Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
File: VyumSzqQYLRkM3rTCgK-xLEaVR8.mft (raw, json)
Hash identifier: xNd2nBp9cqV9arbDlxzLvgmTU8UzSOe0gbxdPOb/S78=
Subject key identifier: 37:F5:A8:36:01:E6:81:AD:87:E5:3D:86:D9:BA:A0:E8:FD:A6:F1:C2
Authority key identifier: 57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
Certificate issuer: /CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Certificate serial: 01974A7A5BA0EC0C9163BFBECAD9BF24B93B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
Manifest number: 1212
Signing time: Sat 07 Jun 2025 13:00:22 +0000
Manifest this update: Sat 07 Jun 2025 13:00:22 +0000
Manifest next update: Sun 08 Jun 2025 13:00:22 +0000
Files and hashes: 1: VyumSzqQYLRkM3rTCgK-xLEaVR8.crl (hash: Nl68fS61dzRAjQ84Hx7nLDDWhVYeMLUFcuRy2BMPNSI=)
2: k3QEGek6OEeL5SsPbREF1e2K4Yk.roa (hash: NiaroSVfhsYQcW9nN+bvyMvN1j0QK242NmOTmwcSA2g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:5b:a0:ec:0c:91:63:bf:be:ca:d9:bf:24:b9:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=572ba64b3a9060b464337ad30a02bec4b11a551f
Validity
Not Before: Jun 7 13:00:22 2025 GMT
Not After : Jun 8 13:00:22 2025 GMT
Subject: CN=37f5a83601e681ad87e53d86d9baa0e8fda6f1c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:df:31:cc:88:c9:35:db:fe:48:a7:f5:fd:9d:
d5:38:50:09:4a:1c:0b:0e:73:a2:55:f1:e5:51:e8:
5b:a5:1b:1c:7c:db:f9:1a:d7:62:0e:74:06:ff:68:
02:6d:db:49:9d:a7:a7:c4:cc:16:2e:e8:8d:bd:c7:
3b:53:ff:30:cb:d2:8c:a1:86:84:6f:13:dd:5d:94:
d1:1d:9c:dc:92:fd:e0:96:f7:86:3a:10:10:f4:89:
fa:63:ba:e7:98:85:38:79:df:0a:5b:45:6e:7b:aa:
49:47:9d:44:87:0d:38:6c:63:18:82:f4:33:39:7c:
75:31:8a:5e:bd:6f:2e:80:76:ca:c5:3b:a2:13:67:
31:3e:36:a5:f7:ff:ef:98:d7:b8:d8:b0:4a:a8:60:
04:ff:39:db:7f:fc:44:46:9a:c2:77:c2:bd:9a:36:
45:20:cd:e9:09:bb:96:c2:d8:60:e2:71:3e:19:cc:
ac:39:c5:3c:ab:88:85:15:98:f4:6c:a3:96:f1:98:
c8:c6:8a:d4:55:02:ef:f6:bf:81:93:b9:e2:c0:82:
d1:b1:40:a0:02:b3:cc:17:87:9c:89:d0:54:cb:18:
3a:4f:32:7a:3f:55:4e:7a:89:f0:6a:8d:90:2d:0f:
a2:8a:f7:bd:b5:41:47:6d:27:bb:82:3f:78:1b:3d:
1d:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:F5:A8:36:01:E6:81:AD:87:E5:3D:86:D9:BA:A0:E8:FD:A6:F1:C2
X509v3 Authority Key Identifier:
keyid:57:2B:A6:4B:3A:90:60:B4:64:33:7A:D3:0A:02:BE:C4:B1:1A:55:1F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VyumSzqQYLRkM3rTCgK-xLEaVR8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/566ef5-d13d-474c-a299-298fbe7dc168/1/VyumSzqQYLRkM3rTCgK-xLEaVR8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:d0:e5:f3:d3:20:38:1b:e9:7c:84:97:11:ce:2a:4a:11:5f:
6b:6e:27:a8:c1:88:f9:f0:3a:ac:e5:8b:36:af:ce:fd:ac:e8:
4c:e2:60:72:68:15:64:e0:cb:c4:d7:84:26:ed:9e:e8:9d:e1:
2b:35:99:e7:38:44:c4:59:00:b3:3a:83:e1:87:ad:71:6a:59:
47:40:45:73:de:df:ed:5f:4c:97:2b:b7:1c:da:26:77:8c:c0:
aa:36:5d:c6:e3:42:be:77:5f:7c:d0:c1:cf:8a:cd:90:5c:cc:
a1:50:08:eb:83:d0:dc:ba:eb:40:a8:50:4e:6a:01:62:29:8b:
68:52:aa:e5:84:0a:d3:a8:7d:3b:7b:94:cb:fb:c9:27:b3:c8:
c2:a8:93:dc:4a:0d:a7:b4:d0:91:47:34:79:57:ca:40:89:d9:
d3:e1:98:de:7b:cb:71:51:84:85:4a:72:a4:0b:76:c3:8c:7b:
9a:40:af:9b:ea:cd:4a:a9:03:02:9a:c5:9a:9e:8a:a7:dd:a7:
b0:ec:12:7a:22:db:ac:02:08:57:9d:74:f2:55:8e:e5:93:81:
2b:70:88:35:c6:5c:8b:61:44:3c:a9:82:c7:d8:ad:8d:90:4f:
41:84:c4:12:49:5c:12:d5:63:48:39:07:79:11:03:5b:fb:be:
11:64:02:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKelug7AyRY7++ytm/JLk7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MmJhNjRiM2E5MDYwYjQ2NDMzN2FkMzBhMDJiZWM0YjEx
YTU1MWYwHhcNMjUwNjA3MTMwMDIyWhcNMjUwNjA4MTMwMDIyWjAzMTEwLwYDVQQD
EygzN2Y1YTgzNjAxZTY4MWFkODdlNTNkODZkOWJhYTBlOGZkYTZmMWMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyN8xzIjJNdv+SKf1/Z3VOFAJShwL
DnOiVfHlUehbpRscfNv5GtdiDnQG/2gCbdtJnaenxMwWLuiNvcc7U/8wy9KMoYaE
bxPdXZTRHZzckv3glveGOhAQ9In6Y7rnmIU4ed8KW0Vue6pJR51Ehw04bGMYgvQz
OXx1MYpevW8ugHbKxTuiE2cxPjal9//vmNe42LBKqGAE/znbf/xERprCd8K9mjZF
IM3pCbuWwthg4nE+GcysOcU8q4iFFZj0bKOW8ZjIxorUVQLv9r+Bk7niwILRsUCg
ArPMF4ecidBUyxg6TzJ6P1VOeonwao2QLQ+iive9tUFHbSe7gj94Gz0duQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDf1qDYB5oGth+U9htm6oOj9pvHCMB8GA1UdIwQY
MBaAFFcrpks6kGC0ZDN60woCvsSxGlUfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC81NjZlZjUtZDEzZC00NzRjLWEyOTkt
Mjk4ZmJlN2RjMTY4LzEvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC81NjZlZjUtZDEzZC00NzRjLWEyOTktMjk4ZmJlN2RjMTY4
LzEvVnl1bVN6cVFZTFJrTTNyVENnSy14TEVhVlI4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApdDl89Mg
OBvpfISXEc4qShFfa24nqMGI+fA6rOWLNq/O/azoTOJgcmgVZODLxNeEJu2e6J3h
KzWZ5zhExFkAszqD4YetcWpZR0BFc97f7V9Mlyu3HNomd4zAqjZdxuNCvndffNDB
z4rNkFzMoVAI64PQ3LrrQKhQTmoBYimLaFKq5YQK06h9O3uUy/vJJ7PIwqiT3EoN
p7TQkUc0eVfKQInZ0+GY3nvLcVGEhUpypAt2w4x7mkCvm+rNSqkDAprFmp6Kp92n
sOwSeiLbrAIIV5108lWO5ZOBK3CINcZci2FEPKmCx9itjZBPQYTEEklcEtVjSDkH
eREDW/u+EWQCiA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:35:00 2025 by rpki-client