Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: EAHjeuX56tuljyWiXF9WxOiSC8IFgRwLLSD8/iocC7A=
Subject key identifier: 79:94:0F:5D:9C:64:7D:9F:B3:72:C4:23:82:D6:6E:77:BF:D4:E7:FA
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 0197760976F6B730E4D57887E602E1C3EC3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0A20
Signing time: Mon 16 Jun 2025 00:00:20 +0000
Manifest this update: Mon 16 Jun 2025 00:00:20 +0000
Manifest next update: Tue 17 Jun 2025 00:00:20 +0000
Files and hashes: 1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=)
2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: CXWcAFFHHCT4acSfD6TKj6tnjKbl3jbg1pq6W2AuRCM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:09:76:f6:b7:30:e4:d5:78:87:e6:02:e1:c3:ec:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Jun 16 00:00:20 2025 GMT
Not After : Jun 17 00:00:20 2025 GMT
Subject: CN=79940f5d9c647d9fb372c42382d66e77bfd4e7fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:ee:a0:71:e2:59:aa:9b:9c:1a:a5:7e:17:92:
f7:bb:7f:a0:b0:89:c6:12:aa:27:56:d2:b1:4b:ea:
bf:34:b3:27:96:04:f8:b2:b3:c3:8b:89:ee:b7:ba:
96:03:fb:51:1c:fb:28:84:ac:ed:1b:ba:a7:dd:4c:
50:e2:ba:dc:43:e2:86:1e:c4:e6:c6:14:d0:07:22:
af:24:4b:57:d2:3e:02:9c:c8:53:00:41:c4:36:61:
4a:c3:64:ce:ff:c9:8b:a3:83:86:b9:25:bd:12:99:
46:c6:77:c4:97:b5:17:2d:11:46:0f:28:52:f7:cd:
c6:a9:8c:67:9f:89:32:15:ed:3e:d3:24:d6:ff:85:
46:f0:41:5a:f6:ff:57:15:31:03:25:31:bf:68:82:
cb:ba:df:c9:e5:c3:68:26:43:1a:53:6a:d4:5f:8e:
92:ea:ae:b9:9d:3b:14:ce:4d:28:4d:17:fc:9e:1f:
26:4c:72:db:a6:d8:e0:56:bf:47:50:98:b2:23:8c:
71:57:f3:b6:c0:b0:d4:73:a8:75:29:47:3c:9f:e0:
65:8d:cd:03:34:a7:0a:84:60:12:89:61:e9:aa:45:
16:26:18:34:01:31:a6:03:8a:bd:0c:ab:03:21:09:
51:19:8e:69:e1:fc:97:77:21:82:57:30:04:d9:8d:
da:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:94:0F:5D:9C:64:7D:9F:B3:72:C4:23:82:D6:6E:77:BF:D4:E7:FA
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:86:17:c3:f5:16:f0:bf:72:fe:e3:42:85:a1:ea:7a:a7:7a:
c4:84:51:ac:be:a5:8b:9e:74:70:16:e2:03:66:68:45:3d:ec:
e7:52:14:b2:ed:ab:e6:3b:04:59:f2:88:3e:2b:e9:f9:c8:b0:
50:35:73:f4:ff:32:a4:e7:13:1f:d1:15:48:0f:f8:17:14:44:
e8:d4:55:ae:14:a8:37:76:f0:fc:37:5e:47:ac:31:96:55:ca:
f2:33:ce:b3:97:ac:c5:30:79:e0:47:9c:d9:52:d9:2c:b9:7e:
90:63:c5:ab:da:02:22:c7:9b:b1:38:f9:d6:fc:be:b6:a3:4e:
85:c3:67:11:3d:55:2a:ba:33:4e:6c:e9:04:21:e5:62:ab:d7:
6d:b9:f5:fa:cd:3f:9f:ad:1d:69:dc:33:69:d9:f7:bf:f8:dc:
d4:e0:27:45:e6:e8:1e:f8:71:10:2f:54:cb:49:b4:47:cc:0f:
98:05:34:10:b5:40:d3:4d:36:35:30:58:3a:56:34:a5:23:e3:
38:65:cc:89:7a:3b:4e:ac:96:e4:c2:7c:85:47:e8:08:0c:05:
e3:01:69:78:dd:90:f5:92:6e:ec:8c:4b:fe:92:0f:c6:e6:83:
c3:bd:34:1e:4a:e0:13:8c:86:c6:60:3d:ad:b3:03:12:48:57:
79:cc:2b:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd2CXb2tzDk1XiH5gLhw+w7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNjE0NGI0NTliY2UxMzlmMjczNGE0NGZiZGI0NmM5ODEz
MjliMmIwHhcNMjUwNjE2MDAwMDIwWhcNMjUwNjE3MDAwMDIwWjAzMTEwLwYDVQQD
Eyg3OTk0MGY1ZDljNjQ3ZDlmYjM3MmM0MjM4MmQ2NmU3N2JmZDRlN2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+6gceJZqpucGqV+F5L3u3+gsInG
EqonVtKxS+q/NLMnlgT4srPDi4nut7qWA/tRHPsohKztG7qn3UxQ4rrcQ+KGHsTm
xhTQByKvJEtX0j4CnMhTAEHENmFKw2TO/8mLo4OGuSW9EplGxnfEl7UXLRFGDyhS
983GqYxnn4kyFe0+0yTW/4VG8EFa9v9XFTEDJTG/aILLut/J5cNoJkMaU2rUX46S
6q65nTsUzk0oTRf8nh8mTHLbptjgVr9HUJiyI4xxV/O2wLDUc6h1KUc8n+Bljc0D
NKcKhGASiWHpqkUWJhg0ATGmA4q9DKsDIQlRGY5p4fyXdyGCVzAE2Y3aQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHmUD12cZH2fs3LEI4LWbne/1Of6MB8GA1UdIwQY
MBaAFL5hRLRZvOE58nNKRPvbRsmBMpsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2Yt
MTdlZmE1N2IzOWQ3LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2YtMTdlZmE1N2IzOWQ3
LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWoYXw/UW
8L9y/uNChaHqeqd6xIRRrL6li550cBbiA2ZoRT3s51IUsu2r5jsEWfKIPivp+ciw
UDVz9P8ypOcTH9EVSA/4FxRE6NRVrhSoN3bw/DdeR6wxllXK8jPOs5esxTB54Eec
2VLZLLl+kGPFq9oCIsebsTj51vy+tqNOhcNnET1VKrozTmzpBCHlYqvXbbn1+s0/
n60dadwzadn3v/jc1OAnReboHvhxEC9Uy0m0R8wPmAU0ELVA0002NTBYOlY0pSPj
OGXMiXo7TqyW5MJ8hUfoCAwF4wFpeN2Q9ZJu7IxL/pIPxuaDw700HkrgE4yGxmA9
rbMDEkhXecwrTg==
-----END CERTIFICATE-----
Generated at Mon Jun 16 05:25:37 2025 by rpki-client