Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
File: VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft (raw, json)
Hash identifier: iCmAoVDwGWctHBKsCaErNG1ETnjSuriR5a4ZUxYaVZY=
Subject key identifier: 6E:2D:E7:88:8A:69:F6:53:EE:CC:2A:5E:28:51:5E:5D:FC:6C:E0:96
Authority key identifier: 54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D
Certificate issuer: /CN=54495a2f41cd105aef06f2870a76339801edb90d
Certificate serial: 0197790AC894A794828ADB411A9B01CE7A0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
Manifest number: 0184
Signing time: Mon 16 Jun 2025 14:00:39 +0000
Manifest this update: Mon 16 Jun 2025 14:00:39 +0000
Manifest next update: Tue 17 Jun 2025 14:00:39 +0000
Files and hashes: 1: VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl (hash: 0NK2YGLjS5qNtRJMJEPlx091tG7QcYg2ldj4BoBpomc=)
2: iWKzGh5m2_oz6qvqBjoyFnizgxw.roa (hash: YVbdlpkB57bicqIuUwT2dIakABg210l0QU3avOsuQbo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:0a:c8:94:a7:94:82:8a:db:41:1a:9b:01:ce:7a:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54495a2f41cd105aef06f2870a76339801edb90d
Validity
Not Before: Jun 16 14:00:39 2025 GMT
Not After : Jun 17 14:00:39 2025 GMT
Subject: CN=6e2de7888a69f653eecc2a5e28515e5dfc6ce096
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:4b:79:51:61:68:6d:09:1c:12:d6:39:9d:c0:
8b:c6:6f:4e:f1:99:a7:b6:78:26:db:e7:cd:41:65:
b3:95:10:3c:c3:9a:66:28:7c:c1:ca:80:83:36:c0:
76:e6:12:34:c4:af:4e:50:45:df:8f:c2:b8:2d:64:
8f:81:01:e1:e8:ee:87:2e:ab:27:69:f1:fe:71:46:
86:17:7d:0a:c1:0d:01:60:20:0e:0c:aa:79:82:77:
c8:d4:19:46:32:08:01:bf:cf:da:68:74:91:78:b4:
20:24:93:18:76:2f:f1:56:de:23:89:af:ce:3c:2e:
a0:0b:cf:b9:16:79:1c:94:4f:6f:d1:b5:0f:d2:13:
2a:0d:33:ad:47:b0:04:e7:ba:e2:64:b8:87:18:45:
49:1c:9d:22:da:ac:ae:d3:c2:30:50:7c:2a:fd:fb:
78:a5:9a:06:09:c0:47:1b:a2:8f:61:5a:26:f9:95:
38:0a:2a:33:3c:5c:2b:35:8c:e8:c9:66:06:8f:38:
b3:0b:a6:da:32:8f:df:75:4a:98:a8:b2:2b:2c:b7:
ee:1f:17:d8:5b:17:11:ed:51:4b:37:fb:0d:78:79:
e5:ac:85:00:09:eb:ed:2c:5b:8a:02:aa:51:aa:d8:
5e:d8:95:da:bb:60:76:05:d5:c7:ee:92:0a:28:a5:
66:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6E:2D:E7:88:8A:69:F6:53:EE:CC:2A:5E:28:51:5E:5D:FC:6C:E0:96
X509v3 Authority Key Identifier:
keyid:54:49:5A:2F:41:CD:10:5A:EF:06:F2:87:0A:76:33:98:01:ED:B9:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VElaL0HNEFrvBvKHCnYzmAHtuQ0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/d67a58-380f-427a-849a-f9940fa1e108/1/VElaL0HNEFrvBvKHCnYzmAHtuQ0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:d6:91:3e:b1:cd:3b:69:09:9d:83:69:64:2c:15:8d:c3:71:
91:07:37:40:de:d4:2f:fe:d3:b9:fd:4e:09:b6:9f:b6:f5:59:
e4:a2:c0:58:8f:69:a4:17:22:27:19:2a:bf:18:33:1e:a0:d8:
b9:a9:d9:fb:c6:15:7c:94:11:bc:77:f3:91:98:3b:3c:95:95:
7b:d7:4f:49:66:97:d3:ef:c8:f7:6c:90:d2:f0:57:8d:90:74:
03:73:27:94:39:b9:45:2a:d4:54:fc:3c:2e:31:6c:a3:92:a0:
11:ab:40:66:cc:8a:fa:58:55:a8:04:bd:9a:6c:e0:45:9f:5d:
46:90:f0:f3:b4:ec:18:77:66:bb:d8:b9:e0:10:0c:a4:5b:8f:
ae:8c:e0:0d:6b:17:84:1b:be:3b:2c:01:3b:d9:4f:7d:7b:7a:
73:13:c8:0f:43:43:e6:99:2c:52:a8:68:70:61:e0:af:e8:32:
67:83:a3:69:57:a0:95:79:31:88:0b:6b:10:c0:e6:eb:48:d6:
ea:a8:2b:d3:d8:8c:e8:cb:91:12:98:ca:68:ea:5f:f5:3d:8e:
89:6f:58:7a:31:19:95:fa:3f:bd:f8:7a:84:74:ef:7e:de:6f:
af:6e:ce:b6:88:6a:fc:93:05:32:22:0c:a5:71:d8:7a:86:3e:
72:83:6a:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5CsiUp5SCittBGpsBznoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NDk1YTJmNDFjZDEwNWFlZjA2ZjI4NzBhNzYzMzk4MDFl
ZGI5MGQwHhcNMjUwNjE2MTQwMDM5WhcNMjUwNjE3MTQwMDM5WjAzMTEwLwYDVQQD
Eyg2ZTJkZTc4ODhhNjlmNjUzZWVjYzJhNWUyODUxNWU1ZGZjNmNlMDk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA80t5UWFobQkcEtY5ncCLxm9O8Zmn
tngm2+fNQWWzlRA8w5pmKHzByoCDNsB25hI0xK9OUEXfj8K4LWSPgQHh6O6HLqsn
afH+cUaGF30KwQ0BYCAODKp5gnfI1BlGMggBv8/aaHSReLQgJJMYdi/xVt4jia/O
PC6gC8+5FnkclE9v0bUP0hMqDTOtR7AE57riZLiHGEVJHJ0i2qyu08IwUHwq/ft4
pZoGCcBHG6KPYVom+ZU4CiozPFwrNYzoyWYGjzizC6baMo/fdUqYqLIrLLfuHxfY
WxcR7VFLN/sNeHnlrIUACevtLFuKAqpRqthe2JXau2B2BdXH7pIKKKVmVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG4t54iKafZT7swqXihRXl38bOCWMB8GA1UdIwQY
MBaAFFRJWi9BzRBa7wbyhwp2M5gB7bkNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9kNjdhNTgtMzgwZi00MjdhLTg0OWEt
Zjk5NDBmYTFlMTA4LzEvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9kNjdhNTgtMzgwZi00MjdhLTg0OWEtZjk5NDBmYTFlMTA4
LzEvVkVsYUwwSE5FRnJ2QnZLSENuWXptQUh0dVEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGdaRPrHN
O2kJnYNpZCwVjcNxkQc3QN7UL/7Tuf1OCbaftvVZ5KLAWI9ppBciJxkqvxgzHqDY
uanZ+8YVfJQRvHfzkZg7PJWVe9dPSWaX0+/I92yQ0vBXjZB0A3MnlDm5RSrUVPw8
LjFso5KgEatAZsyK+lhVqAS9mmzgRZ9dRpDw87TsGHdmu9i54BAMpFuProzgDWsX
hBu+OywBO9lPfXt6cxPID0ND5pksUqhocGHgr+gyZ4OjaVeglXkxiAtrEMDm60jW
6qgr09iM6MuREpjKaOpf9T2OiW9YejEZlfo/vfh6hHTvft5vr27Otohq/JMFMiIM
pXHYeoY+coNqjQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:39:53 2025 by rpki-client