Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
File: vqse58Ta0p0SfVZdG5N5RlwoiTc.mft (raw, json)
Hash identifier: SOAhMkvKrCZU/BTp3k2EA3/5t4wqbBt/5/pc1os66uA=
Subject key identifier: D0:07:95:B3:29:D5:B1:AB:42:56:91:E6:E9:23:16:49:A8:6C:DC:1C
Authority key identifier: BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
Certificate issuer: /CN=beab1ee7c4dad29d127d565d1b9379465c288937
Certificate serial: 0197C6EF42839AF87499724DCF1EB8CE697E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
Manifest number: 15BC
Signing time: Tue 01 Jul 2025 17:00:58 +0000
Manifest this update: Tue 01 Jul 2025 17:00:58 +0000
Manifest next update: Wed 02 Jul 2025 17:00:58 +0000
Files and hashes: 1: M6HhHlPpshdNz9eD4RpZo054CNI.roa (hash: Oj0e4uW1W20zki7xK3pquycyEqfpqSDKDUOaElxS5vM=)
2: vqse58Ta0p0SfVZdG5N5RlwoiTc.crl (hash: KUdM1Uibo0eVIFfyrFhzNqDc8TI70HPSw4358K6E8to=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 16:57:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:ef:42:83:9a:f8:74:99:72:4d:cf:1e:b8:ce:69:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=beab1ee7c4dad29d127d565d1b9379465c288937
Validity
Not Before: Jul 1 17:00:58 2025 GMT
Not After : Jul 2 17:00:58 2025 GMT
Subject: CN=d00795b329d5b1ab425691e6e9231649a86cdc1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:ee:38:1c:64:96:a0:55:0c:f8:0a:9e:72:61:
d4:c9:37:e5:9f:1c:ea:0d:f8:44:ac:8a:5b:66:77:
6b:fd:21:56:c2:a9:02:6b:ba:4a:cb:9b:48:4d:a9:
5c:cc:44:38:f5:48:25:0b:01:df:13:3e:a2:f2:4c:
19:37:da:72:6f:42:f0:cc:c5:47:ac:b1:fe:fc:be:
9f:2d:c6:91:a6:73:24:80:03:3b:8e:30:0d:b7:f0:
78:da:d2:f2:a2:19:cf:fa:b6:dd:64:7a:22:bb:67:
1d:74:e5:b7:4e:4c:55:b1:fb:f4:a2:0d:c7:c6:9d:
70:74:7b:c1:78:9a:ac:35:9c:72:86:86:1f:91:80:
5b:e4:bd:45:e4:97:41:a3:98:3e:ed:f0:64:88:25:
28:87:0d:54:93:9a:3e:6b:9f:d1:82:70:7c:2f:34:
4e:1a:ad:bb:3a:37:09:ed:ae:d4:cf:eb:f9:7e:27:
6b:07:37:a0:45:16:3d:46:e5:b5:b0:64:d8:01:d2:
ba:0f:15:ac:52:ca:ff:bf:94:1e:ab:db:95:03:83:
67:c3:e6:f8:5e:2a:56:30:a0:d8:7f:ff:d1:2c:dc:
4f:c0:d4:d0:37:7c:2b:8b:be:db:0c:1c:4a:65:a3:
b0:58:79:21:73:05:d4:1e:f6:a2:a3:bb:d1:a6:32:
f9:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:07:95:B3:29:D5:B1:AB:42:56:91:E6:E9:23:16:49:A8:6C:DC:1C
X509v3 Authority Key Identifier:
keyid:BE:AB:1E:E7:C4:DA:D2:9D:12:7D:56:5D:1B:93:79:46:5C:28:89:37
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqse58Ta0p0SfVZdG5N5RlwoiTc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/61a693-836a-4122-b929-e2a9205a9d2a/1/vqse58Ta0p0SfVZdG5N5RlwoiTc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:6a:53:96:e9:1d:69:cd:8b:4e:3f:0c:63:79:66:13:e4:63:
f3:db:0d:6e:ef:b0:d4:90:98:2f:af:a8:f0:80:b9:4d:78:2d:
e0:6b:bd:5a:ce:71:6e:52:4d:11:1f:5c:b4:e1:ba:d4:be:b6:
11:28:b6:43:65:ff:54:39:2c:d1:52:af:64:7d:f4:ca:b5:7a:
ba:4d:33:ab:98:e7:45:62:04:b9:ae:2f:d7:a7:c5:2d:16:56:
92:72:12:15:5d:68:21:93:0f:bb:02:68:23:3d:c8:81:38:b6:
5b:5d:7d:f3:21:44:79:12:ba:1b:45:9f:1c:00:9b:a3:f5:18:
cb:63:a5:fa:a4:e2:8d:10:4c:5f:31:e2:d0:2d:4e:a7:26:f5:
95:45:33:21:9a:c8:e1:69:2f:6b:9e:93:58:82:da:0e:77:6d:
7f:a8:7d:b9:3f:06:d9:a2:cc:1a:21:f9:cd:f5:5c:95:a4:76:
a8:51:66:0d:70:40:19:4b:61:13:d3:3a:b1:04:8e:a1:0d:92:
7a:e8:7f:47:8d:7d:18:e5:c0:10:ac:15:de:8e:a8:11:fe:bf:
d0:19:9a:f6:3d:8f:76:4c:37:bf:78:35:ef:d9:5a:e5:5a:32:
66:82:98:4a:fe:94:93:c2:cf:61:f6:6e:7c:82:ff:d0:3d:de:
72:1f:90:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfG70KDmvh0mXJNzx64zml+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYWIxZWU3YzRkYWQyOWQxMjdkNTY1ZDFiOTM3OTQ2NWMy
ODg5MzcwHhcNMjUwNzAxMTcwMDU4WhcNMjUwNzAyMTcwMDU4WjAzMTEwLwYDVQQD
EyhkMDA3OTViMzI5ZDViMWFiNDI1NjkxZTZlOTIzMTY0OWE4NmNkYzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2+44HGSWoFUM+AqecmHUyTflnxzq
DfhErIpbZndr/SFWwqkCa7pKy5tITalczEQ49UglCwHfEz6i8kwZN9pyb0LwzMVH
rLH+/L6fLcaRpnMkgAM7jjANt/B42tLyohnP+rbdZHoiu2cddOW3TkxVsfv0og3H
xp1wdHvBeJqsNZxyhoYfkYBb5L1F5JdBo5g+7fBkiCUohw1Uk5o+a5/RgnB8LzRO
Gq27OjcJ7a7Uz+v5fidrBzegRRY9RuW1sGTYAdK6DxWsUsr/v5Qeq9uVA4Nnw+b4
XipWMKDYf//RLNxPwNTQN3wri77bDBxKZaOwWHkhcwXUHvaio7vRpjL5eQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNAHlbMp1bGrQlaR5ukjFkmobNwcMB8GA1UdIwQY
MBaAFL6rHufE2tKdEn1WXRuTeUZcKIk3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS82MWE2OTMtODM2YS00MTIyLWI5Mjkt
ZTJhOTIwNWE5ZDJhLzEvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS82MWE2OTMtODM2YS00MTIyLWI5MjktZTJhOTIwNWE5ZDJh
LzEvdnFzZTU4VGEwcDBTZlZaZEc1TjVSbHdvaVRjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASGpTlukd
ac2LTj8MY3lmE+Rj89sNbu+w1JCYL6+o8IC5TXgt4Gu9Ws5xblJNER9ctOG61L62
ESi2Q2X/VDks0VKvZH30yrV6uk0zq5jnRWIEua4v16fFLRZWknISFV1oIZMPuwJo
Iz3IgTi2W1198yFEeRK6G0WfHACbo/UYy2Ol+qTijRBMXzHi0C1Opyb1lUUzIZrI
4Wkva56TWILaDndtf6h9uT8G2aLMGiH5zfVclaR2qFFmDXBAGUthE9M6sQSOoQ2S
euh/R419GOXAEKwV3o6oEf6/0Bma9j2Pdkw3v3g179la5VoyZoKYSv6Uk8LPYfZu
fIL/0D3ech+Qnw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 22:50:31 2025 by rpki-client