Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
File: vqe2d3e5poMpM1dkl7RqmxYwTNk.mft (raw, json)
Hash identifier: l5QFZ9OmDmabYfrJ4qDN3JZGfLusoxbwzXGiYYwDsqA=
Subject key identifier: A3:F8:B9:6F:C8:45:FE:69:3D:CD:A3:DB:55:51:22:68:68:63:34:6A
Authority key identifier: BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
Certificate issuer: /CN=bea7b67777b9a6832933576497b46a9b16304cd9
Certificate serial: 01976CCFAB22437986AF23E9A7A394C75838
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
Manifest number: 13D0
Signing time: Sat 14 Jun 2025 05:00:38 +0000
Manifest this update: Sat 14 Jun 2025 05:00:38 +0000
Manifest next update: Sun 15 Jun 2025 05:00:38 +0000
Files and hashes: 1: sf1KX3-278D909_VQvgz_1jkfVI.roa (hash: zN2i6GvyNGlDViFzbVFFZ6ISLkchZMIvYNFAKpwZnH0=)
2: vqe2d3e5poMpM1dkl7RqmxYwTNk.crl (hash: u2gjdsjsBmLmoHjIKCEgbXKXi3d3yHLx/tDp/enMraw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:ab:22:43:79:86:af:23:e9:a7:a3:94:c7:58:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bea7b67777b9a6832933576497b46a9b16304cd9
Validity
Not Before: Jun 14 05:00:38 2025 GMT
Not After : Jun 15 05:00:38 2025 GMT
Subject: CN=a3f8b96fc845fe693dcda3db555122686863346a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:ca:1f:b7:ff:a6:a7:05:51:0e:62:57:43:f9:
1c:0f:a1:f7:70:13:c7:25:41:4f:c2:41:c8:5f:1b:
32:27:25:e6:53:81:0f:6e:6e:c4:27:15:e9:93:cc:
61:26:e5:98:f1:8d:e9:a5:de:7d:47:81:eb:60:ae:
02:d8:fa:65:98:85:a3:fa:d5:3c:44:43:97:9c:27:
ba:20:eb:9d:ba:7d:bf:65:69:27:50:c6:8f:27:93:
a6:9f:d1:0c:9c:d9:b9:64:2d:1f:3b:b0:a1:38:ea:
df:a2:ab:3f:e9:ac:f0:ab:7a:28:d0:66:e2:72:04:
c3:6f:ac:2c:b9:b6:a5:3c:79:be:ff:59:7a:45:79:
67:7b:2b:1f:b2:59:22:a9:b3:51:31:47:67:7f:e9:
e8:28:81:16:02:ea:98:82:b2:10:eb:42:54:9c:f9:
16:eb:32:e4:20:c0:67:f4:da:c5:79:86:f8:11:c6:
e7:9d:05:32:ad:af:42:41:07:3f:a0:30:32:f6:0a:
fe:ec:0b:8d:fc:cd:00:b1:eb:a3:49:de:37:17:74:
13:c3:b4:93:76:16:69:9a:ad:27:d5:a1:26:5b:f6:
a9:24:2e:47:f0:37:c4:11:12:bc:1c:6e:09:cd:95:
61:c6:ad:f9:44:f2:eb:a7:89:94:21:bd:41:30:49:
cc:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:F8:B9:6F:C8:45:FE:69:3D:CD:A3:DB:55:51:22:68:68:63:34:6A
X509v3 Authority Key Identifier:
keyid:BE:A7:B6:77:77:B9:A6:83:29:33:57:64:97:B4:6A:9B:16:30:4C:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vqe2d3e5poMpM1dkl7RqmxYwTNk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/41c111-6505-41a4-9e67-3b91ff9a1acd/1/vqe2d3e5poMpM1dkl7RqmxYwTNk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1c:1f:27:45:0f:9e:e6:36:0f:4f:c3:7a:43:14:6f:1f:c7:0b:
93:6f:a2:0b:94:90:94:02:d6:52:81:f5:20:50:eb:75:83:bd:
a3:78:4a:cb:dd:d3:f8:e7:39:de:74:b6:67:9a:31:dc:cb:44:
ff:47:02:a9:c7:dc:09:6d:35:19:e0:13:dc:aa:58:5b:95:25:
72:87:75:ab:22:45:58:bb:72:1c:e7:64:4c:d9:32:03:90:fe:
4a:97:b4:0e:cc:d8:aa:be:d8:7e:56:15:ce:a3:35:4a:0e:fe:
b9:8e:f2:2e:4e:0f:b6:16:10:c9:09:d9:81:41:b6:3b:fa:13:
01:c2:bc:81:60:ed:4d:97:cd:37:7a:0a:00:68:8c:c6:1f:e4:
67:56:ed:1f:10:11:dd:21:48:b2:6e:fc:ff:e1:76:6d:cc:b6:
dd:de:7c:a6:67:39:7c:9c:5d:09:58:54:28:d7:f9:0e:01:f1:
9c:91:6a:fc:ab:05:be:0d:4b:75:4d:96:34:97:29:d1:2a:35:
d2:d4:3a:4b:30:1f:95:39:35:00:dd:ba:6c:69:39:10:9f:ac:
83:6e:68:5f:93:61:f4:06:74:9e:52:c4:eb:fe:f4:5f:ec:a1:
db:0b:f3:14:c0:21:c9:8a:a7:9c:81:26:a4:15:29:6e:10:09:
ec:04:a9:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz6siQ3mGryPpp6OUx1g4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlYTdiNjc3NzdiOWE2ODMyOTMzNTc2NDk3YjQ2YTliMTYz
MDRjZDkwHhcNMjUwNjE0MDUwMDM4WhcNMjUwNjE1MDUwMDM4WjAzMTEwLwYDVQQD
EyhhM2Y4Yjk2ZmM4NDVmZTY5M2RjZGEzZGI1NTUxMjI2ODY4NjMzNDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy8oft/+mpwVRDmJXQ/kcD6H3cBPH
JUFPwkHIXxsyJyXmU4EPbm7EJxXpk8xhJuWY8Y3ppd59R4HrYK4C2PplmIWj+tU8
REOXnCe6IOudun2/ZWknUMaPJ5Omn9EMnNm5ZC0fO7ChOOrfoqs/6azwq3oo0Gbi
cgTDb6wsubalPHm+/1l6RXlneysfslkiqbNRMUdnf+noKIEWAuqYgrIQ60JUnPkW
6zLkIMBn9NrFeYb4EcbnnQUyra9CQQc/oDAy9gr+7AuN/M0AseujSd43F3QTw7ST
dhZpmq0n1aEmW/apJC5H8DfEERK8HG4JzZVhxq35RPLrp4mUIb1BMEnMiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKP4uW/IRf5pPc2j21VRImhoYzRqMB8GA1UdIwQY
MBaAFL6ntnd3uaaDKTNXZJe0apsWMEzZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnFlMmQzZTVwb01wTTFka2w3UnFteFl3VE5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy80MWMxMTEtNjUwNS00MWE0LTllNjct
M2I5MWZmOWExYWNkLzEvdnFlMmQzZTVwb01wTTFka2w3UnFteFl3VE5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy80MWMxMTEtNjUwNS00MWE0LTllNjctM2I5MWZmOWExYWNk
LzEvdnFlMmQzZTVwb01wTTFka2w3UnFteFl3VE5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHB8nRQ+e
5jYPT8N6QxRvH8cLk2+iC5SQlALWUoH1IFDrdYO9o3hKy93T+Oc53nS2Z5ox3MtE
/0cCqcfcCW01GeAT3KpYW5Ulcod1qyJFWLtyHOdkTNkyA5D+Spe0DszYqr7YflYV
zqM1Sg7+uY7yLk4PthYQyQnZgUG2O/oTAcK8gWDtTZfNN3oKAGiMxh/kZ1btHxAR
3SFIsm78/+F2bcy23d58pmc5fJxdCVhUKNf5DgHxnJFq/KsFvg1LdU2WNJcp0So1
0tQ6SzAflTk1AN26bGk5EJ+sg25oX5Nh9AZ0nlLE6/70X+yh2wvzFMAhyYqnnIEm
pBUpbhAJ7ASpWA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:13:34 2025 by rpki-client