Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
File: VvAaHpnqXU85lNMzCdCUMS3IVCc.mft (raw, json)
Hash identifier: pgknJI8ioMFH0tlNoSnCmUap/NP4rkza/HF4KanX8tY=
Subject key identifier: 27:E6:F3:31:8C:AC:AB:53:44:02:66:2D:87:AB:22:87:67:FD:EA:2D
Authority key identifier: 56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
Certificate issuer: /CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Certificate serial: 0197B7B3384726A923D721BFAEFF9A072B6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
Manifest number: 0248
Signing time: Sat 28 Jun 2025 18:01:05 +0000
Manifest this update: Sat 28 Jun 2025 18:01:05 +0000
Manifest next update: Sun 29 Jun 2025 18:01:05 +0000
Files and hashes: 1: VvAaHpnqXU85lNMzCdCUMS3IVCc.crl (hash: UbWoqpDMFVvBmnIdqhKMedFWzCciFjXixOar/E7jEuA=)
2: v_KzQYlvsCBO_i8yYO8HLxZWeDc.roa (hash: +uoQdMzOaHRMGuVFuouzf8EBLpuGaYxtN4+0W2dukzs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:38:47:26:a9:23:d7:21:bf:ae:ff:9a:07:2b:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56f01a1e99ea5d4f3994d33309d094312dc85427
Validity
Not Before: Jun 28 18:01:05 2025 GMT
Not After : Jun 29 18:01:05 2025 GMT
Subject: CN=27e6f3318cacab534402662d87ab228767fdea2d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7a:ae:13:52:ba:4f:f8:39:48:ae:4e:e2:fc:
c0:90:45:10:0b:c8:c6:24:d2:a4:5b:10:06:16:69:
36:0c:d3:7b:56:30:78:bd:46:37:5a:d7:9d:df:a3:
6b:8e:1f:4a:c4:d5:5d:46:fe:34:7a:4c:3a:81:f3:
2b:f6:82:55:08:3f:e6:1f:59:d0:af:f8:e4:f2:91:
21:d7:66:77:d0:4a:c6:07:9c:66:1f:7c:8a:35:1d:
c0:a0:a2:77:3c:7e:ee:13:d1:2b:62:47:58:bb:59:
12:8b:08:be:7a:64:17:22:3a:48:16:d8:eb:81:5f:
45:ab:79:7d:f5:81:b4:00:42:56:f7:32:ea:08:69:
47:92:5a:30:98:b9:b2:92:84:1b:d9:dc:8d:c9:d6:
c2:4c:d2:ff:21:14:b4:e7:25:f5:a2:af:d6:e1:e3:
13:9d:97:99:a4:7f:eb:f2:78:1c:87:54:40:9d:51:
4c:cc:d8:e1:2d:53:6b:cd:3b:61:dc:80:03:8b:4e:
37:9f:15:32:da:8d:2e:85:fb:bd:a9:81:e5:b6:09:
5b:47:ba:1d:d2:99:2e:0f:39:c3:76:59:40:3f:fa:
e4:5b:90:cb:b6:94:6c:65:2c:96:e2:d0:8a:07:10:
27:b2:b2:9d:dc:e7:7a:c5:7d:f4:69:3d:9f:2b:e1:
26:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
27:E6:F3:31:8C:AC:AB:53:44:02:66:2D:87:AB:22:87:67:FD:EA:2D
X509v3 Authority Key Identifier:
keyid:56:F0:1A:1E:99:EA:5D:4F:39:94:D3:33:09:D0:94:31:2D:C8:54:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VvAaHpnqXU85lNMzCdCUMS3IVCc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/9b50bf-4fbf-4680-8328-130f7f38f537/1/VvAaHpnqXU85lNMzCdCUMS3IVCc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:5b:85:e8:ba:1d:cc:77:59:a1:f1:4e:5b:cd:c1:df:81:ff:
f7:a9:8f:ea:93:ef:d4:ee:22:96:db:d4:aa:bf:3f:3d:0b:4f:
2a:30:2f:bd:5d:b2:cb:c3:46:9e:70:1d:cd:af:0a:c8:e6:a7:
e7:1a:0c:2b:b5:94:0a:b0:53:d8:32:ef:c1:a1:21:92:05:57:
f8:33:f9:cc:11:42:a3:8a:b8:cd:1a:c2:63:27:fb:1e:24:f5:
88:a5:13:82:a5:d3:e5:88:f2:8a:b6:3b:cf:38:d6:6e:4d:80:
9c:eb:76:d0:b8:a9:7d:d1:cb:5a:bb:99:2f:d8:be:bf:d5:de:
e1:a4:86:76:90:a3:6d:45:59:93:14:c0:a8:e3:77:f4:58:1a:
0a:56:a5:76:c2:ea:28:04:df:23:d8:ee:ec:9b:19:9f:86:f0:
85:e7:2c:58:36:04:61:79:9d:ec:5e:1a:b7:c4:d9:9b:92:bf:
0b:82:93:dc:89:ea:6d:fd:cc:16:f1:eb:05:a5:e7:56:e7:4c:
10:3a:5c:12:e2:a8:3d:0c:1c:4a:cf:ef:9a:23:ae:42:b2:51:
d2:99:c0:77:46:f6:81:43:11:0d:73:80:4f:a6:54:cc:87:2d:
02:6f:7d:cd:7b:d9:9e:0e:df:aa:6c:71:55:65:8a:c3:03:b8:
76:f1:ad:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3szhHJqkj1yG/rv+aBytrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZjAxYTFlOTllYTVkNGYzOTk0ZDMzMzA5ZDA5NDMxMmRj
ODU0MjcwHhcNMjUwNjI4MTgwMTA1WhcNMjUwNjI5MTgwMTA1WjAzMTEwLwYDVQQD
EygyN2U2ZjMzMThjYWNhYjUzNDQwMjY2MmQ4N2FiMjI4NzY3ZmRlYTJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXquE1K6T/g5SK5O4vzAkEUQC8jG
JNKkWxAGFmk2DNN7VjB4vUY3Wted36Nrjh9KxNVdRv40ekw6gfMr9oJVCD/mH1nQ
r/jk8pEh12Z30ErGB5xmH3yKNR3AoKJ3PH7uE9ErYkdYu1kSiwi+emQXIjpIFtjr
gV9Fq3l99YG0AEJW9zLqCGlHklowmLmykoQb2dyNydbCTNL/IRS05yX1oq/W4eMT
nZeZpH/r8ngch1RAnVFMzNjhLVNrzTth3IADi043nxUy2o0uhfu9qYHltglbR7od
0pkuDznDdllAP/rkW5DLtpRsZSyW4tCKBxAnsrKd3Od6xX30aT2fK+EmHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCfm8zGMrKtTRAJmLYerIodn/eotMB8GA1UdIwQY
MBaAFFbwGh6Z6l1POZTTMwnQlDEtyFQnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnZBYUhwbnFYVTg1bE5NekNkQ1VNUzNJVkNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My85YjUwYmYtNGZiZi00NjgwLTgzMjgt
MTMwZjdmMzhmNTM3LzEvVnZBYUhwbnFYVTg1bE5NekNkQ1VNUzNJVkNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My85YjUwYmYtNGZiZi00NjgwLTgzMjgtMTMwZjdmMzhmNTM3
LzEvVnZBYUhwbnFYVTg1bE5NekNkQ1VNUzNJVkNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVuF6Lod
zHdZofFOW83B34H/96mP6pPv1O4iltvUqr8/PQtPKjAvvV2yy8NGnnAdza8KyOan
5xoMK7WUCrBT2DLvwaEhkgVX+DP5zBFCo4q4zRrCYyf7HiT1iKUTgqXT5YjyirY7
zzjWbk2AnOt20LipfdHLWruZL9i+v9Xe4aSGdpCjbUVZkxTAqON39FgaClaldsLq
KATfI9ju7JsZn4bwhecsWDYEYXmd7F4at8TZm5K/C4KT3Inqbf3MFvHrBaXnVudM
EDpcEuKoPQwcSs/vmiOuQrJR0pnAd0b2gUMRDXOAT6ZUzIctAm99zXvZng7fqmxx
VWWKwwO4dvGtww==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:57:27 2025 by rpki-client