Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
File: vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft (raw, json)
Hash identifier: d75HZdaAcK5WIhbWTcyWMRXb2n/4C+1POIyCLfw5VLI=
Subject key identifier: 03:DC:3B:01:E8:69:CE:60:B0:EF:9B:2F:54:83:6F:3C:8A:13:35:D6
Authority key identifier: BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4
Certificate issuer: /CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4
Certificate serial: 0197C9F055C7D4C8BAABF134CAEBEEE8E0F2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
Manifest number: 15BF
Signing time: Wed 02 Jul 2025 07:01:00 +0000
Manifest this update: Wed 02 Jul 2025 07:01:00 +0000
Manifest next update: Thu 03 Jul 2025 07:01:00 +0000
Files and hashes: 1: vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl (hash: L4Tlc9+bKzqeQhO4uVzlyo2ZMrpz5npjt4x7vPimG4Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f0:55:c7:d4:c8:ba:ab:f1:34:ca:eb:ee:e8:e0:f2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc77cb8964c4ed601448a4368685bf08dcb5e1f4
Validity
Not Before: Jul 2 07:01:00 2025 GMT
Not After : Jul 3 07:01:00 2025 GMT
Subject: CN=03dc3b01e869ce60b0ef9b2f54836f3c8a1335d6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:06:72:b0:81:8f:0a:ac:df:02:0d:e0:bb:85:
84:e2:63:97:89:87:6f:28:52:eb:c6:c2:2a:d1:2b:
ed:99:1f:71:c2:0b:08:84:ba:73:0a:d3:b7:bb:ce:
80:fd:a3:6e:15:ae:ff:aa:2c:05:1a:79:a1:43:42:
09:f0:d6:f1:be:79:1c:9d:20:53:07:21:4e:73:c4:
c5:95:f7:37:58:25:c9:71:2f:a1:cb:90:ab:05:51:
89:25:53:21:dd:30:c7:eb:92:be:64:ca:21:76:11:
6f:95:65:76:1e:fc:5e:68:28:c2:b9:1f:44:7b:e1:
f0:1f:f7:7c:83:bb:e0:d7:f5:47:f0:b2:55:20:a1:
5c:15:ea:d4:51:6a:82:65:5b:1f:bf:9e:bb:8e:de:
9a:fe:7f:f7:f8:78:21:e1:2c:2e:9a:c4:f8:6f:02:
45:01:08:36:d5:08:0a:64:c7:a1:ed:e6:19:4c:fe:
16:20:78:bf:a5:37:55:98:69:ab:2e:78:a2:6a:88:
7e:57:45:14:d1:ec:cc:c2:09:63:fb:c8:85:58:fb:
db:0e:25:0e:bc:f6:c1:70:4e:59:3f:50:a1:e5:71:
f8:bc:80:d3:68:54:ef:77:08:be:90:ea:b6:d8:f9:
87:56:4b:a0:6a:33:90:aa:3a:28:a1:2d:18:87:2b:
9f:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
03:DC:3B:01:E8:69:CE:60:B0:EF:9B:2F:54:83:6F:3C:8A:13:35:D6
X509v3 Authority Key Identifier:
keyid:BC:77:CB:89:64:C4:ED:60:14:48:A4:36:86:85:BF:08:DC:B5:E1:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/49/c75e16-6647-407a-a201-d0327df02628/1/vHfLiWTE7WAUSKQ2hoW_CNy14fQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:88:9d:0f:1b:f7:23:0a:57:1b:6f:49:3c:57:55:29:8c:c2:
a0:75:4a:fe:86:26:71:9f:ee:39:e4:e2:3f:3b:19:ad:c3:a1:
de:1c:87:8c:ce:20:f4:6c:86:ec:6c:86:b0:68:bf:9b:e3:10:
17:59:ef:11:10:2f:45:bc:0b:61:3b:b5:81:89:c1:f2:da:7f:
7d:6b:ff:18:e4:74:a8:6a:ab:09:87:8e:25:20:f0:09:9f:6d:
16:90:3f:34:ce:ab:32:84:3c:a6:d2:92:8f:b9:0f:3d:58:aa:
03:7b:f4:9b:aa:bc:85:34:0c:86:d3:21:9d:97:6f:3c:84:56:
39:41:ec:06:49:19:8d:d3:7d:71:64:46:1d:58:b8:01:b9:dd:
8a:da:62:58:28:40:bb:4c:2c:c3:3e:43:dd:c8:05:61:28:b3:
7f:27:84:cb:6c:63:54:09:4c:b8:45:09:a6:c0:e0:42:08:df:
57:09:40:f9:ac:3c:69:42:17:fb:b7:c0:ff:47:c8:d7:79:e7:
39:e4:09:8e:65:56:f4:02:43:3c:af:5f:82:66:ab:1b:a5:9d:
f4:42:4e:b7:db:9c:71:f9:89:bf:41:64:38:6d:0d:92:6d:a4:
69:de:f2:c1:94:ec:13:fa:46:59:19:f2:75:4c:44:d5:ee:01:
af:a9:a6:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfJ8FXH1Mi6q/E0yuvu6ODyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNzdjYjg5NjRjNGVkNjAxNDQ4YTQzNjg2ODViZjA4ZGNi
NWUxZjQwHhcNMjUwNzAyMDcwMTAwWhcNMjUwNzAzMDcwMTAwWjAzMTEwLwYDVQQD
EygwM2RjM2IwMWU4NjljZTYwYjBlZjliMmY1NDgzNmYzYzhhMTMzNWQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuQZysIGPCqzfAg3gu4WE4mOXiYdv
KFLrxsIq0SvtmR9xwgsIhLpzCtO3u86A/aNuFa7/qiwFGnmhQ0IJ8NbxvnkcnSBT
ByFOc8TFlfc3WCXJcS+hy5CrBVGJJVMh3TDH65K+ZMohdhFvlWV2HvxeaCjCuR9E
e+HwH/d8g7vg1/VH8LJVIKFcFerUUWqCZVsfv567jt6a/n/3+Hgh4SwumsT4bwJF
AQg21QgKZMeh7eYZTP4WIHi/pTdVmGmrLniiaoh+V0UU0ezMwglj+8iFWPvbDiUO
vPbBcE5ZP1Ch5XH4vIDTaFTvdwi+kOq22PmHVkugajOQqjoooS0Yhyuf/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAPcOwHoac5gsO+bL1SDbzyKEzXWMB8GA1UdIwQY
MBaAFLx3y4lkxO1gFEikNoaFvwjcteH0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkhmTGlXVEU3V0FVU0tRMmhvV19DTnkxNGZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS9jNzVlMTYtNjY0Ny00MDdhLWEyMDEt
ZDAzMjdkZjAyNjI4LzEvdkhmTGlXVEU3V0FVU0tRMmhvV19DTnkxNGZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OS9jNzVlMTYtNjY0Ny00MDdhLWEyMDEtZDAzMjdkZjAyNjI4
LzEvdkhmTGlXVEU3V0FVU0tRMmhvV19DTnkxNGZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtoidDxv3
IwpXG29JPFdVKYzCoHVK/oYmcZ/uOeTiPzsZrcOh3hyHjM4g9GyG7GyGsGi/m+MQ
F1nvERAvRbwLYTu1gYnB8tp/fWv/GOR0qGqrCYeOJSDwCZ9tFpA/NM6rMoQ8ptKS
j7kPPViqA3v0m6q8hTQMhtMhnZdvPIRWOUHsBkkZjdN9cWRGHVi4AbnditpiWChA
u0wswz5D3cgFYSizfyeEy2xjVAlMuEUJpsDgQgjfVwlA+aw8aUIX+7fA/0fI13nn
OeQJjmVW9AJDPK9fgmarG6Wd9EJOt9uccfmJv0FkOG0Nkm2kad7ywZTsE/pGWRny
dUxE1e4Br6mmBg==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:16:49 2025 by rpki-client