Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
File: vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft (raw, json)
Hash identifier: dq5l3NJUma1NCACUM0mhZia1b6Fr08b9QoI5od/Gd2k=
Subject key identifier: BC:C4:3F:9B:85:22:5C:FE:44:7F:B3:CF:21:64:0E:05:0F:A1:83:DA
Authority key identifier: BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
Certificate issuer: /CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Certificate serial: 0197B7B35036A0ACC8243CC75C08C98D8F00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
Manifest number: 0880
Signing time: Sat 28 Jun 2025 18:01:11 +0000
Manifest this update: Sat 28 Jun 2025 18:01:11 +0000
Manifest next update: Sun 29 Jun 2025 18:01:11 +0000
Files and hashes: 1: sxWKrzqIBBqkeo4-v2Jw2EzqS3k.roa (hash: DWZadMWJyiM8F0IG02kO3n/vWw1f6vECk5IkRqLr9qY=)
2: vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl (hash: rQYGM0xgOzhCEgPr/jj5M4sBIvRtN0O5ztwxHJXs06A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:50:36:a0:ac:c8:24:3c:c7:5c:08:c9:8d:8f:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd4ad21a0a69dc041c4e1770eb18ba43b6db29ce
Validity
Not Before: Jun 28 18:01:11 2025 GMT
Not After : Jun 29 18:01:11 2025 GMT
Subject: CN=bcc43f9b85225cfe447fb3cf21640e050fa183da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:28:55:7d:86:1d:c3:9c:09:87:cf:2b:42:a5:
7f:e4:56:dd:8b:d7:9a:e3:87:d5:6d:f7:ab:ee:7e:
69:92:e8:ef:9f:1a:50:24:1b:34:0a:e4:97:8d:3f:
f8:14:9b:0b:a0:19:37:90:c4:f5:7b:9b:58:1f:10:
10:6b:12:a6:fd:70:ab:fe:07:a7:49:6d:e8:70:d4:
00:a5:b9:c8:03:21:a6:cc:6e:d0:82:9e:67:fa:7a:
2d:ab:ad:b2:f9:fa:c7:f2:43:41:66:70:bf:9b:4a:
e7:47:3b:eb:44:94:a8:76:cc:17:6a:ec:93:12:11:
e3:d0:d2:45:cc:56:a5:ca:ba:69:1e:c8:08:2d:d6:
fb:07:b5:dd:69:f5:37:53:30:90:78:41:38:17:b2:
0e:aa:45:35:33:ff:b8:82:ec:8a:b0:44:0c:c6:56:
31:0a:8d:5c:ec:0f:d4:d2:4b:8f:30:a9:ef:62:85:
d8:15:01:52:12:19:1a:6e:94:d0:4c:3e:dd:8b:75:
94:f6:b1:69:21:ee:77:0f:fa:81:3e:f5:ab:a6:f0:
46:c3:f9:96:e8:0d:6c:79:18:1b:b2:6c:51:76:df:
2f:20:34:f6:7b:85:ea:c8:57:32:51:9b:e2:0c:02:
1e:fe:04:3c:63:ed:57:17:93:9d:a3:b1:a9:bb:28:
24:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C4:3F:9B:85:22:5C:FE:44:7F:B3:CF:21:64:0E:05:0F:A1:83:DA
X509v3 Authority Key Identifier:
keyid:BD:4A:D2:1A:0A:69:DC:04:1C:4E:17:70:EB:18:BA:43:B6:DB:29:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUrSGgpp3AQcThdw6xi6Q7bbKc4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/67f707-0006-469d-b311-cdd4d8f8d0d9/1/vUrSGgpp3AQcThdw6xi6Q7bbKc4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:43:a5:cb:d8:ae:b4:ee:4a:de:4e:c7:ae:db:fb:d8:03:65:
c9:6c:0d:d7:8e:55:77:a1:9a:cf:62:cf:b1:80:a4:55:66:44:
7b:0d:b0:4b:d6:f6:9c:7f:91:fa:b8:78:72:86:20:d1:70:80:
52:f4:9b:24:4f:cc:7e:be:cf:3e:42:49:13:11:a8:78:d5:94:
6c:10:f2:70:f8:02:a8:b3:e3:0d:49:fa:f0:de:a7:da:bc:bf:
5e:4d:83:46:9c:dd:cc:b5:70:40:8f:3a:92:df:db:48:b4:e1:
04:8a:c5:c9:df:dd:a4:cb:2a:37:f1:c5:e7:8d:61:a4:99:85:
99:c7:30:f6:1f:7b:f8:d9:79:92:a1:da:8f:af:91:f3:58:f6:
de:8d:68:86:21:21:e5:05:b9:6a:76:53:3d:dc:e8:96:1d:ed:
49:ce:a8:4c:93:15:d4:7b:d8:23:6c:ae:d3:7b:bd:09:b2:07:
87:21:98:bf:30:d4:df:58:96:40:e8:38:b9:ad:58:fe:ce:32:
ca:29:02:5a:d8:5f:32:28:58:3b:80:a5:9d:69:a9:70:6b:2a:
62:34:db:b6:b7:8c:9d:49:bf:2b:f3:a3:c4:f1:e2:fd:54:90:
31:cf:19:cc:ee:a3:7f:61:2f:a8:86:e9:a5:b0:86:bf:ff:e7:
c9:c7:ee:1c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3s1A2oKzIJDzHXAjJjY8AMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNGFkMjFhMGE2OWRjMDQxYzRlMTc3MGViMThiYTQzYjZk
YjI5Y2UwHhcNMjUwNjI4MTgwMTExWhcNMjUwNjI5MTgwMTExWjAzMTEwLwYDVQQD
EyhiY2M0M2Y5Yjg1MjI1Y2ZlNDQ3ZmIzY2YyMTY0MGUwNTBmYTE4M2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ChVfYYdw5wJh88rQqV/5Fbdi9ea
44fVbfer7n5pkujvnxpQJBs0CuSXjT/4FJsLoBk3kMT1e5tYHxAQaxKm/XCr/gen
SW3ocNQApbnIAyGmzG7Qgp5n+notq62y+frH8kNBZnC/m0rnRzvrRJSodswXauyT
EhHj0NJFzFalyrppHsgILdb7B7XdafU3UzCQeEE4F7IOqkU1M/+4guyKsEQMxlYx
Co1c7A/U0kuPMKnvYoXYFQFSEhkabpTQTD7di3WU9rFpIe53D/qBPvWrpvBGw/mW
6A1seRgbsmxRdt8vIDT2e4XqyFcyUZviDAIe/gQ8Y+1XF5Odo7GpuygkswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzEP5uFIlz+RH+zzyFkDgUPoYPaMB8GA1UdIwQY
MBaAFL1K0hoKadwEHE4XcOsYukO22ynOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC82N2Y3MDctMDAwNi00NjlkLWIzMTEt
Y2RkNGQ4ZjhkMGQ5LzEvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC82N2Y3MDctMDAwNi00NjlkLWIzMTEtY2RkNGQ4ZjhkMGQ5
LzEvdlVyU0dncHAzQVFjVGhkdzZ4aTZRN2JiS2M0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASkOly9iu
tO5K3k7Hrtv72ANlyWwN145Vd6Gaz2LPsYCkVWZEew2wS9b2nH+R+rh4coYg0XCA
UvSbJE/Mfr7PPkJJExGoeNWUbBDycPgCqLPjDUn68N6n2ry/Xk2DRpzdzLVwQI86
kt/bSLThBIrFyd/dpMsqN/HF541hpJmFmccw9h97+Nl5kqHaj6+R81j23o1ohiEh
5QW5anZTPdzolh3tSc6oTJMV1HvYI2yu03u9CbIHhyGYvzDU31iWQOg4ua1Y/s4y
yikCWthfMihYO4ClnWmpcGsqYjTbtreMnUm/K/OjxPHi/VSQMc8ZzO6jf2EvqIbp
pbCGv//nycfuHA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:14:32 2025 by rpki-client