Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
File: Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft (raw, json)
Hash identifier: M3TZ3XOhMp+J0kuMSUgI4GoN+XXZaFo1SRIUh50n8Is=
Subject key identifier: 90:0D:DF:F6:14:36:E1:C5:27:91:E2:A2:99:32:BC:97:92:1A:CE:3F
Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
Certificate issuer: /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Certificate serial: 0197605D629F0FFD44673C736CC5CF45E4AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
Manifest number: 101A
Signing time: Wed 11 Jun 2025 19:00:22 +0000
Manifest this update: Wed 11 Jun 2025 19:00:22 +0000
Manifest next update: Thu 12 Jun 2025 19:00:22 +0000
Files and hashes: 1: 8WKeNRHKfnPMtDPrJe2tbs0peW8.roa (hash: p24Kg0o2ZZFpnMMb7fnMgorqDU4JrcszVsb7S2USX88=)
2: Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl (hash: w/C0cjhM2y61Kb/XXO0GN4JII7lxvsn9G9CGxWohmd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:40:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:5d:62:9f:0f:fd:44:67:3c:73:6c:c5:cf:45:e4:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Validity
Not Before: Jun 11 19:00:22 2025 GMT
Not After : Jun 12 19:00:22 2025 GMT
Subject: CN=900ddff61436e1c52791e2a29932bc97921ace3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:d5:9a:02:fd:2c:ea:1a:40:33:1d:bb:21:5f:
0d:f2:6c:dd:3f:d9:08:10:9c:8d:fd:f7:a1:31:5f:
aa:77:c1:4d:15:15:84:39:17:6c:10:25:cc:5d:fc:
0e:b3:96:f7:02:81:11:dc:29:6a:5c:4a:1e:c1:f6:
9e:13:8e:78:76:6c:23:48:d5:43:0e:3b:72:4f:86:
8a:03:1f:a7:f3:b3:6c:fa:62:db:54:04:0d:65:93:
2a:ac:b5:07:aa:c8:82:cf:ef:ee:ca:80:aa:ba:48:
9f:b8:ef:d1:09:ee:97:18:fc:90:ef:f4:13:1b:b8:
b4:89:58:8e:38:1f:98:1d:3e:c6:4c:7d:d5:cb:45:
93:e9:f5:8b:ac:e8:73:cb:91:10:b9:74:76:f5:34:
14:d2:a3:db:b5:06:49:70:97:ed:c3:cd:9d:be:96:
2f:01:f3:b0:73:04:8f:2c:bd:f1:36:d3:8c:84:fa:
d7:ab:63:f2:e0:3f:f5:f8:2d:4e:52:03:b2:36:11:
38:34:19:27:1a:1d:3f:93:5f:d1:df:9d:09:f6:4e:
21:a7:f1:27:f1:f8:fd:23:e4:49:d9:7b:57:e5:ea:
be:92:b4:0f:9f:cf:7f:07:e9:27:9d:b9:de:07:b2:
45:4d:0d:86:cb:f6:1b:96:e7:43:2c:a1:90:91:40:
0d:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0D:DF:F6:14:36:E1:C5:27:91:E2:A2:99:32:BC:97:92:1A:CE:3F
X509v3 Authority Key Identifier:
keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:35:29:65:8f:97:d6:5f:a7:b5:28:d5:bc:7b:0e:27:c7:1f:
bb:b8:79:6a:0b:cc:84:ed:3c:41:22:ca:33:27:e9:4f:28:55:
21:be:e7:90:11:e4:3a:e8:41:96:1f:93:51:9c:b4:ad:f2:6f:
e1:4c:97:e2:60:bd:f8:91:23:6f:fc:85:b0:1e:d3:8a:89:09:
87:1e:c7:53:d6:2c:5b:ce:cf:8a:47:cb:f8:1e:01:e5:1d:fe:
68:6d:da:18:4b:ee:7a:05:9e:6d:ef:b8:50:60:45:e0:39:72:
26:fc:c9:cd:15:94:b5:20:b2:83:c5:e0:28:50:5c:23:58:ce:
dc:5a:85:01:79:82:68:b4:51:97:5f:1b:f9:45:4a:57:a3:7f:
f6:16:7d:a5:9e:94:b4:d0:68:a2:a7:8d:db:e6:0e:3b:e5:db:
e7:95:fb:56:79:d4:c1:c3:a0:1e:a1:b0:77:94:6c:02:5d:ef:
9e:84:45:49:34:39:da:7a:70:9a:c3:e2:a1:19:c3:c1:34:3b:
30:de:c7:b8:d2:5c:46:8d:1d:b7:e3:e2:a2:c9:64:f1:62:9a:
5f:a9:1d:07:29:49:2e:39:6d:69:6d:ed:ba:f6:2d:a2:58:50:
72:50:6b:f2:26:7c:90:e5:53:43:bb:e7:39:c4:54:a5:26:d2:
fd:c8:04:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdgXWKfD/1EZzxzbMXPReSrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZTkzY2MzZTYxY2YzMzRiMTYxMTFjYWUzNGFlOTkyOGM0
ZmMzZmEwHhcNMjUwNjExMTkwMDIyWhcNMjUwNjEyMTkwMDIyWjAzMTEwLwYDVQQD
Eyg5MDBkZGZmNjE0MzZlMWM1Mjc5MWUyYTI5OTMyYmM5NzkyMWFjZTNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz9WaAv0s6hpAMx27IV8N8mzdP9kI
EJyN/fehMV+qd8FNFRWEORdsECXMXfwOs5b3AoER3ClqXEoewfaeE454dmwjSNVD
DjtyT4aKAx+n87Ns+mLbVAQNZZMqrLUHqsiCz+/uyoCqukifuO/RCe6XGPyQ7/QT
G7i0iViOOB+YHT7GTH3Vy0WT6fWLrOhzy5EQuXR29TQU0qPbtQZJcJftw82dvpYv
AfOwcwSPLL3xNtOMhPrXq2Py4D/1+C1OUgOyNhE4NBknGh0/k1/R350J9k4hp/En
8fj9I+RJ2XtX5eq+krQPn89/B+knnbneB7JFTQ2Gy/YbludDLKGQkUANCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJAN3/YUNuHFJ5HiopkyvJeSGs4/MB8GA1UdIwQY
MBaAFFXpPMPmHPM0sWERyuNK6ZKMT8P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGIt
ZTgwOTJkZDY1YzdmLzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGItZTgwOTJkZDY1Yzdm
LzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkTUpZY+X
1l+ntSjVvHsOJ8cfu7h5agvMhO08QSLKMyfpTyhVIb7nkBHkOuhBlh+TUZy0rfJv
4UyX4mC9+JEjb/yFsB7TiokJhx7HU9YsW87PikfL+B4B5R3+aG3aGEvuegWebe+4
UGBF4DlyJvzJzRWUtSCyg8XgKFBcI1jO3FqFAXmCaLRRl18b+UVKV6N/9hZ9pZ6U
tNBooqeN2+YOO+Xb55X7VnnUwcOgHqGwd5RsAl3vnoRFSTQ52npwmsPioRnDwTQ7
MN7HuNJcRo0dt+Pioslk8WKaX6kdBylJLjltaW3tuvYtolhQclBr8iZ8kOVTQ7vn
OcRUpSbS/cgEDg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 22:50:12 2025 by rpki-client