Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
File: VAavgE71pjb0ZOcajUHo1AGn9pc.mft (raw, json)
Hash identifier: H5/UL8m2vbHTFghej7RIMOw0SQicPaHef9hxPn+aeBs=
Subject key identifier: 61:52:39:23:D7:12:56:3B:49:FF:B2:7D:51:15:C1:D2:5E:45:0C:58
Authority key identifier: 54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
Certificate issuer: /CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Certificate serial: 0197B9340823D18FF6FBF5FEE72EE7A42C8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
Manifest number: 1549
Signing time: Sun 29 Jun 2025 01:01:24 +0000
Manifest this update: Sun 29 Jun 2025 01:01:24 +0000
Manifest next update: Mon 30 Jun 2025 01:01:24 +0000
Files and hashes: 1: IxyW73OMckCNett38gRruShmhsE.roa (hash: kwXxrh4BlKqwqWrrFQAbZ+7ZY9nBQf7G/9/mLoszBNE=)
2: VAavgE71pjb0ZOcajUHo1AGn9pc.crl (hash: m0wlQ9Z+qxEPIBDVOrV7MMe7KUxmjasHKlXu46n4R0w=)
3: _FNz_oG2zcFLeFpovQJ_R2vg-vc.roa (hash: SUqY4ZQvD6jvXvZ8JF1d/vGljIMHXNiGDX2pW4O5ywc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 01:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:34:08:23:d1:8f:f6:fb:f5:fe:e7:2e:e7:a4:2c:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5406af804ef5a636f464e71a8d41e8d401a7f697
Validity
Not Before: Jun 29 01:01:24 2025 GMT
Not After : Jun 30 01:01:24 2025 GMT
Subject: CN=61523923d712563b49ffb27d5115c1d25e450c58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:02:76:6b:b6:ef:89:eb:bc:b2:f1:0a:d7:e7:
94:1e:08:00:10:36:28:16:b1:3d:b5:53:51:49:60:
c0:70:a3:fd:41:f0:b4:40:46:56:ba:5b:8e:6b:46:
21:a5:18:da:66:65:68:4c:f2:ab:a7:ac:ee:f2:b1:
ee:05:28:ee:d1:a4:0b:2e:5b:13:2c:63:fb:12:82:
91:65:4b:83:dc:c7:2b:e3:24:42:9d:83:48:54:0c:
0e:98:8a:9c:b3:ac:e5:14:0d:b0:37:15:78:45:53:
1e:2a:27:7b:01:7b:f2:6d:af:fd:20:fe:72:b0:3e:
66:04:54:36:2c:e6:e8:60:83:43:f4:b1:e1:cb:a8:
98:32:a8:5c:8d:b9:ec:67:37:1a:2e:02:e8:c0:71:
5d:d1:04:52:0f:53:a6:87:ee:aa:ec:58:77:3b:2f:
ec:25:2e:3a:8b:70:21:9e:e5:77:06:64:36:8d:3d:
d1:5d:f5:b2:af:91:da:2c:ab:eb:cd:cc:04:f6:3e:
e5:31:ab:57:7a:85:db:35:33:c8:d4:85:b8:af:14:
ae:40:c8:7f:d1:fb:45:18:c9:af:5c:4c:84:03:1c:
e8:50:24:d2:9c:c9:6a:aa:b2:2e:13:77:d2:94:e2:
ac:46:7e:11:e5:6a:0c:16:ce:1c:8a:47:b7:80:bd:
10:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:52:39:23:D7:12:56:3B:49:FF:B2:7D:51:15:C1:D2:5E:45:0C:58
X509v3 Authority Key Identifier:
keyid:54:06:AF:80:4E:F5:A6:36:F4:64:E7:1A:8D:41:E8:D4:01:A7:F6:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VAavgE71pjb0ZOcajUHo1AGn9pc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6b/35cb5c-93a5-4bf1-ba1d-1ca9d259e2ad/1/VAavgE71pjb0ZOcajUHo1AGn9pc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5f:bf:99:1f:c1:20:e8:92:b5:14:32:6d:ae:2a:53:62:7b:d2:
5e:be:2c:22:68:6a:81:ef:0b:ab:a0:d8:f4:10:d5:a0:d7:12:
df:89:7b:c0:81:de:31:97:11:42:75:88:74:9d:6e:cd:6b:aa:
3c:c3:a8:e5:cb:d2:5d:4e:30:e9:15:67:f0:fb:70:79:6b:77:
c8:f6:3d:0d:99:80:0f:56:ff:1e:76:af:bb:e5:07:5e:34:0c:
ef:83:08:01:d1:28:dc:b7:78:9c:84:8a:41:06:38:3c:eb:cc:
43:fb:9a:69:0a:75:a7:77:3e:0d:9e:b3:bc:be:e1:bb:d7:5d:
fc:7e:e1:fb:e5:ba:f8:1e:33:8a:7a:72:6f:6b:02:b6:93:3b:
63:b6:f9:94:ae:ff:75:2c:53:3f:c9:38:45:7f:5a:0e:10:29:
29:e5:c4:9d:29:d4:26:ec:a5:70:5b:2d:75:06:df:48:e1:a8:
4f:db:01:fc:4a:42:9a:d7:aa:66:fc:dc:da:67:71:5f:94:a7:
ba:ea:e3:52:a2:6a:88:b1:61:d1:78:e2:18:f4:c4:a0:cc:25:
9d:02:5e:cd:ec:b0:3a:fa:53:66:da:ce:40:88:ce:e2:ea:81:
be:9a:72:06:28:e6:53:09:7b:89:f9:41:9a:93:65:47:a8:6b:
ea:f8:bd:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5NAgj0Y/2+/X+5y7npCyNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MDZhZjgwNGVmNWE2MzZmNDY0ZTcxYThkNDFlOGQ0MDFh
N2Y2OTcwHhcNMjUwNjI5MDEwMTI0WhcNMjUwNjMwMDEwMTI0WjAzMTEwLwYDVQQD
Eyg2MTUyMzkyM2Q3MTI1NjNiNDlmZmIyN2Q1MTE1YzFkMjVlNDUwYzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwQJ2a7bvieu8svEK1+eUHggAEDYo
FrE9tVNRSWDAcKP9QfC0QEZWuluOa0YhpRjaZmVoTPKrp6zu8rHuBSju0aQLLlsT
LGP7EoKRZUuD3Mcr4yRCnYNIVAwOmIqcs6zlFA2wNxV4RVMeKid7AXvyba/9IP5y
sD5mBFQ2LOboYIND9LHhy6iYMqhcjbnsZzcaLgLowHFd0QRSD1Omh+6q7Fh3Oy/s
JS46i3AhnuV3BmQ2jT3RXfWyr5HaLKvrzcwE9j7lMatXeoXbNTPI1IW4rxSuQMh/
0ftFGMmvXEyEAxzoUCTSnMlqqrIuE3fSlOKsRn4R5WoMFs4cike3gL0QqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGFSOSPXElY7Sf+yfVEVwdJeRQxYMB8GA1UdIwQY
MBaAFFQGr4BO9aY29GTnGo1B6NQBp/aXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkFhdmdFNzFwamIwWk9jYWpVSG8xQUduOXBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yi8zNWNiNWMtOTNhNS00YmYxLWJhMWQt
MWNhOWQyNTllMmFkLzEvVkFhdmdFNzFwamIwWk9jYWpVSG8xQUduOXBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yi8zNWNiNWMtOTNhNS00YmYxLWJhMWQtMWNhOWQyNTllMmFk
LzEvVkFhdmdFNzFwamIwWk9jYWpVSG8xQUduOXBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAX7+ZH8Eg
6JK1FDJtripTYnvSXr4sImhqge8Lq6DY9BDVoNcS34l7wIHeMZcRQnWIdJ1uzWuq
PMOo5cvSXU4w6RVn8PtweWt3yPY9DZmAD1b/Hnavu+UHXjQM74MIAdEo3Ld4nISK
QQY4POvMQ/uaaQp1p3c+DZ6zvL7hu9dd/H7h++W6+B4zinpyb2sCtpM7Y7b5lK7/
dSxTP8k4RX9aDhApKeXEnSnUJuylcFstdQbfSOGoT9sB/EpCmteqZvzc2mdxX5Sn
uurjUqJqiLFh0XjiGPTEoMwlnQJezeywOvpTZtrOQIjO4uqBvppyBijmUwl7iflB
mpNlR6hr6vi9Mw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:20:09 2025 by rpki-client