Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
File: VDxwGANHJZY6lxyWqMqrWYyuY4o.mft (raw, json)
Hash identifier: 7GOVQd/dZrIV+TWK3LMqlpou6NpWTbZgMRZJfmmTCOg=
Subject key identifier: 0A:C4:AA:C0:1D:C5:B7:87:55:54:DB:F2:D4:54:C4:DB:B7:6C:BF:4D
Authority key identifier: 54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A
Certificate issuer: /CN=543c7018034725963a971c96a8caab598cae638a
Certificate serial: 01974E8E2DBC1912E931F640D028CBFE9468
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
Manifest number: 0374
Signing time: Sun 08 Jun 2025 08:00:29 +0000
Manifest this update: Sun 08 Jun 2025 08:00:29 +0000
Manifest next update: Mon 09 Jun 2025 08:00:29 +0000
Files and hashes: 1: O7wVhYp5aN-EHbBcAt5o4QIzfyg.roa (hash: 1pH3pLqu6QshZ8HwYPfHNSe335AW5zx9SMrVG3Y2btc=)
2: VDxwGANHJZY6lxyWqMqrWYyuY4o.crl (hash: Nuc3X1KyrbGeO3uDZfWjwnFXL1GBb9rLgN6bt7YXR00=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl
rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:2d:bc:19:12:e9:31:f6:40:d0:28:cb:fe:94:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c7018034725963a971c96a8caab598cae638a
Validity
Not Before: Jun 8 08:00:29 2025 GMT
Not After : Jun 9 08:00:29 2025 GMT
Subject: CN=0ac4aac01dc5b7875554dbf2d454c4dbb76cbf4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:95:be:8f:96:9b:6e:c6:0d:fb:4f:ce:a3:17:
f7:c4:d5:55:9d:52:0e:ee:62:d2:e3:fc:f3:08:9c:
87:f8:3d:b7:48:28:29:db:54:7a:2d:86:af:4a:00:
c8:9e:66:4e:d3:84:4c:b1:5d:9a:e5:c4:10:da:7e:
9f:99:c4:75:8a:ca:25:b3:eb:d4:26:c7:2a:86:ce:
b6:11:62:76:a2:b3:80:cc:84:86:34:f7:0c:63:c9:
ae:86:c3:33:fa:00:19:40:e2:f3:b2:b2:0f:57:b4:
9a:9f:f1:d0:91:bd:65:01:d5:25:f6:f2:4f:c8:33:
96:76:51:f8:87:d9:f2:fb:8f:c2:f2:a3:7b:d2:c1:
cd:9e:fa:c4:1e:6c:06:33:bc:60:2b:21:6b:1e:c6:
81:a6:c8:7a:49:ac:36:01:3c:58:9a:41:c9:68:1c:
eb:c9:09:ae:10:d2:00:cd:85:5a:4d:9e:fd:30:90:
d8:87:dc:76:12:03:41:d1:12:00:75:fe:89:8d:23:
be:d6:de:30:18:01:ed:99:80:23:64:23:d2:cf:54:
ff:aa:40:d1:f9:3f:a3:f7:c2:77:33:28:36:a2:f7:
9a:36:b3:55:ae:94:b3:e9:1e:31:1f:19:88:78:57:
9b:7e:90:d8:7d:37:28:f2:60:d3:1b:9b:8c:73:c7:
d2:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0A:C4:AA:C0:1D:C5:B7:87:55:54:DB:F2:D4:54:C4:DB:B7:6C:BF:4D
X509v3 Authority Key Identifier:
keyid:54:3C:70:18:03:47:25:96:3A:97:1C:96:A8:CA:AB:59:8C:AE:63:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxwGANHJZY6lxyWqMqrWYyuY4o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/45/509d0b-acd1-4958-a3cd-375f2449a8c1/1/VDxwGANHJZY6lxyWqMqrWYyuY4o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:b0:de:ca:c3:27:15:04:31:36:30:c6:c9:59:74:32:40:9b:
6e:38:3f:42:3c:91:3d:e8:57:cd:70:1a:b0:59:84:7d:f7:c0:
61:23:8f:72:b4:ca:54:0a:fc:31:7c:98:5c:eb:45:25:04:16:
12:1c:5a:8b:7a:cd:05:8c:91:72:12:0c:a4:6e:e2:52:c6:85:
73:52:bd:d1:c5:e5:66:d2:dc:c4:ee:7e:36:c5:c6:05:e9:99:
3f:be:b6:da:d3:0f:e5:d2:44:19:33:47:18:76:87:e1:5c:c8:
68:61:cc:87:03:03:0c:fe:19:6f:33:c9:8c:34:cd:56:e8:83:
0e:f4:2a:b9:49:a6:09:01:07:74:8e:59:c2:69:fd:76:ce:c7:
b5:ee:c7:19:d9:ec:2d:94:4a:cc:1a:89:2b:49:65:e6:85:b0:
f0:52:e1:05:73:71:c2:59:ca:5a:14:35:c4:f8:7e:ce:c9:1e:
63:27:ba:09:44:c3:15:f3:4b:e2:68:5e:08:2b:c9:59:e9:f6:
ff:06:20:5b:e6:66:38:e3:25:77:93:95:66:b5:0f:51:d7:da:
db:c6:a1:5e:ba:53:57:3c:a5:60:1c:04:20:c2:5a:e0:bc:b1:
61:f6:96:14:4e:75:e9:81:cd:96:3d:3e:50:ca:bb:4d:59:85:
04:6b:9e:c5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOji28GRLpMfZA0CjL/pRoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2M3MDE4MDM0NzI1OTYzYTk3MWM5NmE4Y2FhYjU5OGNh
ZTYzOGEwHhcNMjUwNjA4MDgwMDI5WhcNMjUwNjA5MDgwMDI5WjAzMTEwLwYDVQQD
EygwYWM0YWFjMDFkYzViNzg3NTU1NGRiZjJkNDU0YzRkYmI3NmNiZjRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvpW+j5abbsYN+0/Ooxf3xNVVnVIO
7mLS4/zzCJyH+D23SCgp21R6LYavSgDInmZO04RMsV2a5cQQ2n6fmcR1isols+vU
Jscqhs62EWJ2orOAzISGNPcMY8muhsMz+gAZQOLzsrIPV7San/HQkb1lAdUl9vJP
yDOWdlH4h9ny+4/C8qN70sHNnvrEHmwGM7xgKyFrHsaBpsh6Saw2ATxYmkHJaBzr
yQmuENIAzYVaTZ79MJDYh9x2EgNB0RIAdf6JjSO+1t4wGAHtmYAjZCPSz1T/qkDR
+T+j98J3Myg2oveaNrNVrpSz6R4xHxmIeFebfpDYfTco8mDTG5uMc8fSAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFArEqsAdxbeHVVTb8tRUxNu3bL9NMB8GA1UdIwQY
MBaAFFQ8cBgDRyWWOpcclqjKq1mMrmOKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NS81MDlkMGItYWNkMS00OTU4LWEzY2Qt
Mzc1ZjI0NDlhOGMxLzEvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NS81MDlkMGItYWNkMS00OTU4LWEzY2QtMzc1ZjI0NDlhOGMx
LzEvVkR4d0dBTkhKWlk2bHh5V3FNcXJXWXl1WTRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoLDeysMn
FQQxNjDGyVl0MkCbbjg/QjyRPehXzXAasFmEfffAYSOPcrTKVAr8MXyYXOtFJQQW
Ehxai3rNBYyRchIMpG7iUsaFc1K90cXlZtLcxO5+NsXGBemZP7622tMP5dJEGTNH
GHaH4VzIaGHMhwMDDP4ZbzPJjDTNVuiDDvQquUmmCQEHdI5Zwmn9ds7Hte7HGdns
LZRKzBqJK0ll5oWw8FLhBXNxwlnKWhQ1xPh+zskeYye6CUTDFfNL4mheCCvJWen2
/wYgW+ZmOOMld5OVZrUPUdfa28ahXrpTVzylYBwEIMJa4LyxYfaWFE516YHNlj0+
UMq7TVmFBGuexQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 17:15:18 2025 by rpki-client