Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
File: VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft (raw, json)
Hash identifier: 46c/Pt04qulEgf3XYgqrkyfGTn/BZ6dZmLNPCTF2RXo=
Subject key identifier: 38:97:AD:AB:2E:7E:9E:DA:C2:5A:DC:81:9D:7D:7D:50:16:8C:0A:26
Authority key identifier: 54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
Certificate issuer: /CN=540f4a1b92338b49ca63021219059ce570ff5964
Certificate serial: 01974DB26DFAA1C4FF1B4FD1B2520C2F70E6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
Manifest number: 03B4
Signing time: Sun 08 Jun 2025 04:00:28 +0000
Manifest this update: Sun 08 Jun 2025 04:00:28 +0000
Manifest next update: Mon 09 Jun 2025 04:00:28 +0000
Files and hashes: 1: VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl (hash: ghdBjID8OOTdxg9x9ZreABWoWwavTmS/HjGXWXjvIMc=)
2: _WaDfELTBc_dUmy6Cu013iGAFy4.roa (hash: 4Ui783wG8atURB8iqdX/TxaJyYCKy9S+Gr0JJXsrTgo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:6d:fa:a1:c4:ff:1b:4f:d1:b2:52:0c:2f:70:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=540f4a1b92338b49ca63021219059ce570ff5964
Validity
Not Before: Jun 8 04:00:28 2025 GMT
Not After : Jun 9 04:00:28 2025 GMT
Subject: CN=3897adab2e7e9edac25adc819d7d7d50168c0a26
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:c8:7e:23:be:1a:24:c1:73:fd:b9:29:ad:3b:
51:07:3e:74:76:51:81:bb:8d:8e:7a:dd:67:fc:8d:
13:47:a3:78:fd:0c:f3:08:8f:4b:bd:7d:ac:1e:04:
d5:09:27:8b:b8:cd:c5:48:22:cd:4a:4d:12:e6:48:
0b:42:2e:c0:1c:9a:f3:0e:20:9d:b0:8f:28:d4:ba:
16:d2:a7:19:ce:75:de:1c:ed:e6:cc:d8:0f:21:72:
71:79:df:9e:6e:7b:ce:d6:f1:69:0d:7c:1e:14:59:
87:99:d9:d1:ff:81:df:42:d7:22:1f:df:44:27:73:
8a:7a:6f:ce:2d:6e:e2:c2:4d:15:c7:cc:13:08:5a:
d4:34:01:08:aa:4c:29:71:7f:c0:25:f9:e8:55:80:
2a:44:e9:dc:a2:6f:96:f3:63:92:96:9c:0f:fe:fd:
1e:96:30:ae:37:08:74:c1:b8:31:72:3b:9c:d7:83:
7d:55:d2:7e:74:d8:b3:32:33:ad:7e:e7:b0:ad:8c:
09:7d:d7:20:1f:15:19:73:7e:d7:21:7a:62:5a:e6:
17:b7:b0:b2:2c:af:9c:00:46:04:d0:53:be:33:c1:
f0:c0:27:9e:dc:d5:77:81:fc:61:e6:bd:fd:c3:9c:
da:61:42:37:77:0d:3c:fc:85:80:46:1e:62:12:1e:
b1:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:97:AD:AB:2E:7E:9E:DA:C2:5A:DC:81:9D:7D:7D:50:16:8C:0A:26
X509v3 Authority Key Identifier:
keyid:54:0F:4A:1B:92:33:8B:49:CA:63:02:12:19:05:9C:E5:70:FF:59:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VA9KG5Izi0nKYwISGQWc5XD_WWQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/8f6f26-835e-4547-b770-e0529016cba0/1/VA9KG5Izi0nKYwISGQWc5XD_WWQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:dc:ac:a5:54:c8:9f:72:51:fd:84:fb:f6:ad:28:0c:46:bd:
a5:1e:57:11:cc:d1:b5:a3:f1:52:b0:35:5b:07:b8:be:d0:75:
cc:4a:15:74:ec:e9:78:58:b6:ea:33:f4:b4:2c:5d:09:ed:be:
0c:b2:1b:1d:87:e4:84:bc:4b:a0:b7:95:22:c7:47:15:82:dc:
6d:7f:31:10:ea:fb:3a:01:a0:66:d4:6e:0a:11:90:75:b0:f8:
04:ac:81:3d:16:4d:1c:3f:2c:36:3a:14:fd:a0:fc:34:96:4e:
6b:ae:6b:12:53:8f:ff:4b:9c:34:33:3e:fc:8a:9d:01:12:c7:
96:27:fa:f6:ff:18:68:07:4c:ff:be:bf:c5:5f:b3:2b:d7:9c:
1a:b7:45:ee:97:2a:e5:8b:4a:9a:ee:77:58:3b:68:d2:a8:8d:
71:e0:22:e9:d9:18:f4:71:42:cd:c5:1f:f2:08:4c:44:45:82:
44:b9:c2:81:9d:1b:21:32:f3:2a:e9:4b:61:3d:92:34:e5:5d:
c5:78:8a:f8:94:40:2f:b5:34:67:6e:f5:80:56:19:24:9a:5b:
ee:d6:1b:e3:a6:51:0b:e4:79:a7:0b:b7:41:2e:5d:15:88:2d:
e4:d2:85:0c:46:12:57:b0:18:cc:e8:a4:b4:de:94:af:46:01:
2f:3b:a8:68
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNsm36ocT/G0/RslIML3DmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MGY0YTFiOTIzMzhiNDljYTYzMDIxMjE5MDU5Y2U1NzBm
ZjU5NjQwHhcNMjUwNjA4MDQwMDI4WhcNMjUwNjA5MDQwMDI4WjAzMTEwLwYDVQQD
EygzODk3YWRhYjJlN2U5ZWRhYzI1YWRjODE5ZDdkN2Q1MDE2OGMwYTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuMh+I74aJMFz/bkprTtRBz50dlGB
u42Oet1n/I0TR6N4/QzzCI9LvX2sHgTVCSeLuM3FSCLNSk0S5kgLQi7AHJrzDiCd
sI8o1LoW0qcZznXeHO3mzNgPIXJxed+ebnvO1vFpDXweFFmHmdnR/4HfQtciH99E
J3OKem/OLW7iwk0Vx8wTCFrUNAEIqkwpcX/AJfnoVYAqROncom+W82OSlpwP/v0e
ljCuNwh0wbgxcjuc14N9VdJ+dNizMjOtfuewrYwJfdcgHxUZc37XIXpiWuYXt7Cy
LK+cAEYE0FO+M8HwwCee3NV3gfxh5r39w5zaYUI3dw08/IWARh5iEh6xIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDiXrasufp7awlrcgZ19fVAWjAomMB8GA1UdIwQY
MBaAFFQPShuSM4tJymMCEhkFnOVw/1lkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My84ZjZmMjYtODM1ZS00NTQ3LWI3NzAt
ZTA1MjkwMTZjYmEwLzEvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My84ZjZmMjYtODM1ZS00NTQ3LWI3NzAtZTA1MjkwMTZjYmEw
LzEvVkE5S0c1SXppMG5LWXdJU0dRV2M1WERfV1dRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANNyspVTI
n3JR/YT79q0oDEa9pR5XEczRtaPxUrA1Wwe4vtB1zEoVdOzpeFi26jP0tCxdCe2+
DLIbHYfkhLxLoLeVIsdHFYLcbX8xEOr7OgGgZtRuChGQdbD4BKyBPRZNHD8sNjoU
/aD8NJZOa65rElOP/0ucNDM+/IqdARLHlif69v8YaAdM/76/xV+zK9ecGrdF7pcq
5YtKmu53WDto0qiNceAi6dkY9HFCzcUf8ghMREWCRLnCgZ0bITLzKulLYT2SNOVd
xXiK+JRAL7U0Z271gFYZJJpb7tYb46ZRC+R5pwu3QS5dFYgt5NKFDEYSV7AYzOik
tN6Ur0YBLzuoaA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:38:24 2025 by rpki-client