Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
File: VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft (raw, json)
Hash identifier: aNK1fBK9DryvoTh4BlZHCqOL+qsCQsni5d4DJd/vZlY=
Subject key identifier: 56:CD:9A:7F:2F:3A:E7:C7:6A:76:10:81:C8:C1:83:38:9E:BD:8A:4A
Authority key identifier: 55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
Certificate issuer: /CN=559a769412d2d963b491ebe31d44111dcafccc94
Certificate serial: 0197B6A2152ED09914014C6C880CBC53CB08
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
Manifest number: 0498
Signing time: Sat 28 Jun 2025 13:02:44 +0000
Manifest this update: Sat 28 Jun 2025 13:02:44 +0000
Manifest next update: Sun 29 Jun 2025 13:02:44 +0000
Files and hashes: 1: VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl (hash: vBSBKzaMGjjcQdyE0RtiQpeuxEdRQ81l5EV7+0WQF5w=)
2: r1lquQ-XjIWjOg1LAkyGn6KMjo0.roa (hash: wZhXEM3Xxa5+Fz5oyJ1++QkvfDJcpfPRAfCqMyTq70w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:15:2e:d0:99:14:01:4c:6c:88:0c:bc:53:cb:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=559a769412d2d963b491ebe31d44111dcafccc94
Validity
Not Before: Jun 28 13:02:44 2025 GMT
Not After : Jun 29 13:02:44 2025 GMT
Subject: CN=56cd9a7f2f3ae7c76a761081c8c183389ebd8a4a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:ab:08:c5:fa:c0:6c:da:9f:72:80:54:de:9b:
58:ae:96:1a:f4:f7:4f:17:05:08:c4:92:11:48:67:
59:84:05:ec:90:58:17:73:5f:fd:5f:2d:c1:56:6e:
ef:ac:a6:ca:c1:97:ea:22:c1:2d:b9:0f:a9:14:0d:
92:cb:6c:3a:01:53:26:f1:1b:ce:86:03:05:47:c0:
7f:a0:3a:8b:5e:bb:ec:f5:da:6b:02:58:1c:e0:49:
66:11:34:08:6c:47:28:e1:f4:ff:54:84:39:18:0d:
51:8b:6b:e5:bf:1f:e4:c9:bd:7a:7d:27:43:bd:28:
a1:6c:d0:1f:94:8b:d9:ff:03:1b:6c:27:4c:5f:70:
7c:84:96:da:b3:10:93:42:fa:f4:63:d7:dc:cd:e2:
e4:d6:a8:9a:36:7c:5d:2a:3d:c1:8b:f8:f9:84:e2:
ea:6a:de:1b:b4:cb:21:bc:48:3d:a5:44:99:ac:9d:
eb:6c:85:3c:15:41:10:9c:bc:cd:4a:51:f5:f9:da:
a5:dd:7d:83:94:17:32:51:d6:75:7e:bc:f5:0e:2d:
8d:92:ee:ad:79:0a:29:cc:4c:be:97:1c:e6:f8:ed:
22:69:be:df:8b:03:d6:7b:86:9f:6f:52:6e:bf:a9:
6d:78:6f:0a:12:bf:84:5b:f9:60:e2:58:4a:48:92:
34:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:CD:9A:7F:2F:3A:E7:C7:6A:76:10:81:C8:C1:83:38:9E:BD:8A:4A
X509v3 Authority Key Identifier:
keyid:55:9A:76:94:12:D2:D9:63:B4:91:EB:E3:1D:44:11:1D:CA:FC:CC:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VZp2lBLS2WO0kevjHUQRHcr8zJQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/d45d3f-57ad-4ca1-b8df-7e253e6398e5/1/VZp2lBLS2WO0kevjHUQRHcr8zJQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:03:57:fe:e7:5f:d9:35:05:ce:8d:79:09:81:c5:1b:ac:93:
36:d1:b2:95:5d:27:1e:bf:65:e7:03:3c:0c:c4:23:50:fd:7b:
8b:d4:1c:7c:84:36:c2:5a:7d:77:3d:78:2c:70:70:a9:67:52:
cf:a6:96:44:26:ff:2e:ec:52:ac:ce:b2:c4:df:4e:63:56:ec:
26:25:96:b5:95:d0:ba:d3:48:57:9c:6f:86:69:85:f0:e7:4a:
9c:c2:1f:62:f8:a5:7c:84:da:d3:79:55:ba:54:c2:c9:d5:e4:
68:6c:fe:5e:a6:44:63:46:c5:2a:65:09:7e:12:f6:48:98:47:
b6:73:d2:d4:c6:0d:64:f9:d5:98:3c:7c:a5:ac:af:ed:8d:14:
b7:e7:6c:08:02:7f:75:34:87:75:c7:93:b7:a5:81:c9:d1:72:
9a:e4:6f:4f:0c:03:97:30:03:88:2d:5c:af:d0:13:4d:72:aa:
19:b5:a8:b4:05:b0:f0:c4:2b:57:5e:85:8d:81:52:de:e3:0e:
5f:9e:f1:c1:9e:73:60:e4:c0:6a:7c:63:02:42:6a:10:27:8b:
0c:b1:39:19:b3:78:ce:a7:26:33:d8:61:a8:70:48:5e:cb:d1:
70:45:03:bc:49:28:da:b0:d1:7e:93:c5:24:d8:b3:9d:ca:4b:
93:26:79:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ohUu0JkUAUxsiAy8U8sIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1OWE3Njk0MTJkMmQ5NjNiNDkxZWJlMzFkNDQxMTFkY2Fm
Y2NjOTQwHhcNMjUwNjI4MTMwMjQ0WhcNMjUwNjI5MTMwMjQ0WjAzMTEwLwYDVQQD
Eyg1NmNkOWE3ZjJmM2FlN2M3NmE3NjEwODFjOGMxODMzODllYmQ4YTRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs6sIxfrAbNqfcoBU3ptYrpYa9PdP
FwUIxJIRSGdZhAXskFgXc1/9Xy3BVm7vrKbKwZfqIsEtuQ+pFA2Sy2w6AVMm8RvO
hgMFR8B/oDqLXrvs9dprAlgc4ElmETQIbEco4fT/VIQ5GA1Ri2vlvx/kyb16fSdD
vSihbNAflIvZ/wMbbCdMX3B8hJbasxCTQvr0Y9fczeLk1qiaNnxdKj3Bi/j5hOLq
at4btMshvEg9pUSZrJ3rbIU8FUEQnLzNSlH1+dql3X2DlBcyUdZ1frz1Di2Nku6t
eQopzEy+lxzm+O0iab7fiwPWe4afb1Juv6lteG8KEr+EW/lg4lhKSJI0xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFbNmn8vOufHanYQgcjBgzievYpKMB8GA1UdIwQY
MBaAFFWadpQS0tljtJHr4x1EER3K/MyUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlpwMmxCTFMyV08wa2V2akhVUVJIY3I4ekpRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9kNDVkM2YtNTdhZC00Y2ExLWI4ZGYt
N2UyNTNlNjM5OGU1LzEvVlpwMmxCTFMyV08wa2V2akhVUVJIY3I4ekpRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9kNDVkM2YtNTdhZC00Y2ExLWI4ZGYtN2UyNTNlNjM5OGU1
LzEvVlpwMmxCTFMyV08wa2V2akhVUVJIY3I4ekpRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIgNX/udf
2TUFzo15CYHFG6yTNtGylV0nHr9l5wM8DMQjUP17i9QcfIQ2wlp9dz14LHBwqWdS
z6aWRCb/LuxSrM6yxN9OY1bsJiWWtZXQutNIV5xvhmmF8OdKnMIfYvilfITa03lV
ulTCydXkaGz+XqZEY0bFKmUJfhL2SJhHtnPS1MYNZPnVmDx8payv7Y0Ut+dsCAJ/
dTSHdceTt6WBydFymuRvTwwDlzADiC1cr9ATTXKqGbWotAWw8MQrV16FjYFS3uMO
X57xwZ5zYOTAanxjAkJqECeLDLE5GbN4zqcmM9hhqHBIXsvRcEUDvEko2rDRfpPF
JNizncpLkyZ5tA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:01:51 2025 by rpki-client