Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: 8Bv6VIaQn/hM0lwViNM+zYDl4lcNre4vpbwj2nGZKXY=
Subject key identifier: 30:6C:DA:F0:1F:B1:33:BD:40:26:D0:84:9D:BC:5E:C0:FB:8F:0B:29
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 01976094AB0E24BE049DC32A85B8A5452556
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 01F1
Signing time: Wed 11 Jun 2025 20:00:45 +0000
Manifest this update: Wed 11 Jun 2025 20:00:45 +0000
Manifest next update: Thu 12 Jun 2025 20:00:45 +0000
Files and hashes: 1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=)
2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=)
3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: 9gxaN+GRSelHDfNShnPNCAGWDBA1ak+o5nlCSMtQpG0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 20:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:60:94:ab:0e:24:be:04:9d:c3:2a:85:b8:a5:45:25:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Jun 11 20:00:45 2025 GMT
Not After : Jun 12 20:00:45 2025 GMT
Subject: CN=306cdaf01fb133bd4026d0849dbc5ec0fb8f0b29
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:10:0a:42:5d:6d:47:24:d3:0e:44:1d:30:be:
48:d0:13:41:67:91:00:43:91:6e:23:0b:e0:c7:aa:
ee:2e:f0:17:a0:44:4c:02:89:42:9b:bc:0d:3f:98:
26:c8:30:c7:40:44:9a:a3:82:e3:38:a7:72:f7:86:
68:84:45:ab:81:be:e7:2b:ca:01:08:93:28:21:76:
94:14:3e:20:ef:47:4a:75:13:27:da:31:70:dd:98:
71:10:3d:1a:f0:b9:e1:0e:1c:65:47:52:79:95:58:
06:31:7d:c5:1f:70:f9:7f:a4:8a:12:ff:d3:a2:4d:
6b:00:7f:80:f9:d7:38:a9:47:61:cb:0e:3d:3c:64:
5f:ab:c9:eb:8a:f5:0b:f2:27:92:0d:b3:ba:79:8c:
01:ef:80:b5:fc:ca:b3:c4:ad:2b:38:e2:bd:8f:ec:
9a:a9:5c:02:2d:51:d3:b4:3e:39:df:c3:ce:f7:11:
91:cf:db:7b:98:b4:2a:5c:38:1b:c2:0a:ee:6f:4e:
26:a4:a3:0b:e4:89:5a:04:9b:a2:85:fd:af:7e:e2:
c2:d2:dd:bd:dc:47:ed:21:79:50:36:a1:13:b7:0e:
12:84:42:fb:77:d3:4d:d9:b1:d0:e5:b6:83:d2:6f:
20:09:b4:d8:44:de:7b:7e:06:1f:c5:b8:b8:77:92:
77:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:6C:DA:F0:1F:B1:33:BD:40:26:D0:84:9D:BC:5E:C0:FB:8F:0B:29
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:8d:b2:b6:61:27:75:93:14:6e:5d:00:b2:69:3a:dc:8f:0d:
35:11:38:9d:5c:25:f3:fd:a1:78:29:c0:8e:34:9c:bb:6f:28:
40:7f:39:45:23:c8:fb:ea:e7:0d:f5:d7:8d:b7:fa:7d:ef:9c:
71:89:68:08:cb:04:8a:a7:24:f4:18:2f:a7:ea:46:aa:47:2e:
93:ef:58:15:9d:56:bc:2f:b4:53:37:60:84:22:42:a9:58:0c:
b6:54:e5:cc:54:66:d9:c4:0b:44:c2:e9:f1:39:48:05:40:e6:
b2:25:75:1a:66:23:81:af:b4:2b:cc:5f:39:58:84:e8:10:70:
8d:3b:66:c3:66:8e:88:3d:af:bc:93:ad:9f:b4:58:4e:d7:29:
20:8a:77:dc:d9:9c:aa:9d:77:a8:cf:9f:9e:dc:ae:aa:c3:64:
70:57:ab:2a:4b:60:b1:e2:3d:b7:fd:84:93:54:0d:6e:63:8c:
c0:89:76:9a:30:ac:70:bc:37:67:95:15:b4:a6:ac:c5:4a:db:
a7:33:c7:bf:85:fd:3f:a9:0d:e1:8d:11:48:3b:31:ea:6b:c2:
f7:0a:e3:49:0e:07:72:a6:e4:ff:cd:fd:a7:0e:83:cd:97:68:
e6:5a:c9:d5:ad:e1:1f:86:25:61:9c:0e:ad:73:e8:bb:9f:0d:
93:1d:1d:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdglKsOJL4EncMqhbilRSVWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzZjM2NhNzgwY2M1Nzc0NGFkYmU5MGEwZjM5NGYxZDFj
ZDcyZjMwHhcNMjUwNjExMjAwMDQ1WhcNMjUwNjEyMjAwMDQ1WjAzMTEwLwYDVQQD
EygzMDZjZGFmMDFmYjEzM2JkNDAyNmQwODQ5ZGJjNWVjMGZiOGYwYjI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsxAKQl1tRyTTDkQdML5I0BNBZ5EA
Q5FuIwvgx6ruLvAXoERMAolCm7wNP5gmyDDHQESao4LjOKdy94ZohEWrgb7nK8oB
CJMoIXaUFD4g70dKdRMn2jFw3ZhxED0a8LnhDhxlR1J5lVgGMX3FH3D5f6SKEv/T
ok1rAH+A+dc4qUdhyw49PGRfq8nrivUL8ieSDbO6eYwB74C1/MqzxK0rOOK9j+ya
qVwCLVHTtD4538PO9xGRz9t7mLQqXDgbwgrub04mpKML5IlaBJuihf2vfuLC0t29
3EftIXlQNqETtw4ShEL7d9NN2bHQ5baD0m8gCbTYRN57fgYfxbi4d5J3BwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDBs2vAfsTO9QCbQhJ28XsD7jwspMB8GA1UdIwQY
MBaAFFR2w8p4DMV3RK2+kKDzlPHRzXLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUt
MzAzMTUxZDc2YWNlLzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUtMzAzMTUxZDc2YWNl
LzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg42ytmEn
dZMUbl0Asmk63I8NNRE4nVwl8/2heCnAjjScu28oQH85RSPI++rnDfXXjbf6fe+c
cYloCMsEiqck9Bgvp+pGqkcuk+9YFZ1WvC+0UzdghCJCqVgMtlTlzFRm2cQLRMLp
8TlIBUDmsiV1GmYjga+0K8xfOViE6BBwjTtmw2aOiD2vvJOtn7RYTtcpIIp33Nmc
qp13qM+fntyuqsNkcFerKktgseI9t/2Ek1QNbmOMwIl2mjCscLw3Z5UVtKasxUrb
pzPHv4X9P6kN4Y0RSDsx6mvC9wrjSQ4Hcqbk/839pw6DzZdo5lrJ1a3hH4YlYZwO
rXPou58Nkx0d5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 12 05:44:59 2025 by rpki-client