Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
File: vZLq6eEWmeTOcQWAUZd2wwApYWI.mft (raw, json)
Hash identifier: HQLL3WD4cFpKlUU9b9WX4vtLtYExyKc/hOHw5MyWovU=
Subject key identifier: C8:40:17:EE:D5:D1:01:16:6B:E9:30:FC:F9:FB:14:07:D4:4B:8A:63
Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
Certificate issuer: /CN=bd92eae9e11699e4ce710580519776c300296162
Certificate serial: 019769CEE6C65CBA6154450F912C4387C56E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
Manifest number: 151F
Signing time: Fri 13 Jun 2025 15:00:56 +0000
Manifest this update: Fri 13 Jun 2025 15:00:56 +0000
Manifest next update: Sat 14 Jun 2025 15:00:56 +0000
Files and hashes: 1: 1-usx18zg0vXovZ69VA6wMJG1snQ.roa (hash: cCydz0/7urXRQoQLYjIuxn5IDBNQFz8a/SIpL/HwR48=)
2: vZLq6eEWmeTOcQWAUZd2wwApYWI.crl (hash: 58kTTvb6Jaa1Rot8V8fMsLi1jfq7daCAiZI7oEItesM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:e6:c6:5c:ba:61:54:45:0f:91:2c:43:87:c5:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd92eae9e11699e4ce710580519776c300296162
Validity
Not Before: Jun 13 15:00:56 2025 GMT
Not After : Jun 14 15:00:56 2025 GMT
Subject: CN=c84017eed5d101166be930fcf9fb1407d44b8a63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:bd:c9:91:ae:9b:f4:f9:75:1f:83:97:18:22:
ba:96:7d:e8:b2:40:ef:4a:54:26:7f:53:51:db:50:
77:08:e3:38:1e:40:85:e5:e2:b3:68:19:c0:17:21:
4f:3e:62:3b:51:0e:4c:2c:93:79:70:75:0c:54:87:
ee:d6:9d:b2:31:38:b8:4e:63:9f:53:a1:ef:09:78:
fd:50:0d:80:aa:18:2c:15:75:d0:24:f6:27:61:34:
eb:3d:dd:1b:02:d0:4f:30:f9:58:ff:18:67:d6:0a:
18:df:0b:69:99:76:d6:0c:73:7e:0f:ca:f9:ad:ba:
75:ce:9d:86:7a:6f:7c:c3:73:27:89:d4:04:6f:13:
e8:c4:0a:92:f0:54:31:9e:1b:9c:9f:9d:16:05:37:
52:57:24:05:1d:c3:3e:05:5e:40:6e:e6:fe:fa:18:
3e:0c:c4:18:29:0b:0e:20:ae:f2:2c:35:03:87:60:
68:a8:bf:82:58:8f:41:da:44:ee:55:82:78:58:ea:
cf:54:aa:06:a1:9e:98:eb:48:58:7b:10:e5:a6:ed:
44:61:d9:fe:b0:93:88:dd:b9:5f:77:43:2a:27:e8:
4c:0b:b8:97:0b:3a:f2:b9:1e:f3:41:1e:87:53:fb:
87:bc:3f:32:af:97:94:e8:59:28:46:de:5f:27:9b:
3c:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:40:17:EE:D5:D1:01:16:6B:E9:30:FC:F9:FB:14:07:D4:4B:8A:63
X509v3 Authority Key Identifier:
keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ca:99:f8:bb:49:d5:da:9b:fa:53:40:0b:89:4e:15:e3:c6:
27:cf:8c:b4:51:6e:36:df:50:f3:e5:8c:07:04:33:65:11:00:
c0:74:07:2d:74:50:86:e0:70:26:87:0c:55:b5:f3:cf:09:a2:
58:26:53:a3:38:bc:5a:d6:bc:92:cb:89:fa:ae:f1:b0:94:85:
cf:ba:df:7c:32:13:10:0d:05:62:a5:80:3b:08:be:25:bf:fb:
d1:6b:65:f3:cd:a8:e3:d0:e5:d7:b0:13:2c:55:d1:dc:e5:8e:
f4:a0:1f:08:1d:68:50:f5:c8:44:4c:e7:f9:aa:00:03:6c:7d:
9f:96:98:d5:2f:bf:cf:c2:80:03:0f:a5:e2:db:47:44:50:32:
67:a5:c5:30:03:da:56:6a:6d:99:24:0a:23:ee:ca:e0:53:14:
d4:bf:ab:f7:37:61:12:35:bf:03:05:67:ba:4d:80:d8:f6:65:
e8:56:1f:cf:8b:2e:c3:55:51:05:0d:96:96:8b:ce:0c:c5:bb:
27:1b:d1:d3:e9:50:46:2e:ca:31:a0:7b:9f:0a:98:80:8f:ac:
2a:e1:64:c7:40:be:9d:17:b0:6e:ce:6e:c5:c5:cc:83:19:a1:
bc:1b:cb:75:1a:fd:20:40:38:ce:f8:78:a1:4f:1b:18:af:ff:
dd:b7:04:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzubGXLphVEUPkSxDh8VuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTJlYWU5ZTExNjk5ZTRjZTcxMDU4MDUxOTc3NmMzMDAy
OTYxNjIwHhcNMjUwNjEzMTUwMDU2WhcNMjUwNjE0MTUwMDU2WjAzMTEwLwYDVQQD
EyhjODQwMTdlZWQ1ZDEwMTE2NmJlOTMwZmNmOWZiMTQwN2Q0NGI4YTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkr3Jka6b9Pl1H4OXGCK6ln3oskDv
SlQmf1NR21B3COM4HkCF5eKzaBnAFyFPPmI7UQ5MLJN5cHUMVIfu1p2yMTi4TmOf
U6HvCXj9UA2AqhgsFXXQJPYnYTTrPd0bAtBPMPlY/xhn1goY3wtpmXbWDHN+D8r5
rbp1zp2Gem98w3MnidQEbxPoxAqS8FQxnhucn50WBTdSVyQFHcM+BV5Abub++hg+
DMQYKQsOIK7yLDUDh2BoqL+CWI9B2kTuVYJ4WOrPVKoGoZ6Y60hYexDlpu1EYdn+
sJOI3blfd0MqJ+hMC7iXCzryuR7zQR6HU/uHvD8yr5eU6FkoRt5fJ5s8bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMhAF+7V0QEWa+kw/Pn7FAfUS4pjMB8GA1UdIwQY
MBaAFL2S6unhFpnkznEFgFGXdsMAKWFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80N2QyMTMtMjZkYS00NzFhLTk2Y2Qt
YzhhOWNhYTNiYmU5LzEvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80N2QyMTMtMjZkYS00NzFhLTk2Y2QtYzhhOWNhYTNiYmU5
LzEvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFMqZ+LtJ
1dqb+lNAC4lOFePGJ8+MtFFuNt9Q8+WMBwQzZREAwHQHLXRQhuBwJocMVbXzzwmi
WCZTozi8Wta8ksuJ+q7xsJSFz7rffDITEA0FYqWAOwi+Jb/70Wtl882o49Dl17AT
LFXR3OWO9KAfCB1oUPXIREzn+aoAA2x9n5aY1S+/z8KAAw+l4ttHRFAyZ6XFMAPa
VmptmSQKI+7K4FMU1L+r9zdhEjW/AwVnuk2A2PZl6FYfz4suw1VRBQ2WlovODMW7
JxvR0+lQRi7KMaB7nwqYgI+sKuFkx0C+nRewbs5uxcXMgxmhvBvLdRr9IEA4zvh4
oU8bGK//3bcENQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:56:18 2025 by rpki-client