Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
File: vx9s1vq5XSQc2axfhfTQX53lj5s.mft (raw, json)
Hash identifier: 7KHZDQFjC7NmHPJI6vW9TpQSl8SEsPDhekBSYxzP8h8=
Subject key identifier: 18:61:B1:1F:D4:D1:C9:6B:07:37:66:33:E3:06:7B:AE:23:03:F8:07
Authority key identifier: BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
Certificate issuer: /CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Certificate serial: 0197692A1A45728ADC34B72CC1088F2C8646
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
Manifest number: 1369
Signing time: Fri 13 Jun 2025 12:00:56 +0000
Manifest this update: Fri 13 Jun 2025 12:00:56 +0000
Manifest next update: Sat 14 Jun 2025 12:00:56 +0000
Files and hashes: 1: EBHjm8uQ-LmD4evvwOZ6E0JwNQA.roa (hash: Tk02eWTtsJNpE3RvUJnaO0ovgb/O/tJmPY6vH9oMVtQ=)
2: vx9s1vq5XSQc2axfhfTQX53lj5s.crl (hash: 1SoSN2Mc6oa/62IgC3XY6kF6vxW2MsB1J22DXm0lE88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:1a:45:72:8a:dc:34:b7:2c:c1:08:8f:2c:86:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1f6cd6fab95d241cd9ac5f85f4d05f9de58f9b
Validity
Not Before: Jun 13 12:00:56 2025 GMT
Not After : Jun 14 12:00:56 2025 GMT
Subject: CN=1861b11fd4d1c96b07376633e3067bae2303f807
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:4e:09:e8:ae:b9:7d:4d:ff:a2:4d:19:41:54:
cb:f3:0b:d4:d2:9f:9d:d4:0a:f6:68:4e:2d:93:d1:
9e:85:4b:8a:1b:0f:05:fd:24:71:44:b1:d9:43:62:
1e:3f:b8:84:1e:a0:84:24:8c:19:b4:04:4a:09:9d:
46:24:5a:e3:e7:f2:4b:a1:1b:12:01:ff:cc:81:27:
25:8e:7b:63:c1:e0:10:9a:e6:39:16:bf:d7:45:c3:
c9:d0:8c:e4:e6:7d:d8:89:b8:2c:02:a0:b5:b5:ce:
98:05:ba:73:a0:b0:51:95:11:13:7f:35:1a:42:32:
4a:10:a9:b1:8e:f1:c0:fd:05:97:32:78:35:0d:37:
1c:47:bc:a1:10:38:e3:59:b2:18:ce:07:8a:69:75:
f1:ae:7d:1d:e7:18:08:21:86:5c:36:95:24:cf:b5:
08:64:da:82:e3:88:52:b2:bd:d9:d3:6c:ba:44:80:
31:93:0b:05:51:7f:b7:49:4e:f7:90:89:e0:a3:72:
44:74:33:e0:93:ce:80:55:e1:bd:c5:e5:05:00:5e:
fb:0a:dc:ce:72:fa:06:b4:19:3e:da:b4:5f:53:57:
05:25:5a:45:0b:95:3f:b8:5e:f6:82:7c:c6:36:9e:
6e:5e:89:8c:72:0b:5c:c9:e5:8b:d9:8e:6f:45:50:
52:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:61:B1:1F:D4:D1:C9:6B:07:37:66:33:E3:06:7B:AE:23:03:F8:07
X509v3 Authority Key Identifier:
keyid:BF:1F:6C:D6:FA:B9:5D:24:1C:D9:AC:5F:85:F4:D0:5F:9D:E5:8F:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx9s1vq5XSQc2axfhfTQX53lj5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/e3c971-5324-4134-bead-597c43598577/1/vx9s1vq5XSQc2axfhfTQX53lj5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:4e:0c:4b:4e:1b:49:d1:0d:dc:94:5a:7c:6d:18:57:5b:2c:
64:c3:f8:a7:0a:02:02:33:5b:c9:72:33:88:47:f5:ca:6f:3e:
6e:99:58:a8:61:73:51:b2:2f:b1:94:71:3f:45:6e:0b:e1:ca:
02:01:3f:6a:2e:9a:f8:24:69:1f:9b:98:5b:4d:9a:51:02:5e:
cd:d4:61:a0:41:33:25:a6:9b:45:a9:f9:86:ae:aa:a4:36:ce:
e6:8e:0f:98:ee:c6:84:33:a9:83:b3:a3:fe:d3:26:67:9e:df:
1c:f4:57:32:84:ce:be:2c:90:e3:5d:eb:0a:8c:cc:0e:9c:af:
a6:07:22:c7:8a:c3:0d:06:1f:52:cb:d6:0a:b5:1f:a3:f0:c5:
c2:c0:2a:1d:3e:cd:59:9c:d9:0a:5d:15:24:b0:86:8a:99:95:
b0:8b:3f:34:20:2b:68:55:46:0f:4b:fd:2f:b6:99:72:12:49:
db:38:ef:eb:38:3b:63:34:4d:69:a9:f8:6e:82:98:3c:29:75:
04:89:03:f9:ee:39:bc:00:6b:71:bc:1f:c6:1e:70:e1:bb:9c:
63:ac:61:4c:ed:e2:a8:8b:89:b9:0b:79:ec:62:ab:af:98:d9:
a8:36:dd:df:a0:08:52:a3:3b:46:7f:00:21:7f:83:11:4e:c7:
e7:d5:89:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKhpFcorcNLcswQiPLIZGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWY2Y2Q2ZmFiOTVkMjQxY2Q5YWM1Zjg1ZjRkMDVmOWRl
NThmOWIwHhcNMjUwNjEzMTIwMDU2WhcNMjUwNjE0MTIwMDU2WjAzMTEwLwYDVQQD
EygxODYxYjExZmQ0ZDFjOTZiMDczNzY2MzNlMzA2N2JhZTIzMDNmODA3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsk4J6K65fU3/ok0ZQVTL8wvU0p+d
1Ar2aE4tk9GehUuKGw8F/SRxRLHZQ2IeP7iEHqCEJIwZtARKCZ1GJFrj5/JLoRsS
Af/MgScljntjweAQmuY5Fr/XRcPJ0Izk5n3YibgsAqC1tc6YBbpzoLBRlRETfzUa
QjJKEKmxjvHA/QWXMng1DTccR7yhEDjjWbIYzgeKaXXxrn0d5xgIIYZcNpUkz7UI
ZNqC44hSsr3Z02y6RIAxkwsFUX+3SU73kIngo3JEdDPgk86AVeG9xeUFAF77CtzO
cvoGtBk+2rRfU1cFJVpFC5U/uF72gnzGNp5uXomMcgtcyeWL2Y5vRVBSfwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhhsR/U0clrBzdmM+MGe64jA/gHMB8GA1UdIwQY
MBaAFL8fbNb6uV0kHNmsX4X00F+d5Y+bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy9lM2M5NzEtNTMyNC00MTM0LWJlYWQt
NTk3YzQzNTk4NTc3LzEvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy9lM2M5NzEtNTMyNC00MTM0LWJlYWQtNTk3YzQzNTk4NTc3
LzEvdng5czF2cTVYU1FjMmF4ZmhmVFFYNTNsajVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABk4MS04b
SdEN3JRafG0YV1ssZMP4pwoCAjNbyXIziEf1ym8+bplYqGFzUbIvsZRxP0VuC+HK
AgE/ai6a+CRpH5uYW02aUQJezdRhoEEzJaabRan5hq6qpDbO5o4PmO7GhDOpg7Oj
/tMmZ57fHPRXMoTOviyQ413rCozMDpyvpgcix4rDDQYfUsvWCrUfo/DFwsAqHT7N
WZzZCl0VJLCGipmVsIs/NCAraFVGD0v9L7aZchJJ2zjv6zg7YzRNaan4boKYPCl1
BIkD+e45vABrcbwfxh5w4bucY6xhTO3iqIuJuQt57GKrr5jZqDbd36AIUqM7Rn8A
IX+DEU7H59WJkw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:49 2025 by rpki-client