Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
File: VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json)
Hash identifier: EPDeIEt6Da0ZtQA4lTSqCIFOUxV9o9tt8sF4fpIeG3c=
Subject key identifier: DD:E7:B7:B1:B5:9D:A3:4A:2D:53:48:9B:A5:FE:14:36:EE:D9:BA:92
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial: 01984EC249DB81FCE693A3169CC575C27C57
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
Manifest number: 1232
Signing time: Mon 28 Jul 2025 02:00:12 +0000
Manifest this update: Mon 28 Jul 2025 02:00:12 +0000
Manifest next update: Tue 29 Jul 2025 02:00:12 +0000
Files and hashes: 1: L_f_G_DAS-PndMSomCegEakGUXo.roa (hash: MKZgnF0UjBLWLCCPlTkl22mDtPBHewVcfvCoOfEvyCg=)
2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: CsGswD5ZFt/i+FZmHYkVuGl1cbkc/DQxvaOPwL/nWJw=)
3: t4fAOG9AgiRHWlfB8UV9ooeeONs.roa (hash: w4jU0T+F9ztiRct/8n0JoEkH/SfGukns0aANZIKuY2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 18:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4e:c2:49:db:81:fc:e6:93:a3:16:9c:c5:75:c2:7c:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Validity
Not Before: Jul 28 02:00:12 2025 GMT
Not After : Jul 29 02:00:12 2025 GMT
Subject: CN=dde7b7b1b59da34a2d53489ba5fe1436eed9ba92
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:51:c5:68:f0:27:76:23:27:4c:db:61:d7:a8:
e5:c1:4f:17:14:53:75:fc:92:3e:36:dd:1a:81:d6:
29:33:0e:cd:68:dd:9b:fe:46:fa:9a:29:cf:bb:05:
4b:a2:d3:7d:64:3b:8f:3e:6e:8b:a8:8a:29:12:f1:
54:ca:93:24:4f:83:77:8d:2e:f1:74:a6:fa:51:a5:
f8:82:ea:c4:ba:4c:cb:1b:cc:67:cc:9c:84:9e:1b:
87:4b:ed:51:d5:0a:7e:c9:ed:55:a4:c5:ae:84:93:
6b:6f:95:7e:9e:2b:5f:b0:ac:d4:aa:58:71:13:f1:
aa:68:0e:db:df:2a:5b:ce:68:ef:e1:51:a1:e3:17:
8a:cf:92:45:a9:2b:35:e1:3e:c2:6a:b7:af:59:77:
f5:14:dd:1a:f4:c1:d7:4f:fa:f5:d4:26:cf:f0:2b:
64:10:87:5b:31:5c:2f:9a:ea:59:56:f1:4e:08:f6:
41:32:13:7e:ec:f1:32:68:66:fc:7b:e4:c6:07:2c:
6f:81:6a:1a:20:91:a8:a1:b2:89:d9:7c:9c:43:32:
d3:fe:44:cd:66:ac:14:68:9b:cd:62:bd:b8:4a:a4:
e6:fa:8b:60:8f:5d:db:18:c2:30:52:48:a1:49:db:
48:ad:e2:a6:74:df:ff:c4:ca:93:68:d4:54:ce:7d:
a5:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:E7:B7:B1:B5:9D:A3:4A:2D:53:48:9B:A5:FE:14:36:EE:D9:BA:92
X509v3 Authority Key Identifier:
keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:a3:a4:08:89:99:a4:b3:65:f8:8d:16:91:e1:f1:43:d4:19:
71:ef:62:52:6e:c9:06:bc:bd:a4:6e:81:1b:57:39:e3:57:c2:
f8:90:d0:f5:bb:8b:9c:26:0d:87:64:50:50:a0:d6:76:a5:a4:
3b:cd:2c:3e:7d:24:66:de:51:7a:94:77:0f:fe:ee:1f:16:c2:
36:07:f5:a6:1b:8a:9a:ab:e5:3e:30:a7:80:2e:fc:62:06:de:
6c:8e:fa:d3:72:59:2c:b8:53:d5:07:fd:26:81:62:25:ea:33:
9f:e6:29:eb:50:ca:b8:65:09:68:da:0f:07:e7:b3:9b:86:2e:
95:90:51:5a:45:64:b1:e3:e9:97:b7:b6:ac:69:c6:d6:1d:2c:
29:62:5e:84:8c:06:46:58:67:e4:03:57:9d:59:fe:56:41:bb:
88:10:3c:13:c4:66:11:25:66:50:df:07:88:fc:4e:2b:a5:d5:
8c:97:67:16:28:71:df:87:18:43:8c:8c:fe:18:9b:66:84:16:
79:4f:1a:a3:b3:aa:c9:fb:6d:57:b2:32:8f:64:64:ee:57:3f:
b5:09:04:02:2a:74:79:d4:c0:3d:f2:43:da:ce:2e:fd:29:51:
01:51:e3:20:fc:18:30:1c:cb:f3:23:45:a6:94:c0:26:e9:47:
16:58:a8:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhOwknbgfzmk6MWnMV1wnxXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZDZmZjEzNGJkNjU2ZjBjZTE0ZDQxMGIwMmJlYzU1MWVi
NjlhMmMwHhcNMjUwNzI4MDIwMDEyWhcNMjUwNzI5MDIwMDEyWjAzMTEwLwYDVQQD
EyhkZGU3YjdiMWI1OWRhMzRhMmQ1MzQ4OWJhNWZlMTQzNmVlZDliYTkyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwVHFaPAndiMnTNth16jlwU8XFFN1
/JI+Nt0agdYpMw7NaN2b/kb6minPuwVLotN9ZDuPPm6LqIopEvFUypMkT4N3jS7x
dKb6UaX4gurEukzLG8xnzJyEnhuHS+1R1Qp+ye1VpMWuhJNrb5V+nitfsKzUqlhx
E/GqaA7b3ypbzmjv4VGh4xeKz5JFqSs14T7CarevWXf1FN0a9MHXT/r11CbP8Ctk
EIdbMVwvmupZVvFOCPZBMhN+7PEyaGb8e+TGByxvgWoaIJGoobKJ2XycQzLT/kTN
ZqwUaJvNYr24SqTm+otgj13bGMIwUkihSdtIreKmdN//xMqTaNRUzn2lLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3nt7G1naNKLVNIm6X+FDbu2bqSMB8GA1UdIwQY
MBaAFFTW/xNL1lbwzhTUELAr7FUetposMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDIt
NjQyNzhjMGQ4ZWJmLzEvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDItNjQyNzhjMGQ4ZWJm
LzEvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKqOkCImZ
pLNl+I0WkeHxQ9QZce9iUm7JBry9pG6BG1c541fC+JDQ9buLnCYNh2RQUKDWdqWk
O80sPn0kZt5RepR3D/7uHxbCNgf1phuKmqvlPjCngC78YgbebI7603JZLLhT1Qf9
JoFiJeozn+Yp61DKuGUJaNoPB+ezm4YulZBRWkVksePpl7e2rGnG1h0sKWJehIwG
Rlhn5ANXnVn+VkG7iBA8E8RmESVmUN8HiPxOK6XVjJdnFihx34cYQ4yM/hibZoQW
eU8ao7OqyfttV7Iyj2Rk7lc/tQkEAip0edTAPfJD2s4u/SlRAVHjIPwYMBzL8yNF
ppTAJulHFliojg==
-----END CERTIFICATE-----
Generated at Mon Jul 28 03:47:12 2025 by rpki-client