Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
File: vJ7I21lyYHXuKfXvyQth5zwH968.mft (raw, json)
Hash identifier: aTFlrwmsNyjZYr8WKLKdogJx7LJFtxN1X4nEIJxftus=
Subject key identifier: A2:03:54:BC:63:44:1C:0B:1C:B5:19:DA:E6:13:9F:AE:52:AC:98:7A
Authority key identifier: BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
Certificate issuer: /CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Certificate serial: 0197C26DBB373562B60590746EADBAA0083E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
Manifest number: 0B07
Signing time: Mon 30 Jun 2025 20:01:00 +0000
Manifest this update: Mon 30 Jun 2025 20:01:00 +0000
Manifest next update: Tue 01 Jul 2025 20:01:00 +0000
Files and hashes: 1: vJ7I21lyYHXuKfXvyQth5zwH968.crl (hash: 2rjHFodk13QhFxxn6WhdlZX1qKcSILQKKHaQ3+yXkO8=)
2: vsYS1yNC27K4go1u55pkiDiNTso.roa (hash: VwZn+ljb2itH/kH3n3gJQ8cRZDUKa5y/b7TBam8fThU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 20:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:6d:bb:37:35:62:b6:05:90:74:6e:ad:ba:a0:08:3e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9ec8db59726075ee29f5efc90b61e73c07f7af
Validity
Not Before: Jun 30 20:01:00 2025 GMT
Not After : Jul 1 20:01:00 2025 GMT
Subject: CN=a20354bc63441c0b1cb519dae6139fae52ac987a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0a:4b:15:ba:b6:73:21:4b:eb:06:0c:d9:56:
b0:24:bf:3e:ce:04:4d:96:41:42:e6:f6:e1:ff:18:
8c:14:83:d3:78:7f:6c:ed:a8:70:a8:d7:32:7e:00:
25:44:29:17:7d:35:d1:ea:c7:b0:00:5a:90:c8:db:
9d:a0:ec:ca:3e:9a:ae:87:98:0e:57:f9:df:58:92:
1f:0a:d7:fa:57:0a:be:b3:7e:ed:b8:67:93:6f:22:
dc:8d:31:f6:e3:aa:e3:7b:16:5b:32:dd:09:1b:bd:
5a:51:f0:cc:1a:36:30:ce:ed:f9:15:a5:1a:9f:88:
ac:04:f0:02:20:ce:20:3d:f4:c1:93:ef:23:3f:49:
23:74:ce:d4:5f:1e:d7:72:ff:6e:0f:e7:59:47:f5:
78:bf:b3:93:5a:4a:c0:1c:19:da:db:11:51:6f:02:
15:5c:38:33:e5:95:0c:0e:a1:8d:33:8f:46:10:43:
7b:d5:fb:2d:b2:1e:42:d2:13:95:64:59:07:84:29:
de:3e:ed:11:fa:e1:a9:94:f9:f7:05:b0:6c:3e:0f:
93:0a:7c:32:55:71:a4:b5:43:82:14:27:c9:c8:60:
96:1b:65:db:5c:b8:bd:63:5a:99:93:6b:dd:41:34:
46:d2:14:dc:d9:84:e9:bb:fe:64:d7:ab:2d:13:39:
c1:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:03:54:BC:63:44:1C:0B:1C:B5:19:DA:E6:13:9F:AE:52:AC:98:7A
X509v3 Authority Key Identifier:
keyid:BC:9E:C8:DB:59:72:60:75:EE:29:F5:EF:C9:0B:61:E7:3C:07:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ7I21lyYHXuKfXvyQth5zwH968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/8b50e6-927a-4d3b-9422-e57fbdae5903/1/vJ7I21lyYHXuKfXvyQth5zwH968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3a:80:ef:0c:14:e7:e1:7b:e0:87:de:7b:df:5c:cc:b5:81:cd:
b9:c7:fb:67:28:a6:15:ba:5e:cd:6f:8d:a8:82:e2:ff:f6:b5:
f6:b8:7c:d6:cb:00:d5:f8:eb:3e:8d:b6:56:e6:7e:8c:48:db:
17:2c:e5:87:1d:e8:3f:11:05:26:ba:d6:39:d1:da:92:9d:06:
ea:2c:70:d9:5f:7b:78:33:d3:6c:24:27:d7:dc:69:d9:46:f3:
9c:b4:22:3c:01:3b:70:43:90:c1:7c:80:a0:6b:f3:a7:1b:41:
00:cd:7e:0f:ae:9c:a5:83:16:a9:cb:dc:b1:67:9d:4c:c5:b3:
6e:f8:4d:67:01:7b:85:03:02:0b:74:3a:8c:05:be:4f:71:38:
b4:d9:7f:88:3c:89:51:41:95:29:3e:1a:de:e7:99:c7:df:35:
29:41:51:34:eb:26:60:50:25:fe:fc:11:46:2a:55:73:35:b8:
56:ce:26:9d:f4:e9:69:6b:1a:af:99:6d:96:7b:e8:ad:28:99:
33:fc:cc:78:d3:04:e6:c6:0a:b0:49:42:09:28:92:20:15:8d:
cb:d7:b1:63:28:d5:a9:4e:ff:cf:59:9c:0a:5d:00:26:12:70:
5c:e4:31:2d:e3:ec:f5:56:0b:fb:86:7b:4a:0c:e1:5c:15:87:
18:b8:ba:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfCbbs3NWK2BZB0bq26oAg+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWVjOGRiNTk3MjYwNzVlZTI5ZjVlZmM5MGI2MWU3M2Mw
N2Y3YWYwHhcNMjUwNjMwMjAwMTAwWhcNMjUwNzAxMjAwMTAwWjAzMTEwLwYDVQQD
EyhhMjAzNTRiYzYzNDQxYzBiMWNiNTE5ZGFlNjEzOWZhZTUyYWM5ODdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogpLFbq2cyFL6wYM2VawJL8+zgRN
lkFC5vbh/xiMFIPTeH9s7ahwqNcyfgAlRCkXfTXR6sewAFqQyNudoOzKPpquh5gO
V/nfWJIfCtf6Vwq+s37tuGeTbyLcjTH246rjexZbMt0JG71aUfDMGjYwzu35FaUa
n4isBPACIM4gPfTBk+8jP0kjdM7UXx7Xcv9uD+dZR/V4v7OTWkrAHBna2xFRbwIV
XDgz5ZUMDqGNM49GEEN71fstsh5C0hOVZFkHhCnePu0R+uGplPn3BbBsPg+TCnwy
VXGktUOCFCfJyGCWG2XbXLi9Y1qZk2vdQTRG0hTc2YTpu/5k16stEznBZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKIDVLxjRBwLHLUZ2uYTn65SrJh6MB8GA1UdIwQY
MBaAFLyeyNtZcmB17in178kLYec8B/evMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdko3STIxbHlZSFh1S2ZYdnlRdGg1endIOTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84YjUwZTYtOTI3YS00ZDNiLTk0MjIt
ZTU3ZmJkYWU1OTAzLzEvdko3STIxbHlZSFh1S2ZYdnlRdGg1endIOTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS84YjUwZTYtOTI3YS00ZDNiLTk0MjItZTU3ZmJkYWU1OTAz
LzEvdko3STIxbHlZSFh1S2ZYdnlRdGg1endIOTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOoDvDBTn
4Xvgh95731zMtYHNucf7ZyimFbpezW+NqILi//a19rh81ssA1fjrPo22VuZ+jEjb
Fyzlhx3oPxEFJrrWOdHakp0G6ixw2V97eDPTbCQn19xp2UbznLQiPAE7cEOQwXyA
oGvzpxtBAM1+D66cpYMWqcvcsWedTMWzbvhNZwF7hQMCC3Q6jAW+T3E4tNl/iDyJ
UUGVKT4a3ueZx981KUFRNOsmYFAl/vwRRipVczW4Vs4mnfTpaWsar5ltlnvorSiZ
M/zMeNME5sYKsElCCSiSIBWNy9exYyjVqU7/z1mcCl0AJhJwXOQxLePs9VYL+4Z7
SgzhXBWHGLi69g==
-----END CERTIFICATE-----
Generated at Tue Jul 1 03:50:49 2025 by rpki-client