Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
File: VAxPdC_TKaNvzSnE65hOX0lRXZk.mft (raw, json)
Hash identifier: q9/4bXc7UBiLqdFwbBzOws5jVZA5Kz/p/50JhK7LVUU=
Subject key identifier: 81:AA:BA:E4:DD:10:69:E5:6D:25:95:55:08:5E:BF:D4:DA:79:D6:7D
Authority key identifier: 54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
Certificate issuer: /CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Certificate serial: 0197B74515CD63249DD8E1E7196860F12679
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
Manifest number: 0FA9
Signing time: Sat 28 Jun 2025 16:00:47 +0000
Manifest this update: Sat 28 Jun 2025 16:00:47 +0000
Manifest next update: Sun 29 Jun 2025 16:00:47 +0000
Files and hashes: 1: 6hSnRR0poSKLkgYbDLBwSreCHXw.roa (hash: 2LSwLZwlqMozkmvNpXnEPuZJylqRvk5GNtgnCAWWf9Y=)
2: VAxPdC_TKaNvzSnE65hOX0lRXZk.crl (hash: zZya21UwJ6boMUPNVpYI1IhIKXSK3OPhMe1lznIWU24=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:15:cd:63:24:9d:d8:e1:e7:19:68:60:f1:26:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540c4f742fd329a36fcd29c4eb984e5f49515d99
Validity
Not Before: Jun 28 16:00:47 2025 GMT
Not After : Jun 29 16:00:47 2025 GMT
Subject: CN=81aabae4dd1069e56d259555085ebfd4da79d67d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:22:9e:bc:8b:ee:a1:31:92:b0:b5:a9:da:32:
96:11:ab:1b:ed:10:fe:df:b6:17:48:e5:e6:9e:e9:
fd:e1:0a:b3:10:12:ca:7a:4f:88:7a:3d:ac:69:7f:
b7:e3:59:3e:e5:8e:b0:82:0f:e8:1a:b5:1a:42:36:
4a:ae:4d:2d:03:7e:26:96:31:d7:4c:27:19:81:8b:
b0:0b:54:69:51:75:1b:5a:b0:94:7f:f8:5a:c6:c3:
4b:16:f7:0d:c3:58:bc:76:eb:18:4e:91:28:c5:59:
7b:3b:50:3c:8f:56:5a:c0:95:4e:83:7f:d3:cb:ee:
49:15:36:3e:a2:c9:65:91:db:f8:bd:47:7b:a6:d5:
87:37:5e:74:fe:9c:41:2f:a6:95:21:46:78:37:6e:
4a:83:ae:07:8f:af:33:6a:cb:80:d6:ff:17:90:c5:
cc:67:78:75:ae:b7:78:55:99:47:07:e4:70:ea:7d:
43:6b:6e:70:01:b3:63:af:86:56:6b:3d:9b:a0:53:
35:d4:49:5f:95:6c:11:40:24:c9:dd:a0:53:f5:2a:
ff:f8:28:d3:95:45:b0:67:fb:f5:48:41:72:7f:bd:
32:fe:f3:ae:f6:a9:98:51:cc:e3:df:f6:92:b3:4d:
f4:03:23:c5:6e:ac:cc:4c:16:af:05:04:ab:c7:45:
28:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:AA:BA:E4:DD:10:69:E5:6D:25:95:55:08:5E:BF:D4:DA:79:D6:7D
X509v3 Authority Key Identifier:
keyid:54:0C:4F:74:2F:D3:29:A3:6F:CD:29:C4:EB:98:4E:5F:49:51:5D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAxPdC_TKaNvzSnE65hOX0lRXZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/be6819-83bb-40e0-9d74-cfb0d0493c3a/1/VAxPdC_TKaNvzSnE65hOX0lRXZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:40:a1:65:3b:bc:66:2b:53:40:a6:6f:f8:a2:32:3b:7f:5e:
45:03:43:8f:d6:45:a7:84:ad:26:34:87:d1:83:80:89:34:95:
b1:86:d6:98:bd:3e:74:b9:c8:d0:82:b7:b4:d9:e3:1a:6f:62:
de:8a:f1:5c:81:fe:8c:b5:bb:f9:36:80:37:2a:44:9d:38:9d:
77:8e:82:9d:91:9c:f9:26:1e:69:d2:14:a0:c3:18:94:67:8b:
78:01:55:c9:f4:51:39:74:65:c5:f2:9e:3e:c9:1b:fe:d4:57:
dd:bc:8f:8e:4e:4c:46:21:53:53:0e:02:c9:60:46:c7:fd:21:
5a:af:5e:9b:b8:b3:be:dd:0b:ae:46:f0:bf:ba:6c:07:bd:6f:
79:39:28:96:bd:d7:d1:6b:e8:5a:27:90:41:31:ac:36:66:e1:
43:fd:96:4a:5e:33:19:e6:b2:a5:be:5b:6b:bc:fc:e7:7f:0c:
f0:66:ef:e6:13:f7:a9:a3:92:37:f7:60:13:ef:e5:7c:72:5c:
cb:cb:f4:09:a1:d5:d2:99:ce:4f:5f:03:ef:95:bf:39:bd:d9:
bb:ae:51:9f:ca:9c:4a:14:1c:72:b9:75:4b:5d:52:5b:e4:0e:
5d:8d:be:72:04:39:fe:99:29:9a:96:a4:07:a2:dc:28:09:93:
e0:f6:9b:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RRXNYySd2OHnGWhg8SZ5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MGM0Zjc0MmZkMzI5YTM2ZmNkMjljNGViOTg0ZTVmNDk1
MTVkOTkwHhcNMjUwNjI4MTYwMDQ3WhcNMjUwNjI5MTYwMDQ3WjAzMTEwLwYDVQQD
Eyg4MWFhYmFlNGRkMTA2OWU1NmQyNTk1NTUwODVlYmZkNGRhNzlkNjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwyKevIvuoTGSsLWp2jKWEasb7RD+
37YXSOXmnun94QqzEBLKek+Iej2saX+341k+5Y6wgg/oGrUaQjZKrk0tA34mljHX
TCcZgYuwC1RpUXUbWrCUf/haxsNLFvcNw1i8dusYTpEoxVl7O1A8j1ZawJVOg3/T
y+5JFTY+osllkdv4vUd7ptWHN150/pxBL6aVIUZ4N25Kg64Hj68zasuA1v8XkMXM
Z3h1rrd4VZlHB+Rw6n1Da25wAbNjr4ZWaz2boFM11ElflWwRQCTJ3aBT9Sr/+CjT
lUWwZ/v1SEFyf70y/vOu9qmYUczj3/aSs030AyPFbqzMTBavBQSrx0UovQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIGquuTdEGnlbSWVVQhev9TaedZ9MB8GA1UdIwQY
MBaAFFQMT3Qv0ymjb80pxOuYTl9JUV2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQt
Y2ZiMGQwNDkzYzNhLzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9iZTY4MTktODNiYi00MGUwLTlkNzQtY2ZiMGQwNDkzYzNh
LzEvVkF4UGRDX1RLYU52elNuRTY1aE9YMGxSWFprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0ChZTu8
ZitTQKZv+KIyO39eRQNDj9ZFp4StJjSH0YOAiTSVsYbWmL0+dLnI0IK3tNnjGm9i
3orxXIH+jLW7+TaANypEnTidd46CnZGc+SYeadIUoMMYlGeLeAFVyfRROXRlxfKe
Pskb/tRX3byPjk5MRiFTUw4CyWBGx/0hWq9em7izvt0Lrkbwv7psB71veTkolr3X
0WvoWieQQTGsNmbhQ/2WSl4zGeaypb5ba7z8538M8Gbv5hP3qaOSN/dgE+/lfHJc
y8v0CaHV0pnOT18D75W/Ob3Zu65Rn8qcShQccrl1S11SW+QOXY2+cgQ5/pkpmpak
B6LcKAmT4PabIg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:57 2025 by rpki-client