Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
File: vkOZUom2pcqXLEuHteMUnDLLRDA.mft (raw, json)
Hash identifier: RNF27ccUqIDRNnw4eSfqy0P9t/fBgRrWV04neYrAaz4=
Subject key identifier: 36:55:61:63:8B:FE:99:2C:8C:A7:F9:AA:A9:A0:56:3D:A4:05:DB:A0
Authority key identifier: BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
Certificate issuer: /CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Certificate serial: 0197B77C528CF6DC3001C702D393F5880D14
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
Manifest number: 137C
Signing time: Sat 28 Jun 2025 17:01:07 +0000
Manifest this update: Sat 28 Jun 2025 17:01:07 +0000
Manifest next update: Sun 29 Jun 2025 17:01:07 +0000
Files and hashes: 1: 8fMw7PIEmcuZ4SQ2ToyoBpDjoJU.roa (hash: lfgDrB7NQSrt5KaQ0P2PrRAn8atRZykuTXvKRd7fgJo=)
2: e0TEu5beAVWeSmXxkW6X6x2gBHA.roa (hash: bCc+ujeebjVb3R0AjVp+lBJExzxOGb5apQpq8yxW908=)
3: vkOZUom2pcqXLEuHteMUnDLLRDA.crl (hash: +91sjmWfNFk0YMv7QTkcR7FBFlb7MW5PXWF5e/KXgDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:52:8c:f6:dc:30:01:c7:02:d3:93:f5:88:0d:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43995289b6a5ca972c4b87b5e3149c32cb4430
Validity
Not Before: Jun 28 17:01:07 2025 GMT
Not After : Jun 29 17:01:07 2025 GMT
Subject: CN=365561638bfe992c8ca7f9aaa9a0563da405dba0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:87:8a:b1:1b:f7:4d:fc:9c:e9:9e:be:02:bc:
66:8d:0e:4f:72:b1:24:ba:fc:55:c6:76:67:02:df:
0c:e2:9e:1e:a2:c6:42:99:ff:45:06:ed:e7:e5:ab:
77:86:0b:1b:50:a5:e5:7e:ff:1d:80:39:aa:fd:08:
b2:3d:16:84:53:71:f4:99:6a:31:9e:23:4a:56:a3:
4f:81:54:42:cf:f6:67:78:da:98:1c:19:e2:d3:1c:
c1:9c:77:c1:41:7f:8f:7c:23:1f:41:73:e4:a7:61:
e2:b8:86:9b:2c:72:bc:91:4c:d4:b6:a3:c6:99:f7:
f7:ad:56:e1:51:bc:40:73:88:76:a3:74:1f:3e:3e:
e5:96:b4:97:ad:40:37:06:bc:ea:61:92:20:f3:ab:
8f:6a:95:dd:65:39:57:a9:7c:db:a9:56:8d:d8:f0:
45:cb:46:44:a6:e6:a9:08:2c:9b:8b:6f:ab:3c:dc:
fc:ed:23:52:7f:c4:7a:81:4f:40:32:f6:d9:62:4d:
ff:d0:8c:70:22:68:73:b7:5a:5d:02:d5:83:b7:ec:
77:81:bc:30:4a:0c:66:74:43:e1:23:d4:1f:8d:b4:
d6:1b:79:78:57:e4:db:be:21:88:68:27:2a:4b:6c:
ec:fd:ff:a0:60:ab:07:02:60:37:84:46:2a:d7:75:
69:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:55:61:63:8B:FE:99:2C:8C:A7:F9:AA:A9:A0:56:3D:A4:05:DB:A0
X509v3 Authority Key Identifier:
keyid:BE:43:99:52:89:B6:A5:CA:97:2C:4B:87:B5:E3:14:9C:32:CB:44:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkOZUom2pcqXLEuHteMUnDLLRDA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/764b34-0d98-454c-85a2-306045efcd68/1/vkOZUom2pcqXLEuHteMUnDLLRDA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:5c:d7:8b:f4:7c:8f:06:a7:da:bc:c3:bf:91:d7:86:05:8a:
02:14:45:c4:21:04:a3:6e:f0:57:de:15:52:e4:67:85:2c:c1:
f6:cf:dc:d6:c8:cb:3a:6e:ea:43:e8:c6:c5:3c:90:42:8d:42:
62:da:aa:05:a3:4f:ff:9f:f5:8c:94:b7:2e:51:b6:06:b0:ca:
ca:a2:f2:01:43:3a:17:d2:69:55:4e:5e:5f:0d:0b:0b:cc:17:
54:29:93:6c:b7:0d:d6:9a:da:9c:e4:e0:30:bf:c2:0a:0a:be:
81:a9:12:ca:98:54:31:dd:fa:ba:3c:de:92:39:ae:b9:51:3e:
4f:00:f9:18:c4:e1:94:4c:94:75:9d:2d:55:c9:df:6e:37:e1:
fc:7b:7c:27:52:57:fc:55:ad:74:ff:11:88:c8:6a:84:0a:dc:
bb:4b:59:e3:11:5b:de:29:45:02:c0:c3:57:01:a1:53:5c:c8:
b5:c6:30:e8:77:de:78:fc:63:de:db:fd:2e:6b:96:d5:d4:92:
9c:2f:2f:57:8b:3b:92:38:69:73:cd:38:a4:88:fe:84:6f:33:
7c:90:04:40:4c:86:51:c6:9f:40:2d:7a:62:54:d3:3c:bd:e1:
97:73:55:b2:ce:85:1c:42:b0:65:51:ca:0d:f9:f1:7f:63:bb:
59:8a:4c:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fFKM9twwAccC05P1iA0UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDM5OTUyODliNmE1Y2E5NzJjNGI4N2I1ZTMxNDljMzJj
YjQ0MzAwHhcNMjUwNjI4MTcwMTA3WhcNMjUwNjI5MTcwMTA3WjAzMTEwLwYDVQQD
EygzNjU1NjE2MzhiZmU5OTJjOGNhN2Y5YWFhOWEwNTYzZGE0MDVkYmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvoeKsRv3Tfyc6Z6+ArxmjQ5PcrEk
uvxVxnZnAt8M4p4eosZCmf9FBu3n5at3hgsbUKXlfv8dgDmq/QiyPRaEU3H0mWox
niNKVqNPgVRCz/ZneNqYHBni0xzBnHfBQX+PfCMfQXPkp2HiuIabLHK8kUzUtqPG
mff3rVbhUbxAc4h2o3QfPj7llrSXrUA3BrzqYZIg86uPapXdZTlXqXzbqVaN2PBF
y0ZEpuapCCybi2+rPNz87SNSf8R6gU9AMvbZYk3/0IxwImhzt1pdAtWDt+x3gbww
SgxmdEPhI9QfjbTWG3l4V+TbviGIaCcqS2zs/f+gYKsHAmA3hEYq13VpGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDZVYWOL/pksjKf5qqmgVj2kBdugMB8GA1UdIwQY
MBaAFL5DmVKJtqXKlyxLh7XjFJwyy0QwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTIt
MzA2MDQ1ZWZjZDY4LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83NjRiMzQtMGQ5OC00NTRjLTg1YTItMzA2MDQ1ZWZjZDY4
LzEvdmtPWlVvbTJwY3FYTEV1SHRlTVVuRExMUkRBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM1zXi/R8
jwan2rzDv5HXhgWKAhRFxCEEo27wV94VUuRnhSzB9s/c1sjLOm7qQ+jGxTyQQo1C
YtqqBaNP/5/1jJS3LlG2BrDKyqLyAUM6F9JpVU5eXw0LC8wXVCmTbLcN1pranOTg
ML/CCgq+gakSyphUMd36ujzekjmuuVE+TwD5GMThlEyUdZ0tVcnfbjfh/Ht8J1JX
/FWtdP8RiMhqhArcu0tZ4xFb3ilFAsDDVwGhU1zItcYw6HfeePxj3tv9LmuW1dSS
nC8vV4s7kjhpc804pIj+hG8zfJAEQEyGUcafQC16YlTTPL3hl3NVss6FHEKwZVHK
Dfnxf2O7WYpMWQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:33:10 2025 by rpki-client