Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
File: VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft (raw, json)
Hash identifier: Xpbwcnz3RxZ57KwXSxn0mUE/CSoGWFit6l8+WG7T/BA=
Subject key identifier: 39:AB:A5:0B:62:FA:B8:3A:19:03:50:34:A9:90:B0:D5:1F:7C:81:0E
Authority key identifier: 56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
Certificate issuer: /CN=5643415c22e141972c0d7e76c24e88b22427b024
Certificate serial: 0197B70F0FCF201D92D67E533724330AAD03
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 15:01:46 +0000
Manifest this update: Sat 28 Jun 2025 15:01:46 +0000
Manifest next update: Sun 29 Jun 2025 15:01:46 +0000
Files and hashes: 1: 6qanCjcucoDvogEjoEibMas1xCw.roa (hash: iHrFUYTwZPBriNgyEwpJfBAHJGESvwJ6/vI6y1aBDEY=)
2: OJH-3bY7Jey_mmpYXzYEewikSRw.roa (hash: QWW0B/GAEpshetNaEGEwKmz4qiBbm/sCm0lolDcM+Gk=)
3: VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl (hash: l4GWyK/Zw1Fo6cWu46FZXjXdryqHGtJee7+8iDwXl4w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:0f:cf:20:1d:92:d6:7e:53:37:24:33:0a:ad:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5643415c22e141972c0d7e76c24e88b22427b024
Validity
Not Before: Jun 28 15:01:46 2025 GMT
Not After : Jun 29 15:01:46 2025 GMT
Subject: CN=39aba50b62fab83a19035034a990b0d51f7c810e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:60:30:e4:50:f4:5e:61:21:d1:10:2a:28:f9:
1d:12:d9:01:25:0a:81:6f:ad:f5:08:ec:fd:f6:d4:
00:b3:1b:d3:20:a5:3f:d9:64:00:63:59:21:b2:9e:
88:27:72:75:ce:92:2b:71:70:f8:d5:12:94:b0:58:
24:23:10:02:f1:d0:8d:3b:c4:3a:5d:7b:4a:ed:b5:
8c:e7:8d:b8:e5:f9:8d:d9:56:ef:40:2b:5a:4b:3c:
07:72:a3:97:53:22:9e:1c:07:c6:ed:d4:4d:20:ca:
7d:0d:8e:cf:85:96:d5:e8:4a:e3:fd:0a:b7:71:86:
ef:69:a1:f0:57:50:ff:bc:e8:a0:5b:e8:fd:21:c3:
e8:d2:22:9c:8b:d1:64:d9:85:f6:e9:cf:1f:99:aa:
85:df:83:9e:9c:78:69:d6:7b:b3:da:98:55:53:68:
8f:79:73:1e:98:71:c5:e2:50:d2:fd:2e:25:d3:e0:
58:87:80:4d:24:a0:4d:ea:12:51:26:18:94:97:4f:
ed:ee:20:b7:ef:c1:12:df:42:1c:2a:c4:2c:5b:73:
7a:92:96:24:2e:73:63:5a:56:a4:81:24:55:3e:13:
79:50:30:b0:c8:e0:b8:32:63:f1:dc:20:95:8d:9d:
fc:ac:1c:1d:94:00:ec:98:13:97:c6:69:bf:ef:59:
e5:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:AB:A5:0B:62:FA:B8:3A:19:03:50:34:A9:90:B0:D5:1F:7C:81:0E
X509v3 Authority Key Identifier:
keyid:56:43:41:5C:22:E1:41:97:2C:0D:7E:76:C2:4E:88:B2:24:27:B0:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VkNBXCLhQZcsDX52wk6IsiQnsCQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/b4c74a-e3b2-4e09-867c-f9967c3ad3e4/1/VkNBXCLhQZcsDX52wk6IsiQnsCQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:20:d2:42:15:68:09:03:a1:c9:26:d1:44:1f:ad:ec:57:a1:
1b:60:3b:63:b4:97:ad:9c:1c:26:0e:4e:5b:6e:08:d0:5a:7c:
7a:97:a5:7a:a1:df:f1:64:74:e9:7f:79:26:40:e1:c3:7b:fb:
26:12:5c:a4:32:5d:c6:79:1f:de:28:31:70:51:85:f6:ad:8c:
a4:cb:5a:f6:23:c1:7f:f6:a6:fa:9a:d6:ec:48:2c:dd:33:3d:
b3:bc:7f:f7:5a:ac:5f:e7:e2:0a:6c:db:f7:ca:03:cd:03:ac:
41:5b:7e:e0:ff:0e:29:74:57:b4:86:6a:85:f5:98:9d:a4:1f:
6b:0f:3f:ed:fb:98:1a:f7:6f:fa:8f:e1:a6:ef:be:8d:1a:0b:
71:c1:6e:f5:dd:aa:96:38:2b:24:3c:ff:5c:c9:44:87:95:e2:
04:ea:9e:d5:ba:22:94:9a:17:96:7a:30:fb:f0:d0:8e:a5:80:
93:f0:99:67:f0:16:2b:75:3b:14:cd:e9:91:89:0a:f7:4b:3a:
95:31:09:01:af:c6:d6:53:81:3b:73:3f:ec:71:c8:a8:b9:ca:
33:40:af:e0:15:dd:8b:89:6e:f9:9c:f6:b9:d8:11:5b:63:15:
55:74:47:0c:37:ea:24:e4:c0:a1:30:ad:33:c5:0b:88:d2:44:
52:3c:45:32
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dw/PIB2S1n5TNyQzCq0DMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2NDM0MTVjMjJlMTQxOTcyYzBkN2U3NmMyNGU4OGIyMjQy
N2IwMjQwHhcNMjUwNjI4MTUwMTQ2WhcNMjUwNjI5MTUwMTQ2WjAzMTEwLwYDVQQD
EygzOWFiYTUwYjYyZmFiODNhMTkwMzUwMzRhOTkwYjBkNTFmN2M4MTBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAymAw5FD0XmEh0RAqKPkdEtkBJQqB
b631COz99tQAsxvTIKU/2WQAY1khsp6IJ3J1zpIrcXD41RKUsFgkIxAC8dCNO8Q6
XXtK7bWM54245fmN2VbvQCtaSzwHcqOXUyKeHAfG7dRNIMp9DY7PhZbV6Erj/Qq3
cYbvaaHwV1D/vOigW+j9IcPo0iKci9Fk2YX26c8fmaqF34OenHhp1nuz2phVU2iP
eXMemHHF4lDS/S4l0+BYh4BNJKBN6hJRJhiUl0/t7iC378ES30IcKsQsW3N6kpYk
LnNjWlakgSRVPhN5UDCwyOC4MmPx3CCVjZ38rBwdlADsmBOXxmm/71nliQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmrpQti+rg6GQNQNKmQsNUffIEOMB8GA1UdIwQY
MBaAFFZDQVwi4UGXLA1+dsJOiLIkJ7AkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmtOQlhDTGhRWmNzRFg1MndrNklzaVFuc0NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS9iNGM3NGEtZTNiMi00ZTA5LTg2N2Mt
Zjk5NjdjM2FkM2U0LzEvVmtOQlhDTGhRWmNzRFg1MndrNklzaVFuc0NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS9iNGM3NGEtZTNiMi00ZTA5LTg2N2MtZjk5NjdjM2FkM2U0
LzEvVmtOQlhDTGhRWmNzRFg1MndrNklzaVFuc0NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCDSQhVo
CQOhySbRRB+t7FehG2A7Y7SXrZwcJg5OW24I0Fp8epeleqHf8WR06X95JkDhw3v7
JhJcpDJdxnkf3igxcFGF9q2MpMta9iPBf/am+prW7Egs3TM9s7x/91qsX+fiCmzb
98oDzQOsQVt+4P8OKXRXtIZqhfWYnaQfaw8/7fuYGvdv+o/hpu++jRoLccFu9d2q
ljgrJDz/XMlEh5XiBOqe1boilJoXlnow+/DQjqWAk/CZZ/AWK3U7FM3pkYkK90s6
lTEJAa/G1lOBO3M/7HHIqLnKM0Cv4BXdi4lu+Zz2udgRW2MVVXRHDDfqJOTAoTCt
M8ULiNJEUjxFMg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:25 2025 by rpki-client