Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
File: vhji2fUJydO0VREqoojTNhhYAaA.mft (raw, json)
Hash identifier: 0Hvl6Y+PFs14dT7o+i1hChYfhNeMY16FMVNC1Wckkg0=
Subject key identifier: 2E:7D:DD:66:04:15:3F:9A:69:76:83:3D:93:40:BD:C5:71:0B:4E:F4
Authority key identifier: BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
Certificate issuer: /CN=be18e2d9f509c9d3b455112aa288d336185801a0
Certificate serial: 0197512172DD7176460C0C82D53A281DA203
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
Manifest number: 0F63
Signing time: Sun 08 Jun 2025 20:00:35 +0000
Manifest this update: Sun 08 Jun 2025 20:00:35 +0000
Manifest next update: Mon 09 Jun 2025 20:00:35 +0000
Files and hashes: 1: K7bdbq2NQi5Og3pBR0VNiKqzF3o.roa (hash: Y5TCg/QVPxm4ctwH0Vu0TBEdMj0uZUrfAJN0ICvLjOc=)
2: vhji2fUJydO0VREqoojTNhhYAaA.crl (hash: XgYsly0ucrBLb1nXPjrse/ATmWS0IBdVICTsrnOcnEw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:72:dd:71:76:46:0c:0c:82:d5:3a:28:1d:a2:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be18e2d9f509c9d3b455112aa288d336185801a0
Validity
Not Before: Jun 8 20:00:35 2025 GMT
Not After : Jun 9 20:00:35 2025 GMT
Subject: CN=2e7ddd6604153f9a6976833d9340bdc5710b4ef4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1c:3f:97:a0:29:38:fa:ba:a1:20:73:d4:74:
e7:e5:5e:f5:23:9e:eb:f9:1e:44:bd:33:0d:c0:0e:
89:fd:ea:06:ed:92:4e:92:e3:4e:50:83:0c:7b:32:
34:03:23:eb:a9:59:c5:1b:c6:ae:ca:05:4a:7f:d9:
e3:5c:c1:51:a8:03:cb:15:d1:fc:80:f8:7a:5f:db:
55:b9:3b:01:d3:80:de:64:e0:1e:82:85:c7:73:14:
58:8a:82:f8:45:a4:21:4d:3f:6f:91:2c:53:7e:08:
28:15:9e:f6:27:e5:98:23:c8:55:df:17:0a:00:c5:
34:0f:e6:b9:00:b4:1a:4f:c7:a0:25:8d:2d:69:e4:
25:02:f1:c4:b1:b0:a7:c8:51:60:de:60:e4:40:09:
61:a7:3e:43:a1:9d:01:f5:c8:ee:e0:d1:b6:97:6a:
9c:56:e5:9c:2b:b8:47:3b:86:cb:c2:1b:76:5b:b4:
49:84:83:b2:b2:58:e8:13:35:a4:f0:76:bc:34:b4:
ff:64:89:a2:02:f9:0c:5b:d8:20:28:cb:90:47:12:
73:25:32:78:dc:60:18:55:cf:d1:1e:4c:60:99:11:
80:60:14:96:eb:a8:2f:65:44:ec:d8:23:19:15:02:
3d:12:bb:37:11:51:e6:f4:f2:d8:3b:dd:d2:60:df:
83:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:7D:DD:66:04:15:3F:9A:69:76:83:3D:93:40:BD:C5:71:0B:4E:F4
X509v3 Authority Key Identifier:
keyid:BE:18:E2:D9:F5:09:C9:D3:B4:55:11:2A:A2:88:D3:36:18:58:01:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhji2fUJydO0VREqoojTNhhYAaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6645d5-d193-4a63-85e6-2ca0e5c104fd/1/vhji2fUJydO0VREqoojTNhhYAaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:a4:d4:75:02:b0:6c:20:a0:9f:5c:ca:ba:37:3b:5d:e2:67:
18:e6:b6:13:09:f5:cb:44:12:79:68:d1:c2:ed:c8:d2:96:4f:
c1:a5:17:65:e2:18:0d:08:d0:f9:b2:9d:ee:b5:ce:f7:49:48:
53:6a:95:e1:bb:1c:be:b2:54:17:d7:c9:c1:c1:93:77:96:4b:
bc:09:1e:1a:45:7c:91:80:02:7a:1f:1a:e2:ab:05:89:00:33:
70:ad:b4:70:6b:81:9d:f2:bc:17:99:f3:8d:76:dc:a8:d5:24:
81:7c:7e:b4:4e:fe:4e:c7:90:40:83:85:02:06:e5:dd:6a:72:
63:7b:56:bf:3a:6e:41:4f:ab:81:c0:9c:07:9b:85:76:e5:02:
45:82:49:56:14:8e:2a:df:34:db:0c:32:04:aa:c7:6c:97:7d:
ef:fb:af:e2:fb:23:cf:98:48:b8:68:d7:0f:02:8d:75:2b:a1:
a3:f5:b6:a0:84:6d:5a:3c:e5:f0:32:18:66:dd:82:5c:d8:10:
e8:21:c5:ce:80:fc:a1:8d:74:1a:1b:1a:cd:b3:55:76:f1:9a:
b1:0f:40:7a:18:56:fa:d3:b3:5c:d7:98:41:36:12:64:8a:73:
56:14:fb:1d:c2:47:19:71:ca:79:ae:19:1e:c9:62:4a:a0:bf:
2f:47:0a:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRIXLdcXZGDAyC1TooHaIDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMThlMmQ5ZjUwOWM5ZDNiNDU1MTEyYWEyODhkMzM2MTg1
ODAxYTAwHhcNMjUwNjA4MjAwMDM1WhcNMjUwNjA5MjAwMDM1WjAzMTEwLwYDVQQD
EygyZTdkZGQ2NjA0MTUzZjlhNjk3NjgzM2Q5MzQwYmRjNTcxMGI0ZWY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxRw/l6ApOPq6oSBz1HTn5V71I57r
+R5EvTMNwA6J/eoG7ZJOkuNOUIMMezI0AyPrqVnFG8auygVKf9njXMFRqAPLFdH8
gPh6X9tVuTsB04DeZOAegoXHcxRYioL4RaQhTT9vkSxTfggoFZ72J+WYI8hV3xcK
AMU0D+a5ALQaT8egJY0taeQlAvHEsbCnyFFg3mDkQAlhpz5DoZ0B9cju4NG2l2qc
VuWcK7hHO4bLwht2W7RJhIOysljoEzWk8Ha8NLT/ZImiAvkMW9ggKMuQRxJzJTJ4
3GAYVc/RHkxgmRGAYBSW66gvZUTs2CMZFQI9Ers3EVHm9PLYO93SYN+DWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC593WYEFT+aaXaDPZNAvcVxC070MB8GA1UdIwQY
MBaAFL4Y4tn1CcnTtFURKqKI0zYYWAGgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmhqaTJmVUp5ZE8wVlJFcW9valROaGhZQWFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82NjQ1ZDUtZDE5My00YTYzLTg1ZTYt
MmNhMGU1YzEwNGZkLzEvdmhqaTJmVUp5ZE8wVlJFcW9valROaGhZQWFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82NjQ1ZDUtZDE5My00YTYzLTg1ZTYtMmNhMGU1YzEwNGZk
LzEvdmhqaTJmVUp5ZE8wVlJFcW9valROaGhZQWFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ6TUdQKw
bCCgn1zKujc7XeJnGOa2Ewn1y0QSeWjRwu3I0pZPwaUXZeIYDQjQ+bKd7rXO90lI
U2qV4bscvrJUF9fJwcGTd5ZLvAkeGkV8kYACeh8a4qsFiQAzcK20cGuBnfK8F5nz
jXbcqNUkgXx+tE7+TseQQIOFAgbl3WpyY3tWvzpuQU+rgcCcB5uFduUCRYJJVhSO
Kt802wwyBKrHbJd97/uv4vsjz5hIuGjXDwKNdSuho/W2oIRtWjzl8DIYZt2CXNgQ
6CHFzoD8oY10GhsazbNVdvGasQ9AehhW+tOzXNeYQTYSZIpzVhT7HcJHGXHKea4Z
HsliSqC/L0cKbQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:07:06 2025 by rpki-client