
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
File: VtV_bPKMmCwdP_bFJX85npuVW90.mft (raw, json)
Hash identifier: sfela2CXshpmSQStQ2jE3vNvwcGp2udmXB5arV+qmi8=
Subject key identifier: 4A:53:65:15:48:41:0A:FF:90:7A:B3:9E:B1:C8:5B:61:36:96:B5:39
Authority key identifier: 56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
Certificate issuer: /CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Certificate serial: 01976628C9A04BA82CF56200228F8687F528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
Manifest number: 14B3
Signing time: Thu 12 Jun 2025 22:00:38 +0000
Manifest this update: Thu 12 Jun 2025 22:00:38 +0000
Manifest next update: Fri 13 Jun 2025 22:00:38 +0000
Files and hashes: 1: 3oykizYoQAY0I58Of8Cq7NhfUKc.roa (hash: cQQcIqMFqqgJgSMsMD6mIgtzNJvUpT4D17fJSPeJdeU=)
2: GHjwnLUndLphHCJPh-qrOX8_zps.roa (hash: b//UMqi7Agd+yuEn41KzmO7VIfrmzPVe7tc4UxNlKdk=)
3: VtV_bPKMmCwdP_bFJX85npuVW90.crl (hash: iATi8uQiOb79HoOo2Rf5QejjADjvEdXrMuL16VH9t+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl
rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:28:c9:a0:4b:a8:2c:f5:62:00:22:8f:86:87:f5:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56d57f6cf28c982c1d3ff6c5257f399e9b955bdd
Validity
Not Before: Jun 12 22:00:38 2025 GMT
Not After : Jun 13 22:00:38 2025 GMT
Subject: CN=4a53651548410aff907ab39eb1c85b613696b539
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:f0:aa:ad:4b:4d:83:a8:c4:aa:25:d9:63:8c:
e1:6f:0a:58:98:c1:48:e7:59:55:91:25:2d:3a:18:
0e:8a:a4:21:ba:cb:bb:17:ee:00:26:16:11:d9:3f:
1e:e3:a8:63:83:e8:71:df:a3:ee:10:ff:88:d0:51:
14:6a:4d:f3:ad:d5:7e:23:3c:57:75:cb:5b:97:a1:
14:f4:56:dc:ad:3e:03:35:fe:76:0b:38:03:e8:69:
15:9e:23:e1:e7:67:42:14:e8:18:36:01:8c:96:0c:
64:bd:1a:d4:48:00:14:ae:b8:fa:48:d8:3d:7d:84:
72:fa:2b:0f:74:41:7d:94:ff:2c:08:7e:ce:be:3a:
bc:62:6a:27:29:7b:af:40:41:38:3c:6f:98:80:94:
5d:fc:9c:45:f2:5e:15:5a:08:83:97:bf:d2:c2:c4:
49:2f:90:38:b6:bf:ea:af:cf:9d:19:65:d9:e6:7d:
ce:f3:e1:e6:da:e2:9e:72:68:e6:d5:24:93:a6:0f:
c5:9c:93:c3:43:3c:2d:35:e6:e4:8f:36:36:ea:b4:
fd:13:f6:b7:25:19:15:d8:0f:a3:33:2c:21:c4:85:
1e:87:a0:18:b8:01:5b:8b:64:3f:1b:b1:65:29:8f:
96:aa:62:59:f6:4c:15:c0:cf:92:55:70:44:77:ca:
5c:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:53:65:15:48:41:0A:FF:90:7A:B3:9E:B1:C8:5B:61:36:96:B5:39
X509v3 Authority Key Identifier:
keyid:56:D5:7F:6C:F2:8C:98:2C:1D:3F:F6:C5:25:7F:39:9E:9B:95:5B:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VtV_bPKMmCwdP_bFJX85npuVW90.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8a/a72a92-568b-4327-9c1d-6681f916e554/1/VtV_bPKMmCwdP_bFJX85npuVW90.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:8f:81:f6:ba:19:5e:46:00:9f:95:14:57:35:89:8f:05:01:
5e:23:4e:a4:ab:88:b8:b1:c9:c9:fa:ec:cb:87:3f:f1:7b:ba:
a9:f6:06:f1:88:ed:8a:15:ec:e8:ed:6a:b3:28:3f:e5:85:cf:
59:a2:dc:b6:f4:bd:41:0c:50:6c:67:e2:ec:f6:fc:9a:c6:5d:
a1:c1:87:47:dd:bf:02:35:0b:e6:2b:39:b7:3e:ca:bd:a9:e4:
02:48:7e:07:e5:46:f0:61:d0:0b:d8:96:77:09:1a:1b:d7:67:
2b:56:03:5e:2d:8d:ee:44:59:b5:43:61:08:97:e7:76:14:a4:
80:0b:e4:00:6a:65:86:ce:69:14:c5:90:74:9c:8b:07:f8:54:
03:86:87:4c:b3:6a:f2:33:39:58:8c:8a:f9:da:24:b0:69:8b:
5e:dd:a1:88:b5:30:79:9c:46:04:1f:b7:1f:64:83:e7:33:51:
0f:ee:44:47:72:e4:f2:36:c1:9e:3c:28:8d:6e:51:7b:04:c7:
05:3f:cf:05:50:79:1b:f1:20:16:7a:b7:d1:58:98:96:bb:87:
b8:15:02:45:5f:17:66:bc:66:1c:c3:5b:d6:c2:75:c0:66:fa:
13:12:59:db:ed:78:c2:f9:97:ad:f7:ea:73:76:4c:32:38:23:
88:b9:67:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdmKMmgS6gs9WIAIo+Gh/UoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ZDU3ZjZjZjI4Yzk4MmMxZDNmZjZjNTI1N2YzOTllOWI5
NTViZGQwHhcNMjUwNjEyMjIwMDM4WhcNMjUwNjEzMjIwMDM4WjAzMTEwLwYDVQQD
Eyg0YTUzNjUxNTQ4NDEwYWZmOTA3YWIzOWViMWM4NWI2MTM2OTZiNTM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0/CqrUtNg6jEqiXZY4zhbwpYmMFI
51lVkSUtOhgOiqQhusu7F+4AJhYR2T8e46hjg+hx36PuEP+I0FEUak3zrdV+IzxX
dctbl6EU9FbcrT4DNf52CzgD6GkVniPh52dCFOgYNgGMlgxkvRrUSAAUrrj6SNg9
fYRy+isPdEF9lP8sCH7Ovjq8YmonKXuvQEE4PG+YgJRd/JxF8l4VWgiDl7/SwsRJ
L5A4tr/qr8+dGWXZ5n3O8+Hm2uKecmjm1SSTpg/FnJPDQzwtNebkjzY26rT9E/a3
JRkV2A+jMywhxIUeh6AYuAFbi2Q/G7FlKY+WqmJZ9kwVwM+SVXBEd8pcgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEpTZRVIQQr/kHqznrHIW2E2lrU5MB8GA1UdIwQY
MBaAFFbVf2zyjJgsHT/2xSV/OZ6blVvdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnRWX2JQS01tQ3dkUF9iRkpYODVucHVWVzkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84YS9hNzJhOTItNTY4Yi00MzI3LTljMWQt
NjY4MWY5MTZlNTU0LzEvVnRWX2JQS01tQ3dkUF9iRkpYODVucHVWVzkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84YS9hNzJhOTItNTY4Yi00MzI3LTljMWQtNjY4MWY5MTZlNTU0
LzEvVnRWX2JQS01tQ3dkUF9iRkpYODVucHVWVzkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqo+B9roZ
XkYAn5UUVzWJjwUBXiNOpKuIuLHJyfrsy4c/8Xu6qfYG8YjtihXs6O1qsyg/5YXP
WaLctvS9QQxQbGfi7Pb8msZdocGHR92/AjUL5is5tz7KvankAkh+B+VG8GHQC9iW
dwkaG9dnK1YDXi2N7kRZtUNhCJfndhSkgAvkAGplhs5pFMWQdJyLB/hUA4aHTLNq
8jM5WIyK+doksGmLXt2hiLUweZxGBB+3H2SD5zNRD+5ER3Lk8jbBnjwojW5RewTH
BT/PBVB5G/EgFnq30ViYlruHuBUCRV8XZrxmHMNb1sJ1wGb6ExJZ2+14wvmXrffq
c3ZMMjgjiLlnLA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 08:06:13 2025 by rpki-client