Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
File: VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft (raw, json)
Hash identifier: yH7s8y2G7eHv3QTrOJQclAM27qniS3HzqATbeDzYFN4=
Subject key identifier: 9F:E1:F2:A9:4B:19:D4:5E:14:D0:37:F6:8E:32:A4:E6:6D:4C:88:DE
Authority key identifier: 54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
Certificate issuer: /CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Certificate serial: 0197B88FB9B0C3B0039C4743FB5EFF45D883
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
Manifest number: 04D9
Signing time: Sat 28 Jun 2025 22:01:56 +0000
Manifest this update: Sat 28 Jun 2025 22:01:56 +0000
Manifest next update: Sun 29 Jun 2025 22:01:56 +0000
Files and hashes: 1: NZvb2qKNw6TNNeDvqlV_-QChDh8.roa (hash: AvipIjBdsS0207+aK/JkUYN7M+6rcBf9DVuXv7pl1K0=)
2: VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl (hash: CMFc9oeZqwQrD+UFoWiGL9j/P4QtxSU58nvyVunDZe4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:b9:b0:c3:b0:03:9c:47:43:fb:5e:ff:45:d8:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54bbdb2d980ac0a827c0cc6ed0f906749cb2cea1
Validity
Not Before: Jun 28 22:01:56 2025 GMT
Not After : Jun 29 22:01:56 2025 GMT
Subject: CN=9fe1f2a94b19d45e14d037f68e32a4e66d4c88de
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:55:fd:12:26:97:93:ff:08:86:ba:43:bc:32:
e1:62:5d:f1:12:e9:7f:95:b1:9f:ee:8a:a1:a2:8e:
99:8e:ca:57:f3:fe:02:c2:a0:45:c4:26:fc:5f:d0:
4b:af:5a:13:48:eb:d7:03:76:57:a8:89:11:61:9e:
6d:ac:ca:4b:4f:61:ec:62:d4:97:02:58:5e:98:3a:
e4:2f:ad:fb:67:73:5e:1d:28:ea:7e:ec:60:cf:17:
03:76:06:f3:2a:02:4e:a9:27:cf:1e:34:fa:45:43:
bc:93:bc:1b:89:2d:06:37:9c:96:f7:39:97:6d:03:
3c:6e:96:29:63:05:db:4a:a9:40:a8:f5:74:79:38:
2b:90:60:90:82:19:d5:fe:f8:cd:34:3a:97:97:45:
a8:e2:32:6b:b5:d5:71:4f:61:e9:76:cc:5b:70:55:
3f:87:50:52:60:7c:a0:d9:de:cb:7f:11:57:3d:ac:
e0:30:84:9c:80:7f:7b:c5:89:8b:12:99:7a:64:10:
17:49:b1:9a:a4:bf:3e:17:72:80:a2:59:74:fc:08:
f9:86:03:7a:bc:c3:92:e1:88:1c:ef:23:56:7e:e3:
8c:56:b0:84:b9:c5:e2:f7:15:61:1f:31:2b:1e:40:
bd:98:99:15:24:a9:80:93:3e:d1:4e:2b:b6:58:81:
8f:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:E1:F2:A9:4B:19:D4:5E:14:D0:37:F6:8E:32:A4:E6:6D:4C:88:DE
X509v3 Authority Key Identifier:
keyid:54:BB:DB:2D:98:0A:C0:A8:27:C0:CC:6E:D0:F9:06:74:9C:B2:CE:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLvbLZgKwKgnwMxu0PkGdJyyzqE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4d/462ae4-fedb-4940-99d4-f38559be80e9/1/VLvbLZgKwKgnwMxu0PkGdJyyzqE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:12:2b:aa:9b:eb:fa:60:2d:09:ca:b6:c5:06:49:d3:0e:55:
67:a0:c1:90:06:88:2a:92:90:4c:cc:a9:da:64:90:72:73:9b:
b6:8d:1b:3a:40:43:e3:0e:5e:5a:33:6d:98:42:54:57:69:34:
e7:3b:d7:90:68:0b:6a:69:d2:54:6a:b8:ef:e6:6d:de:61:10:
13:c7:92:f6:9a:ea:21:23:63:72:4c:73:cf:40:9b:0e:71:27:
95:d1:73:4c:44:f2:0e:ab:f2:db:c3:66:d0:b5:84:7d:4d:25:
5a:a9:79:3b:13:3b:1d:39:dd:6a:33:ff:cb:4c:4f:09:ac:de:
ab:0d:14:92:61:d1:ee:72:6d:86:ab:26:38:0a:fc:50:f9:1b:
a7:2f:f9:af:b5:30:88:89:95:a5:40:81:69:2e:a8:59:89:fd:
23:76:89:7c:41:2e:1f:a2:18:1f:f0:0d:41:b2:20:53:92:a8:
94:bb:50:2d:da:e6:04:2a:1a:91:9b:78:67:f4:e6:2e:9f:72:
74:f1:55:a4:08:09:81:18:95:64:a3:fd:1c:a9:5e:52:d4:13:
ce:cf:14:36:85:f5:a7:44:4a:f3:0d:aa:3b:5f:a7:09:e5:ad:
ad:97:94:7e:91:af:4d:1b:bf:75:cf:5f:11:4e:c3:07:2d:71:
bf:00:d7:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j7mww7ADnEdD+17/RdiDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YmJkYjJkOTgwYWMwYTgyN2MwY2M2ZWQwZjkwNjc0OWNi
MmNlYTEwHhcNMjUwNjI4MjIwMTU2WhcNMjUwNjI5MjIwMTU2WjAzMTEwLwYDVQQD
Eyg5ZmUxZjJhOTRiMTlkNDVlMTRkMDM3ZjY4ZTMyYTRlNjZkNGM4OGRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAllX9EiaXk/8IhrpDvDLhYl3xEul/
lbGf7oqhoo6ZjspX8/4CwqBFxCb8X9BLr1oTSOvXA3ZXqIkRYZ5trMpLT2HsYtSX
AlhemDrkL637Z3NeHSjqfuxgzxcDdgbzKgJOqSfPHjT6RUO8k7wbiS0GN5yW9zmX
bQM8bpYpYwXbSqlAqPV0eTgrkGCQghnV/vjNNDqXl0Wo4jJrtdVxT2HpdsxbcFU/
h1BSYHyg2d7LfxFXPazgMIScgH97xYmLEpl6ZBAXSbGapL8+F3KAoll0/Aj5hgN6
vMOS4Ygc7yNWfuOMVrCEucXi9xVhHzErHkC9mJkVJKmAkz7RTiu2WIGPXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ/h8qlLGdReFNA39o4ypOZtTIjeMB8GA1UdIwQY
MBaAFFS72y2YCsCoJ8DMbtD5BnScss6hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZC80NjJhZTQtZmVkYi00OTQwLTk5ZDQt
ZjM4NTU5YmU4MGU5LzEvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZC80NjJhZTQtZmVkYi00OTQwLTk5ZDQtZjM4NTU5YmU4MGU5
LzEvVkx2YkxaZ0t3S2dud014dTBQa0dkSnl5enFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVBIrqpvr
+mAtCcq2xQZJ0w5VZ6DBkAaIKpKQTMyp2mSQcnObto0bOkBD4w5eWjNtmEJUV2k0
5zvXkGgLamnSVGq47+Zt3mEQE8eS9prqISNjckxzz0CbDnEnldFzTETyDqvy28Nm
0LWEfU0lWql5OxM7HTndajP/y0xPCazeqw0UkmHR7nJthqsmOAr8UPkbpy/5r7Uw
iImVpUCBaS6oWYn9I3aJfEEuH6IYH/ANQbIgU5KolLtQLdrmBCoakZt4Z/TmLp9y
dPFVpAgJgRiVZKP9HKleUtQTzs8UNoX1p0RK8w2qO1+nCeWtrZeUfpGvTRu/dc9f
EU7DBy1xvwDXNA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:31:11 2025 by rpki-client