Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
File: 92vpnovixUANAQVCvyBYvbuIUC0.mft (raw, json)
Hash identifier: MLH6kFWYibUZ809VAlBXH2ItIBU+DRMty11yf56T/0s=
Subject key identifier: 01:CD:B2:CD:84:B4:2B:8D:81:BD:B1:42:BD:5D:5C:8C:18:87:A1:5F
Authority key identifier: F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
Certificate issuer: /CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Certificate serial: 0197B6A144A9AE8D5A2E4C3D2518AF686DCC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
Manifest number: 0DCC
Signing time: Sat 28 Jun 2025 13:01:51 +0000
Manifest this update: Sat 28 Jun 2025 13:01:51 +0000
Manifest next update: Sun 29 Jun 2025 13:01:51 +0000
Files and hashes: 1: 92vpnovixUANAQVCvyBYvbuIUC0.crl (hash: pyhy/FRcWeNshXOuIsGU4caHvXsmLIoOle253vgX9QM=)
2: Bgx4v1LhphfEVxiPgOOZhtKcYxk.roa (hash: PMSZWU3KeqqHp7dEdYFCinejkuywjWErsotBlVqvg44=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:44:a9:ae:8d:5a:2e:4c:3d:25:18:af:68:6d:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f76be99e8be2c5400d010542bf2058bdbb88502d
Validity
Not Before: Jun 28 13:01:51 2025 GMT
Not After : Jun 29 13:01:51 2025 GMT
Subject: CN=01cdb2cd84b42b8d81bdb142bd5d5c8c1887a15f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:40:01:16:57:80:c9:48:50:b2:ed:8a:19:91:
bd:c4:8c:b2:35:e9:af:d6:db:d6:f5:48:91:67:f8:
24:e8:bf:77:51:ff:7a:9f:31:72:e8:52:65:ff:41:
75:f5:ab:05:aa:b3:2c:79:8b:af:f4:d5:79:96:86:
0c:73:d6:e4:47:44:dc:99:08:ad:c7:62:7a:40:49:
9a:35:c4:cb:03:9d:85:60:cc:0d:06:23:8a:bc:e0:
64:35:eb:2a:c7:23:ed:59:0f:66:9f:0c:b6:a9:d3:
5f:14:c7:f3:dd:80:cc:1c:4d:2d:a2:d2:99:4a:c1:
82:b7:59:7f:7d:74:96:b3:a8:c5:21:c0:06:05:1a:
13:5a:55:c0:72:7c:7b:e3:ad:8e:4b:05:87:a3:b1:
17:9d:8d:9e:60:c6:1f:7c:e6:a9:0e:7c:93:72:cb:
4e:29:3b:64:94:b4:2c:6e:a2:17:90:30:07:63:fd:
55:fa:9c:3f:3d:04:4a:17:d6:4a:6a:8e:4b:8f:03:
fa:43:65:17:fd:8d:d5:0d:e2:d0:04:91:27:2a:df:
9e:c6:7c:d8:0a:aa:fc:2c:28:d3:27:a4:bd:7c:c8:
34:3a:3b:80:b1:e1:4c:4b:7e:da:15:83:a3:ab:d4:
1d:5a:78:c1:3e:4b:17:06:7c:54:37:a5:a6:3b:4e:
70:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:CD:B2:CD:84:B4:2B:8D:81:BD:B1:42:BD:5D:5C:8C:18:87:A1:5F
X509v3 Authority Key Identifier:
keyid:F7:6B:E9:9E:8B:E2:C5:40:0D:01:05:42:BF:20:58:BD:BB:88:50:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/92vpnovixUANAQVCvyBYvbuIUC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/1b645c-50e2-408b-be68-4eb383ff13b9/1/92vpnovixUANAQVCvyBYvbuIUC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:f8:e2:ae:e3:da:44:e0:b2:3d:7f:74:63:29:e7:3f:82:48:
8b:27:d7:dd:9e:97:33:db:52:f5:67:39:88:c9:a9:18:89:bc:
d8:f4:dc:eb:51:6b:f4:b7:3e:4e:9a:93:26:08:f3:15:d3:10:
32:9f:05:b5:28:6a:eb:2c:5e:21:d9:e7:70:67:73:6b:55:b2:
23:8a:98:2f:91:24:81:bf:f4:43:3e:1c:98:71:f5:d8:e3:5b:
8b:10:93:61:e4:f4:db:d1:97:8d:ac:bb:4a:0b:82:2b:e0:db:
b5:dd:50:b1:1a:b6:26:ce:c6:7f:6c:34:e0:3b:e3:20:a8:90:
c4:ae:a6:13:ea:65:c0:15:87:cd:bb:5a:35:11:2c:77:e3:5a:
ba:d7:1f:08:53:a8:0f:54:1d:5d:1e:49:42:9c:e8:d8:2b:ab:
54:9b:ce:24:17:38:ce:9c:6b:62:fa:5a:2e:04:96:40:80:b8:
22:e1:5b:ae:64:35:8c:b1:14:b6:78:36:82:15:10:5a:25:af:
48:8a:e2:1a:ce:3e:7a:09:25:91:4a:fb:11:c7:c5:df:a2:47:
ab:9e:3e:dd:0b:df:ac:da:9b:58:32:e9:74:f3:27:7f:f2:d3:
ae:66:4e:5b:23:45:03:b8:df:44:30:8e:2e:89:92:f9:11:23:
e8:b9:0e:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oUSpro1aLkw9JRivaG3MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3NmJlOTllOGJlMmM1NDAwZDAxMDU0MmJmMjA1OGJkYmI4
ODUwMmQwHhcNMjUwNjI4MTMwMTUxWhcNMjUwNjI5MTMwMTUxWjAzMTEwLwYDVQQD
EygwMWNkYjJjZDg0YjQyYjhkODFiZGIxNDJiZDVkNWM4YzE4ODdhMTVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoEABFleAyUhQsu2KGZG9xIyyNemv
1tvW9UiRZ/gk6L93Uf96nzFy6FJl/0F19asFqrMseYuv9NV5loYMc9bkR0TcmQit
x2J6QEmaNcTLA52FYMwNBiOKvOBkNesqxyPtWQ9mnwy2qdNfFMfz3YDMHE0totKZ
SsGCt1l/fXSWs6jFIcAGBRoTWlXAcnx7462OSwWHo7EXnY2eYMYffOapDnyTcstO
KTtklLQsbqIXkDAHY/1V+pw/PQRKF9ZKao5LjwP6Q2UX/Y3VDeLQBJEnKt+exnzY
Cqr8LCjTJ6S9fMg0OjuAseFMS37aFYOjq9QdWnjBPksXBnxUN6WmO05wrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHNss2EtCuNgb2xQr1dXIwYh6FfMB8GA1UdIwQY
MBaAFPdr6Z6L4sVADQEFQr8gWL27iFAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTJ2cG5vdml4VUFOQVFWQ3Z5Qll2YnVJVUMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xYjY0NWMtNTBlMi00MDhiLWJlNjgt
NGViMzgzZmYxM2I5LzEvOTJ2cG5vdml4VUFOQVFWQ3Z5Qll2YnVJVUMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8xYjY0NWMtNTBlMi00MDhiLWJlNjgtNGViMzgzZmYxM2I5
LzEvOTJ2cG5vdml4VUFOQVFWQ3Z5Qll2YnVJVUMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARPjiruPa
ROCyPX90YynnP4JIiyfX3Z6XM9tS9Wc5iMmpGIm82PTc61Fr9Lc+TpqTJgjzFdMQ
Mp8FtShq6yxeIdnncGdza1WyI4qYL5Ekgb/0Qz4cmHH12ONbixCTYeT029GXjay7
SguCK+Dbtd1QsRq2Js7Gf2w04DvjIKiQxK6mE+plwBWHzbtaNREsd+NautcfCFOo
D1QdXR5JQpzo2CurVJvOJBc4zpxrYvpaLgSWQIC4IuFbrmQ1jLEUtng2ghUQWiWv
SIriGs4+egklkUr7EcfF36JHq54+3QvfrNqbWDLpdPMnf/LTrmZOWyNFA7jfRDCO
LomS+REj6LkOxg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:07:45 2025 by rpki-client