Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: J/rbk+cfwHoBdt2a4yo4uAQsJjhIqGERmvpiuWKjlOo=
Subject key identifier: FB:2A:D8:D1:18:43:F6:FB:AE:E8:B7:1F:1E:AF:C9:0E:CB:03:A5:7D
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 0197B9A190752C6750E118E831705600BC94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0A43
Signing time: Sun 29 Jun 2025 03:01:02 +0000
Manifest this update: Sun 29 Jun 2025 03:01:02 +0000
Manifest next update: Mon 30 Jun 2025 03:01:02 +0000
Files and hashes: 1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=)
2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: VmPy9WWjpLpzx691QB9kSAJMrnQZ8/qTlHyAhDBPejE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 03:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:90:75:2c:67:50:e1:18:e8:31:70:56:00:bc:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Jun 29 03:01:02 2025 GMT
Not After : Jun 30 03:01:02 2025 GMT
Subject: CN=fb2ad8d11843f6fbaee8b71f1eafc90ecb03a57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:b7:8a:33:64:1e:90:6a:2b:33:d0:c9:de:b4:
c8:ed:bb:31:8f:ca:a0:3a:08:3a:aa:44:1a:3a:9f:
ea:71:08:28:39:af:98:75:8a:f0:f1:1b:c2:58:42:
1e:1a:3a:52:d5:80:0e:38:88:3a:fa:cb:db:42:13:
07:45:07:ca:8f:08:d9:f9:4f:6c:9a:f3:35:04:6e:
da:ad:67:ca:39:0e:87:9c:fc:49:56:de:f4:39:ba:
d7:52:75:67:17:4b:2a:db:1d:2a:9e:5d:cd:ed:ac:
06:74:0c:3b:be:0f:23:67:9c:19:17:29:c9:0f:47:
7d:3c:c6:dd:f1:5d:62:0f:57:48:25:0f:ab:fb:ab:
66:2e:a3:33:33:ee:87:df:c5:36:42:62:8b:58:66:
71:48:b7:9b:24:33:fb:56:8b:48:e0:b2:e4:cf:51:
b6:8f:57:43:ec:95:0c:c7:21:34:be:f6:ec:96:8f:
65:dd:2f:6e:59:ba:24:65:26:6f:6b:c3:70:2b:41:
3a:d6:f3:22:e7:a5:4d:50:04:e3:77:38:54:e6:88:
fd:4f:68:3f:2e:c7:6e:06:79:7e:cc:33:0d:08:fb:
60:de:c3:ad:f7:26:38:55:bb:20:43:89:7c:db:c2:
41:0e:51:51:9c:9d:6f:3d:40:df:bb:97:40:2b:b1:
67:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FB:2A:D8:D1:18:43:F6:FB:AE:E8:B7:1F:1E:AF:C9:0E:CB:03:A5:7D
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:f9:2d:9b:3f:45:35:b2:73:51:1d:8b:55:dc:a6:7e:ff:e8:
7b:02:89:70:c9:ee:cc:53:6a:29:78:25:0d:c8:3f:61:cc:ba:
90:5f:1c:36:23:05:4f:c4:91:e1:6f:9a:12:73:b7:96:16:97:
cc:56:08:f6:2b:13:5e:e5:19:7e:16:36:98:8a:a0:c5:55:08:
58:23:8d:97:3a:c7:29:74:f7:26:4f:f9:8f:25:6c:31:77:b2:
f8:b0:be:29:90:34:92:40:92:45:e1:18:09:9f:62:48:58:39:
2b:9c:e2:c9:f9:5e:9f:46:65:59:2a:78:9c:bd:84:51:f9:44:
ce:5b:b8:ac:b4:19:db:23:d4:04:80:f9:e2:43:01:e4:d9:78:
0a:58:dd:03:9b:44:90:3d:cd:c0:06:11:ed:fc:c9:c7:67:26:
20:02:62:c1:51:c5:b3:f1:ab:a7:ed:63:80:3e:41:83:88:28:
1b:76:d3:78:13:3b:62:5e:f5:b3:2a:ea:5b:8e:ec:d7:5a:f4:
56:37:c1:8a:5b:a5:f0:75:e2:5b:92:48:e6:02:15:ff:c4:19:
1e:e2:cf:d7:85:2c:3e:e4:86:f4:a2:e7:39:7d:08:3e:20:c3:
80:2a:2f:3b:21:83:0a:89:06:02:6e:89:ab:45:92:05:e0:20:
47:a7:38:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oZB1LGdQ4RjoMXBWALyUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNjE0NGI0NTliY2UxMzlmMjczNGE0NGZiZGI0NmM5ODEz
MjliMmIwHhcNMjUwNjI5MDMwMTAyWhcNMjUwNjMwMDMwMTAyWjAzMTEwLwYDVQQD
EyhmYjJhZDhkMTE4NDNmNmZiYWVlOGI3MWYxZWFmYzkwZWNiMDNhNTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo7eKM2QekGorM9DJ3rTI7bsxj8qg
Ogg6qkQaOp/qcQgoOa+YdYrw8RvCWEIeGjpS1YAOOIg6+svbQhMHRQfKjwjZ+U9s
mvM1BG7arWfKOQ6HnPxJVt70ObrXUnVnF0sq2x0qnl3N7awGdAw7vg8jZ5wZFynJ
D0d9PMbd8V1iD1dIJQ+r+6tmLqMzM+6H38U2QmKLWGZxSLebJDP7VotI4LLkz1G2
j1dD7JUMxyE0vvbslo9l3S9uWbokZSZva8NwK0E61vMi56VNUATjdzhU5oj9T2g/
LsduBnl+zDMNCPtg3sOt9yY4VbsgQ4l828JBDlFRnJ1vPUDfu5dAK7FnYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPsq2NEYQ/b7rui3Hx6vyQ7LA6V9MB8GA1UdIwQY
MBaAFL5hRLRZvOE58nNKRPvbRsmBMpsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2Yt
MTdlZmE1N2IzOWQ3LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2YtMTdlZmE1N2IzOWQ3
LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEfktmz9F
NbJzUR2LVdymfv/oewKJcMnuzFNqKXglDcg/Ycy6kF8cNiMFT8SR4W+aEnO3lhaX
zFYI9isTXuUZfhY2mIqgxVUIWCONlzrHKXT3Jk/5jyVsMXey+LC+KZA0kkCSReEY
CZ9iSFg5K5ziyflen0ZlWSp4nL2EUflEzlu4rLQZ2yPUBID54kMB5Nl4CljdA5tE
kD3NwAYR7fzJx2cmIAJiwVHFs/Grp+1jgD5Bg4goG3bTeBM7Yl71syrqW47s11r0
VjfBilul8HXiW5JI5gIV/8QZHuLP14UsPuSG9KLnOX0IPiDDgCovOyGDCokGAm6J
q0WSBeAgR6c4bw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 09:31:14 2025 by rpki-client