Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
File: VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft (raw, json)
Hash identifier: OI5WwnvhG1Zwq86CfuMcAJb91GQUslVz388tfbpwx/I=
Subject key identifier: 8E:82:2A:47:8C:AD:D1:53:01:16:7D:46:42:DB:48:9D:61:98:B4:AA
Authority key identifier: 54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
Certificate issuer: /CN=543c54067385a765b1d5617c43331956fb208e89
Certificate serial: 0197507CF87AA41D2FFE6763CD268A28C9AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
Manifest number: 1582
Signing time: Sun 08 Jun 2025 17:00:56 +0000
Manifest this update: Sun 08 Jun 2025 17:00:56 +0000
Manifest next update: Mon 09 Jun 2025 17:00:56 +0000
Files and hashes: 1: VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl (hash: S528aLwOMKy2Mo9x95fQ5hUDo3DaNrxKKrL4PFPMhvg=)
2: z735G_UD7XSfWpNDTnzeaf_tL4w.roa (hash: DkYxS6x4qA1lOII9eThmWP47P9TbdKeyTU6VofiN3dI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:7c:f8:7a:a4:1d:2f:fe:67:63:cd:26:8a:28:c9:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=543c54067385a765b1d5617c43331956fb208e89
Validity
Not Before: Jun 8 17:00:56 2025 GMT
Not After : Jun 9 17:00:56 2025 GMT
Subject: CN=8e822a478cadd15301167d4642db489d6198b4aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:a7:e0:63:d9:c6:d7:71:7a:ec:e3:0a:04:3b:
0c:13:94:40:65:c5:3b:2e:21:4a:1e:02:3c:3e:4d:
5a:1a:aa:fa:39:9f:9a:4a:35:8a:5f:7d:28:29:cb:
f1:1a:c2:da:6c:35:da:de:7f:1c:e2:94:d5:bb:6f:
37:a5:6f:fe:c7:08:66:48:b9:d2:70:34:f8:9c:44:
6b:32:c5:f4:8b:20:ef:da:00:d0:d0:fc:f1:84:09:
e2:b1:7b:cb:67:73:28:2a:55:c5:cf:86:85:47:2e:
a9:14:ea:95:a0:08:7e:d7:d4:41:72:b2:5b:c8:3d:
f3:0a:8a:96:03:b3:02:32:b0:3b:bb:18:18:dc:b9:
d2:8e:68:3c:dd:76:1e:1d:fa:5c:7d:87:3a:3d:8f:
4b:7a:09:c9:55:e9:8e:da:ed:53:79:7b:86:92:4b:
8a:b7:fe:07:2e:9e:c0:e4:14:96:f2:26:12:8f:03:
1e:95:54:6b:a4:bf:71:f3:ab:bd:26:91:49:43:02:
d8:e1:6d:32:21:b9:2d:c9:6e:d3:27:35:a8:45:14:
7f:ba:2d:83:8a:1a:3e:28:94:1d:51:30:a4:70:15:
76:cf:a2:76:98:c6:57:c6:69:25:b3:b7:1f:0d:00:
44:41:91:61:8b:b6:b5:15:16:f6:1a:ab:bb:a8:c5:
82:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8E:82:2A:47:8C:AD:D1:53:01:16:7D:46:42:DB:48:9D:61:98:B4:AA
X509v3 Authority Key Identifier:
keyid:54:3C:54:06:73:85:A7:65:B1:D5:61:7C:43:33:19:56:FB:20:8E:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VDxUBnOFp2Wx1WF8QzMZVvsgjok.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/63fbf8-5cff-4991-8f27-a41a4834ecaa/1/VDxUBnOFp2Wx1WF8QzMZVvsgjok.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:59:ef:47:27:67:ac:f2:16:7b:e1:53:e8:a9:f6:ef:6b:5a:
1a:13:58:a0:d7:5a:39:c1:7f:db:5a:bf:3c:34:73:51:10:7f:
b3:33:84:b4:ef:3f:17:d8:e9:eb:66:01:cb:2a:42:cf:6f:b4:
81:d5:d7:81:dd:c3:b4:ec:99:bb:a6:0c:f8:eb:1b:49:1b:81:
fa:af:0f:7b:2a:92:16:dc:1b:ae:41:5c:7e:35:6f:f9:2f:78:
c4:64:15:f4:3b:2b:94:fb:99:ca:36:fc:39:ff:80:48:98:f7:
14:fc:27:3a:a3:57:d4:6d:18:88:72:75:ec:ff:72:e0:0e:e3:
36:4d:e0:ff:f7:02:a9:f2:c1:6e:cf:e9:a0:d4:ad:ec:b4:b7:
da:a7:b2:85:b2:30:84:95:1f:28:68:10:6f:45:89:43:70:33:
aa:97:68:fe:2d:c9:04:10:c1:ac:bf:e3:60:a0:10:37:21:f9:
6a:a3:92:7b:4a:e3:dc:16:9b:10:49:90:32:32:13:1e:b4:47:
df:2c:56:84:76:cd:35:00:6a:86:53:4d:83:1e:5c:0d:71:66:
f9:e6:31:50:2d:79:fe:67:f9:ab:32:d1:b6:98:42:9a:0e:eb:
0c:54:c5:c0:2e:b0:2a:bc:b5:f8:79:5e:0d:02:0a:cc:a6:cb:
6f:37:57:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQfPh6pB0v/mdjzSaKKMmqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0M2M1NDA2NzM4NWE3NjViMWQ1NjE3YzQzMzMxOTU2ZmIy
MDhlODkwHhcNMjUwNjA4MTcwMDU2WhcNMjUwNjA5MTcwMDU2WjAzMTEwLwYDVQQD
Eyg4ZTgyMmE0NzhjYWRkMTUzMDExNjdkNDY0MmRiNDg5ZDYxOThiNGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv6fgY9nG13F67OMKBDsME5RAZcU7
LiFKHgI8Pk1aGqr6OZ+aSjWKX30oKcvxGsLabDXa3n8c4pTVu283pW/+xwhmSLnS
cDT4nERrMsX0iyDv2gDQ0PzxhAnisXvLZ3MoKlXFz4aFRy6pFOqVoAh+19RBcrJb
yD3zCoqWA7MCMrA7uxgY3LnSjmg83XYeHfpcfYc6PY9LegnJVemO2u1TeXuGkkuK
t/4HLp7A5BSW8iYSjwMelVRrpL9x86u9JpFJQwLY4W0yIbktyW7TJzWoRRR/ui2D
iho+KJQdUTCkcBV2z6J2mMZXxmkls7cfDQBEQZFhi7a1FRb2Gqu7qMWCKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI6CKkeMrdFTARZ9RkLbSJ1hmLSqMB8GA1UdIwQY
MBaAFFQ8VAZzhadlsdVhfEMzGVb7II6JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOS82M2ZiZjgtNWNmZi00OTkxLThmMjct
YTQxYTQ4MzRlY2FhLzEvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOS82M2ZiZjgtNWNmZi00OTkxLThmMjctYTQxYTQ4MzRlY2Fh
LzEvVkR4VUJuT0ZwMld4MVdGOFF6TVpWdnNnam9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACVnvRydn
rPIWe+FT6Kn272taGhNYoNdaOcF/21q/PDRzURB/szOEtO8/F9jp62YByypCz2+0
gdXXgd3DtOyZu6YM+OsbSRuB+q8PeyqSFtwbrkFcfjVv+S94xGQV9DsrlPuZyjb8
Of+ASJj3FPwnOqNX1G0YiHJ17P9y4A7jNk3g//cCqfLBbs/poNSt7LS32qeyhbIw
hJUfKGgQb0WJQ3Azqpdo/i3JBBDBrL/jYKAQNyH5aqOSe0rj3BabEEmQMjITHrRH
3yxWhHbNNQBqhlNNgx5cDXFm+eYxUC15/mf5qzLRtphCmg7rDFTFwC6wKry1+Hle
DQIKzKbLbzdX5g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 20:55:07 2025 by rpki-client