Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
File: Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft (raw, json)
Hash identifier: 5lV+j0KAJ1gA8c6kB39jCJ99jtQeAYz5cf6snxxA6GA=
Subject key identifier: 43:16:5A:AA:03:20:11:2E:0E:84:F2:9A:27:10:99:52:4E:AF:E1:3D
Authority key identifier: 55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
Certificate issuer: /CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Certificate serial: 01976628C062B54AA35D7DA62628CDABB9A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
Manifest number: 101D
Signing time: Thu 12 Jun 2025 22:00:36 +0000
Manifest this update: Thu 12 Jun 2025 22:00:36 +0000
Manifest next update: Fri 13 Jun 2025 22:00:36 +0000
Files and hashes: 1: 8WKeNRHKfnPMtDPrJe2tbs0peW8.roa (hash: p24Kg0o2ZZFpnMMb7fnMgorqDU4JrcszVsb7S2USX88=)
2: Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl (hash: WF1ZSKKOV6bncNSXgZ975ZE9AKa6tXyw0iWRJckR49k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:66:28:c0:62:b5:4a:a3:5d:7d:a6:26:28:cd:ab:b9:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e93cc3e61cf334b16111cae34ae9928c4fc3fa
Validity
Not Before: Jun 12 22:00:36 2025 GMT
Not After : Jun 13 22:00:36 2025 GMT
Subject: CN=43165aaa0320112e0e84f29a271099524eafe13d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:45:ef:74:13:eb:38:e0:dd:2f:24:9f:74:36:
c6:7b:fb:f7:77:d4:12:88:f5:b0:4f:92:68:20:19:
2d:3a:a1:3e:53:8d:b7:02:1e:20:25:98:98:7b:82:
e1:14:56:a2:bd:0c:31:e3:24:65:a1:c1:56:b1:67:
5a:9d:95:2f:f9:21:5b:44:ae:0e:75:a2:b9:b3:d5:
66:11:ca:d3:b0:a7:a0:0e:b0:f7:54:a4:db:f1:d4:
5d:69:ae:5c:f6:d7:60:cc:bf:27:ee:1b:f3:37:94:
1a:cf:21:9c:d0:3c:65:6e:5f:cf:83:93:20:36:68:
ac:2d:de:53:ac:f5:53:d0:dd:18:a1:4a:83:14:dd:
a6:de:e9:ee:e7:16:55:20:4b:15:67:3a:2a:54:c8:
b1:7b:57:0c:c2:ab:80:ca:f9:04:4e:51:c1:9c:39:
d1:e3:b1:67:e5:d2:bb:f9:fb:80:a5:b9:b8:c3:5f:
13:9f:1b:4a:3f:e5:6f:c9:c9:d3:40:91:1a:e1:49:
6b:07:45:72:d1:e6:c4:96:07:24:f3:d7:29:67:97:
66:18:08:62:32:67:8c:41:be:7c:e7:5f:00:c7:4f:
62:d8:6f:17:61:26:ee:86:6a:09:b5:36:72:0f:c8:
92:12:79:f2:31:65:55:41:de:48:e9:ed:33:b7:a7:
78:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:16:5A:AA:03:20:11:2E:0E:84:F2:9A:27:10:99:52:4E:AF:E1:3D
X509v3 Authority Key Identifier:
keyid:55:E9:3C:C3:E6:1C:F3:34:B1:61:11:CA:E3:4A:E9:92:8C:4F:C3:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vek8w-Yc8zSxYRHK40rpkoxPw_o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/3c4386-4238-4de6-b50b-e8092dd65c7f/1/Vek8w-Yc8zSxYRHK40rpkoxPw_o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:15:69:af:c4:d0:9d:c3:df:a3:1c:61:97:5a:2f:52:56:48:
fe:6f:68:8e:8b:d7:3b:42:6b:84:39:5b:65:6b:99:39:f6:aa:
8c:c6:44:31:03:5a:98:44:83:33:93:ee:74:82:63:6b:9d:ff:
1a:78:31:19:ac:3e:7c:da:b4:ed:bc:7d:56:33:c6:e9:3e:6f:
68:d6:64:54:be:a5:b6:f6:26:4a:0f:09:d2:52:3b:59:6c:28:
57:c6:c2:73:de:01:e6:37:18:36:8b:12:25:18:a4:db:ff:46:
96:86:ff:d1:4e:10:42:e3:4f:ae:f8:4b:b0:bf:46:0e:27:60:
02:eb:7c:d7:0c:45:76:82:79:e3:9a:c4:46:4c:b9:bd:6b:59:
26:c0:8a:d3:ec:95:09:55:30:ae:81:0a:4b:52:77:8f:7c:f4:
cc:71:02:e8:23:31:88:26:1d:fb:f1:ec:21:cd:99:d8:fb:cd:
10:8f:80:fb:a4:cc:5d:f7:c8:cb:85:39:71:d3:63:ca:39:82:
6f:e5:db:83:be:d9:84:9d:03:43:99:dc:34:60:a7:66:1c:29:
17:0a:86:e2:81:1c:b5:b9:de:b0:36:cc:29:ca:cb:f0:41:bb:
26:a5:b4:d7:02:01:49:da:ff:15:ee:93:5a:e9:b8:d9:7b:d0:
7a:fa:c3:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdmKMBitUqjXX2mJijNq7mlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZTkzY2MzZTYxY2YzMzRiMTYxMTFjYWUzNGFlOTkyOGM0
ZmMzZmEwHhcNMjUwNjEyMjIwMDM2WhcNMjUwNjEzMjIwMDM2WjAzMTEwLwYDVQQD
Eyg0MzE2NWFhYTAzMjAxMTJlMGU4NGYyOWEyNzEwOTk1MjRlYWZlMTNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp0XvdBPrOODdLySfdDbGe/v3d9QS
iPWwT5JoIBktOqE+U423Ah4gJZiYe4LhFFaivQwx4yRlocFWsWdanZUv+SFbRK4O
daK5s9VmEcrTsKegDrD3VKTb8dRdaa5c9tdgzL8n7hvzN5QazyGc0Dxlbl/Pg5Mg
NmisLd5TrPVT0N0YoUqDFN2m3unu5xZVIEsVZzoqVMixe1cMwquAyvkETlHBnDnR
47Fn5dK7+fuApbm4w18TnxtKP+VvycnTQJEa4UlrB0Vy0ebElgck89cpZ5dmGAhi
MmeMQb58518Ax09i2G8XYSbuhmoJtTZyD8iSEnnyMWVVQd5I6e0zt6d4CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEMWWqoDIBEuDoTymicQmVJOr+E9MB8GA1UdIwQY
MBaAFFXpPMPmHPM0sWERyuNK6ZKMT8P6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGIt
ZTgwOTJkZDY1YzdmLzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi8zYzQzODYtNDIzOC00ZGU2LWI1MGItZTgwOTJkZDY1Yzdm
LzEvVmVrOHctWWM4elN4WVJISzQwcnBrb3hQd19vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAexVpr8TQ
ncPfoxxhl1ovUlZI/m9ojovXO0JrhDlbZWuZOfaqjMZEMQNamESDM5PudIJja53/
GngxGaw+fNq07bx9VjPG6T5vaNZkVL6ltvYmSg8J0lI7WWwoV8bCc94B5jcYNosS
JRik2/9Glob/0U4QQuNPrvhLsL9GDidgAut81wxFdoJ545rERky5vWtZJsCK0+yV
CVUwroEKS1J3j3z0zHEC6CMxiCYd+/HsIc2Z2PvNEI+A+6TMXffIy4U5cdNjyjmC
b+Xbg77ZhJ0DQ5ncNGCnZhwpFwqG4oEctbnesDbMKcrL8EG7JqW01wIBSdr/Fe6T
Wum42XvQevrDRA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 01:51:46 2025 by rpki-client