Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json)
Hash identifier: 4w68Ljgg8LDkmxBxWt/OIwj5qwsYaGpXlU2uSl15kyg=
Subject key identifier: 72:B9:06:FD:54:66:DE:99:FD:1E:2F:80:C6:D2:06:2C:B9:D0:BA:6D
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 0197B7EA30830B817B18EB94257A6CEE7231
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
Manifest number: 03EB
Signing time: Sat 28 Jun 2025 19:01:07 +0000
Manifest this update: Sat 28 Jun 2025 19:01:07 +0000
Manifest next update: Sun 29 Jun 2025 19:01:07 +0000
Files and hashes: 1: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: xP/10U0bxiz7M0r3spSGCx++TPgFyG9Z+97SyZXWpkU=)
2: _WaDfELTBc_dUmy6Cu013iGAFy4.roa (hash: 4Ui783wG8atURB8iqdX/TxaJyYCKy9S+Gr0JJXsrTgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:30:83:0b:81:7b:18:eb:94:25:7a:6c:ee:72:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Jun 28 19:01:07 2025 GMT
Not After : Jun 29 19:01:07 2025 GMT
Subject: CN=72b906fd5466de99fd1e2f80c6d2062cb9d0ba6d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:4f:9a:fa:b9:b6:42:6c:c9:d9:c1:c5:08:bf:
80:16:67:16:b3:5d:0f:fe:ea:94:50:7c:4a:b0:fc:
42:4d:4c:10:56:f4:a4:c6:ad:ba:ed:83:e9:0f:ed:
63:55:ac:68:6b:53:84:98:7c:7e:9e:55:24:5b:d6:
49:ab:2d:91:ad:ce:be:b9:69:b6:4d:ca:ae:29:62:
a6:0b:b9:e9:39:99:1f:f2:61:be:7d:62:fb:87:72:
5a:64:1a:43:87:d0:1f:46:cb:5a:c2:1d:5d:ec:fc:
ac:81:63:29:4c:ca:d5:4b:28:3c:2d:ca:2b:0a:bc:
55:41:12:43:01:a5:b7:5d:63:84:3e:77:21:9a:b2:
cd:8f:0e:d8:9b:b7:ff:30:a5:bb:52:ef:bb:b5:c7:
ea:0e:c2:dc:06:30:35:82:4f:5b:a8:94:42:2c:3f:
e5:57:0f:f7:c4:41:0f:7e:8a:81:1c:1c:d1:00:36:
78:8d:06:8d:3c:cc:9d:6b:26:c2:38:52:9b:fe:8b:
9b:d4:d0:70:be:14:50:60:d6:d1:a6:2f:3e:0d:44:
d3:2b:f1:88:97:5e:e9:20:b7:ca:85:ad:d5:ca:b2:
72:9f:ea:5f:3d:37:f4:41:78:0c:77:46:79:82:e0:
60:44:78:1a:88:be:dd:94:5e:97:68:8d:58:81:03:
66:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:B9:06:FD:54:66:DE:99:FD:1E:2F:80:C6:D2:06:2C:B9:D0:BA:6D
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:e4:54:c4:59:50:e5:18:59:f6:d7:1d:f4:52:a7:8b:23:a0:
f2:40:a6:8f:2e:53:76:36:90:6b:49:b4:c3:4d:8b:ab:96:13:
b6:ec:0e:60:91:3c:93:be:cd:c6:d9:fa:25:ce:51:2f:a9:a0:
7e:53:0e:84:7b:4c:0f:0c:b8:38:20:59:0e:33:f4:76:5d:e3:
e4:b4:4b:26:4d:a9:1d:1b:c6:d4:52:66:07:21:e1:84:93:fd:
ee:01:d6:37:10:9b:6c:e1:5f:a2:ad:1f:6c:ee:50:18:37:cf:
22:c9:63:96:eb:65:ed:9d:5c:f2:2a:82:d1:ea:f2:a0:27:8d:
58:9d:d2:47:66:8d:2d:56:d4:ec:2e:b5:d9:8a:a7:f7:25:d2:
92:ae:5c:ae:5a:b8:63:4d:8c:bb:1f:b5:1f:6e:87:c0:32:3d:
ef:bb:95:89:3e:49:37:8c:92:4b:2b:93:1e:ad:6e:9f:d8:ff:
f7:01:e8:92:3b:94:b0:dd:56:29:07:5d:df:4b:11:be:b5:03:
9b:e8:6f:65:bd:8e:97:9a:b1:32:27:6c:5b:0a:8a:e6:36:d4:
ec:b7:ee:65:5e:e4:d1:3b:f1:5e:bc:ad:7b:01:41:0d:46:b0:
11:58:fa:c3:63:0c:96:d4:0e:6b:fa:81:38:8a:68:35:2c:77:
e3:c2:25:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36jCDC4F7GOuUJXps7nIxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MGY0YTFiOTIzMzhiNDljYTYzMDIxMjE5MDU5Y2U1NzBm
ZjU5NjQwHhcNMjUwNjI4MTkwMTA3WhcNMjUwNjI5MTkwMTA3WjAzMTEwLwYDVQQD
Eyg3MmI5MDZmZDU0NjZkZTk5ZmQxZTJmODBjNmQyMDYyY2I5ZDBiYTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzU+a+rm2QmzJ2cHFCL+AFmcWs10P
/uqUUHxKsPxCTUwQVvSkxq267YPpD+1jVaxoa1OEmHx+nlUkW9ZJqy2Rrc6+uWm2
TcquKWKmC7npOZkf8mG+fWL7h3JaZBpDh9AfRstawh1d7PysgWMpTMrVSyg8Lcor
CrxVQRJDAaW3XWOEPnchmrLNjw7Ym7f/MKW7Uu+7tcfqDsLcBjA1gk9bqJRCLD/l
Vw/3xEEPfoqBHBzRADZ4jQaNPMydaybCOFKb/oub1NBwvhRQYNbRpi8+DUTTK/GI
l17pILfKha3VyrJyn+pfPTf0QXgMd0Z5guBgRHgaiL7dlF6XaI1YgQNmLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHK5Bv1UZt6Z/R4vgMbSBiy50LptMB8GA1UdIwQY
MBaAFFQPShuSM4tJymMCEhkFnOVw/1lkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84ZjZmMjYtODM1ZS00NTQ3LWI3NzAt
ZTA1MjkwMTZjYmEwLzEvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My84ZjZmMjYtODM1ZS00NTQ3LWI3NzAtZTA1MjkwMTZjYmEw
LzEvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEuRUxFlQ
5RhZ9tcd9FKniyOg8kCmjy5TdjaQa0m0w02Lq5YTtuwOYJE8k77Nxtn6Jc5RL6mg
flMOhHtMDwy4OCBZDjP0dl3j5LRLJk2pHRvG1FJmByHhhJP97gHWNxCbbOFfoq0f
bO5QGDfPIsljlutl7Z1c8iqC0eryoCeNWJ3SR2aNLVbU7C612Yqn9yXSkq5crlq4
Y02Mux+1H26HwDI977uViT5JN4ySSyuTHq1un9j/9wHokjuUsN1WKQdd30sRvrUD
m+hvZb2Ol5qxMidsWwqK5jbU7LfuZV7k0TvxXrytewFBDUawEVj6w2MMltQOa/qB
OIpoNSx348IlEg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:39 2025 by rpki-client