Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
File: vZLq6eEWmeTOcQWAUZd2wwApYWI.mft (raw, json)
Hash identifier: yLnc1ntP4aNPoIuOu+XOaJvx40eMbpsfWQc5KtjZsAY=
Subject key identifier: 08:59:42:93:DB:BF:A4:8E:76:E1:DA:9A:D1:E4:85:4F:2F:C9:A9:87
Authority key identifier: BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
Certificate issuer: /CN=bd92eae9e11699e4ce710580519776c300296162
Certificate serial: 0197B70E7E1BC43EE94A89F0927132F959C6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 15:01:09 +0000
Manifest this update: Sat 28 Jun 2025 15:01:09 +0000
Manifest next update: Sun 29 Jun 2025 15:01:09 +0000
Files and hashes: 1: 1-usx18zg0vXovZ69VA6wMJG1snQ.roa (hash: cCydz0/7urXRQoQLYjIuxn5IDBNQFz8a/SIpL/HwR48=)
2: vZLq6eEWmeTOcQWAUZd2wwApYWI.crl (hash: qsFw8X4PdyPRofy9yYYdXzDgJ24HzQpbJTcAgJv3J5M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:7e:1b:c4:3e:e9:4a:89:f0:92:71:32:f9:59:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd92eae9e11699e4ce710580519776c300296162
Validity
Not Before: Jun 28 15:01:09 2025 GMT
Not After : Jun 29 15:01:09 2025 GMT
Subject: CN=08594293dbbfa48e76e1da9ad1e4854f2fc9a987
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:f8:e1:5d:a9:a4:7e:f5:2c:35:bc:2c:28:46:
92:41:e8:c3:43:9f:75:31:12:0d:9e:e3:59:68:89:
19:3d:db:33:d7:8d:e7:ae:59:28:f2:f3:df:f1:9d:
45:c0:f7:50:14:44:58:73:83:2f:6c:75:15:b8:39:
45:2a:f3:7e:19:85:32:9c:99:7a:b0:d0:dd:2f:f7:
d2:8b:73:88:69:5e:1d:ec:d2:41:6f:27:bd:d9:1b:
d1:54:64:f0:9c:a6:e9:f0:8a:8d:39:94:cd:ce:7e:
9d:74:62:e7:07:c9:b5:d3:37:2f:f4:9e:88:37:e2:
94:4e:54:63:4c:6a:1c:cc:80:34:42:94:09:82:20:
26:c3:5e:cb:6d:6f:1d:b1:29:9d:9f:65:a6:23:9b:
60:91:91:25:30:05:8f:7b:24:ed:84:31:9c:7a:b8:
8b:00:4b:d1:d7:57:8a:26:9f:cc:45:66:78:20:da:
bc:d0:86:e3:a7:77:3e:a8:e2:3c:a6:10:34:be:6e:
dd:cb:9b:b7:f5:f5:db:65:23:6a:47:ac:cd:ea:d4:
71:50:65:19:14:10:33:29:17:d4:ac:ef:84:f3:67:
b0:ef:76:ee:e3:86:3f:ad:6a:c1:bf:cc:a3:e4:51:
97:4e:9d:02:2a:fb:4c:1e:d8:08:a0:14:6a:09:87:
1f:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
08:59:42:93:DB:BF:A4:8E:76:E1:DA:9A:D1:E4:85:4F:2F:C9:A9:87
X509v3 Authority Key Identifier:
keyid:BD:92:EA:E9:E1:16:99:E4:CE:71:05:80:51:97:76:C3:00:29:61:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZLq6eEWmeTOcQWAUZd2wwApYWI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/47d213-26da-471a-96cd-c8a9caa3bbe9/1/vZLq6eEWmeTOcQWAUZd2wwApYWI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:2a:bf:50:c0:89:00:97:2b:a7:9c:69:32:fb:08:92:2f:2f:
83:15:64:58:bf:6a:34:97:02:b8:f4:96:08:ce:d6:6a:6a:fb:
a8:36:10:79:ce:e0:31:ef:86:8c:4f:53:6f:e8:44:4f:1b:ed:
f2:13:a1:00:42:34:db:ec:f2:2f:5c:74:31:70:c3:e2:87:52:
8f:a1:b2:92:aa:a6:5b:1b:94:68:f5:00:0e:df:c9:63:7a:1e:
67:49:33:2e:19:1d:02:dc:d7:c0:b5:03:d6:72:3a:ba:d1:fc:
02:6d:4b:0e:2a:21:b4:65:2a:0e:cc:4b:10:88:75:97:c4:04:
66:05:e5:34:19:3f:0b:da:97:15:94:6a:ac:a1:49:5b:bb:c2:
0f:68:9c:00:02:b4:e6:06:ec:bc:41:ce:f3:c2:ff:c7:09:7f:
b5:be:aa:56:f8:50:cf:49:63:9a:cf:cb:92:e6:3e:0f:4f:ec:
7e:eb:3f:68:61:93:b5:03:8c:27:4d:d7:0d:69:0c:60:5b:1a:
ea:cf:6c:91:d6:a3:09:9e:36:34:ba:a3:7a:72:03:97:73:bd:
1e:e2:66:3c:19:88:3e:05:56:00:b4:80:4a:b2:73:7a:0d:9b:
48:2e:f4:17:a8:4e:39:33:23:29:8a:b1:43:c2:9a:6a:d0:e8:
dd:a2:2d:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dn4bxD7pSonwknEy+VnGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTJlYWU5ZTExNjk5ZTRjZTcxMDU4MDUxOTc3NmMzMDAy
OTYxNjIwHhcNMjUwNjI4MTUwMTA5WhcNMjUwNjI5MTUwMTA5WjAzMTEwLwYDVQQD
EygwODU5NDI5M2RiYmZhNDhlNzZlMWRhOWFkMWU0ODU0ZjJmYzlhOTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr/jhXamkfvUsNbwsKEaSQejDQ591
MRINnuNZaIkZPdsz143nrlko8vPf8Z1FwPdQFERYc4MvbHUVuDlFKvN+GYUynJl6
sNDdL/fSi3OIaV4d7NJBbye92RvRVGTwnKbp8IqNOZTNzn6ddGLnB8m10zcv9J6I
N+KUTlRjTGoczIA0QpQJgiAmw17LbW8dsSmdn2WmI5tgkZElMAWPeyTthDGceriL
AEvR11eKJp/MRWZ4INq80Ibjp3c+qOI8phA0vm7dy5u39fXbZSNqR6zN6tRxUGUZ
FBAzKRfUrO+E82ew73bu44Y/rWrBv8yj5FGXTp0CKvtMHtgIoBRqCYcfLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAhZQpPbv6SOduHamtHkhU8vyamHMB8GA1UdIwQY
MBaAFL2S6unhFpnkznEFgFGXdsMAKWFiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOC80N2QyMTMtMjZkYS00NzFhLTk2Y2Qt
YzhhOWNhYTNiYmU5LzEvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOC80N2QyMTMtMjZkYS00NzFhLTk2Y2QtYzhhOWNhYTNiYmU5
LzEvdlpMcTZlRVdtZVRPY1FXQVVaZDJ3d0FwWVdJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALSq/UMCJ
AJcrp5xpMvsIki8vgxVkWL9qNJcCuPSWCM7Wamr7qDYQec7gMe+GjE9Tb+hETxvt
8hOhAEI02+zyL1x0MXDD4odSj6GykqqmWxuUaPUADt/JY3oeZ0kzLhkdAtzXwLUD
1nI6utH8Am1LDiohtGUqDsxLEIh1l8QEZgXlNBk/C9qXFZRqrKFJW7vCD2icAAK0
5gbsvEHO88L/xwl/tb6qVvhQz0ljms/LkuY+D0/sfus/aGGTtQOMJ03XDWkMYFsa
6s9skdajCZ42NLqjenIDl3O9HuJmPBmIPgVWALSASrJzeg2bSC70F6hOOTMjKYqx
Q8KaatDo3aIt6A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:24:30 2025 by rpki-client