:92:2e:3b:b5:bf:51:cb:3e:0a:39:f2:7c:70:ec:
36:32:69:e0:81:2e:10:5a:d6:0f:48:50:d5:6d:72:
e4:ca:fe:b3:5e:2e:f2:2b:ac:7f:34:07:eb:6f:89:
02:64:94:0a:01:85:d6:a5:5e:43:27:96:46:3a:fb:
6c:66:61:11:8d:dd:e6:bf:9a:08:76:e8:c2:a7:75:
37:d3:ce:4a:3f:0f:a1:00:6f:00:d1:fa:0f:53:18:
61:02:f7:21:42:60:73:97:7b:de:24:f5:97:bf:56:
c2:84:2f:5a:2d:97:20:a0:d2:79:d5:01:cf:51:f8:
e7:71:e6:bc:35:19:3c:55:9c:fd:df:41:d3:22:52:
01:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
96:55:7B:F8:06:57:6B:A8:5A:FD:49:09:D8:31:76:EE:50:BB:F3:7E
X509v3 Authority Key Identifier:
keyid:54:F2:B9:A7:59:35:76:82:AC:41:9B:5C:02:11:CC:0E:42:02:52:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VPK5p1k1doKsQZtcAhHMDkICUro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/07489a-805e-4339-b43a-539da69774c8/1/VPK5p1k1doKsQZtcAhHMDkICUro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:53:ce:b2:11:bb:ec:60:cd:d3:4b:87:55:c3:34:6e:b6:31:
99:7c:40:35:6a:ea:1e:e6:fb:57:cd:15:ce:4d:4e:b6:c2:54:
03:70:13:7d:e9:01:fa:9f:70:90:34:6b:59:8e:8d:e8:a9:df:
f4:66:00:c2:a1:71:c6:52:d1:39:80:67:26:1b:26:ce:11:8e:
69:ae:cc:04:63:91:ba:52:d9:d6:0c:e7:6e:d6:83:30:46:fc:
00:72:02:16:b0:e5:9f:4a:a9:6b:47:f5:6e:b8:b7:48:55:30:
c5:8c:5c:ab:9d:b7:d8:ac:c7:89:6f:70:8e:b1:25:98:d1:78:
c0:66:b0:b4:4f:a4:c2:37:f7:bb:c7:dd:34:83:35:18:ff:27:
3a:65:e0:00:0e:7e:82:32:22:5c:26:d6:15:23:a9:2d:b2:4e:
ba:d2:b3:77:7d:0b:a0:39:4b:a6:f5:de:3f:2e:a3:eb:8d:7b:
8c:4c:9b:f8:d4:78:c4:ca:4b:11:16:8e:bb:b9:a7:38:70:ce:
0a:34:6e:11:4c:f9:9d:48:44:9a:ff:38:53:53:20:3a:09:f7:
d3:53:62:8a:b7:ae:cf:84:37:6e:60:d6:73:e0:b1:40:3c:7a:
28:fe:63:bf:ae:24:1e:17:45:90:13:5e:7e:8f:95:7c:34:68:
e2:e9:7a:54
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4INRwCvi8pwAaVcE7cRh4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZjJiOWE3NTkzNTc2ODJhYzQxOWI1YzAyMTFjYzBlNDIw
MjUyYmEwHhcNMjUwNjI4MjAwMDQ4WhcNMjUwNjI5MjAwMDQ4WjAzMTEwLwYDVQQD
Eyg5NjU1N2JmODA2NTc2YmE4NWFmZDQ5MDlkODMxNzZlZTUwYmJmMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhVcW2xB7B7zdws6DmGTnTStRt7wX
JEaH7qPThIZh1f2xMyxDtoorZqrCdaGctmiRHFspCRHoSojq1bizNzHmKvFR/pq0
litexME1dlCFcWArN6oNXF86YIfEuoB/TUzbA6uhlLXFh19fyxK7B+xq6fEkE3Ra
CDEAki47tb9Ryz4KOfJ8cOw2MmnggS4QWtYPSFDVbXLkyv6zXi7yK6x/NAfrb4kC
ZJQKAYXWpV5DJ5ZGOvtsZmERjd3mv5oIdujCp3U3085KPw+hAG8A0foPUxhhAvch
QmBzl3veJPWXv1bChC9aLZcgoNJ51QHPUfjncea8NRk8VZz930HTIlIBkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJZVe/gGV2uoWv1JCdgxdu5Qu/N+MB8GA1UdIwQY
MBaAFFTyuadZNXaCrEGbXAIRzA5CAlK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlBLNXAxazFkb0tzUVp0Y0FoSE1Ea0lDVXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wNzQ4OWEtODA1ZS00MzM5LWI0M2Et
NTM5ZGE2OTc3NGM4LzEvVlBLNXAxazFkb0tzUVp0Y0FoSE1Ea0lDVXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC8wNzQ4OWEtODA1ZS00MzM5LWI0M2EtNTM5ZGE2OTc3NGM4
LzEvVlBLNXAxazFkb0tzUVp0Y0FoSE1Ea0lDVXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUFPOshG7
7GDN00uHVcM0brYxmXxANWrqHub7V80Vzk1OtsJUA3ATfekB+p9wkDRrWY6N6Knf
9GYAwqFxxlLROYBnJhsmzhGOaa7MBGORulLZ1gznbtaDMEb8AHICFrDln0qpa0f1
bri3SFUwxYxcq5232KzHiW9wjrElmNF4wGawtE+kwjf3u8fdNIM1GP8nOmXgAA5+
gjIiXCbWFSOpLbJOutKzd30LoDlLpvXePy6j6417jEyb+NR4xMpLERaOu7mnOHDO
CjRuEUz5nUhEmv84U1MgOgn301Niireuz4Q3bmDWc+CxQDx6KP5jv64kHhdFkBNe
fo+VfDRo4ul6VA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:32:52 2025 by rpki-client