Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
File: vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft (raw, json)
Hash identifier: sGlNkZoVy9fVuWpxf2g11zCdwApMCp6lkQt7PdRboUo=
Subject key identifier: 64:64:BE:EB:73:28:90:74:E3:D0:BE:8F:66:C4:81:B5:ED:C2:7C:0E
Authority key identifier: BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
Certificate issuer: /CN=bd85314d13c782c052dd022b3e4e20142b64170e
Certificate serial: 0197B7B34D20E7C51A9BA68B9787A51E90C1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
Manifest number: 1148
Signing time: Sat 28 Jun 2025 18:01:10 +0000
Manifest this update: Sat 28 Jun 2025 18:01:10 +0000
Manifest next update: Sun 29 Jun 2025 18:01:10 +0000
Files and hashes: 1: 87DcvIoV9C57hb7DwzS0oT0QBdM.roa (hash: 1fwwbxC7tvmVRypNN1d4FXoCK3/5oiWQOQyukuAKNSE=)
2: vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl (hash: V3dd78eBZ0KXK04C7NK/AVa6CY4PaGtllLJKq3sxv1w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:4d:20:e7:c5:1a:9b:a6:8b:97:87:a5:1e:90:c1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd85314d13c782c052dd022b3e4e20142b64170e
Validity
Not Before: Jun 28 18:01:10 2025 GMT
Not After : Jun 29 18:01:10 2025 GMT
Subject: CN=6464beeb73289074e3d0be8f66c481b5edc27c0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:0c:11:d0:02:46:a1:67:e3:93:c5:eb:55:24:
5d:b3:db:6d:81:11:07:89:82:78:c0:ab:7b:cf:e7:
25:2d:ea:8a:82:58:55:48:1f:3e:b0:73:3b:0d:b0:
d8:78:a2:fd:c3:1f:85:fc:cc:04:f4:7d:22:74:23:
31:2c:1e:f5:51:4c:e9:ca:d0:b2:34:a1:91:ee:d6:
38:34:f1:57:dd:26:8c:6b:61:48:9c:4f:fb:6d:39:
3c:1a:86:d5:c2:a9:fe:e8:93:99:d4:f3:26:da:05:
46:a6:45:33:17:67:99:5f:24:5b:cb:9b:0d:b7:5f:
4b:ba:da:cf:e2:c8:aa:8c:bf:e1:dd:24:a5:fa:d4:
c4:29:cd:c4:24:74:3b:74:b6:d2:f3:2b:5d:19:23:
34:1e:16:58:cb:e4:9d:82:06:59:b0:73:54:c3:2c:
c9:ac:cb:2d:30:d3:d1:d0:5e:f0:4d:4f:a8:ba:96:
fa:c9:31:74:f5:f7:56:19:de:c3:c0:e7:ad:8a:5d:
b3:a3:e2:1b:27:95:14:10:35:f5:81:1a:87:ae:3b:
15:70:97:59:0e:73:d9:88:ff:cf:57:cc:82:cf:37:
fa:64:91:1f:c7:3c:41:6a:e3:72:dc:4e:73:8f:76:
da:53:b2:77:20:be:b9:2c:8a:7e:d6:aa:a9:ad:b5:
41:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:64:BE:EB:73:28:90:74:E3:D0:BE:8F:66:C4:81:B5:ED:C2:7C:0E
X509v3 Authority Key Identifier:
keyid:BD:85:31:4D:13:C7:82:C0:52:DD:02:2B:3E:4E:20:14:2B:64:17:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vYUxTRPHgsBS3QIrPk4gFCtkFw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/052d38-6080-4e79-8a4b-625515ff5944/1/vYUxTRPHgsBS3QIrPk4gFCtkFw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:6a:24:9c:f9:1a:60:82:ef:49:4d:ad:98:b0:ea:6a:e4:8e:
1e:f5:1c:d7:10:22:a9:9f:f6:99:25:3e:30:b8:ad:11:14:8d:
49:28:50:9a:5e:fd:78:14:41:96:ef:cc:b1:8b:6a:3b:9d:3e:
41:a8:dd:40:c9:28:40:b3:b4:a6:d1:c7:de:cd:4e:df:72:a1:
bc:15:ee:b2:04:8c:6c:43:c2:60:97:d1:2f:31:37:0b:37:7f:
b5:85:8d:e1:be:c2:c1:02:e9:a5:f3:53:3c:44:ef:8a:38:40:
8a:39:5b:8b:5e:ce:75:6c:d8:bf:78:d2:98:e2:73:c3:7b:5e:
ee:6a:d4:3b:0f:e9:ea:b0:4d:96:6c:26:e1:1c:28:3a:64:3a:
44:b5:76:2a:33:9e:c1:c1:2d:4d:43:ae:ca:7e:e8:5e:68:e1:
24:27:97:dc:11:93:4e:3e:ce:e5:77:07:c2:51:24:05:1a:84:
92:96:3e:38:35:ff:54:15:a1:4b:84:01:db:f4:b6:a2:30:20:
8a:bc:61:be:7d:6b:b6:4d:a7:4b:d9:4a:f4:91:f8:39:1b:87:
25:29:8a:71:ef:cc:00:b6:56:c3:2e:6d:2e:3e:cb:ef:a9:81:
bf:c4:f5:bc:0f:70:ad:fe:aa:6e:88:cd:31:73:bd:cf:8b:d2:
2b:8a:6f:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s00g58Uam6aLl4elHpDBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkODUzMTRkMTNjNzgyYzA1MmRkMDIyYjNlNGUyMDE0MmI2
NDE3MGUwHhcNMjUwNjI4MTgwMTEwWhcNMjUwNjI5MTgwMTEwWjAzMTEwLwYDVQQD
Eyg2NDY0YmVlYjczMjg5MDc0ZTNkMGJlOGY2NmM0ODFiNWVkYzI3YzBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAogwR0AJGoWfjk8XrVSRds9ttgREH
iYJ4wKt7z+clLeqKglhVSB8+sHM7DbDYeKL9wx+F/MwE9H0idCMxLB71UUzpytCy
NKGR7tY4NPFX3SaMa2FInE/7bTk8GobVwqn+6JOZ1PMm2gVGpkUzF2eZXyRby5sN
t19LutrP4siqjL/h3SSl+tTEKc3EJHQ7dLbS8ytdGSM0HhZYy+SdggZZsHNUwyzJ
rMstMNPR0F7wTU+oupb6yTF09fdWGd7DwOetil2zo+IbJ5UUEDX1gRqHrjsVcJdZ
DnPZiP/PV8yCzzf6ZJEfxzxBauNy3E5zj3baU7J3IL65LIp+1qqprbVBxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGRkvutzKJB049C+j2bEgbXtwnwOMB8GA1UdIwQY
MBaAFL2FMU0Tx4LAUt0CKz5OIBQrZBcOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdllVeFRSUEhnc0JTM1FJclBrNGdGQ3RrRnc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy8wNTJkMzgtNjA4MC00ZTc5LThhNGIt
NjI1NTE1ZmY1OTQ0LzEvdllVeFRSUEhnc0JTM1FJclBrNGdGQ3RrRnc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy8wNTJkMzgtNjA4MC00ZTc5LThhNGItNjI1NTE1ZmY1OTQ0
LzEvdllVeFRSUEhnc0JTM1FJclBrNGdGQ3RrRnc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIGoknPka
YILvSU2tmLDqauSOHvUc1xAiqZ/2mSU+MLitERSNSShQml79eBRBlu/MsYtqO50+
QajdQMkoQLO0ptHH3s1O33KhvBXusgSMbEPCYJfRLzE3Czd/tYWN4b7CwQLppfNT
PETvijhAijlbi17OdWzYv3jSmOJzw3te7mrUOw/p6rBNlmwm4RwoOmQ6RLV2KjOe
wcEtTUOuyn7oXmjhJCeX3BGTTj7O5XcHwlEkBRqEkpY+ODX/VBWhS4QB2/S2ojAg
irxhvn1rtk2nS9lK9JH4ORuHJSmKce/MALZWwy5tLj7L76mBv8T1vA9wrf6qbojN
MXO9z4vSK4pvig==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:57 2025 by rpki-client