Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
File: vGNYdq8cfvgkEbQEpw2It5FlCfY.mft (raw, json)
Hash identifier: pe14ImT7L9BfK0VZVkXWAOKI93W3jAKrtFBWXX+g1DY=
Subject key identifier: FE:3B:97:4B:33:78:9A:88:94:EC:6F:16:8F:A3:E4:50:F3:EC:26:48
Authority key identifier: BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6
Certificate issuer: /CN=bc635876af1c7ef82411b404a70d88b7916509f6
Certificate serial: 0197B6A0406B43D849C6D335D43A9529CA27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
Manifest number: 04F4
Signing time: Sat 28 Jun 2025 13:00:44 +0000
Manifest this update: Sat 28 Jun 2025 13:00:44 +0000
Manifest next update: Sun 29 Jun 2025 13:00:44 +0000
Files and hashes: 1: LSy4pwlxx6ifbllGQJDj8D7o8bU.roa (hash: VlWSPvQ7mW3Gy9fHD3zUtzLx6zn5FCR5wnd8Mk9PMXI=)
2: vGNYdq8cfvgkEbQEpw2It5FlCfY.crl (hash: MKJbEYK4+q//I3xQdyhZbDPRq2p/cfZ4wX2MG1z30uQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:40:6b:43:d8:49:c6:d3:35:d4:3a:95:29:ca:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc635876af1c7ef82411b404a70d88b7916509f6
Validity
Not Before: Jun 28 13:00:44 2025 GMT
Not After : Jun 29 13:00:44 2025 GMT
Subject: CN=fe3b974b33789a8894ec6f168fa3e450f3ec2648
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9d:a5:9c:79:51:a9:cb:68:c6:ec:b1:a9:4a:
94:70:97:e1:87:94:7f:37:a7:5a:d0:26:a4:e4:16:
90:64:44:19:d8:4d:c0:3d:02:46:60:7f:3a:59:45:
36:a0:6d:15:12:a4:b1:d9:6e:b7:ac:16:5d:fd:df:
b6:12:cb:1a:c5:88:39:c7:6b:81:f0:f7:32:a7:32:
4e:3f:f1:51:b0:9e:0f:b5:eb:e8:04:b0:3f:fa:af:
24:ee:5f:ca:1f:d1:02:f8:87:1c:26:48:c0:26:15:
ec:a9:4a:b6:40:3b:5e:99:df:dc:f7:16:9c:86:64:
65:9e:99:2d:49:94:e4:76:28:70:81:15:5b:3c:7d:
3a:47:37:a6:f6:03:a4:a3:11:e8:12:b1:bf:14:62:
ca:ee:03:60:bb:6c:71:53:d2:23:09:e2:34:e9:ea:
e9:51:0a:0f:68:8a:62:07:fd:1a:23:90:54:78:20:
56:26:b0:72:02:b1:b2:35:70:8f:65:ef:17:2c:94:
dc:24:1e:06:ad:ad:58:ff:a0:93:64:7b:34:fe:e5:
62:d3:e5:85:48:29:fe:f1:54:d2:40:a6:b4:88:e4:
07:c2:c9:49:a6:04:19:53:62:37:1f:2e:a5:e4:31:
41:64:d9:2c:98:5d:51:64:5f:8c:87:64:c5:51:fb:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:3B:97:4B:33:78:9A:88:94:EC:6F:16:8F:A3:E4:50:F3:EC:26:48
X509v3 Authority Key Identifier:
keyid:BC:63:58:76:AF:1C:7E:F8:24:11:B4:04:A7:0D:88:B7:91:65:09:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGNYdq8cfvgkEbQEpw2It5FlCfY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/3ad43e-a4db-4465-82b5-ffae20700e93/1/vGNYdq8cfvgkEbQEpw2It5FlCfY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:40:4c:54:ad:7d:8f:86:ab:d9:08:f7:ba:73:38:36:e1:3a:
d3:0d:c4:dd:7d:b8:2b:78:a3:0e:3f:79:ff:9d:36:23:15:c8:
c6:84:16:eb:17:fc:2a:1a:89:cd:75:73:e5:b5:26:2e:c5:e2:
47:cb:11:23:8c:cd:72:00:d0:2b:9a:c8:78:4a:e4:58:4f:0a:
d5:5b:f7:46:96:0b:4b:f3:5b:49:f1:72:f5:05:13:04:8e:4c:
7a:bf:46:e6:31:92:48:4f:2b:a7:d2:9e:48:8c:d1:08:af:d0:
2b:65:45:5c:ff:b1:5e:4a:c4:7a:44:c8:8e:cf:7f:2d:90:1c:
b0:eb:2f:74:04:81:ab:53:3a:ce:3d:f9:af:da:c9:fa:9c:ef:
2f:39:3c:f3:e7:41:99:0f:6c:08:5d:d5:7b:36:83:62:ae:c2:
be:d0:61:29:7c:c7:ff:51:94:13:25:dc:4e:68:a6:66:25:38:
96:54:cf:17:60:95:ba:c1:d2:bd:06:87:23:eb:c0:f2:2b:c0:
dc:73:d6:3f:47:03:f8:6b:65:95:92:7e:79:00:8e:84:86:7f:
46:61:7a:eb:6e:75:68:c4:33:37:8d:0e:73:2a:40:64:d1:75:
91:2f:7a:ae:3d:47:86:3c:e3:cb:f2:b5:9a:fc:66:11:b8:ff:
3e:5d:45:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oEBrQ9hJxtM11DqVKconMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNjM1ODc2YWYxYzdlZjgyNDExYjQwNGE3MGQ4OGI3OTE2
NTA5ZjYwHhcNMjUwNjI4MTMwMDQ0WhcNMjUwNjI5MTMwMDQ0WjAzMTEwLwYDVQQD
EyhmZTNiOTc0YjMzNzg5YTg4OTRlYzZmMTY4ZmEzZTQ1MGYzZWMyNjQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJ2lnHlRqctoxuyxqUqUcJfhh5R/
N6da0Cak5BaQZEQZ2E3APQJGYH86WUU2oG0VEqSx2W63rBZd/d+2EssaxYg5x2uB
8PcypzJOP/FRsJ4PtevoBLA/+q8k7l/KH9EC+IccJkjAJhXsqUq2QDtemd/c9xac
hmRlnpktSZTkdihwgRVbPH06Rzem9gOkoxHoErG/FGLK7gNgu2xxU9IjCeI06erp
UQoPaIpiB/0aI5BUeCBWJrByArGyNXCPZe8XLJTcJB4Gra1Y/6CTZHs0/uVi0+WF
SCn+8VTSQKa0iOQHwslJpgQZU2I3Hy6l5DFBZNksmF1RZF+Mh2TFUfsm0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP47l0szeJqIlOxvFo+j5FDz7CZIMB8GA1UdIwQY
MBaAFLxjWHavHH74JBG0BKcNiLeRZQn2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkdOWWRxOGNmdmdrRWJRRXB3Mkl0NUZsQ2ZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC8zYWQ0M2UtYTRkYi00NDY1LTgyYjUt
ZmZhZTIwNzAwZTkzLzEvdkdOWWRxOGNmdmdrRWJRRXB3Mkl0NUZsQ2ZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC8zYWQ0M2UtYTRkYi00NDY1LTgyYjUtZmZhZTIwNzAwZTkz
LzEvdkdOWWRxOGNmdmdrRWJRRXB3Mkl0NUZsQ2ZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMkBMVK19
j4ar2Qj3unM4NuE60w3E3X24K3ijDj95/502IxXIxoQW6xf8KhqJzXVz5bUmLsXi
R8sRI4zNcgDQK5rIeErkWE8K1Vv3RpYLS/NbSfFy9QUTBI5Mer9G5jGSSE8rp9Ke
SIzRCK/QK2VFXP+xXkrEekTIjs9/LZAcsOsvdASBq1M6zj35r9rJ+pzvLzk88+dB
mQ9sCF3VezaDYq7CvtBhKXzH/1GUEyXcTmimZiU4llTPF2CVusHSvQaHI+vA8ivA
3HPWP0cD+GtllZJ+eQCOhIZ/RmF66251aMQzN40OcypAZNF1kS96rj1Hhjzjy/K1
mvxmEbj/Pl1F9w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:18:32 2025 by rpki-client