Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
File: vmFEtFm84Tnyc0pE-9tGyYEymys.mft (raw, json)
Hash identifier: X7v8e9QMdoGOP/TezkmvDgycSLv/m878elJUzM9wIYU=
Subject key identifier: FF:FC:4E:C6:78:CD:5C:41:4C:65:44:FF:4F:CA:25:E4:B3:3F:6B:ED
Authority key identifier: BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
Certificate issuer: /CN=be6144b459bce139f2734a44fbdb46c981329b2b
Certificate serial: 0197499F530CE8E44561D462FC0CD6943B72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
Manifest number: 0A09
Signing time: Sat 07 Jun 2025 09:01:07 +0000
Manifest this update: Sat 07 Jun 2025 09:01:07 +0000
Manifest next update: Sun 08 Jun 2025 09:01:07 +0000
Files and hashes: 1: 1-joLXxcr_bVIX8GYv6pA9Fl0-sU.roa (hash: fC8xsMT8pkAhb0cnhW19TBbsU5HJIWYiSjKEjJGjv0I=)
2: sYPkj1N3no6PTM91c5Pov65EAC8.roa (hash: uAS0kma3H4GS4hrLx52tm2yalQVMm9OuSp2lJZ08j2k=)
3: vmFEtFm84Tnyc0pE-9tGyYEymys.crl (hash: ckH6tj/xp+MMQibbaVOBctL+85xEQ+yWVSwp2BbyLRM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:53:0c:e8:e4:45:61:d4:62:fc:0c:d6:94:3b:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be6144b459bce139f2734a44fbdb46c981329b2b
Validity
Not Before: Jun 7 09:01:07 2025 GMT
Not After : Jun 8 09:01:07 2025 GMT
Subject: CN=fffc4ec678cd5c414c6544ff4fca25e4b33f6bed
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:43:98:40:dd:6e:45:3f:10:a3:d1:4d:03:3c:
45:b7:3f:2e:67:f0:26:b2:ac:06:ae:19:f1:3e:5d:
46:e9:a6:d6:22:be:21:09:3d:87:f7:a7:7a:b9:29:
6f:0a:60:00:18:f6:1e:4a:fa:fc:99:e0:e3:c7:c9:
a1:46:43:b6:be:23:5d:f4:49:f9:80:69:7e:27:9e:
1e:b1:97:b1:dd:e2:ef:ac:96:1c:15:f9:3a:8f:e5:
68:45:8d:0f:4a:9a:d2:56:5d:1a:57:fb:fc:e0:18:
dd:d9:78:90:5d:49:5d:ab:3b:88:76:bd:d3:8a:ce:
94:22:c8:96:87:da:aa:f5:dd:9a:be:b3:f5:38:c5:
0d:30:57:46:fe:57:54:96:08:62:f6:ff:0a:74:72:
31:2e:2e:84:fc:a4:eb:c0:25:e2:8f:8c:55:d2:30:
8a:e1:16:77:dc:c3:7c:ba:6b:8a:80:c1:4d:46:f8:
0b:e1:c3:35:c8:47:08:b9:62:ac:5d:8e:22:92:48:
f7:c8:99:d7:4d:40:b3:7c:eb:76:5b:80:f6:96:e9:
56:af:86:20:84:c8:0c:59:69:be:75:b0:20:64:c0:
8a:f1:01:b8:53:cd:d0:17:b9:c6:83:c5:42:a9:15:
04:37:33:2a:d9:7d:4c:8d:92:16:b4:9d:f7:98:74:
a3:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:FC:4E:C6:78:CD:5C:41:4C:65:44:FF:4F:CA:25:E4:B3:3F:6B:ED
X509v3 Authority Key Identifier:
keyid:BE:61:44:B4:59:BC:E1:39:F2:73:4A:44:FB:DB:46:C9:81:32:9B:2B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vmFEtFm84Tnyc0pE-9tGyYEymys.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/3b84bd-133b-43d9-b9cf-17efa57b39d7/1/vmFEtFm84Tnyc0pE-9tGyYEymys.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:25:90:13:31:ec:62:79:97:0c:7b:c2:dd:b3:2b:67:e9:bf:
08:7a:21:f0:a3:f0:3e:30:ba:77:03:5f:64:67:7f:1c:34:86:
0b:39:fb:58:a6:e3:fa:8b:2b:4a:7c:d8:e0:34:2b:3f:79:12:
8b:7f:8c:d6:83:d9:5d:d0:f6:c8:37:9c:11:c1:e3:2f:1e:13:
45:e3:30:e4:b8:b6:e6:15:7c:2c:74:45:ce:da:47:bc:46:c9:
e8:02:22:b2:e8:c1:67:69:ea:29:4e:cf:a8:d2:24:85:0e:ea:
2a:79:63:59:45:2b:64:a5:44:d7:36:2b:f8:4e:b7:bd:e3:17:
04:b5:c0:00:93:09:20:41:e8:d3:1b:f9:ef:19:51:7e:83:69:
71:d3:60:74:61:0f:a0:7b:7e:f8:67:02:d9:0e:72:c1:d2:a3:
a0:e8:bc:64:ab:0b:db:66:00:5b:30:f6:c0:21:b9:42:8a:57:
0b:32:ef:dd:76:32:d6:48:96:d6:54:4a:06:69:7f:01:0b:8c:
44:17:74:c2:bd:3b:33:60:14:1f:db:d2:88:74:f8:57:56:6e:
2e:8d:56:fb:52:9b:f1:cf:28:28:3d:29:0b:61:75:b6:89:11:
94:ce:d1:13:8b:ff:2f:7b:17:82:aa:ae:43:12:2f:c5:dd:f2:
69:20:09:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn1MM6ORFYdRi/AzWlDtyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlNjE0NGI0NTliY2UxMzlmMjczNGE0NGZiZGI0NmM5ODEz
MjliMmIwHhcNMjUwNjA3MDkwMTA3WhcNMjUwNjA4MDkwMTA3WjAzMTEwLwYDVQQD
EyhmZmZjNGVjNjc4Y2Q1YzQxNGM2NTQ0ZmY0ZmNhMjVlNGIzM2Y2YmVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy0OYQN1uRT8Qo9FNAzxFtz8uZ/Am
sqwGrhnxPl1G6abWIr4hCT2H96d6uSlvCmAAGPYeSvr8meDjx8mhRkO2viNd9En5
gGl+J54esZex3eLvrJYcFfk6j+VoRY0PSprSVl0aV/v84Bjd2XiQXUldqzuIdr3T
is6UIsiWh9qq9d2avrP1OMUNMFdG/ldUlghi9v8KdHIxLi6E/KTrwCXij4xV0jCK
4RZ33MN8umuKgMFNRvgL4cM1yEcIuWKsXY4ikkj3yJnXTUCzfOt2W4D2lulWr4Yg
hMgMWWm+dbAgZMCK8QG4U83QF7nGg8VCqRUENzMq2X1MjZIWtJ33mHSjRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/8TsZ4zVxBTGVE/0/KJeSzP2vtMB8GA1UdIwQY
MBaAFL5hRLRZvOE58nNKRPvbRsmBMpsrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2Yt
MTdlZmE1N2IzOWQ3LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8zYjg0YmQtMTMzYi00M2Q5LWI5Y2YtMTdlZmE1N2IzOWQ3
LzEvdm1GRXRGbTg0VG55YzBwRS05dEd5WUV5bXlzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmSWQEzHs
YnmXDHvC3bMrZ+m/CHoh8KPwPjC6dwNfZGd/HDSGCzn7WKbj+osrSnzY4DQrP3kS
i3+M1oPZXdD2yDecEcHjLx4TReMw5Li25hV8LHRFztpHvEbJ6AIisujBZ2nqKU7P
qNIkhQ7qKnljWUUrZKVE1zYr+E63veMXBLXAAJMJIEHo0xv57xlRfoNpcdNgdGEP
oHt++GcC2Q5ywdKjoOi8ZKsL22YAWzD2wCG5QopXCzLv3XYy1kiW1lRKBml/AQuM
RBd0wr07M2AUH9vSiHT4V1ZuLo1W+1Kb8c8oKD0pC2F1tokRlM7RE4v/L3sXgqqu
QxIvxd3yaSAJJA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:17 2025 by rpki-client