Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
File: vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft (raw, json)
Hash identifier: dmuXlpfwE12E3RCRVmv4tb14NRVQ0RFFDDm2afbv4pw=
Subject key identifier: 5F:78:DC:AF:84:14:23:D1:51:21:DB:5B:D9:82:24:46:AF:B4:34:4F
Authority key identifier: BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
Certificate issuer: /CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Certificate serial: 0198D6CDF40FB77095C1B92E593849D8DC83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
Manifest number: 0318
Signing time: Sat 23 Aug 2025 12:01:18 +0000
Manifest this update: Sat 23 Aug 2025 12:01:18 +0000
Manifest next update: Sun 24 Aug 2025 12:01:18 +0000
Files and hashes: 1: AFVAjCiROQ32Z_efvRaORNpa2fQ.roa (hash: STiLszZIpw1MlrUzOI5Ii3ZfZdoAbfQenvPasDTHJCA=)
2: vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl (hash: 4pUHkQo1cnkcVXN9KAum86Ak7WpjAO3m/1BqH/2EtnI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:cd:f4:0f:b7:70:95:c1:b9:2e:59:38:49:d8:dc:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdb24df4a7c9aa2131d857503b93d60f7fb51bd9
Validity
Not Before: Aug 23 12:01:18 2025 GMT
Not After : Aug 24 12:01:18 2025 GMT
Subject: CN=5f78dcaf841423d15121db5bd9822446afb4344f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:27:d3:0f:0d:2d:2f:17:e9:f4:31:fb:f6:20:
72:9d:26:28:da:b2:f6:75:01:67:26:b7:30:82:75:
1b:67:03:d6:69:61:43:21:4f:1a:72:a0:15:61:65:
5d:bb:8b:03:fe:29:62:74:ca:12:02:36:c8:8a:f6:
7f:3e:53:7f:3a:cc:9a:5c:e3:54:db:04:a8:70:90:
a8:99:19:6e:8d:31:26:85:67:2c:ef:c7:26:9f:6f:
0a:d8:22:90:ea:f8:2e:6a:22:bb:27:b5:35:be:cd:
94:a1:4b:9e:a4:ef:a6:d4:ce:fe:60:b0:f7:f1:94:
62:9e:7a:eb:9f:ce:28:e3:02:39:c0:01:be:5a:df:
a5:5f:4b:9a:9f:3e:d1:b3:eb:ed:c1:42:e2:0e:08:
88:c4:80:44:56:11:d2:c8:44:0a:70:a4:fc:04:fd:
ed:7d:f6:94:a4:3e:c1:e5:98:2c:dc:9e:42:79:bf:
be:03:b0:46:ac:83:37:14:84:c1:65:1c:12:db:18:
51:11:ad:ff:d1:ea:0f:68:77:9f:8e:77:e8:a9:1a:
4a:ab:50:d4:d8:0d:c3:89:65:98:ca:b1:cf:dc:cd:
31:ed:3b:7c:96:80:64:89:ed:eb:86:03:d6:87:ac:
99:61:f3:b3:a1:f6:55:6f:5c:bf:c3:88:e5:1d:d5:
ec:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:78:DC:AF:84:14:23:D1:51:21:DB:5B:D9:82:24:46:AF:B4:34:4F
X509v3 Authority Key Identifier:
keyid:BD:B2:4D:F4:A7:C9:AA:21:31:D8:57:50:3B:93:D6:0F:7F:B5:1B:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vbJN9KfJqiEx2FdQO5PWD3-1G9k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/0102c7-b4ea-4bab-b770-d30aeb1c20ca/1/vbJN9KfJqiEx2FdQO5PWD3-1G9k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:7c:84:e7:25:1b:c7:d5:9c:75:35:f8:56:80:53:5c:a2:50:
36:3a:9a:b3:30:dd:c1:a9:dc:45:42:c7:29:f7:d9:eb:d5:87:
97:35:ae:42:e7:f1:07:1b:29:55:bf:11:b9:79:8c:76:1e:f4:
de:57:0f:90:0a:bd:1a:4a:47:d7:a0:58:09:3f:3d:b9:2b:f0:
1b:50:81:1d:fc:21:20:ed:99:b8:83:ee:c2:93:84:74:3c:85:
29:7e:31:18:20:df:1b:9b:25:e0:ec:2e:98:fe:1a:11:6f:d4:
85:6c:d9:02:4c:bc:7b:c4:3e:80:a8:58:d0:24:d5:e8:69:a9:
e9:56:72:9b:7a:3a:a6:57:3c:15:0d:43:df:b8:a3:4a:e2:5c:
ca:a3:bd:92:73:a5:1c:e3:87:68:63:87:ef:96:c4:2b:48:dc:
89:34:5c:8f:ec:ef:15:16:01:48:48:fa:ce:c4:02:b7:34:1b:
80:9b:29:0e:2f:04:78:94:37:94:2b:d8:d5:69:0c:22:e6:00:
73:73:46:fd:05:5a:ad:ce:17:3c:dc:40:f8:98:c1:64:ac:73:
56:98:bd:68:75:ce:ee:37:96:9c:6c:ad:10:6d:7d:8f:2c:06:
4f:9c:33:25:da:fe:af:33:ad:30:18:93:d4:86:1b:32:60:ae:
27:0a:59:13
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWzfQPt3CVwbkuWThJ2NyDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkYjI0ZGY0YTdjOWFhMjEzMWQ4NTc1MDNiOTNkNjBmN2Zi
NTFiZDkwHhcNMjUwODIzMTIwMTE4WhcNMjUwODI0MTIwMTE4WjAzMTEwLwYDVQQD
Eyg1Zjc4ZGNhZjg0MTQyM2QxNTEyMWRiNWJkOTgyMjQ0NmFmYjQzNDRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4yfTDw0tLxfp9DH79iBynSYo2rL2
dQFnJrcwgnUbZwPWaWFDIU8acqAVYWVdu4sD/ilidMoSAjbIivZ/PlN/OsyaXONU
2wSocJComRlujTEmhWcs78cmn28K2CKQ6vguaiK7J7U1vs2UoUuepO+m1M7+YLD3
8ZRinnrrn84o4wI5wAG+Wt+lX0uanz7Rs+vtwULiDgiIxIBEVhHSyEQKcKT8BP3t
ffaUpD7B5Zgs3J5Ceb++A7BGrIM3FITBZRwS2xhREa3/0eoPaHefjnfoqRpKq1DU
2A3DiWWYyrHP3M0x7Tt8loBkie3rhgPWh6yZYfOzofZVb1y/w4jlHdXsFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF943K+EFCPRUSHbW9mCJEavtDRPMB8GA1UdIwQY
MBaAFL2yTfSnyaohMdhXUDuT1g9/tRvZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC8wMTAyYzctYjRlYS00YmFiLWI3NzAt
ZDMwYWViMWMyMGNhLzEvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC8wMTAyYzctYjRlYS00YmFiLWI3NzAtZDMwYWViMWMyMGNh
LzEvdmJKTjlLZkpxaUV4MkZkUU81UFdEMy0xRzlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZXyE5yUb
x9WcdTX4VoBTXKJQNjqaszDdwancRULHKffZ69WHlzWuQufxBxspVb8RuXmMdh70
3lcPkAq9GkpH16BYCT89uSvwG1CBHfwhIO2ZuIPuwpOEdDyFKX4xGCDfG5sl4Owu
mP4aEW/UhWzZAky8e8Q+gKhY0CTV6Gmp6VZym3o6plc8FQ1D37ijSuJcyqO9knOl
HOOHaGOH75bEK0jciTRcj+zvFRYBSEj6zsQCtzQbgJspDi8EeJQ3lCvY1WkMIuYA
c3NG/QVarc4XPNxA+JjBZKxzVpi9aHXO7jeWnGytEG19jywGT5wzJdr+rzOtMBiT
1IYbMmCuJwpZEw==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:33:02 2025 by rpki-client