Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
File: vkPScQqtfJjBD02UXave6iHEnTE.mft (raw, json)
Hash identifier: YurQ9N/hwe1I6D1SRjSwP5y8wU5sGtwkKCxFhVe2UJU=
Subject key identifier: 9D:51:6F:E8:C9:7B:EA:A0:E3:B5:C7:33:0A:24:30:A0:97:08:2D:29
Authority key identifier: BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
Certificate issuer: /CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Certificate serial: 01974EFC50B5031B51CB068616E7AF8A4C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
Manifest number: 0F53
Signing time: Sun 08 Jun 2025 10:00:47 +0000
Manifest this update: Sun 08 Jun 2025 10:00:47 +0000
Manifest next update: Mon 09 Jun 2025 10:00:47 +0000
Files and hashes: 1: OTeSGDvy30ag83BDxmnIjfIrKns.roa (hash: xkyUd77WygfbbzqamRZFRpRzb6QC+rjro6IfY1rUZu8=)
2: vkPScQqtfJjBD02UXave6iHEnTE.crl (hash: 56C6evMb9MKQxHv9/8BVkWIoLNjgltST2/dVKy93Abo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:50:b5:03:1b:51:cb:06:86:16:e7:af:8a:4c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be43d2710aad7c98c10f4d945dabdeea21c49d31
Validity
Not Before: Jun 8 10:00:47 2025 GMT
Not After : Jun 9 10:00:47 2025 GMT
Subject: CN=9d516fe8c97beaa0e3b5c7330a2430a097082d29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:41:7a:d7:30:0c:f1:3c:dd:3c:e8:3b:17:13:
40:b8:9d:36:a7:27:17:22:4b:c1:29:c1:67:99:d3:
47:e9:26:d6:e3:88:54:94:31:81:6e:d0:df:4a:1f:
23:b4:26:af:6a:53:d0:4a:41:9f:13:58:bf:ac:f4:
aa:0f:a4:cf:08:e4:ed:54:ae:73:b3:dc:95:c1:2f:
50:70:b6:b1:89:0e:c4:81:c3:a1:b4:36:4f:32:ed:
a4:53:68:67:be:cf:f7:03:b0:8b:2f:88:69:e5:0b:
78:9d:2c:7f:fc:d2:61:1f:1c:4e:79:2f:9d:bb:56:
83:1c:24:30:3d:2d:58:c9:e2:e6:e5:f0:4b:8e:7e:
99:ce:cc:9b:cf:ab:d0:4b:9e:80:7a:59:e8:5c:ac:
7f:88:1a:e2:56:f0:55:45:d4:17:99:33:5e:61:56:
af:5b:50:ad:f6:22:81:1c:0e:57:67:72:66:8c:fc:
e3:54:25:4a:cc:24:50:2b:95:8c:be:2e:72:39:ad:
74:e2:23:b7:92:3b:f2:8e:bf:8a:0d:f7:cc:7a:49:
33:32:15:b8:f4:9b:5c:b6:f3:95:38:8b:ba:5d:31:
75:b0:e7:79:db:15:db:46:d7:22:64:33:e1:83:7c:
b4:22:d9:6a:d6:ae:4c:c2:1f:a5:ab:f8:ac:90:d9:
0a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9D:51:6F:E8:C9:7B:EA:A0:E3:B5:C7:33:0A:24:30:A0:97:08:2D:29
X509v3 Authority Key Identifier:
keyid:BE:43:D2:71:0A:AD:7C:98:C1:0F:4D:94:5D:AB:DE:EA:21:C4:9D:31
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vkPScQqtfJjBD02UXave6iHEnTE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/19/ff4794-9e53-4f30-a987-8af7ae0a9ac7/1/vkPScQqtfJjBD02UXave6iHEnTE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7d:a9:8e:36:f1:4c:41:3e:41:26:d3:17:b6:f4:05:25:6f:95:
40:32:18:73:23:6f:83:ab:ed:d0:20:f0:86:f9:cd:a7:0f:e4:
84:ef:34:2a:86:03:34:43:3e:3d:ab:9f:f7:36:dd:9f:8f:f1:
e2:6b:36:1a:ce:de:35:89:28:91:a4:6c:e9:d2:a2:59:a5:5b:
ab:6e:8f:32:af:9f:87:11:98:96:e2:85:26:14:8a:fb:cd:ae:
9d:1c:e9:d2:2b:0e:00:13:1b:a1:3c:6b:8b:c3:63:40:03:ab:
8b:d5:2a:ee:44:3a:94:39:05:3f:06:92:38:0b:4f:41:50:4e:
b0:c2:a5:51:27:bd:ad:6b:1c:b3:f2:0e:50:e7:31:73:17:28:
10:82:30:1b:cf:fa:a9:32:d1:cb:55:0c:96:7b:7e:6b:5c:6a:
51:96:31:d7:2d:a8:10:f4:4b:cb:45:a5:8f:42:5d:e2:1a:6e:
40:8d:c8:b4:59:1b:05:f4:0e:cf:11:86:3a:c5:d2:9b:a1:39:
d0:ff:94:71:44:b7:08:9a:8e:e2:92:91:12:4a:4c:94:fc:1b:
f6:7b:d1:ac:95:38:bc:a3:76:4a:b9:2b:d1:47:f5:55:33:ce:
be:ea:3f:64:af:94:f5:15:12:9c:eb:90:7f:ce:29:d8:31:10:
41:62:35:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdO/FC1AxtRywaGFuevikwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNDNkMjcxMGFhZDdjOThjMTBmNGQ5NDVkYWJkZWVhMjFj
NDlkMzEwHhcNMjUwNjA4MTAwMDQ3WhcNMjUwNjA5MTAwMDQ3WjAzMTEwLwYDVQQD
Eyg5ZDUxNmZlOGM5N2JlYWEwZTNiNWM3MzMwYTI0MzBhMDk3MDgyZDI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA30F61zAM8TzdPOg7FxNAuJ02pycX
IkvBKcFnmdNH6SbW44hUlDGBbtDfSh8jtCavalPQSkGfE1i/rPSqD6TPCOTtVK5z
s9yVwS9QcLaxiQ7EgcOhtDZPMu2kU2hnvs/3A7CLL4hp5Qt4nSx//NJhHxxOeS+d
u1aDHCQwPS1YyeLm5fBLjn6Zzsybz6vQS56AelnoXKx/iBriVvBVRdQXmTNeYVav
W1Ct9iKBHA5XZ3JmjPzjVCVKzCRQK5WMvi5yOa104iO3kjvyjr+KDffMekkzMhW4
9JtctvOVOIu6XTF1sOd52xXbRtciZDPhg3y0Itlq1q5Mwh+lq/iskNkKPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ1Rb+jJe+qg47XHMwokMKCXCC0pMB8GA1UdIwQY
MBaAFL5D0nEKrXyYwQ9NlF2r3uohxJ0xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODct
OGFmN2FlMGE5YWM3LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOS9mZjQ3OTQtOWU1My00ZjMwLWE5ODctOGFmN2FlMGE5YWM3
LzEvdmtQU2NRcXRmSmpCRDAyVVhhdmU2aUhFblRFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfamONvFM
QT5BJtMXtvQFJW+VQDIYcyNvg6vt0CDwhvnNpw/khO80KoYDNEM+Pauf9zbdn4/x
4ms2Gs7eNYkokaRs6dKiWaVbq26PMq+fhxGYluKFJhSK+82unRzp0isOABMboTxr
i8NjQAOri9Uq7kQ6lDkFPwaSOAtPQVBOsMKlUSe9rWscs/IOUOcxcxcoEIIwG8/6
qTLRy1UMlnt+a1xqUZYx1y2oEPRLy0Wlj0Jd4hpuQI3ItFkbBfQOzxGGOsXSm6E5
0P+UcUS3CJqO4pKREkpMlPwb9nvRrJU4vKN2Srkr0Uf1VTPOvuo/ZK+U9RUSnOuQ
f84p2DEQQWI1FA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:48:44 2025 by rpki-client