Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
File: vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft (raw, json)
Hash identifier: KXr+oA9sHZCHQGRc/Va01qlbqDOHgTe+2ZIKzQrZK3E=
Subject key identifier: 81:72:18:BC:A9:DD:0B:8C:FE:60:AC:88:78:29:B3:BA:D4:89:0F:63
Authority key identifier: BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
Certificate issuer: /CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Certificate serial: 0197B88F90A49DA15BDE25E8DE284B0D3298
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
Manifest number: 0DF6
Signing time: Sat 28 Jun 2025 22:01:45 +0000
Manifest this update: Sat 28 Jun 2025 22:01:45 +0000
Manifest next update: Sun 29 Jun 2025 22:01:45 +0000
Files and hashes: 1: kwNFG0wAspm4fsxR2YrPKVGk1Ig.roa (hash: Mk2aoCm4frK824+nr9MmscS3ypVOVo2+1jHAmjQT/qI=)
2: vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl (hash: vqoIU/5gm0VDwNBHRrTF2j4kNKKm6q7Abjh0BDVJOfc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:90:a4:9d:a1:5b:de:25:e8:de:28:4b:0d:32:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea1890c305b0f2da420b01697e3bf23d485ab64
Validity
Not Before: Jun 28 22:01:45 2025 GMT
Not After : Jun 29 22:01:45 2025 GMT
Subject: CN=817218bca9dd0b8cfe60ac887829b3bad4890f63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bf:8c:4d:dc:9b:94:09:87:66:dd:19:dd:49:
8b:42:1e:6d:90:ba:68:ae:e1:bc:04:f9:f4:20:c7:
16:f0:32:df:2e:d3:1e:fc:bd:3e:1b:ff:40:11:75:
e0:7a:68:41:51:13:64:f8:19:46:46:12:e4:e4:9c:
bc:62:a3:84:cc:3f:a5:00:22:7e:53:d1:cc:59:ab:
ae:f9:0a:8c:cc:ea:04:75:47:30:c3:d7:6b:4e:0b:
b9:48:ba:03:b6:33:71:08:d9:fb:d6:ff:22:36:01:
f3:db:74:bd:04:a0:e4:f3:b9:c4:88:73:ef:2f:6b:
93:fc:f9:f7:c4:76:a8:30:c6:23:eb:86:a8:8b:7e:
2b:dc:3d:a8:3c:0e:b9:d1:da:80:87:5f:16:5d:8e:
04:5e:db:8d:95:53:20:f5:66:92:62:8c:61:24:e3:
75:aa:c9:ae:52:0e:54:6d:15:e0:c6:79:99:2a:8a:
be:2a:ab:c6:20:96:5a:b0:84:00:6e:ca:af:3a:a3:
48:b8:b6:4d:1b:67:08:6a:a3:93:2e:06:ec:c0:ab:
76:44:60:2e:46:0b:3a:8b:8f:31:cc:b9:47:2e:6d:
22:46:41:82:ef:82:4d:33:bb:55:c6:c7:d7:e2:18:
fd:b8:52:b8:25:b7:35:5d:33:6c:57:7b:ab:a6:82:
31:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:72:18:BC:A9:DD:0B:8C:FE:60:AC:88:78:29:B3:BA:D4:89:0F:63
X509v3 Authority Key Identifier:
keyid:BE:A1:89:0C:30:5B:0F:2D:A4:20:B0:16:97:E3:BF:23:D4:85:AB:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqGJDDBbDy2kILAWl-O_I9SFq2Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/aaa77b-9a09-4f0a-a885-3176f0999dda/1/vqGJDDBbDy2kILAWl-O_I9SFq2Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:ca:13:00:15:e9:d9:d3:7a:26:be:b2:10:26:27:0d:94:05:
54:2e:b9:06:b6:d4:b4:f8:2a:2c:90:73:a5:2d:fe:66:26:17:
8b:cc:45:a0:d9:fb:63:04:49:52:6b:44:81:cc:ca:0f:d4:a2:
a4:c4:b8:37:68:83:8c:13:10:bb:63:44:84:69:02:89:54:02:
4e:99:6b:8a:be:0b:32:41:1b:15:5d:6d:49:d4:5c:cf:d8:da:
fd:7b:b0:60:c7:27:18:e7:e1:b7:6c:92:95:03:0b:1f:30:9f:
19:46:f4:9d:7c:0a:59:46:7c:30:45:45:7d:0d:07:92:33:5f:
74:b2:62:6e:39:6d:13:de:f4:78:18:20:ba:a8:e9:4f:0b:54:
64:f9:d6:8a:57:89:5a:ca:3e:9e:d8:01:cf:24:3c:71:41:af:
42:70:e9:97:59:bd:79:9b:d5:be:50:b9:65:23:e4:88:4f:0c:
96:1d:0d:25:bc:f0:91:bd:46:b0:3e:d1:b8:59:73:37:2e:fd:
7f:4c:cd:6f:4f:e6:6d:8e:5c:78:ee:d3:e5:95:59:e7:a2:b2:
3f:5d:0f:86:49:81:4d:a8:f5:62:97:98:db:e0:c0:be:f9:47:
11:eb:3d:19:62:c0:a5:a5:1b:1d:44:be:c5:3f:08:db:74:7d:
a6:d1:cf:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j5CknaFb3iXo3ihLDTKYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTE4OTBjMzA1YjBmMmRhNDIwYjAxNjk3ZTNiZjIzZDQ4
NWFiNjQwHhcNMjUwNjI4MjIwMTQ1WhcNMjUwNjI5MjIwMTQ1WjAzMTEwLwYDVQQD
Eyg4MTcyMThiY2E5ZGQwYjhjZmU2MGFjODg3ODI5YjNiYWQ0ODkwZjYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1L+MTdyblAmHZt0Z3UmLQh5tkLpo
ruG8BPn0IMcW8DLfLtMe/L0+G/9AEXXgemhBURNk+BlGRhLk5Jy8YqOEzD+lACJ+
U9HMWauu+QqMzOoEdUcww9drTgu5SLoDtjNxCNn71v8iNgHz23S9BKDk87nEiHPv
L2uT/Pn3xHaoMMYj64aoi34r3D2oPA650dqAh18WXY4EXtuNlVMg9WaSYoxhJON1
qsmuUg5UbRXgxnmZKoq+KqvGIJZasIQAbsqvOqNIuLZNG2cIaqOTLgbswKt2RGAu
Rgs6i48xzLlHLm0iRkGC74JNM7tVxsfX4hj9uFK4Jbc1XTNsV3urpoIxvQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIFyGLyp3QuM/mCsiHgps7rUiQ9jMB8GA1UdIwQY
MBaAFL6hiQwwWw8tpCCwFpfjvyPUhatkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC9hYWE3N2ItOWEwOS00ZjBhLWE4ODUt
MzE3NmYwOTk5ZGRhLzEvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC9hYWE3N2ItOWEwOS00ZjBhLWE4ODUtMzE3NmYwOTk5ZGRh
LzEvdnFHSkREQmJEeTJrSUxBV2wtT19JOVNGcTJRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU8oTABXp
2dN6Jr6yECYnDZQFVC65BrbUtPgqLJBzpS3+ZiYXi8xFoNn7YwRJUmtEgczKD9Si
pMS4N2iDjBMQu2NEhGkCiVQCTplrir4LMkEbFV1tSdRcz9ja/XuwYMcnGOfht2yS
lQMLHzCfGUb0nXwKWUZ8MEVFfQ0HkjNfdLJibjltE970eBgguqjpTwtUZPnWileJ
Wso+ntgBzyQ8cUGvQnDpl1m9eZvVvlC5ZSPkiE8Mlh0NJbzwkb1GsD7RuFlzNy79
f0zNb0/mbY5ceO7T5ZVZ56KyP10PhkmBTaj1YpeY2+DAvvlHEes9GWLApaUbHUS+
xT8I23R9ptHPyQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:26 2025 by rpki-client