Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File: vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier: Wwafq4ON5jaOr60Liw9eoaYjewb8kl9o/jK/6lFJZmA=
Subject key identifier: 80:05:B3:0E:7F:B4:91:E8:F1:F6:F4:5B:61:49:85:ED:CC:C9:35:8E
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer: /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial: 0197CC83AC0CE2AEE42FA3FE94C0AECF6BA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number: 15C6
Signing time: Wed 02 Jul 2025 19:01:10 +0000
Manifest this update: Wed 02 Jul 2025 19:01:10 +0000
Manifest next update: Thu 03 Jul 2025 19:01:10 +0000
Files and hashes: 1: 9cE7vjT6DzlEjW81UqTEgPCC5kk.roa (hash: YeyZuOMLUCYoKrtFyEejrMk173P/JZ9uykjJbI6/Rr0=)
2: U77ECX22fJUQ9Szp6lrBtYkTrQY.roa (hash: jYSTL2r9IXnyVhPYQjdEYfmkmSawy+babAO2lCpGCAs=)
3: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: 0am8R/0NXPR1Mfh5X/chxIoIm6HsVr0uJCmcWH7H+dU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:83:ac:0c:e2:ae:e4:2f:a3:fe:94:c0:ae:cf:6b:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Validity
Not Before: Jul 2 19:01:10 2025 GMT
Not After : Jul 3 19:01:10 2025 GMT
Subject: CN=8005b30e7fb491e8f1f6f45b614985edccc9358e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:71:1a:bd:d8:23:9e:f9:8a:ba:19:dd:01:dc:
bb:21:0a:0d:99:3a:1f:db:53:71:f1:41:e3:1c:18:
85:59:99:8a:42:32:99:7a:83:7e:dd:54:bb:5c:96:
49:e2:df:ae:4e:48:fe:fd:7d:f7:5a:00:65:c9:de:
2f:a9:ba:f3:29:3d:ff:90:5b:64:69:3a:fa:9d:a5:
87:a1:31:65:55:34:9b:3d:49:aa:34:98:0b:e0:51:
e1:65:ed:9f:58:5d:21:2b:a4:c8:7f:77:4c:6a:29:
43:5c:fb:9d:bb:4e:0f:65:97:cf:2b:60:b9:3f:5b:
9c:09:43:9d:0e:7d:31:5e:2c:07:ba:78:96:42:06:
68:c7:f2:6e:67:0f:f2:12:ae:e1:dc:03:1c:a2:12:
93:bb:e1:ba:d7:75:0f:4b:ff:57:87:a3:7e:72:9d:
40:c4:e9:2c:59:5b:f9:97:5f:8a:8d:03:0e:22:ad:
a9:9c:05:67:c8:04:84:aa:70:49:fc:e8:f6:54:8a:
96:16:3a:ae:b4:c5:96:00:06:04:57:df:b7:8c:54:
da:3b:6b:a3:11:c4:ac:98:08:b2:32:2d:6b:8a:ee:
b3:b4:9d:cf:62:17:55:ff:40:ad:c4:67:1b:7d:3e:
53:cf:53:50:06:0e:8c:87:4c:12:82:c4:02:0c:f4:
b1:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:05:B3:0E:7F:B4:91:E8:F1:F6:F4:5B:61:49:85:ED:CC:C9:35:8E
X509v3 Authority Key Identifier:
keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2c:3e:e4:44:44:2f:65:37:2d:24:c8:44:21:78:5d:e7:6c:
a0:2d:3c:a9:d1:f1:46:60:3a:69:9a:1a:6c:71:2f:5b:7f:7f:
86:4f:c7:f6:a2:17:08:0c:c1:cd:dd:6c:c4:11:21:69:a4:de:
79:2c:c2:63:c0:ca:fe:aa:36:61:b8:2a:af:c9:3a:2d:1c:8c:
3c:70:5e:9c:b3:63:69:b5:09:e6:a1:62:90:9e:d8:2d:d9:f6:
df:dd:ac:04:d0:b9:8d:ea:79:0c:b2:40:e6:59:0e:4d:ec:a3:
cb:07:96:3e:92:ca:6e:d2:21:b8:97:8b:73:ef:88:b9:fb:70:
fa:6f:32:78:07:fc:e5:61:fa:55:e1:be:63:ba:42:44:c4:b8:
45:26:74:aa:6e:84:1c:14:99:ca:39:b0:21:69:23:34:ce:6f:
c2:e7:c3:8e:1f:c7:d3:7c:c0:8c:23:6f:59:24:35:27:bc:8d:
99:31:7e:ca:9a:bd:4d:48:69:4f:02:93:c2:bb:32:8d:d9:2f:
4a:c9:e8:19:70:d5:4f:ef:ec:ef:b4:d8:bd:6e:63:f2:1c:4f:
7f:e6:9c:de:46:6e:51:73:a7:19:cf:7e:22:3b:f1:81:5c:21:
3f:d3:56:52:45:ad:c2:e7:f0:9e:65:f1:91:98:d3:2e:34:08:
82:0d:7a:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMg6wM4q7kL6P+lMCuz2uhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTU5MjFmNWJhNmJkMTQ3ZmY0MDAxMTdhYTk3Mzg2MzNm
MTU4N2QwHhcNMjUwNzAyMTkwMTEwWhcNMjUwNzAzMTkwMTEwWjAzMTEwLwYDVQQD
Eyg4MDA1YjMwZTdmYjQ5MWU4ZjFmNmY0NWI2MTQ5ODVlZGNjYzkzNThlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzHEavdgjnvmKuhndAdy7IQoNmTof
21Nx8UHjHBiFWZmKQjKZeoN+3VS7XJZJ4t+uTkj+/X33WgBlyd4vqbrzKT3/kFtk
aTr6naWHoTFlVTSbPUmqNJgL4FHhZe2fWF0hK6TIf3dMailDXPudu04PZZfPK2C5
P1ucCUOdDn0xXiwHuniWQgZox/JuZw/yEq7h3AMcohKTu+G613UPS/9Xh6N+cp1A
xOksWVv5l1+KjQMOIq2pnAVnyASEqnBJ/Oj2VIqWFjqutMWWAAYEV9+3jFTaO2uj
EcSsmAiyMi1riu6ztJ3PYhdV/0CtxGcbfT5Tz1NQBg6Mh0wSgsQCDPSx2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIAFsw5/tJHo8fb0W2FJhe3MyTWOMB8GA1UdIwQY
MBaAFLwVkh9bpr0Uf/QAEXqpc4Yz8Vh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAt
MDk5MGNlNzQ4MWU3LzEvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAtMDk5MGNlNzQ4MWU3
LzEvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACiw+5ERE
L2U3LSTIRCF4XedsoC08qdHxRmA6aZoabHEvW39/hk/H9qIXCAzBzd1sxBEhaaTe
eSzCY8DK/qo2Ybgqr8k6LRyMPHBenLNjabUJ5qFikJ7YLdn2392sBNC5jep5DLJA
5lkOTeyjyweWPpLKbtIhuJeLc++Iuftw+m8yeAf85WH6VeG+Y7pCRMS4RSZ0qm6E
HBSZyjmwIWkjNM5vwufDjh/H03zAjCNvWSQ1J7yNmTF+ypq9TUhpTwKTwrsyjdkv
SsnoGXDVT+/s77TYvW5j8hxPf+ac3kZuUXOnGc9+IjvxgVwhP9NWUkWtwufwnmXx
kZjTLjQIgg16WA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 20:51:37 2025 by rpki-client