Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
File: _VOKrk7E0KLzwKZfifSHRrUV5Xs.mft (raw, json)
Hash identifier: gmFyCuH4lpnbHe9iq0guQHQQq11WtG/+Z+ZUKLX0fpU=
Subject key identifier: 7A:03:99:C5:5F:C6:8F:87:D7:F1:7F:AE:7D:FA:15:98:55:E6:53:F9
Authority key identifier: FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
Certificate issuer: /CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Certificate serial: 0197B74553908DE874B62167B2AF929F4979
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
Manifest number: 0C4E
Signing time: Sat 28 Jun 2025 16:01:03 +0000
Manifest this update: Sat 28 Jun 2025 16:01:03 +0000
Manifest next update: Sun 29 Jun 2025 16:01:03 +0000
Files and hashes: 1: YD_zTsYXZHwOdGihQ9GGGJD2yQ4.roa (hash: MiVKISLoY4yTYfozn6ttBVBGLS9pCG7wKWYNtkMouG8=)
2: _VOKrk7E0KLzwKZfifSHRrUV5Xs.crl (hash: 6UzEv1Doqlkv39nKhceU8aJUqsUyVEkve0qdIw42dw8=)
3: wcV-PUcCwSD1_bZOyNtF92C9c9E.roa (hash: YHNUenZzn6rHgL2dA2+pXb/I7NXwkpjXztGNWnA0xb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:53:90:8d:e8:74:b6:21:67:b2:af:92:9f:49:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd538aae4ec4d0a2f3c0a65f89f48746b515e57b
Validity
Not Before: Jun 28 16:01:03 2025 GMT
Not After : Jun 29 16:01:03 2025 GMT
Subject: CN=7a0399c55fc68f87d7f17fae7dfa159855e653f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:38:98:62:94:01:91:da:e0:e5:5e:b8:57:1c:
0a:1b:d1:ef:1b:09:ab:e6:23:68:f0:56:23:c8:fd:
2d:68:85:47:b0:a9:a0:7b:c3:d6:e0:f1:79:ea:7c:
78:f0:49:8b:24:85:b2:54:a6:7f:7b:6f:27:17:c3:
8a:63:13:ef:3a:16:e3:8a:54:b9:3c:15:ba:98:36:
81:37:46:e3:c0:d9:92:e5:01:72:ee:59:77:c6:b2:
6a:c4:f3:13:67:4a:b3:bb:8d:d0:ca:f9:c3:38:4f:
a6:3c:91:a4:b0:bc:11:c8:e3:da:8b:e9:85:d2:1b:
03:1c:21:35:9b:21:2f:52:67:b1:1b:2c:be:19:68:
b6:fd:b1:bf:12:a0:73:21:16:bf:4b:9d:44:64:7e:
4b:e3:83:63:cb:d7:bb:b9:d6:9c:54:93:e1:11:dc:
c7:3f:24:94:be:ef:4e:d4:39:2b:90:3f:4a:79:cd:
4c:e3:f4:7c:a8:db:da:7a:93:4f:5e:e8:0b:b4:2e:
a8:7c:6a:7a:d8:a5:47:eb:97:cd:86:a0:ba:e7:cb:
78:f1:6b:2a:01:6c:54:ed:a1:f7:56:30:4e:4a:8f:
77:29:45:22:4b:b7:ae:95:ff:62:6c:cb:96:34:e8:
f8:a6:f2:32:e9:ab:5c:4e:3b:c9:f7:ed:e0:1d:c4:
64:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:03:99:C5:5F:C6:8F:87:D7:F1:7F:AE:7D:FA:15:98:55:E6:53:F9
X509v3 Authority Key Identifier:
keyid:FD:53:8A:AE:4E:C4:D0:A2:F3:C0:A6:5F:89:F4:87:46:B5:15:E5:7B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_VOKrk7E0KLzwKZfifSHRrUV5Xs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a69fd7-8e1f-4176-a5df-42837cca00c3/1/_VOKrk7E0KLzwKZfifSHRrUV5Xs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:e5:7e:82:10:b4:bd:55:c6:6b:4f:3d:e5:cb:93:df:01:b6:
31:3d:73:1f:d5:e8:ca:80:59:fd:29:22:4c:1a:51:79:97:ed:
5d:60:fe:49:b2:58:18:21:93:84:17:40:fb:53:f4:02:30:11:
3e:55:12:b1:97:3e:4d:88:f1:d8:5e:e9:d7:c6:ff:ea:90:68:
83:14:27:51:54:1a:35:91:e5:75:8a:82:5b:c5:71:22:d0:f8:
ec:ac:7d:d5:62:39:71:62:cb:18:82:cf:fa:31:18:0f:fe:25:
27:85:a2:49:dd:76:86:3a:07:c6:95:9d:16:b1:62:7c:1a:d0:
de:b7:58:3c:0d:35:46:45:9e:c5:51:ae:73:86:6c:88:07:3e:
29:63:d2:eb:83:2c:53:03:81:a4:c5:b4:44:b3:8c:2c:ca:9f:
88:49:26:da:94:01:4b:65:7e:a0:85:0d:fd:b6:42:a3:bc:97:
ea:80:5e:c9:bc:f3:5d:86:46:1b:9c:68:0c:ce:5e:81:da:04:
26:9a:67:cd:5f:1c:18:f0:cf:f0:e1:31:78:03:34:b5:a4:b7:
02:0b:11:88:4e:96:9d:72:64:9b:72:2f:53:e6:af:31:67:43:
be:14:a3:02:dd:65:6c:8e:92:48:66:e6:fa:52:44:1b:bb:53:
9a:3b:29:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RVOQjeh0tiFnsq+Sn0l5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkNTM4YWFlNGVjNGQwYTJmM2MwYTY1Zjg5ZjQ4NzQ2YjUx
NWU1N2IwHhcNMjUwNjI4MTYwMTAzWhcNMjUwNjI5MTYwMTAzWjAzMTEwLwYDVQQD
Eyg3YTAzOTljNTVmYzY4Zjg3ZDdmMTdmYWU3ZGZhMTU5ODU1ZTY1M2Y5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyziYYpQBkdrg5V64VxwKG9HvGwmr
5iNo8FYjyP0taIVHsKmge8PW4PF56nx48EmLJIWyVKZ/e28nF8OKYxPvOhbjilS5
PBW6mDaBN0bjwNmS5QFy7ll3xrJqxPMTZ0qzu43QyvnDOE+mPJGksLwRyOPai+mF
0hsDHCE1myEvUmexGyy+GWi2/bG/EqBzIRa/S51EZH5L44Njy9e7udacVJPhEdzH
PySUvu9O1DkrkD9Kec1M4/R8qNvaepNPXugLtC6ofGp62KVH65fNhqC658t48Wsq
AWxU7aH3VjBOSo93KUUiS7eulf9ibMuWNOj4pvIy6atcTjvJ9+3gHcRk1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHoDmcVfxo+H1/F/rn36FZhV5lP5MB8GA1UdIwQY
MBaAFP1Tiq5OxNCi88CmX4n0h0a1FeV7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1ZPS3JrN0UwS0x6d0taZmlmU0hSclVWNVhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hNjlmZDctOGUxZi00MTc2LWE1ZGYt
NDI4MzdjY2EwMGMzLzEvX1ZPS3JrN0UwS0x6d0taZmlmU0hSclVWNVhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9hNjlmZDctOGUxZi00MTc2LWE1ZGYtNDI4MzdjY2EwMGMz
LzEvX1ZPS3JrN0UwS0x6d0taZmlmU0hSclVWNVhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADOV+ghC0
vVXGa0895cuT3wG2MT1zH9XoyoBZ/SkiTBpReZftXWD+SbJYGCGThBdA+1P0AjAR
PlUSsZc+TYjx2F7p18b/6pBogxQnUVQaNZHldYqCW8VxItD47Kx91WI5cWLLGILP
+jEYD/4lJ4WiSd12hjoHxpWdFrFifBrQ3rdYPA01RkWexVGuc4ZsiAc+KWPS64Ms
UwOBpMW0RLOMLMqfiEkm2pQBS2V+oIUN/bZCo7yX6oBeybzzXYZGG5xoDM5egdoE
JppnzV8cGPDP8OExeAM0taS3AgsRiE6WnXJkm3IvU+avMWdDvhSjAt1lbI6SSGbm
+lJEG7tTmjspAQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:15 2025 by rpki-client