Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
File: VWyanGGYCpC10MUfhtfLrJ_xQto.mft (raw, json)
Hash identifier: e6nRBegPspU0WQQ5U7zS9RJUVmK39xZKWpzth4cMpOw=
Subject key identifier: 23:DD:BA:F9:3A:86:CC:0B:2C:3F:4B:E0:82:BB:F7:76:01:75:3A:8D
Authority key identifier: 55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
Certificate issuer: /CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Certificate serial: 0197B77C064146355566C106ADC843B9F55D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 17:00:47 +0000
Manifest this update: Sat 28 Jun 2025 17:00:47 +0000
Manifest next update: Sun 29 Jun 2025 17:00:47 +0000
Files and hashes: 1: VWyanGGYCpC10MUfhtfLrJ_xQto.crl (hash: E82waPeQe0HQ8Jlp1MmijQL/6e4+J32smUxuRhPGGNQ=)
2: haz-HdaagkevUDJWOKHcKbMpfs4.roa (hash: 4MYVAihmuy2VBnQslitsGPSQAlGwL1bJXLz/oBhLSUI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:06:41:46:35:55:66:c1:06:ad:c8:43:b9:f5:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=556c9a9c61980a90b5d0c51f86d7cbac9ff142da
Validity
Not Before: Jun 28 17:00:47 2025 GMT
Not After : Jun 29 17:00:47 2025 GMT
Subject: CN=23ddbaf93a86cc0b2c3f4be082bbf77601753a8d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:f9:fd:f7:db:c4:24:84:f7:c3:5f:f1:9d:df:
4d:6c:0c:35:e5:0b:99:51:53:f3:ff:95:f1:49:ce:
64:ca:4f:6a:2a:5d:12:0e:9d:b9:a1:33:d4:f6:54:
20:1b:18:43:2b:f4:55:60:a5:8d:28:59:af:de:fb:
95:d0:b5:5d:53:81:11:b7:82:e1:f4:c0:a8:1a:26:
44:b3:2b:51:b6:8f:8c:d7:28:79:03:be:03:68:fd:
f1:39:54:e9:9d:08:ac:a8:a8:5e:91:71:9c:86:6f:
80:5d:33:84:de:c3:61:40:73:cf:27:7e:93:9b:b1:
74:c5:81:bf:93:16:76:82:55:e0:af:ee:2a:28:3b:
24:06:e5:b9:d8:74:b1:f9:d9:26:57:69:fc:1f:c9:
e5:74:72:3c:8a:27:c5:01:95:ed:9d:6d:59:76:d2:
b2:50:99:c3:0b:e0:88:3c:15:16:6a:78:8c:57:86:
85:0b:74:44:db:95:1c:b1:53:b3:5d:95:70:0a:03:
06:e8:82:91:6d:e1:15:27:1f:4c:f6:be:0e:7d:1d:
91:73:e0:e0:fd:71:1d:45:a6:a1:9a:5d:43:b0:58:
ed:8a:d7:55:56:96:a9:3a:05:69:ea:19:6a:85:b3:
4d:72:c6:7f:41:c9:22:c1:5c:ee:6f:66:4c:61:77:
ad:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:DD:BA:F9:3A:86:CC:0B:2C:3F:4B:E0:82:BB:F7:76:01:75:3A:8D
X509v3 Authority Key Identifier:
keyid:55:6C:9A:9C:61:98:0A:90:B5:D0:C5:1F:86:D7:CB:AC:9F:F1:42:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VWyanGGYCpC10MUfhtfLrJ_xQto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/25a747-8426-430a-9e30-45b3443a76f9/1/VWyanGGYCpC10MUfhtfLrJ_xQto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:1d:58:7b:a2:fd:56:17:45:5d:9f:da:86:25:ba:a0:69:b7:
1a:54:97:92:d4:43:7a:b3:b2:3d:41:b7:ee:9c:0e:52:3e:68:
d2:0a:78:a1:58:38:2e:5a:83:36:a9:52:38:f2:bc:c5:46:5b:
a0:b2:22:28:30:94:d0:27:b6:2e:92:8e:b3:2d:69:f1:4e:fa:
aa:55:a3:05:c0:3c:97:6c:ea:a3:4f:32:57:05:23:39:e8:06:
c0:bd:23:8d:d5:89:35:6f:eb:83:84:88:2d:73:0a:b7:a3:74:
cd:44:88:52:b4:12:b8:39:cf:79:20:32:9c:29:a7:68:04:89:
9b:7f:20:62:ca:c3:fe:6d:56:24:d7:0f:78:b6:a6:c7:52:b6:
77:ce:f0:28:2a:6c:ee:c0:3a:e1:e7:63:38:d5:a7:47:d5:dc:
ad:73:e7:a9:78:6a:2f:7c:96:79:ec:6d:d5:40:cb:d7:33:7a:
a4:e8:fd:dc:c2:a2:5b:f2:3b:d9:44:dd:e9:26:33:3c:68:29:
2b:c4:0b:29:b9:80:96:1f:05:2d:b5:6c:1e:9e:63:45:3a:93:
78:37:8b:33:ee:60:3a:46:5d:27:bf:bb:1a:7d:5e:11:9f:3f:
c7:77:07:42:70:13:df:0b:c3:bc:f7:65:1b:92:a6:9c:d9:33:
e1:e0:4c:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fAZBRjVVZsEGrchDufVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1NmM5YTljNjE5ODBhOTBiNWQwYzUxZjg2ZDdjYmFjOWZm
MTQyZGEwHhcNMjUwNjI4MTcwMDQ3WhcNMjUwNjI5MTcwMDQ3WjAzMTEwLwYDVQQD
EygyM2RkYmFmOTNhODZjYzBiMmMzZjRiZTA4MmJiZjc3NjAxNzUzYThkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkfn999vEJIT3w1/xnd9NbAw15QuZ
UVPz/5XxSc5kyk9qKl0SDp25oTPU9lQgGxhDK/RVYKWNKFmv3vuV0LVdU4ERt4Lh
9MCoGiZEsytRto+M1yh5A74DaP3xOVTpnQisqKhekXGchm+AXTOE3sNhQHPPJ36T
m7F0xYG/kxZ2glXgr+4qKDskBuW52HSx+dkmV2n8H8nldHI8iifFAZXtnW1ZdtKy
UJnDC+CIPBUWaniMV4aFC3RE25UcsVOzXZVwCgMG6IKRbeEVJx9M9r4OfR2Rc+Dg
/XEdRaahml1DsFjtitdVVpapOgVp6hlqhbNNcsZ/QckiwVzub2ZMYXetzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCPduvk6hswLLD9L4IK793YBdTqNMB8GA1UdIwQY
MBaAFFVsmpxhmAqQtdDFH4bXy6yf8ULaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8yNWE3NDctODQyNi00MzBhLTllMzAt
NDViMzQ0M2E3NmY5LzEvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8yNWE3NDctODQyNi00MzBhLTllMzAtNDViMzQ0M2E3NmY5
LzEvVld5YW5HR1lDcEMxME1VZmh0ZkxySl94UXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOB1Ye6L9
VhdFXZ/ahiW6oGm3GlSXktRDerOyPUG37pwOUj5o0gp4oVg4LlqDNqlSOPK8xUZb
oLIiKDCU0Ce2LpKOsy1p8U76qlWjBcA8l2zqo08yVwUjOegGwL0jjdWJNW/rg4SI
LXMKt6N0zUSIUrQSuDnPeSAynCmnaASJm38gYsrD/m1WJNcPeLamx1K2d87wKCps
7sA64edjONWnR9XcrXPnqXhqL3yWeext1UDL1zN6pOj93MKiW/I72UTd6SYzPGgp
K8QLKbmAlh8FLbVsHp5jRTqTeDeLM+5gOkZdJ7+7Gn1eEZ8/x3cHQnAT3wvDvPdl
G5KmnNkz4eBM8g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:26:38 2025 by rpki-client