Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
File: VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft (raw, json)
Hash identifier: F9E4XsPBHSSWs03fSP7Bl4CBDqIeHRPAhQ9Wzjw0SlM=
Subject key identifier: 8A:E7:CE:24:B3:27:0B:94:47:E9:6B:61:1A:A9:B6:E9:A1:B1:21:17
Authority key identifier: 57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
Certificate issuer: /CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Certificate serial: 0197B96B00B00BF224DE297BA1C487EABF25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
Manifest number: 0D6B
Signing time: Sun 29 Jun 2025 02:01:26 +0000
Manifest this update: Sun 29 Jun 2025 02:01:26 +0000
Manifest next update: Mon 30 Jun 2025 02:01:26 +0000
Files and hashes: 1: VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl (hash: qgpr3vAYswKw2rEcIQWDFY0kYUOZ6hQi2jwCxdk8un4=)
2: q4OtYqQ5F8toaT0oHQfCemmVpFY.roa (hash: pSnKgnqoG1TyZ2WLGeGgthK4U38JeBxESDQq72YUX64=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 02:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6b:00:b0:0b:f2:24:de:29:7b:a1:c4:87:ea:bf:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5714d081f65f0c8b04f1d2fe73e090b07ab1ab58
Validity
Not Before: Jun 29 02:01:26 2025 GMT
Not After : Jun 30 02:01:26 2025 GMT
Subject: CN=8ae7ce24b3270b9447e96b611aa9b6e9a1b12117
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:64:bb:6d:e3:11:68:1b:d1:65:2e:e8:fa:be:
10:a7:76:ea:31:29:64:e8:32:90:13:67:7b:6f:ad:
0b:73:6a:4a:8a:06:05:6f:51:19:ca:17:b5:0f:7f:
fd:54:ef:41:5e:9f:17:87:f8:28:77:f5:aa:6c:10:
a0:89:14:b4:aa:6f:d2:09:87:b2:5c:6c:ed:ee:45:
fd:bd:4a:4b:62:df:86:3d:9f:70:95:db:eb:26:a9:
ec:f5:26:74:fc:47:3e:99:20:7e:42:78:77:eb:f9:
a6:7b:53:b1:ab:02:32:95:bb:2d:00:da:77:0b:cb:
1c:61:24:86:c4:24:15:8e:f4:be:5f:1f:1b:ab:65:
9b:3f:b2:8c:18:90:a8:74:47:2c:2c:5f:37:f5:65:
18:5d:01:89:52:92:fd:57:9b:79:38:23:1e:1d:82:
00:27:bd:d4:e7:dc:ee:ca:57:b0:65:d5:7a:f8:da:
35:1b:0b:ea:d5:1c:70:14:1c:86:80:ac:ef:aa:b8:
4c:7b:3d:cf:3b:f2:7d:77:31:4e:40:bb:12:1a:09:
9c:53:1a:67:6a:a3:cb:27:95:7a:88:2f:b2:d2:3c:
a7:c7:0b:f4:7d:91:74:c3:85:31:25:66:01:b8:d8:
5d:03:fa:a0:8a:96:b2:e7:22:27:40:6b:22:bc:ea:
20:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:E7:CE:24:B3:27:0B:94:47:E9:6B:61:1A:A9:B6:E9:A1:B1:21:17
X509v3 Authority Key Identifier:
keyid:57:14:D0:81:F6:5F:0C:8B:04:F1:D2:FE:73:E0:90:B0:7A:B1:AB:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VxTQgfZfDIsE8dL-c-CQsHqxq1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/e9e849-0710-44e5-a982-fc274ad9210b/1/VxTQgfZfDIsE8dL-c-CQsHqxq1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f2:19:be:f6:9e:a6:e7:8c:eb:02:97:b8:af:f6:2c:17:18:
90:77:12:6f:06:e7:e6:58:b6:50:e7:a3:86:20:8d:4b:7f:b8:
32:bb:99:51:52:94:1a:3e:a8:ad:d0:c9:3a:ff:5b:bd:78:26:
f3:89:b3:b0:de:34:c8:3b:f3:76:ac:b5:a9:85:22:38:36:a2:
34:86:ad:34:7b:be:9a:a1:e0:dd:ee:02:b2:2b:b6:51:4d:53:
ab:3c:55:9c:03:45:8a:55:7d:03:53:0c:3a:d0:40:2e:f6:17:
04:35:c9:de:64:cd:11:3b:f6:5d:be:54:8c:44:87:66:c3:70:
0e:75:58:92:f0:19:02:24:a7:ab:33:bc:ad:aa:12:75:d1:71:
03:41:9b:31:e2:05:cf:ba:c4:34:a1:90:0c:85:54:ee:88:8a:
c9:28:b5:71:d8:61:9d:17:14:ba:ce:b5:09:97:c2:95:28:6b:
77:a4:f1:30:48:b5:0d:db:9f:45:a8:f9:55:16:c8:32:a6:61:
52:e4:79:32:99:0a:15:eb:6c:5f:8b:9f:b9:c2:0e:d2:59:dc:
fc:99:b5:89:fe:89:85:c0:a5:45:de:34:95:50:cf:a6:55:63:
2c:54:35:a0:c6:6e:74:34:37:78:c9:13:7c:a5:ac:4b:75:fe:
45:86:f1:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5awCwC/Ik3il7ocSH6r8lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MTRkMDgxZjY1ZjBjOGIwNGYxZDJmZTczZTA5MGIwN2Fi
MWFiNTgwHhcNMjUwNjI5MDIwMTI2WhcNMjUwNjMwMDIwMTI2WjAzMTEwLwYDVQQD
Eyg4YWU3Y2UyNGIzMjcwYjk0NDdlOTZiNjExYWE5YjZlOWExYjEyMTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo2S7beMRaBvRZS7o+r4Qp3bqMSlk
6DKQE2d7b60Lc2pKigYFb1EZyhe1D3/9VO9BXp8Xh/god/WqbBCgiRS0qm/SCYey
XGzt7kX9vUpLYt+GPZ9wldvrJqns9SZ0/Ec+mSB+Qnh36/mme1OxqwIylbstANp3
C8scYSSGxCQVjvS+Xx8bq2WbP7KMGJCodEcsLF839WUYXQGJUpL9V5t5OCMeHYIA
J73U59zuylewZdV6+No1Gwvq1RxwFByGgKzvqrhMez3PO/J9dzFOQLsSGgmcUxpn
aqPLJ5V6iC+y0jynxwv0fZF0w4UxJWYBuNhdA/qgipay5yInQGsivOogJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIrnziSzJwuUR+lrYRqptumhsSEXMB8GA1UdIwQY
MBaAFFcU0IH2XwyLBPHS/nPgkLB6satYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnhUUWdmWmZESXNFOGRMLWMtQ1FzSHF4cTFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lOWU4NDktMDcxMC00NGU1LWE5ODIt
ZmMyNzRhZDkyMTBiLzEvVnhUUWdmWmZESXNFOGRMLWMtQ1FzSHF4cTFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lOWU4NDktMDcxMC00NGU1LWE5ODItZmMyNzRhZDkyMTBi
LzEvVnhUUWdmWmZESXNFOGRMLWMtQ1FzSHF4cTFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfIZvvae
pueM6wKXuK/2LBcYkHcSbwbn5li2UOejhiCNS3+4MruZUVKUGj6ordDJOv9bvXgm
84mzsN40yDvzdqy1qYUiODaiNIatNHu+mqHg3e4Csiu2UU1TqzxVnANFilV9A1MM
OtBALvYXBDXJ3mTNETv2Xb5UjESHZsNwDnVYkvAZAiSnqzO8raoSddFxA0GbMeIF
z7rENKGQDIVU7oiKySi1cdhhnRcUus61CZfClShrd6TxMEi1DdufRaj5VRbIMqZh
UuR5MpkKFetsX4ufucIO0lnc/Jm1if6JhcClRd40lVDPplVjLFQ1oMZudDQ3eMkT
fKWsS3X+RYbx8g==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:51:32 2025 by rpki-client