Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
File: VNb_E0vWVvDOFNQQsCvsVR62miw.mft (raw, json)
Hash identifier: bkZmJhYp8/Ac6KapVUzWyDDu5x2mtLLSrV2uA1p9tfA=
Subject key identifier: 3F:E7:D2:B8:11:39:07:99:FD:4B:4A:C2:65:76:CE:46:3C:86:3A:CD
Authority key identifier: 54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
Certificate issuer: /CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Certificate serial: 01974A0CE71E683EA17D8110DA7D6831CE5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
Manifest number: 11AB
Signing time: Sat 07 Jun 2025 11:00:48 +0000
Manifest this update: Sat 07 Jun 2025 11:00:48 +0000
Manifest next update: Sun 08 Jun 2025 11:00:48 +0000
Files and hashes: 1: L_f_G_DAS-PndMSomCegEakGUXo.roa (hash: MKZgnF0UjBLWLCCPlTkl22mDtPBHewVcfvCoOfEvyCg=)
2: VNb_E0vWVvDOFNQQsCvsVR62miw.crl (hash: yrl7ShgvPT4Z89qQAIePyUMhVysFPS8Cmfqv70v9f6k=)
3: t4fAOG9AgiRHWlfB8UV9ooeeONs.roa (hash: w4jU0T+F9ztiRct/8n0JoEkH/SfGukns0aANZIKuY2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:e7:1e:68:3e:a1:7d:81:10:da:7d:68:31:ce:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54d6ff134bd656f0ce14d410b02bec551eb69a2c
Validity
Not Before: Jun 7 11:00:48 2025 GMT
Not After : Jun 8 11:00:48 2025 GMT
Subject: CN=3fe7d2b811390799fd4b4ac26576ce463c863acd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:5f:dc:ff:bd:62:fe:df:eb:67:9b:15:49:1d:
f8:69:7b:58:48:df:89:b5:82:8a:64:95:26:d1:a4:
44:4b:19:85:00:d4:3c:15:9e:31:47:48:b9:1e:ea:
58:8b:1b:f6:e2:b1:0b:70:18:43:d7:31:88:c7:c3:
e6:7b:99:84:cb:65:fe:0c:0f:b3:19:fb:80:4a:0e:
4c:82:79:de:bb:d6:9d:af:47:24:5c:91:a9:07:87:
15:1b:89:9d:41:63:ba:f1:ef:f6:2e:b9:b7:7b:9f:
79:25:cb:76:36:38:84:3b:ae:19:fa:57:96:bd:60:
e1:51:ff:4b:4c:cd:43:af:9a:48:e7:f5:8d:72:45:
d7:fb:b8:4e:60:5e:50:64:34:78:1b:38:14:f1:17:
86:9c:67:51:ee:21:b1:74:4f:87:32:e2:49:74:c0:
5b:98:c4:fb:75:e3:c1:97:c2:c8:9c:49:eb:15:5c:
44:2c:ab:77:23:73:0e:60:63:5f:14:66:6e:fd:73:
2d:c8:0c:20:24:d6:b8:5c:1b:13:35:ee:b7:37:8d:
d6:01:41:2f:06:f8:b1:5e:13:18:37:cc:86:6d:98:
7b:1b:c1:8c:8c:87:70:ea:06:f2:5e:72:45:35:fe:
fb:1f:6d:bf:e1:89:e5:e0:13:14:9d:f4:6f:e3:2a:
c7:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:E7:D2:B8:11:39:07:99:FD:4B:4A:C2:65:76:CE:46:3C:86:3A:CD
X509v3 Authority Key Identifier:
keyid:54:D6:FF:13:4B:D6:56:F0:CE:14:D4:10:B0:2B:EC:55:1E:B6:9A:2C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VNb_E0vWVvDOFNQQsCvsVR62miw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/f21ee7-4925-4dd6-b202-64278c0d8ebf/1/VNb_E0vWVvDOFNQQsCvsVR62miw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:3e:e7:4d:b1:94:9c:99:91:4f:72:33:57:67:64:75:02:6d:
90:22:eb:ad:51:42:c6:29:73:99:13:69:5f:2c:74:ad:a6:3c:
4d:31:dd:64:36:f0:a1:82:c7:11:71:8a:c7:73:69:29:c8:f3:
1a:f0:7b:44:58:37:c0:d0:3a:b0:30:da:06:f7:ac:a4:14:d0:
17:b7:ba:1f:49:c7:3d:92:d3:e3:eb:ba:9f:e9:99:07:10:aa:
98:d3:73:33:c9:ae:62:85:02:b7:59:fa:19:47:69:a4:45:26:
69:4c:75:40:75:81:c9:49:74:ba:2c:00:76:26:c0:b6:99:b3:
0b:14:8b:2e:78:ae:84:10:97:57:4a:54:54:9d:2c:f5:9b:c8:
c9:71:1a:4f:57:49:2c:96:c5:ca:62:18:67:b3:5f:8b:86:a9:
46:71:09:bd:77:d2:ae:f0:4d:0e:46:80:10:ae:c4:7c:f9:63:
34:b0:23:84:36:e1:e8:ca:fd:7e:04:9b:ad:39:b8:11:a0:39:
e4:a1:90:fe:d3:7f:c3:58:84:14:f8:62:53:60:e2:bb:59:d9:
a0:07:c8:90:9c:70:7c:72:95:1f:dd:35:99:24:bb:3d:f5:6a:
f8:db:51:e9:ae:e4:33:91:fe:27:3d:d9:cd:ba:93:c7:44:c8:
02:4a:4a:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDOceaD6hfYEQ2n1oMc5dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ZDZmZjEzNGJkNjU2ZjBjZTE0ZDQxMGIwMmJlYzU1MWVi
NjlhMmMwHhcNMjUwNjA3MTEwMDQ4WhcNMjUwNjA4MTEwMDQ4WjAzMTEwLwYDVQQD
EygzZmU3ZDJiODExMzkwNzk5ZmQ0YjRhYzI2NTc2Y2U0NjNjODYzYWNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl1/c/71i/t/rZ5sVSR34aXtYSN+J
tYKKZJUm0aRESxmFANQ8FZ4xR0i5HupYixv24rELcBhD1zGIx8Pme5mEy2X+DA+z
GfuASg5Mgnneu9adr0ckXJGpB4cVG4mdQWO68e/2Lrm3e595Jct2NjiEO64Z+leW
vWDhUf9LTM1Dr5pI5/WNckXX+7hOYF5QZDR4GzgU8ReGnGdR7iGxdE+HMuJJdMBb
mMT7dePBl8LInEnrFVxELKt3I3MOYGNfFGZu/XMtyAwgJNa4XBsTNe63N43WAUEv
BvixXhMYN8yGbZh7G8GMjIdw6gbyXnJFNf77H22/4Ynl4BMUnfRv4yrHywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/n0rgROQeZ/UtKwmV2zkY8hjrNMB8GA1UdIwQY
MBaAFFTW/xNL1lbwzhTUELAr7FUetposMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDIt
NjQyNzhjMGQ4ZWJmLzEvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9mMjFlZTctNDkyNS00ZGQ2LWIyMDItNjQyNzhjMGQ4ZWJm
LzEvVk5iX0UwdldWdkRPRk5RUXNDdnNWUjYybWl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnz7nTbGU
nJmRT3IzV2dkdQJtkCLrrVFCxilzmRNpXyx0raY8TTHdZDbwoYLHEXGKx3NpKcjz
GvB7RFg3wNA6sDDaBvespBTQF7e6H0nHPZLT4+u6n+mZBxCqmNNzM8muYoUCt1n6
GUdppEUmaUx1QHWByUl0uiwAdibAtpmzCxSLLniuhBCXV0pUVJ0s9ZvIyXEaT1dJ
LJbFymIYZ7Nfi4apRnEJvXfSrvBNDkaAEK7EfPljNLAjhDbh6Mr9fgSbrTm4EaA5
5KGQ/tN/w1iEFPhiU2Diu1nZoAfIkJxwfHKVH901mSS7PfVq+NtR6a7kM5H+Jz3Z
zbqTx0TIAkpKfw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:48:54 2025 by rpki-client