Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
File: vMfmdGZUQPbmuA5v8VWq1qics_I.mft (raw, json)
Hash identifier: L8bXAa6sVTkcEPidkgf8bmpMbDE/E7RNExhUkn9sGxc=
Subject key identifier: 86:BA:40:AD:3C:1F:48:24:2E:03:CC:D0:25:1E:10:2A:A9:90:E3:9C
Authority key identifier: BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
Certificate issuer: /CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Certificate serial: 0197C5A5A9FE9CEDCB83B218067CE9E93625
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
Manifest number: 1403
Signing time: Tue 01 Jul 2025 11:00:57 +0000
Manifest this update: Tue 01 Jul 2025 11:00:57 +0000
Manifest next update: Wed 02 Jul 2025 11:00:57 +0000
Files and hashes: 1: PHL7NSBK95zaws9C31ZflNW81UQ.roa (hash: xN1IuHM2HqmvCMYrHZyAcKbiNydpQGHMsZWgFpHpOl8=)
2: vMfmdGZUQPbmuA5v8VWq1qics_I.crl (hash: 4+nZxAB1UwHGbKqdnxnNpIrJp5wOZi4AlegjcBNLTco=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 11:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:a5:a9:fe:9c:ed:cb:83:b2:18:06:7c:e9:e9:36:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc7e674665440f6e6b80e6ff155aad6a89cb3f2
Validity
Not Before: Jul 1 11:00:57 2025 GMT
Not After : Jul 2 11:00:57 2025 GMT
Subject: CN=86ba40ad3c1f48242e03ccd0251e102aa990e39c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:8f:8b:1e:09:7d:dc:3c:b4:71:c9:07:4e:f5:
bb:5e:fa:6d:62:7d:65:dc:dd:6e:e9:8a:74:fa:56:
b3:90:a4:12:f7:93:7b:04:ea:4e:72:ba:d2:b6:ff:
c6:bd:4c:5c:b7:9b:7d:d6:fb:32:df:e7:3a:d2:54:
9b:81:ff:15:5e:19:30:bf:86:82:00:94:d4:ed:dd:
c1:84:0e:85:1d:d0:88:f7:93:8b:f3:64:e0:53:4a:
09:32:16:5a:06:cc:ad:40:f8:37:1f:8b:a3:b7:0d:
07:39:04:25:bf:a3:cf:d6:85:a4:46:45:8a:44:0e:
f2:ba:38:45:0f:50:05:af:95:11:b1:2c:a6:f0:75:
26:66:b7:83:97:a2:27:08:1f:4f:16:13:bc:4f:05:
c4:cb:ab:3f:3b:39:7c:3f:1d:ab:cc:32:1a:06:b4:
00:26:a5:fd:cc:5f:ee:5d:e9:fb:2b:a0:7a:ed:79:
83:c2:cb:04:ea:a8:a9:a6:f0:a5:7b:66:c2:d0:4c:
72:dc:6d:ab:6a:13:97:48:54:59:59:7e:73:c3:f4:
25:d4:47:40:fd:08:27:10:ef:e5:08:54:da:a8:90:
14:f5:04:80:20:a0:be:15:28:3e:ad:24:34:8b:f3:
b4:95:84:d6:00:98:e2:7b:8f:58:0a:b5:92:87:17:
78:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:BA:40:AD:3C:1F:48:24:2E:03:CC:D0:25:1E:10:2A:A9:90:E3:9C
X509v3 Authority Key Identifier:
keyid:BC:C7:E6:74:66:54:40:F6:E6:B8:0E:6F:F1:55:AA:D6:A8:9C:B3:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMfmdGZUQPbmuA5v8VWq1qics_I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/08bb92-6f00-4e5c-924a-ef6cce145d82/1/vMfmdGZUQPbmuA5v8VWq1qics_I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ca:3f:55:51:e6:4c:47:61:cb:42:71:9d:b1:61:f6:40:b7:
05:a4:19:c3:6f:da:f2:28:ff:ce:59:57:80:52:dc:f7:11:77:
37:95:dd:78:a8:d6:00:c6:1f:35:32:6a:df:ab:31:34:4e:3a:
8e:59:51:07:9e:1c:1e:9a:44:26:76:44:2c:f1:4d:04:31:ae:
0b:4f:d0:c3:50:d2:28:ba:ab:bf:bc:f6:e9:23:06:96:44:cd:
f9:c8:25:2c:ba:2f:71:2d:a3:8e:56:df:e1:04:51:2c:9c:e0:
a3:b8:46:fc:64:8f:c4:4a:be:84:3c:e8:10:6c:c4:85:a7:dd:
cc:e3:80:52:7b:38:1e:f1:84:45:bd:c6:eb:98:a1:fa:84:8d:
86:7e:d9:29:f1:64:19:37:8b:69:71:c2:56:fd:79:1a:b4:80:
92:f1:d2:ba:5c:ef:5b:a7:b8:6a:19:99:88:0e:bc:a6:90:88:
2d:1a:be:76:48:de:42:a6:75:2a:f6:f4:45:61:81:0f:a5:3a:
0d:a4:16:08:0a:65:ab:41:c6:56:14:dd:8d:7c:7c:2f:f7:3f:
41:a4:b8:7c:9d:f9:05:11:5c:3b:17:1f:87:9c:d5:53:b4:c6:
b3:de:1b:65:1c:54:46:61:fe:8b:84:36:b9:5a:ae:f9:89:68:
94:8c:f4:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFpan+nO3Lg7IYBnzp6TYlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYzdlNjc0NjY1NDQwZjZlNmI4MGU2ZmYxNTVhYWQ2YTg5
Y2IzZjIwHhcNMjUwNzAxMTEwMDU3WhcNMjUwNzAyMTEwMDU3WjAzMTEwLwYDVQQD
Eyg4NmJhNDBhZDNjMWY0ODI0MmUwM2NjZDAyNTFlMTAyYWE5OTBlMzljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Y+LHgl93Dy0cckHTvW7XvptYn1l
3N1u6Yp0+lazkKQS95N7BOpOcrrStv/GvUxct5t91vsy3+c60lSbgf8VXhkwv4aC
AJTU7d3BhA6FHdCI95OL82TgU0oJMhZaBsytQPg3H4ujtw0HOQQlv6PP1oWkRkWK
RA7yujhFD1AFr5URsSym8HUmZreDl6InCB9PFhO8TwXEy6s/Ozl8Px2rzDIaBrQA
JqX9zF/uXen7K6B67XmDwssE6qippvCle2bC0Exy3G2rahOXSFRZWX5zw/Ql1EdA
/QgnEO/lCFTaqJAU9QSAIKC+FSg+rSQ0i/O0lYTWAJjie49YCrWShxd4iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIa6QK08H0gkLgPM0CUeECqpkOOcMB8GA1UdIwQY
MBaAFLzH5nRmVED25rgOb/FVqtaonLPyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk1mbWRHWlVRUGJtdUE1djhWV3ExcWljc19JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8wOGJiOTItNmYwMC00ZTVjLTkyNGEt
ZWY2Y2NlMTQ1ZDgyLzEvdk1mbWRHWlVRUGJtdUE1djhWV3ExcWljc19JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8wOGJiOTItNmYwMC00ZTVjLTkyNGEtZWY2Y2NlMTQ1ZDgy
LzEvdk1mbWRHWlVRUGJtdUE1djhWV3ExcWljc19JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfso/VVHm
TEdhy0JxnbFh9kC3BaQZw2/a8ij/zllXgFLc9xF3N5XdeKjWAMYfNTJq36sxNE46
jllRB54cHppEJnZELPFNBDGuC0/Qw1DSKLqrv7z26SMGlkTN+cglLLovcS2jjlbf
4QRRLJzgo7hG/GSPxEq+hDzoEGzEhafdzOOAUns4HvGERb3G65ih+oSNhn7ZKfFk
GTeLaXHCVv15GrSAkvHSulzvW6e4ahmZiA68ppCILRq+dkjeQqZ1Kvb0RWGBD6U6
DaQWCAplq0HGVhTdjXx8L/c/QaS4fJ35BRFcOxcfh5zVU7TGs94bZRxURmH+i4Q2
uVqu+YlolIz0kg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 20:49:10 2025 by rpki-client