Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
File: VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft (raw, json)
Hash identifier: hTx2zAdUkabArJ1utJ0iduTQ6rlrJmJJxSgmZVIuC3w=
Subject key identifier: FD:53:2F:32:1F:98:97:BD:49:45:FA:9D:E5:5F:47:64:9B:E4:C4:23
Authority key identifier: 57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
Certificate issuer: /CN=570a181aa090cb970605a25a7a57d653547f2324
Certificate serial: 0197B70E7077661A45BB9C5C53EBFA736669
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 15:01:06 +0000
Manifest this update: Sat 28 Jun 2025 15:01:06 +0000
Manifest next update: Sun 29 Jun 2025 15:01:06 +0000
Files and hashes: 1: 46uMqFoZIbx_W9-E8n9u53LtPPw.roa (hash: 2dilAY9A0HBjLWWldEcSomY7yF95pmwR+zYOHTlJZo4=)
2: IZTqsNkTgWjmY4RtPaRP8pP_4y4.roa (hash: snBSRgtB4DOLpSGdb4h6kFLqnhtBFWYeDh0vluESnyk=)
3: VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl (hash: 3AJVm2RRvdEEIETLQzoEZhimPxaB7xyu3yQJYbDgkx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:70:77:66:1a:45:bb:9c:5c:53:eb:fa:73:66:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=570a181aa090cb970605a25a7a57d653547f2324
Validity
Not Before: Jun 28 15:01:06 2025 GMT
Not After : Jun 29 15:01:06 2025 GMT
Subject: CN=fd532f321f9897bd4945fa9de55f47649be4c423
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:57:37:c8:3b:5f:65:d5:57:5f:71:07:2f:18:
e9:ea:db:34:0e:34:26:96:49:1f:8e:c6:78:89:ce:
d0:a0:18:8f:27:be:3d:cb:73:4c:31:03:ab:44:bc:
93:fb:10:71:9d:2c:1d:60:bb:c0:6e:9e:af:43:0f:
05:79:f4:ba:1e:4a:45:a1:a7:12:43:a1:85:56:33:
a3:f0:97:df:1f:0a:4d:17:72:93:bc:e6:45:7a:62:
f5:8f:65:fa:17:c2:d8:65:33:a8:89:19:36:a3:be:
58:3b:fc:f0:21:0b:3d:62:8a:a3:6d:df:bf:31:2f:
79:f0:70:6b:92:7d:55:cd:65:da:7b:ae:37:02:79:
08:f1:91:0c:6f:9d:3f:41:85:53:4c:7c:50:e5:10:
4f:5f:8c:f6:46:b8:9d:79:fe:0e:05:57:cf:07:35:
12:e5:f4:c6:80:84:a8:d9:f4:ba:9e:35:4f:e3:28:
07:59:70:c2:4c:34:5f:99:46:c0:06:61:d6:8d:7d:
59:e6:71:61:50:70:5b:00:89:fd:f3:9b:c1:27:1c:
c7:91:4d:a3:3d:e1:5a:cb:14:88:0b:07:02:ba:a5:
8e:7b:7b:23:e3:05:78:a2:91:46:94:28:fe:52:38:
98:1b:04:66:f6:b6:49:92:fb:9a:21:2c:22:81:ab:
94:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:53:2F:32:1F:98:97:BD:49:45:FA:9D:E5:5F:47:64:9B:E4:C4:23
X509v3 Authority Key Identifier:
keyid:57:0A:18:1A:A0:90:CB:97:06:05:A2:5A:7A:57:D6:53:54:7F:23:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwoYGqCQy5cGBaJaelfWU1R_IyQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/0c8b0f-5384-4580-89c2-a637650c74ae/1/VwoYGqCQy5cGBaJaelfWU1R_IyQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:e8:c2:b8:fe:35:15:64:9b:b7:b5:2f:ee:8f:f6:7f:2a:c3:
e1:b5:ee:e0:01:06:ae:77:7d:2c:54:06:34:11:14:8b:68:a3:
3e:7e:83:7f:3b:9b:99:e7:99:1a:56:29:24:f7:e2:ed:cb:1d:
5a:53:01:20:67:cc:3d:77:16:a9:5f:87:b1:b8:80:07:d2:0e:
3e:ea:72:67:45:c6:67:cc:45:77:a7:e8:e9:71:09:a4:fc:bf:
37:3a:bd:07:08:7d:3c:3f:cc:09:d1:39:8c:19:36:a9:cb:6a:
39:99:54:41:91:15:7e:76:a5:9e:29:5b:bc:7e:b3:3e:50:68:
37:5b:61:e0:97:92:97:29:fd:4d:7e:ab:08:41:a6:75:dd:3c:
7f:f8:15:fe:07:73:e8:d0:6a:11:03:ad:ad:87:5d:a2:47:94:
af:cb:7d:ab:a6:7e:4a:3a:00:5a:27:85:8e:a8:b6:ff:5d:6e:
9d:9f:3a:88:b4:d9:04:bc:13:10:da:83:f9:cb:c6:e9:72:68:
b0:c3:ac:3c:e8:15:e9:ef:0c:b0:06:af:4f:f6:76:a1:5f:d3:
21:33:89:20:e3:4f:32:ae:b6:52:a0:23:f9:a0:21:99:a8:79:
2c:86:eb:fc:78:88:0e:f9:9e:d4:9e:06:99:15:a1:ef:ef:a1:
9a:ad:2f:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DnB3ZhpFu5xcU+v6c2ZpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MGExODFhYTA5MGNiOTcwNjA1YTI1YTdhNTdkNjUzNTQ3
ZjIzMjQwHhcNMjUwNjI4MTUwMTA2WhcNMjUwNjI5MTUwMTA2WjAzMTEwLwYDVQQD
EyhmZDUzMmYzMjFmOTg5N2JkNDk0NWZhOWRlNTVmNDc2NDliZTRjNDIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzVc3yDtfZdVXX3EHLxjp6ts0DjQm
lkkfjsZ4ic7QoBiPJ749y3NMMQOrRLyT+xBxnSwdYLvAbp6vQw8FefS6HkpFoacS
Q6GFVjOj8JffHwpNF3KTvOZFemL1j2X6F8LYZTOoiRk2o75YO/zwIQs9Yoqjbd+/
MS958HBrkn1VzWXae643AnkI8ZEMb50/QYVTTHxQ5RBPX4z2Rridef4OBVfPBzUS
5fTGgISo2fS6njVP4ygHWXDCTDRfmUbABmHWjX1Z5nFhUHBbAIn985vBJxzHkU2j
PeFayxSICwcCuqWOe3sj4wV4opFGlCj+UjiYGwRm9rZJkvuaISwigauUDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP1TLzIfmJe9SUX6neVfR2Sb5MQjMB8GA1UdIwQY
MBaAFFcKGBqgkMuXBgWiWnpX1lNUfyMkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVndvWUdxQ1F5NWNHQmFKYWVsZldVMVJfSXlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS8wYzhiMGYtNTM4NC00NTgwLTg5YzIt
YTYzNzY1MGM3NGFlLzEvVndvWUdxQ1F5NWNHQmFKYWVsZldVMVJfSXlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS8wYzhiMGYtNTM4NC00NTgwLTg5YzItYTYzNzY1MGM3NGFl
LzEvVndvWUdxQ1F5NWNHQmFKYWVsZldVMVJfSXlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR+jCuP41
FWSbt7Uv7o/2fyrD4bXu4AEGrnd9LFQGNBEUi2ijPn6DfzubmeeZGlYpJPfi7csd
WlMBIGfMPXcWqV+HsbiAB9IOPupyZ0XGZ8xFd6fo6XEJpPy/Nzq9Bwh9PD/MCdE5
jBk2qctqOZlUQZEVfnalnilbvH6zPlBoN1th4JeSlyn9TX6rCEGmdd08f/gV/gdz
6NBqEQOtrYddokeUr8t9q6Z+SjoAWieFjqi2/11unZ86iLTZBLwTENqD+cvG6XJo
sMOsPOgV6e8MsAavT/Z2oV/TITOJIONPMq62UqAj+aAhmah5LIbr/HiIDvme1J4G
mRWh7++hmq0vPw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:25:32 2025 by rpki-client