Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
File: VC2XGtPC5DjUoxLRod51GBCspOA.mft (raw, json)
Hash identifier: ZOVi6kamlg3xC0JU6k9Z31dqvij3BExqf3BQqzwUBHg=
Subject key identifier: AB:44:FD:66:F7:21:54:9B:B1:87:71:89:84:AB:40:57:D3:9D:2A:90
Authority key identifier: 54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
Certificate issuer: /CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Certificate serial: 0197B6A1F304897A75CE4A5B38A37010D9E3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:36 +0000
Manifest this update: Sat 28 Jun 2025 13:02:36 +0000
Manifest next update: Sun 29 Jun 2025 13:02:36 +0000
Files and hashes: 1: 5-LdegbBxKQtUzYhU_eCIvPEaSU.roa (hash: P+UUaet9A3DPospwlQybCpBsJ5DTQfNPoHJlQgfKeB4=)
2: VC2XGtPC5DjUoxLRod51GBCspOA.crl (hash: TNg6cxmMTYUWD7nN/ZZnDWt6iCnyzZ8NGZahnHODZpI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:f3:04:89:7a:75:ce:4a:5b:38:a3:70:10:d9:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=542d971ad3c2e438d4a312d1a1de751810aca4e0
Validity
Not Before: Jun 28 13:02:36 2025 GMT
Not After : Jun 29 13:02:36 2025 GMT
Subject: CN=ab44fd66f721549bb187718984ab4057d39d2a90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:4e:a8:0a:b3:2d:a7:df:81:23:ed:ff:a6:61:
51:25:bf:c6:3d:bc:a4:76:b7:1a:11:07:be:d1:9c:
a2:9e:dc:42:9f:8f:9e:78:bb:1c:66:30:14:88:b1:
9a:3e:a7:94:58:59:de:2d:de:9b:7a:cf:cb:0c:1b:
fc:f3:7f:d2:68:28:b2:45:6e:82:ef:c0:e4:4e:3e:
4a:6a:82:f1:92:28:29:22:b8:1b:7d:53:37:01:19:
b8:52:0f:0e:b2:13:6d:b8:ca:a3:7d:94:81:b5:1a:
5f:f5:3a:6b:ed:78:9a:5e:4b:8b:17:29:c4:5e:e3:
77:fa:94:99:8e:4a:06:ef:42:7f:b8:1d:f5:34:aa:
3f:b9:82:4a:6e:4d:4a:b3:fc:81:58:4b:b3:59:7f:
db:ec:f3:7c:88:42:b2:77:f4:6b:b5:3d:f6:9f:ea:
88:05:b2:16:e0:bc:da:6a:5b:3d:71:02:44:ff:a8:
e1:6e:5c:f8:fd:89:6c:e0:39:2a:e2:7f:33:88:f9:
19:94:ed:ab:63:50:47:1c:3b:be:6d:b9:4b:a6:b1:
ce:26:ae:3c:e2:81:dd:55:2d:e3:b3:c6:3b:05:51:
6a:d6:45:d3:32:a8:d8:05:73:54:e8:99:ce:1d:05:
fa:ba:dd:46:14:bb:f3:c2:fb:48:fd:4a:b9:dd:91:
ab:4d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:44:FD:66:F7:21:54:9B:B1:87:71:89:84:AB:40:57:D3:9D:2A:90
X509v3 Authority Key Identifier:
keyid:54:2D:97:1A:D3:C2:E4:38:D4:A3:12:D1:A1:DE:75:18:10:AC:A4:E0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VC2XGtPC5DjUoxLRod51GBCspOA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/9ddc9d-60c7-4bcb-919a-3408089edc45/1/VC2XGtPC5DjUoxLRod51GBCspOA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:89:6c:e0:f8:bc:74:eb:9b:28:0a:08:73:6d:75:6b:ee:06:
b2:32:44:bb:e9:e0:65:30:af:b2:f7:9e:a4:9c:54:f9:d1:a8:
f6:0d:7a:de:1c:72:97:3e:26:7c:32:bf:ca:9d:62:f3:02:fd:
cd:dc:cd:ac:58:2f:58:87:6f:63:b7:7b:0b:ce:01:69:9a:b5:
df:bb:24:a0:c5:5f:c7:35:5f:a1:04:f8:e5:d4:16:de:c8:12:
51:ce:bb:c2:d7:b8:3e:d6:da:50:6d:4e:bb:56:21:96:17:8d:
2d:8b:49:1b:3d:fa:52:10:a3:67:f3:a3:04:99:ca:3b:c3:2e:
65:04:2b:bb:13:1f:ff:4f:45:95:14:4e:48:97:78:59:d7:1a:
ac:51:51:07:2c:a8:d9:ef:e4:b8:d6:81:15:38:eb:36:cb:28:
29:4e:b7:32:53:b8:01:42:2a:a1:72:9d:d2:d8:d6:ff:b0:83:
73:72:7d:0d:31:2d:0c:29:4d:2b:80:4a:c2:3b:34:c2:4e:4b:
1d:bc:e0:e9:10:3c:b1:4f:8b:1f:5c:63:4e:5d:55:2a:55:37:
2f:3b:dc:b4:86:04:16:2d:71:6e:40:78:77:44:ca:d6:e5:f2:
17:d3:e2:00:88:5c:c6:6d:ff:ce:0e:63:29:23:e7:d1:62:c3:
fe:d9:91:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ofMEiXp1zkpbOKNwENnjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MmQ5NzFhZDNjMmU0MzhkNGEzMTJkMWExZGU3NTE4MTBh
Y2E0ZTAwHhcNMjUwNjI4MTMwMjM2WhcNMjUwNjI5MTMwMjM2WjAzMTEwLwYDVQQD
EyhhYjQ0ZmQ2NmY3MjE1NDliYjE4NzcxODk4NGFiNDA1N2QzOWQyYTkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqU6oCrMtp9+BI+3/pmFRJb/GPbyk
drcaEQe+0ZyintxCn4+eeLscZjAUiLGaPqeUWFneLd6bes/LDBv883/SaCiyRW6C
78DkTj5KaoLxkigpIrgbfVM3ARm4Ug8OshNtuMqjfZSBtRpf9Tpr7XiaXkuLFynE
XuN3+pSZjkoG70J/uB31NKo/uYJKbk1Ks/yBWEuzWX/b7PN8iEKyd/RrtT32n+qI
BbIW4Lzaals9cQJE/6jhblz4/Yls4Dkq4n8ziPkZlO2rY1BHHDu+bblLprHOJq48
4oHdVS3js8Y7BVFq1kXTMqjYBXNU6JnOHQX6ut1GFLvzwvtI/Uq53ZGrTQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKtE/Wb3IVSbsYdxiYSrQFfTnSqQMB8GA1UdIwQY
MBaAFFQtlxrTwuQ41KMS0aHedRgQrKTgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkMyWEd0UEM1RGpVb3hMUm9kNTFHQkNzcE9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi85ZGRjOWQtNjBjNy00YmNiLTkxOWEt
MzQwODA4OWVkYzQ1LzEvVkMyWEd0UEM1RGpVb3hMUm9kNTFHQkNzcE9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi85ZGRjOWQtNjBjNy00YmNiLTkxOWEtMzQwODA4OWVkYzQ1
LzEvVkMyWEd0UEM1RGpVb3hMUm9kNTFHQkNzcE9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOIls4Pi8
dOubKAoIc211a+4GsjJEu+ngZTCvsveepJxU+dGo9g163hxylz4mfDK/yp1i8wL9
zdzNrFgvWIdvY7d7C84BaZq137skoMVfxzVfoQT45dQW3sgSUc67wte4PtbaUG1O
u1YhlheNLYtJGz36UhCjZ/OjBJnKO8MuZQQruxMf/09FlRROSJd4WdcarFFRByyo
2e/kuNaBFTjrNssoKU63MlO4AUIqoXKd0tjW/7CDc3J9DTEtDClNK4BKwjs0wk5L
Hbzg6RA8sU+LH1xjTl1VKlU3LzvctIYEFi1xbkB4d0TK1uXyF9PiAIhcxm3/zg5j
KSPn0WLD/tmRuA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:58:15 2025 by rpki-client