Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
File: v1vcQQat3onhzpwyuAeyCC67mUQ.mft (raw, json)
Hash identifier: GksvaSLvKvDY/MtFFTfU6jgsWYWgCDEvyja1Sa2gO14=
Subject key identifier: E3:78:B8:10:22:90:73:C1:6E:8C:61:57:97:5F:C2:B6:9B:6A:39:D0
Authority key identifier: BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
Certificate issuer: /CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Certificate serial: 0197B70EEE8B9E836EE68446C219E48D8730
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
Manifest number: 15B3
Signing time: Sat 28 Jun 2025 15:01:38 +0000
Manifest this update: Sat 28 Jun 2025 15:01:38 +0000
Manifest next update: Sun 29 Jun 2025 15:01:38 +0000
Files and hashes: 1: Uy9WOwPWbRCpTH3lj7ESDUuv-LI.roa (hash: 1fij03uU2Ynnat5tn8++7hQPOH2AmJ+7FEvkLIb0i0I=)
2: v1vcQQat3onhzpwyuAeyCC67mUQ.crl (hash: oxSZ99OjF8njc3JSec38IwmQUk+T4mYnieLjkueGcHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:ee:8b:9e:83:6e:e6:84:46:c2:19:e4:8d:87:30
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf5bdc4106adde89e1ce9c32b807b2082ebb9944
Validity
Not Before: Jun 28 15:01:38 2025 GMT
Not After : Jun 29 15:01:38 2025 GMT
Subject: CN=e378b810229073c16e8c6157975fc2b69b6a39d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:30:21:4c:da:2d:b0:ce:51:6d:63:68:53:47:
ed:de:75:00:f7:1a:18:28:29:34:15:42:0f:f0:39:
61:af:38:45:cd:98:69:b3:0f:65:94:23:70:27:77:
42:26:34:4f:9a:28:ae:a1:39:08:d6:d4:14:24:f6:
3d:73:02:e6:5b:78:f3:c4:77:5d:26:fc:ad:03:7a:
d3:9a:d9:3b:92:b3:d9:b8:9e:c3:ed:f6:bf:16:bc:
eb:fe:e3:c9:bc:4b:1f:d2:6a:81:aa:9c:21:9f:bc:
4a:e2:af:1b:4b:6b:39:96:ea:7f:8d:8b:c9:79:d8:
ea:36:f9:44:d5:0b:e2:fd:a4:05:40:c9:06:19:9b:
58:c5:d4:eb:71:ce:88:c3:9f:3d:52:13:0d:29:a7:
a3:62:fd:40:ce:ff:b5:45:5a:3d:3c:8e:f2:eb:7c:
be:bb:a2:a1:44:92:61:0a:33:60:e0:3e:dd:f3:37:
64:30:b2:ae:8d:e7:cb:66:7c:77:6e:23:ad:bb:fc:
8e:09:10:51:ae:6f:fc:59:3b:fc:80:48:2f:27:27:
d1:3f:8d:9e:6a:f9:cc:d2:c4:ca:8e:3a:5f:01:28:
dc:9f:51:0d:2d:e5:1c:7b:dc:fa:24:ac:ae:d8:fa:
37:82:23:b8:3e:07:ac:8e:75:57:0b:29:3c:78:3c:
3f:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:78:B8:10:22:90:73:C1:6E:8C:61:57:97:5F:C2:B6:9B:6A:39:D0
X509v3 Authority Key Identifier:
keyid:BF:5B:DC:41:06:AD:DE:89:E1:CE:9C:32:B8:07:B2:08:2E:BB:99:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v1vcQQat3onhzpwyuAeyCC67mUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2d1a0a-71cc-4f57-aa63-bedac10aacdc/1/v1vcQQat3onhzpwyuAeyCC67mUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:13:b3:5c:4c:50:ad:31:77:45:2c:ba:c3:72:b7:a3:3e:68:
58:92:c0:cd:8c:56:33:b6:8d:f7:c7:80:fc:b5:50:bb:bf:dd:
e2:a9:42:21:55:a9:30:e2:9c:70:9d:a6:23:b8:f4:61:45:1b:
8e:88:db:ad:83:7e:5a:52:21:bb:c9:48:eb:e7:8e:16:17:d7:
79:8d:e7:ff:3f:15:c4:1b:de:90:a8:74:87:19:8f:a3:dd:96:
53:18:6e:6a:3e:7a:62:85:84:0b:75:4d:79:07:d7:ed:c6:3b:
4e:30:7f:12:12:76:ba:94:dc:39:62:ed:a9:22:1f:f5:32:2c:
f5:3e:c0:cd:ba:88:25:45:88:dd:1c:5e:b9:9c:ea:29:87:48:
2f:92:5f:ce:03:75:8c:3b:ce:ac:bc:0b:8f:99:96:a7:79:29:
f1:17:57:64:09:76:ae:82:0e:1f:2f:6b:10:21:55:a3:0e:9e:
94:bb:03:48:ef:66:ce:c9:cc:90:69:38:82:ac:a8:83:03:8e:
92:6d:4f:f7:6f:05:2e:70:eb:f7:73:27:ff:99:45:c1:79:70:
b2:6b:b8:e0:b0:e2:72:67:f6:86:00:01:76:97:33:3e:a5:4e:
ae:87:2f:e6:b4:c9:bb:18:4f:1e:2f:ba:ad:78:00:fe:a4:c6:
28:47:18:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Du6LnoNu5oRGwhnkjYcwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNWJkYzQxMDZhZGRlODllMWNlOWMzMmI4MDdiMjA4MmVi
Yjk5NDQwHhcNMjUwNjI4MTUwMTM4WhcNMjUwNjI5MTUwMTM4WjAzMTEwLwYDVQQD
EyhlMzc4YjgxMDIyOTA3M2MxNmU4YzYxNTc5NzVmYzJiNjliNmEzOWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwzAhTNotsM5RbWNoU0ft3nUA9xoY
KCk0FUIP8DlhrzhFzZhpsw9llCNwJ3dCJjRPmiiuoTkI1tQUJPY9cwLmW3jzxHdd
JvytA3rTmtk7krPZuJ7D7fa/Frzr/uPJvEsf0mqBqpwhn7xK4q8bS2s5lup/jYvJ
edjqNvlE1Qvi/aQFQMkGGZtYxdTrcc6Iw589UhMNKaejYv1Azv+1RVo9PI7y63y+
u6KhRJJhCjNg4D7d8zdkMLKujefLZnx3biOtu/yOCRBRrm/8WTv8gEgvJyfRP42e
avnM0sTKjjpfASjcn1ENLeUce9z6JKyu2Po3giO4PgesjnVXCyk8eDw/SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFON4uBAikHPBboxhV5dfwrabajnQMB8GA1UdIwQY
MBaAFL9b3EEGrd6J4c6cMrgHsgguu5lEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yZDFhMGEtNzFjYy00ZjU3LWFhNjMt
YmVkYWMxMGFhY2RjLzEvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yZDFhMGEtNzFjYy00ZjU3LWFhNjMtYmVkYWMxMGFhY2Rj
LzEvdjF2Y1FRYXQzb25oenB3eXVBZXlDQzY3bVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjhOzXExQ
rTF3RSy6w3K3oz5oWJLAzYxWM7aN98eA/LVQu7/d4qlCIVWpMOKccJ2mI7j0YUUb
jojbrYN+WlIhu8lI6+eOFhfXeY3n/z8VxBvekKh0hxmPo92WUxhuaj56YoWEC3VN
eQfX7cY7TjB/EhJ2upTcOWLtqSIf9TIs9T7AzbqIJUWI3RxeuZzqKYdIL5JfzgN1
jDvOrLwLj5mWp3kp8RdXZAl2roIOHy9rECFVow6elLsDSO9mzsnMkGk4gqyogwOO
km1P928FLnDr93Mn/5lFwXlwsmu44LDicmf2hgABdpczPqVOrocv5rTJuxhPHi+6
rXgA/qTGKEcYbw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:40 2025 by rpki-client