Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
File: VCG6S1ORYtfvGRpWYgSeUf3DYis.mft (raw, json)
Hash identifier: vIPKTCrsq/r+WAuRG+eSYsh9WlYZXUsqA9qQWdUs+PY=
Subject key identifier: C7:5E:B9:FD:6E:4D:3E:3C:ED:53:CB:86:FB:47:1D:83:7E:6D:02:AF
Authority key identifier: 54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
Certificate issuer: /CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Certificate serial: 0197B77C8A2384DAFABC171FCDD39C891E7C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 17:01:21 +0000
Manifest this update: Sat 28 Jun 2025 17:01:21 +0000
Manifest next update: Sun 29 Jun 2025 17:01:21 +0000
Files and hashes: 1: QA9NVOBnP4tDAeAGKeBBrJK6jXk.roa (hash: /S3zUwTrf17IztbM7bS/w8GxX/h5PWsNVviHHhl5zF8=)
2: VCG6S1ORYtfvGRpWYgSeUf3DYis.crl (hash: dq+KAIwXpo53Ewu+y8xQUn0fQRKbT7R4WHe7mwLB7RY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:8a:23:84:da:fa:bc:17:1f:cd:d3:9c:89:1e:7c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5421ba4b539162d7ef191a5662049e51fdc3622b
Validity
Not Before: Jun 28 17:01:21 2025 GMT
Not After : Jun 29 17:01:21 2025 GMT
Subject: CN=c75eb9fd6e4d3e3ced53cb86fb471d837e6d02af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f9:f3:8f:df:56:63:99:e8:78:3e:ab:cb:d4:
10:b7:a1:b9:7b:4a:96:fc:fc:22:97:46:47:05:84:
49:83:6e:08:43:fa:2b:54:ca:7a:18:84:ce:73:fc:
28:a4:56:ec:3b:24:34:25:d2:0a:db:63:d0:82:7b:
b7:f2:cf:ae:cb:69:e8:b0:da:8e:8f:61:cb:1e:55:
72:13:cf:e3:61:c7:05:b8:07:85:4d:df:8c:92:31:
68:b9:4f:83:c4:9b:ea:f6:8a:12:7d:68:f9:a4:4a:
43:9a:2a:b9:a3:fb:aa:be:b9:d8:f6:d7:2f:09:11:
8e:d4:d9:8a:8e:de:89:ab:42:68:32:9c:2c:15:11:
0f:8a:ea:6b:41:7d:9e:a5:0c:d8:fb:6c:41:e5:00:
92:3a:91:e2:f2:79:fd:35:a6:11:ef:47:39:cf:60:
18:33:e0:ff:01:db:df:50:72:63:d8:1b:c1:f4:6d:
22:d7:69:85:ea:7d:aa:45:67:f0:96:84:99:b5:ad:
a8:73:67:c4:95:98:63:35:2c:e3:f0:cf:96:fd:a2:
0e:d0:0c:14:d9:37:2a:01:da:c8:e8:4d:6c:4e:6f:
e5:bf:8d:cd:40:13:6a:2a:5b:79:88:35:95:05:8f:
15:69:f9:ee:e7:6a:f1:a3:ca:c0:96:12:a6:6c:29:
4e:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:5E:B9:FD:6E:4D:3E:3C:ED:53:CB:86:FB:47:1D:83:7E:6D:02:AF
X509v3 Authority Key Identifier:
keyid:54:21:BA:4B:53:91:62:D7:EF:19:1A:56:62:04:9E:51:FD:C3:62:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCG6S1ORYtfvGRpWYgSeUf3DYis.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/3aee7a-15b5-43d6-8275-ef063e786e54/1/VCG6S1ORYtfvGRpWYgSeUf3DYis.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:2a:e3:1b:38:ed:f5:a5:52:35:32:27:cd:cd:71:f8:29:0f:
5f:87:a2:c3:f3:36:4f:06:43:88:6b:34:f4:83:8c:44:2c:f3:
0e:a8:b1:f1:46:86:e3:ac:58:ec:13:17:fe:54:e0:ab:73:10:
01:4f:f9:4a:fb:23:f2:55:fd:25:0e:fe:6b:41:e7:ca:06:4e:
ce:25:16:12:24:2c:48:95:19:2f:6f:ae:d9:2a:c0:86:d3:6d:
05:0b:a3:78:c3:01:39:52:19:31:2e:4b:3a:4e:19:b9:a1:9c:
74:59:5d:15:f7:da:88:ae:77:de:f0:57:c7:a0:87:0b:b5:4e:
b2:68:9e:a7:a3:dc:38:16:a2:6a:6d:1f:c0:c7:15:79:c3:a8:
c8:ca:9d:eb:3f:9c:0c:8a:23:ac:d3:58:8a:3d:d3:4e:db:25:
83:cb:74:b6:fb:3d:77:d1:17:87:23:ef:29:8c:50:00:81:00:
4a:33:a8:69:21:80:b6:1f:fb:1d:f2:d7:c2:b2:05:d8:0a:c1:
a8:e2:8d:d8:ba:47:ae:58:c9:67:83:95:b5:c4:6b:38:26:a7:
50:5b:73:fc:5e:54:fd:f2:80:15:ad:a3:61:18:1e:37:de:b8:
47:3d:bb:59:68:99:7a:d0:6c:59:5d:d0:ea:75:54:ac:e6:de:
b0:54:d4:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fIojhNr6vBcfzdOciR58MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MjFiYTRiNTM5MTYyZDdlZjE5MWE1NjYyMDQ5ZTUxZmRj
MzYyMmIwHhcNMjUwNjI4MTcwMTIxWhcNMjUwNjI5MTcwMTIxWjAzMTEwLwYDVQQD
EyhjNzVlYjlmZDZlNGQzZTNjZWQ1M2NiODZmYjQ3MWQ4MzdlNmQwMmFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/nzj99WY5noeD6ry9QQt6G5e0qW
/Pwil0ZHBYRJg24IQ/orVMp6GITOc/wopFbsOyQ0JdIK22PQgnu38s+uy2nosNqO
j2HLHlVyE8/jYccFuAeFTd+MkjFouU+DxJvq9ooSfWj5pEpDmiq5o/uqvrnY9tcv
CRGO1NmKjt6Jq0JoMpwsFREPiuprQX2epQzY+2xB5QCSOpHi8nn9NaYR70c5z2AY
M+D/AdvfUHJj2BvB9G0i12mF6n2qRWfwloSZta2oc2fElZhjNSzj8M+W/aIO0AwU
2TcqAdrI6E1sTm/lv43NQBNqKlt5iDWVBY8Vafnu52rxo8rAlhKmbClOgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMdeuf1uTT487VPLhvtHHYN+bQKvMB8GA1UdIwQY
MBaAFFQhuktTkWLX7xkaVmIEnlH9w2IrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8zYWVlN2EtMTViNS00M2Q2LTgyNzUt
ZWYwNjNlNzg2ZTU0LzEvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8zYWVlN2EtMTViNS00M2Q2LTgyNzUtZWYwNjNlNzg2ZTU0
LzEvVkNHNlMxT1JZdGZ2R1JwV1lnU2VVZjNEWWlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAByrjGzjt
9aVSNTInzc1x+CkPX4eiw/M2TwZDiGs09IOMRCzzDqix8UaG46xY7BMX/lTgq3MQ
AU/5Svsj8lX9JQ7+a0HnygZOziUWEiQsSJUZL2+u2SrAhtNtBQujeMMBOVIZMS5L
Ok4ZuaGcdFldFffaiK533vBXx6CHC7VOsmiep6PcOBaiam0fwMcVecOoyMqd6z+c
DIojrNNYij3TTtslg8t0tvs9d9EXhyPvKYxQAIEASjOoaSGAth/7HfLXwrIF2ArB
qOKN2LpHrljJZ4OVtcRrOCanUFtz/F5U/fKAFa2jYRgeN964Rz27WWiZetBsWV3Q
6nVUrObesFTUng==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:45 2025 by rpki-client