Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
File: vOyMcyqkPvCzm9NNFA_dOnOu23k.mft (raw, json)
Hash identifier: IvfypZc5e+D4zBCt7O57TaJn0OfR9DHlwgplAzw5K7w=
Subject key identifier: 9A:F7:A2:D9:59:89:C0:4B:D5:FE:A2:4F:5B:ED:75:21:1B:B4:83:9D
Authority key identifier: BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
Certificate issuer: /CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Certificate serial: 0197C61403452537C09A6AE375597C956F85
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
Manifest number: 15C0
Signing time: Tue 01 Jul 2025 13:01:29 +0000
Manifest this update: Tue 01 Jul 2025 13:01:29 +0000
Manifest next update: Wed 02 Jul 2025 13:01:29 +0000
Files and hashes: 1: MXOFcfnTUbTG0Z0k6jm9OvZjusI.roa (hash: g12bb8NYsiYXoa8eXe67xmpUlRgVE1p14iprEmnae2Y=)
2: vOyMcyqkPvCzm9NNFA_dOnOu23k.crl (hash: /p67E8QF9TrdvKiEarFGF9wCWA8KxtS22i/D+1Mew2w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:03:45:25:37:c0:9a:6a:e3:75:59:7c:95:6f:85
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcec8c732aa43ef0b39bd34d140fdd3a73aedb79
Validity
Not Before: Jul 1 13:01:29 2025 GMT
Not After : Jul 2 13:01:29 2025 GMT
Subject: CN=9af7a2d95989c04bd5fea24f5bed75211bb4839d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:ec:fe:91:49:8a:b3:19:e7:a5:d6:b7:70:bf:
8a:ef:15:48:b3:b9:01:ff:8b:af:ac:1b:dc:c1:83:
de:e0:69:6f:b1:bc:5b:60:22:90:e1:5e:c2:5f:42:
f9:9d:a6:d9:27:65:9e:52:d0:57:0e:1c:ad:35:4f:
26:46:31:99:b0:c1:34:bf:43:23:eb:77:5e:f7:1e:
1e:c0:cf:40:ab:00:e4:1e:4a:25:2e:63:36:3a:bd:
a1:9b:4c:f4:db:ca:60:de:95:f5:2c:57:0f:03:f0:
6e:b5:00:a2:88:f0:69:e0:41:d0:7a:cf:b8:17:bc:
e9:b8:3a:5f:b7:6d:3e:fb:c4:5a:16:22:a4:cb:07:
52:77:f4:04:23:c7:a6:83:31:5a:79:d9:71:67:93:
9e:b4:f2:5c:60:40:41:8f:94:f0:17:2a:52:03:7d:
65:69:8c:95:bc:17:3b:e0:fd:f7:9d:9e:ca:f6:c5:
0e:13:13:97:e4:b8:fc:31:54:13:e1:0b:17:e2:a6:
3a:35:43:19:eb:c0:3d:78:75:e0:17:05:5a:de:b2:
c0:88:e8:77:27:be:b1:36:c5:11:70:20:77:c6:61:
f6:2d:dc:4e:90:1b:bf:0c:d6:97:c7:3f:d0:cd:48:
0e:2e:19:65:dd:d7:ab:0b:92:98:ba:28:7c:17:c6:
8f:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F7:A2:D9:59:89:C0:4B:D5:FE:A2:4F:5B:ED:75:21:1B:B4:83:9D
X509v3 Authority Key Identifier:
keyid:BC:EC:8C:73:2A:A4:3E:F0:B3:9B:D3:4D:14:0F:DD:3A:73:AE:DB:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vOyMcyqkPvCzm9NNFA_dOnOu23k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/61158a-7246-4b47-b496-c40c0dbe1de0/1/vOyMcyqkPvCzm9NNFA_dOnOu23k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:16:18:74:27:9a:1a:04:7c:d6:e1:64:e7:f5:df:aa:90:ab:
e9:df:71:04:69:51:35:5b:fe:5a:cf:9e:7b:73:2a:9c:c1:20:
5b:6b:1c:15:56:27:45:66:1d:c7:fd:2f:de:38:18:5c:49:f5:
e1:9e:ea:03:67:d7:0e:f9:27:81:b0:ff:3c:b3:35:d8:0e:94:
71:95:86:85:85:5b:4f:f4:74:90:1b:2a:0c:62:55:c6:c6:73:
02:0a:cd:10:41:d8:d8:e9:ff:73:cd:7a:95:fa:33:db:c6:90:
3e:20:11:be:c7:14:0d:dd:bd:20:ff:d5:e4:cf:12:a3:1e:6f:
1e:e7:4d:0b:67:0a:75:68:3f:61:08:df:c9:48:90:2d:b6:72:
5b:ef:4e:9a:cd:e2:06:26:e4:14:ac:52:6a:69:ce:d8:be:89:
3d:f5:89:13:1e:44:12:08:a4:dc:66:79:cf:2a:bc:a9:ca:4e:
26:8c:ab:d1:c5:c9:ad:23:6e:e9:02:33:5f:72:d8:e8:c1:86:
ee:fa:d7:91:51:c5:42:7b:1d:e0:8b:4a:34:d2:47:82:48:d9:
b1:fd:72:e1:b2:0f:bc:73:5e:c7:ab:73:b5:36:86:1b:de:f4:
b2:67:d0:b6:97:6d:b8:a1:89:e8:43:f7:73:6d:e3:e7:84:39:
5e:7f:78:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGFANFJTfAmmrjdVl8lW+FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZWM4YzczMmFhNDNlZjBiMzliZDM0ZDE0MGZkZDNhNzNh
ZWRiNzkwHhcNMjUwNzAxMTMwMTI5WhcNMjUwNzAyMTMwMTI5WjAzMTEwLwYDVQQD
Eyg5YWY3YTJkOTU5ODljMDRiZDVmZWEyNGY1YmVkNzUyMTFiYjQ4MzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyez+kUmKsxnnpda3cL+K7xVIs7kB
/4uvrBvcwYPe4GlvsbxbYCKQ4V7CX0L5nabZJ2WeUtBXDhytNU8mRjGZsME0v0Mj
63de9x4ewM9AqwDkHkolLmM2Or2hm0z028pg3pX1LFcPA/ButQCiiPBp4EHQes+4
F7zpuDpft20++8RaFiKkywdSd/QEI8emgzFaedlxZ5OetPJcYEBBj5TwFypSA31l
aYyVvBc74P33nZ7K9sUOExOX5Lj8MVQT4QsX4qY6NUMZ68A9eHXgFwVa3rLAiOh3
J76xNsURcCB3xmH2LdxOkBu/DNaXxz/QzUgOLhll3derC5KYuih8F8aP9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJr3otlZicBL1f6iT1vtdSEbtIOdMB8GA1UdIwQY
MBaAFLzsjHMqpD7ws5vTTRQP3Tpzrtt5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC82MTE1OGEtNzI0Ni00YjQ3LWI0OTYt
YzQwYzBkYmUxZGUwLzEvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC82MTE1OGEtNzI0Ni00YjQ3LWI0OTYtYzQwYzBkYmUxZGUw
LzEvdk95TWN5cWtQdkN6bTlOTkZBX2RPbk91MjNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWhYYdCea
GgR81uFk5/XfqpCr6d9xBGlRNVv+Ws+ee3MqnMEgW2scFVYnRWYdx/0v3jgYXEn1
4Z7qA2fXDvkngbD/PLM12A6UcZWGhYVbT/R0kBsqDGJVxsZzAgrNEEHY2On/c816
lfoz28aQPiARvscUDd29IP/V5M8Sox5vHudNC2cKdWg/YQjfyUiQLbZyW+9Oms3i
BibkFKxSamnO2L6JPfWJEx5EEgik3GZ5zyq8qcpOJoyr0cXJrSNu6QIzX3LY6MGG
7vrXkVHFQnsd4ItKNNJHgkjZsf1y4bIPvHNex6tztTaGG970smfQtpdtuKGJ6EP3
c23j54Q5Xn94ww==
-----END CERTIFICATE-----
Generated at Tue Jul 1 15:05:02 2025 by rpki-client