Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
File: vB5m76AFpt5TsdDJHzdVS99Gdr0.mft (raw, json)
Hash identifier: lGbvuMJeulyqNPCIPOc0Zc4FstHPwTvHdfO9fslpIPE=
Subject key identifier: 28:AE:84:FF:5F:E0:4E:31:85:5B:C8:67:C0:DF:91:CC:E7:6A:7A:E3
Authority key identifier: BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
Certificate issuer: /CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Certificate serial: 0198D583602BDF4020D7AA6CAB482D2F560E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
Manifest number: 0E49
Signing time: Sat 23 Aug 2025 06:00:13 +0000
Manifest this update: Sat 23 Aug 2025 06:00:13 +0000
Manifest next update: Sun 24 Aug 2025 06:00:13 +0000
Files and hashes: 1: 6IVQyX8RgUoO3Q58rf7sMqHJv54.roa (hash: 7oxYbSUUgVn0A9C0QrCdMuBwwgHYFbY1shMdIhdZPLk=)
2: vB5m76AFpt5TsdDJHzdVS99Gdr0.crl (hash: k9MaEF+ss4Ny2euqaCHak3SfvIOQgSM8W2Wwsh6CJvE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:83:60:2b:df:40:20:d7:aa:6c:ab:48:2d:2f:56:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Validity
Not Before: Aug 23 06:00:13 2025 GMT
Not After : Aug 24 06:00:13 2025 GMT
Subject: CN=28ae84ff5fe04e31855bc867c0df91cce76a7ae3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:5e:5c:1b:10:72:67:48:67:df:d3:ba:83:b2:
83:5c:0f:7a:a8:d2:da:18:7c:3e:6b:db:93:8e:34:
3c:46:a7:c2:13:3e:01:07:d4:5d:3b:81:e3:cd:f3:
55:da:bf:87:32:3f:66:10:45:bf:3a:9d:e4:70:6d:
87:b8:56:ca:9d:81:74:b5:f5:e7:98:c4:8d:99:60:
45:5a:ce:3d:94:2d:75:34:c7:04:e1:84:71:f1:da:
1f:b8:6d:7c:f1:87:cf:7c:24:64:10:43:77:e0:bf:
a2:90:73:d2:66:77:09:4d:3f:dd:1d:d5:67:50:99:
e2:a5:27:d3:62:86:f9:21:7a:04:ed:e0:5b:0d:0b:
17:e6:32:c7:48:95:e0:bd:09:1f:08:12:31:cc:ba:
3d:b2:7a:6b:35:f7:69:70:87:14:f1:91:cc:f6:1d:
54:17:ac:f2:80:09:0c:40:b8:5b:5f:8b:bb:02:25:
ef:e6:55:cc:8e:26:d2:8c:94:ba:7e:9d:c9:61:e9:
ef:3c:02:a8:c0:d2:72:bc:9a:a3:d9:fd:e1:8d:87:
10:ff:63:34:d7:0f:8e:df:72:7a:4f:a5:c6:63:7c:
3b:b2:13:b4:da:26:a4:ae:08:35:62:a6:12:c6:25:
e5:52:b5:29:31:79:21:f6:f6:45:3d:54:2b:b7:99:
8a:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:AE:84:FF:5F:E0:4E:31:85:5B:C8:67:C0:DF:91:CC:E7:6A:7A:E3
X509v3 Authority Key Identifier:
keyid:BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:2f:8f:c5:d8:97:ae:e7:e0:b7:7f:a1:38:8e:1c:15:5d:81:
b8:63:b4:30:d2:62:e0:f4:d9:55:2b:b3:4d:56:5f:2d:e7:0a:
6b:1e:91:62:f0:de:5d:72:7b:0d:40:e3:4f:75:d1:92:83:d4:
e4:1d:73:d9:af:28:ef:9d:2c:96:0c:96:50:d8:c7:86:b2:b5:
1f:ae:dd:98:9a:85:19:5e:af:52:25:fb:e0:52:54:f5:09:17:
19:86:fc:1e:fa:4a:1e:be:29:24:dd:86:54:92:17:64:29:93:
ef:d3:af:f6:f7:9f:6f:b8:78:9d:47:61:71:03:b4:1a:df:58:
97:19:ec:2f:5f:4d:7e:54:cd:e1:46:45:cf:9d:d2:62:19:4b:
94:50:39:5c:99:aa:3c:fa:1a:5c:0e:4d:ab:80:ae:71:db:aa:
9f:12:51:24:41:eb:35:ed:68:1e:f0:ca:09:ab:62:42:d4:39:
4a:4e:50:f9:3b:97:d9:b2:cc:49:5a:f0:8f:77:a5:5e:74:e1:
6f:ae:bf:d3:44:4f:e1:24:c9:cf:2f:a2:81:b3:a6:4e:b2:62:
59:ca:64:61:0b:98:78:0a:6e:d2:c1:e5:39:5a:df:7d:54:a0:
d2:2a:15:73:17:85:71:b9:ac:20:c4:a6:2d:48:94:85:a2:72:
d5:df:c4:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVg2Ar30Ag16psq0gtL1YOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMWU2NmVmYTAwNWE2ZGU1M2IxZDBjOTFmMzc1NTRiZGY0
Njc2YmQwHhcNMjUwODIzMDYwMDEzWhcNMjUwODI0MDYwMDEzWjAzMTEwLwYDVQQD
EygyOGFlODRmZjVmZTA0ZTMxODU1YmM4NjdjMGRmOTFjY2U3NmE3YWUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyl5cGxByZ0hn39O6g7KDXA96qNLa
GHw+a9uTjjQ8RqfCEz4BB9RdO4HjzfNV2r+HMj9mEEW/Op3kcG2HuFbKnYF0tfXn
mMSNmWBFWs49lC11NMcE4YRx8dofuG188YfPfCRkEEN34L+ikHPSZncJTT/dHdVn
UJnipSfTYob5IXoE7eBbDQsX5jLHSJXgvQkfCBIxzLo9snprNfdpcIcU8ZHM9h1U
F6zygAkMQLhbX4u7AiXv5lXMjibSjJS6fp3JYenvPAKowNJyvJqj2f3hjYcQ/2M0
1w+O33J6T6XGY3w7shO02iakrgg1YqYSxiXlUrUpMXkh9vZFPVQrt5mKpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiuhP9f4E4xhVvIZ8DfkcznanrjMB8GA1UdIwQY
MBaAFLweZu+gBabeU7HQyR83VUvfRna9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iYjJiZGItNzQ3ZC00ODU1LTg5NDUt
N2Y5YTNlNDUyNTZlLzEvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iYjJiZGItNzQ3ZC00ODU1LTg5NDUtN2Y5YTNlNDUyNTZl
LzEvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGC+PxdiX
rufgt3+hOI4cFV2BuGO0MNJi4PTZVSuzTVZfLecKax6RYvDeXXJ7DUDjT3XRkoPU
5B1z2a8o750slgyWUNjHhrK1H67dmJqFGV6vUiX74FJU9QkXGYb8HvpKHr4pJN2G
VJIXZCmT79Ov9vefb7h4nUdhcQO0Gt9YlxnsL19NflTN4UZFz53SYhlLlFA5XJmq
PPoaXA5Nq4CucduqnxJRJEHrNe1oHvDKCatiQtQ5Sk5Q+TuX2bLMSVrwj3elXnTh
b66/00RP4STJzy+igbOmTrJiWcpkYQuYeApu0sHlOVrffVSg0ioVcxeFcbmsIMSm
LUiUhaJy1d/E0Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 10:50:00 2025 by rpki-client