Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
File: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft (raw, json)
Hash identifier: L8jCJiPYXJk70+ntC5yQxvbhJddEkmBs1fxgz76iKvs=
Subject key identifier: CE:49:FE:65:E0:25:FD:22:9A:85:04:79:29:04:E3:89:74:39:ED:81
Authority key identifier: 54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
Certificate issuer: /CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Certificate serial: 01976DAB344629CAED63806F88C98D757CB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
Manifest number: 08DC
Signing time: Sat 14 Jun 2025 09:00:25 +0000
Manifest this update: Sat 14 Jun 2025 09:00:25 +0000
Manifest next update: Sun 15 Jun 2025 09:00:25 +0000
Files and hashes: 1: 3wR1X7qeiV3Us_sYJwiLPsDNiag.roa (hash: sVmRoOG1wqqDxd7JOMuBur0va/KN44y5/hVue29WGbc=)
2: VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl (hash: wQE/d3Xni2k9Yi41Lx9m+gBiwSo9E0H1JO7OFYNRv6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:34:46:29:ca:ed:63:80:6f:88:c9:8d:75:7c:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a6c46d7d90feb4a728af0f8ae11bfa0d4f8cb1
Validity
Not Before: Jun 14 09:00:25 2025 GMT
Not After : Jun 15 09:00:25 2025 GMT
Subject: CN=ce49fe65e025fd229a8504792904e3897439ed81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:b6:df:1f:d0:90:0c:c6:62:89:97:8e:98:f6:
92:2e:0b:6f:ec:97:00:fd:f9:8d:e7:ca:0c:f0:11:
dc:b5:98:ca:41:18:db:1a:e8:6c:cb:76:5c:b6:70:
d1:d0:03:ae:ca:85:3a:5c:b2:34:aa:95:6d:7d:b4:
0e:d1:59:4a:78:cd:57:94:2c:53:9e:bd:b5:f1:38:
a7:d0:15:59:e4:b8:05:1d:ef:82:0b:16:92:3b:4f:
87:d3:66:2d:5e:42:7e:6a:9c:b0:1c:ec:42:41:af:
e7:1f:ac:77:4c:49:20:92:ee:58:ed:a4:83:4b:a5:
93:36:98:3c:5f:25:ca:e7:bb:64:51:00:9e:72:2a:
63:eb:8a:d4:13:4c:36:6a:89:15:03:07:bc:df:e5:
fe:a0:df:b2:0e:55:90:86:67:67:ec:b0:3a:95:71:
6a:dd:cc:6a:a3:1c:d5:30:d2:b6:f7:7e:11:c0:da:
94:66:6f:ef:a1:40:95:c1:54:29:92:e3:d2:0a:da:
ce:3d:bd:0e:93:c4:ac:54:64:f1:75:ed:fb:e9:1b:
82:94:d8:cd:5e:53:bb:99:e0:2e:74:81:ba:3e:b8:
dd:62:49:ce:6d:ed:ab:fb:10:6e:83:77:cd:f8:dc:
a9:e1:0e:22:c3:3e:2b:cc:ae:c0:ee:2a:b3:85:b3:
1a:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:49:FE:65:E0:25:FD:22:9A:85:04:79:29:04:E3:89:74:39:ED:81
X509v3 Authority Key Identifier:
keyid:54:A6:C4:6D:7D:90:FE:B4:A7:28:AF:0F:8A:E1:1B:FA:0D:4F:8C:B1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/08949f-c79a-46ca-b50b-0fc9bfcd74a6/1/VKbEbX2Q_rSnKK8PiuEb-g1PjLE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:a6:3d:ee:84:b0:95:63:09:05:55:22:0a:d9:ed:55:f1:49:
06:8b:ef:78:70:39:74:0e:ca:88:fe:47:f6:4a:2d:55:b0:65:
89:0e:31:b2:65:da:d0:c5:0b:73:fa:04:f9:a1:47:89:a0:e5:
4e:45:c1:f3:bb:24:f3:e1:eb:9d:76:55:9e:ca:31:16:35:77:
98:07:87:be:09:5d:7c:6c:32:95:62:ce:29:14:da:de:d2:5d:
8b:8a:6f:7d:13:92:4f:97:af:04:ce:94:88:0e:7e:39:b9:3f:
ac:f2:06:03:cb:ef:64:be:26:58:fa:ca:fc:df:15:f0:94:62:
ff:d1:f3:3f:e9:27:f2:a4:87:98:c9:b2:15:b1:08:c3:fa:ba:
43:ad:37:17:e5:16:3f:c2:8a:5e:26:6c:b7:37:b2:89:b6:3e:
f8:8f:2a:77:10:05:cd:7a:41:e3:84:68:af:56:d4:e2:96:e7:
71:73:41:24:ea:0f:80:73:de:99:be:16:e6:30:1e:9d:de:55:
55:e2:16:58:7f:a4:26:a7:a0:e1:9d:f1:9e:1a:35:3b:94:0d:
51:60:77:7e:ae:fc:28:03:47:fd:49:cc:0b:ce:4e:32:ef:3b:
86:b3:87:a1:9e:85:85:6a:8b:cc:9f:2a:a3:5d:4a:a8:ba:f1:
0e:48:c7:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtqzRGKcrtY4BviMmNdXy4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTZjNDZkN2Q5MGZlYjRhNzI4YWYwZjhhZTExYmZhMGQ0
ZjhjYjEwHhcNMjUwNjE0MDkwMDI1WhcNMjUwNjE1MDkwMDI1WjAzMTEwLwYDVQQD
EyhjZTQ5ZmU2NWUwMjVmZDIyOWE4NTA0NzkyOTA0ZTM4OTc0MzllZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAorbfH9CQDMZiiZeOmPaSLgtv7JcA
/fmN58oM8BHctZjKQRjbGuhsy3ZctnDR0AOuyoU6XLI0qpVtfbQO0VlKeM1XlCxT
nr218Tin0BVZ5LgFHe+CCxaSO0+H02YtXkJ+apywHOxCQa/nH6x3TEkgku5Y7aSD
S6WTNpg8XyXK57tkUQCecipj64rUE0w2aokVAwe83+X+oN+yDlWQhmdn7LA6lXFq
3cxqoxzVMNK2934RwNqUZm/voUCVwVQpkuPSCtrOPb0Ok8SsVGTxde376RuClNjN
XlO7meAudIG6PrjdYknObe2r+xBug3fN+Nyp4Q4iwz4rzK7A7iqzhbMagwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM5J/mXgJf0imoUEeSkE44l0Oe2BMB8GA1UdIwQY
MBaAFFSmxG19kP60pyivD4rhG/oNT4yxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGIt
MGZjOWJmY2Q3NGE2LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8wODk0OWYtYzc5YS00NmNhLWI1MGItMGZjOWJmY2Q3NGE2
LzEvVktiRWJYMlFfclNuS0s4UGl1RWItZzFQakxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABKY97oSw
lWMJBVUiCtntVfFJBovveHA5dA7KiP5H9kotVbBliQ4xsmXa0MULc/oE+aFHiaDl
TkXB87sk8+HrnXZVnsoxFjV3mAeHvgldfGwylWLOKRTa3tJdi4pvfROST5evBM6U
iA5+Obk/rPIGA8vvZL4mWPrK/N8V8JRi/9HzP+kn8qSHmMmyFbEIw/q6Q603F+UW
P8KKXiZstzeyibY++I8qdxAFzXpB44Ror1bU4pbncXNBJOoPgHPemb4W5jAend5V
VeIWWH+kJqeg4Z3xnho1O5QNUWB3fq78KANH/UnMC85OMu87hrOHoZ6FhWqLzJ8q
o11KqLrxDkjHog==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:21:35 2025 by rpki-client