Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
File: VHbDyngMxXdErb6QoPOU8dHNcvM.mft (raw, json)
Hash identifier: +Aqy59ysoEPH+zlWb2/le4Nm+ohUOZmE3Sinh9CyBXc=
Subject key identifier: 63:E7:D5:DB:A8:81:A0:E7:7C:84:07:D9:5F:2F:19:C2:18:3D:71:6D
Authority key identifier: 54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
Certificate issuer: /CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Certificate serial: 01976283517ED74E8296322EF0B1EC078902
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
Manifest number: 01F2
Signing time: Thu 12 Jun 2025 05:01:02 +0000
Manifest this update: Thu 12 Jun 2025 05:01:02 +0000
Manifest next update: Fri 13 Jun 2025 05:01:02 +0000
Files and hashes: 1: J1F-UaHfYAClgmD-n-h_bemva1g.roa (hash: LkkLFeCVLkb+GZvSdm+hQS9Yt//NS73l5BEh3ajjGOM=)
2: Mzf3T5ZCYDRP9VJBsVQOjUFWDdY.roa (hash: fMfmlTHaxDxkKj4QIO7HlLPP5wMEtHiZKgYxRA6zmJA=)
3: VHbDyngMxXdErb6QoPOU8dHNcvM.crl (hash: b6yAAQCWlBrltYb9lij3W1PxbBU5ObhmCkNvUqz2vUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 05:01:02 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:62:83:51:7e:d7:4e:82:96:32:2e:f0:b1:ec:07:89:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5476c3ca780cc57744adbe90a0f394f1d1cd72f3
Validity
Not Before: Jun 12 05:01:02 2025 GMT
Not After : Jun 13 05:01:02 2025 GMT
Subject: CN=63e7d5dba881a0e77c8407d95f2f19c2183d716d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:4a:2c:66:23:9c:f8:c9:2c:07:b2:d1:b0:ce:
ac:74:d8:48:6e:5b:8f:81:78:38:79:b5:39:c4:04:
f4:d3:cb:4e:fd:02:0d:31:e0:80:42:4d:74:20:f2:
ad:02:5f:d0:7d:ff:ab:78:59:d5:d5:0c:ad:a0:47:
39:cf:d8:ef:8c:ad:36:ec:58:5b:71:fa:30:e0:4c:
9d:8b:82:9e:f5:66:1e:09:18:2f:11:55:88:75:c8:
9c:6e:58:a8:7f:9d:5f:b5:38:80:7a:c9:05:b6:a2:
5d:14:cd:2f:d0:30:79:f4:33:4c:74:5a:49:c7:db:
28:f0:cb:87:8c:6a:9e:42:50:01:b6:b3:f7:79:72:
32:54:04:db:20:82:a3:24:76:b4:b4:99:54:ea:34:
84:37:49:ea:44:bc:e7:f2:11:40:97:06:af:ef:f8:
fe:fa:5c:f8:22:c1:8e:bd:a2:5a:8a:9b:b3:e1:13:
01:0a:28:33:7d:9c:10:34:93:b8:b3:93:4c:67:6a:
be:7c:9f:89:1c:0e:f9:c3:db:57:9d:de:63:0c:f6:
f8:12:30:36:05:ca:d1:a1:41:6d:f8:f5:9d:10:31:
b6:42:03:3b:bb:df:99:93:d5:1b:e4:29:51:df:61:
db:bb:2e:95:31:86:15:e4:46:60:c8:bf:ba:13:46:
0b:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:E7:D5:DB:A8:81:A0:E7:7C:84:07:D9:5F:2F:19:C2:18:3D:71:6D
X509v3 Authority Key Identifier:
keyid:54:76:C3:CA:78:0C:C5:77:44:AD:BE:90:A0:F3:94:F1:D1:CD:72:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHbDyngMxXdErb6QoPOU8dHNcvM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/439285-722a-42df-b185-303151d76ace/1/VHbDyngMxXdErb6QoPOU8dHNcvM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:49:9c:b7:31:3c:d0:79:55:e8:15:2b:5c:78:e9:0a:a0:3a:
b3:d1:74:33:c4:a6:b1:11:5f:b6:58:94:b6:0a:08:92:33:b7:
c3:08:b3:06:a2:0c:15:d0:6b:60:63:ee:6a:ba:bd:fc:ce:2f:
cc:12:d0:45:99:4d:c2:d2:4d:75:da:c4:79:cf:58:79:3c:d1:
67:8a:45:08:f3:de:5e:f1:26:c6:68:53:8f:b7:ef:52:2d:03:
f1:44:bb:5f:6c:a2:e7:9f:48:f0:36:36:c7:bc:aa:dd:16:d7:
93:57:ab:ed:30:5c:9c:0f:f6:3d:c6:b4:b7:c8:5d:e0:2a:6c:
af:dd:a0:52:f9:81:5d:42:88:5e:dd:a2:80:6a:dd:76:68:ff:
f7:1d:e8:b1:3d:43:17:23:fd:2c:9a:5d:33:09:0f:2f:90:01:
d8:91:0d:aa:9c:57:55:d9:ee:90:6a:41:21:f2:a5:f5:17:aa:
d2:ef:77:e2:b7:1c:e2:3a:57:7a:32:6f:2a:50:1f:83:40:d2:
5c:c1:97:29:83:d2:12:bd:88:38:8e:39:13:11:f5:c3:0f:65:
e9:68:27:62:d4:c3:be:70:fe:89:ce:83:89:32:50:fd:d4:52:
3d:70:22:b1:2c:62:63:8c:f5:06:77:3c:b7:8e:72:b6:fb:7c:
e0:77:55:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdig1F+106CljIu8LHsB4kCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0NzZjM2NhNzgwY2M1Nzc0NGFkYmU5MGEwZjM5NGYxZDFj
ZDcyZjMwHhcNMjUwNjEyMDUwMTAyWhcNMjUwNjEzMDUwMTAyWjAzMTEwLwYDVQQD
Eyg2M2U3ZDVkYmE4ODFhMGU3N2M4NDA3ZDk1ZjJmMTljMjE4M2Q3MTZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsEosZiOc+MksB7LRsM6sdNhIbluP
gXg4ebU5xAT008tO/QINMeCAQk10IPKtAl/Qff+reFnV1QytoEc5z9jvjK027Fhb
cfow4Eydi4Ke9WYeCRgvEVWIdcicbliof51ftTiAeskFtqJdFM0v0DB59DNMdFpJ
x9so8MuHjGqeQlABtrP3eXIyVATbIIKjJHa0tJlU6jSEN0nqRLzn8hFAlwav7/j+
+lz4IsGOvaJaipuz4RMBCigzfZwQNJO4s5NMZ2q+fJ+JHA75w9tXnd5jDPb4EjA2
BcrRoUFt+PWdEDG2QgM7u9+Zk9Ub5ClR32Hbuy6VMYYV5EZgyL+6E0YLuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGPn1duogaDnfIQH2V8vGcIYPXFtMB8GA1UdIwQY
MBaAFFR2w8p4DMV3RK2+kKDzlPHRzXLzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUt
MzAzMTUxZDc2YWNlLzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80MzkyODUtNzIyYS00MmRmLWIxODUtMzAzMTUxZDc2YWNl
LzEvVkhiRHluZ014WGRFcmI2UW9QT1U4ZEhOY3ZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI0mctzE8
0HlV6BUrXHjpCqA6s9F0M8SmsRFftliUtgoIkjO3wwizBqIMFdBrYGPuarq9/M4v
zBLQRZlNwtJNddrEec9YeTzRZ4pFCPPeXvEmxmhTj7fvUi0D8US7X2yi559I8DY2
x7yq3RbXk1er7TBcnA/2Pca0t8hd4Cpsr92gUvmBXUKIXt2igGrddmj/9x3osT1D
FyP9LJpdMwkPL5AB2JENqpxXVdnukGpBIfKl9Req0u934rcc4jpXejJvKlAfg0DS
XMGXKYPSEr2IOI45ExH1ww9l6WgnYtTDvnD+ic6DiTJQ/dRSPXAisSxiY4z1Bnc8
t45ytvt84HdVZQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 13:49:48 2025 by rpki-client