Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
File: vJldFVAngKzfe25qGGXttaDn3Es.mft (raw, json)
Hash identifier: HobbtSMCdnbpFFgs4/D+E3Lcw/gWtmVgY75/lzmET6I=
Subject key identifier: 5E:F8:60:99:4B:E7:0F:CD:C0:FF:32:FA:70:00:90:45:42:53:80:E7
Authority key identifier: BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
Certificate issuer: /CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Certificate serial: 0197B70EC2D8942A66B8C1424267C6B6DEAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
Manifest number: 036A
Signing time: Sat 28 Jun 2025 15:01:27 +0000
Manifest this update: Sat 28 Jun 2025 15:01:27 +0000
Manifest next update: Sun 29 Jun 2025 15:01:27 +0000
Files and hashes: 1: vJldFVAngKzfe25qGGXttaDn3Es.crl (hash: Z+r6KaBovZzwsEomo+/cE8jcDcjtfaaMP18WilvIGB4=)
2: ylPOOnSs52DARSEahPLXBl4_KnA.roa (hash: lVDEfOqJ+hS5o1tAWzlyu4ZG8E1RuFvF7CBIziXEhTM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:c2:d8:94:2a:66:b8:c1:42:42:67:c6:b6:de:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc995d15502780acdf7b6e6a1865edb5a0e7dc4b
Validity
Not Before: Jun 28 15:01:27 2025 GMT
Not After : Jun 29 15:01:27 2025 GMT
Subject: CN=5ef860994be70fcdc0ff32fa70009045425380e7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:2c:cc:31:c0:56:e9:d3:30:6a:61:7c:bf:51:
e4:ab:18:f5:e2:c1:75:61:71:8d:a9:70:59:dd:9a:
34:0b:ff:14:01:e8:b1:8d:47:7d:7d:03:d4:aa:54:
2e:c7:f5:8b:3b:df:80:e4:37:17:d1:b6:89:5f:e2:
ed:97:af:2d:1c:7d:0a:1d:30:fa:ab:7f:bb:4b:50:
79:df:5c:87:fa:98:74:91:51:73:ac:23:a6:de:f7:
00:b9:c6:03:c0:06:e5:ee:94:92:f8:e0:f2:31:c0:
65:81:5a:fe:32:79:b3:f4:2b:39:ef:46:0e:43:20:
47:8f:0a:d7:d5:49:c7:34:81:74:be:7d:c7:bc:de:
70:c4:c9:9d:57:5c:69:49:33:b5:27:bd:00:f5:d3:
09:03:34:b6:e9:81:d8:85:3c:5d:6a:90:98:b8:30:
5f:15:b8:c7:f4:2c:70:c7:c3:22:40:2d:ac:7d:11:
bf:36:5b:55:83:72:37:a0:27:8a:c1:36:de:b9:d8:
e5:4c:a4:2f:d2:fb:e4:24:1a:93:94:29:10:ab:07:
c2:fb:84:cf:4a:e1:b8:d6:a8:1f:32:61:66:8e:c1:
d4:c8:36:4f:14:ad:e0:17:51:e0:f1:72:00:34:a4:
0e:a6:73:1b:10:93:ad:6c:33:e7:b3:2b:b5:d5:c4:
eb:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:F8:60:99:4B:E7:0F:CD:C0:FF:32:FA:70:00:90:45:42:53:80:E7
X509v3 Authority Key Identifier:
keyid:BC:99:5D:15:50:27:80:AC:DF:7B:6E:6A:18:65:ED:B5:A0:E7:DC:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJldFVAngKzfe25qGGXttaDn3Es.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ba/044350-8cc9-486d-87c9-572c4e129d32/1/vJldFVAngKzfe25qGGXttaDn3Es.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:2c:89:70:7e:8e:04:24:24:c3:59:80:3b:99:34:01:2b:1b:
e7:ce:78:b4:96:3a:e5:d8:e0:7f:42:3c:d1:a2:95:b5:66:b7:
6e:9f:43:30:6c:eb:40:61:16:22:f8:63:f4:5d:49:3b:58:b1:
7d:4d:89:cc:a7:f7:25:20:00:83:24:49:2a:a4:56:de:fd:b4:
f9:61:02:3f:f7:09:1e:0b:07:e5:c1:20:d2:81:cb:f4:2b:dc:
00:fb:dd:ce:48:53:a9:c5:61:bc:93:ec:5d:2c:df:19:db:f9:
21:af:8b:08:e5:3e:43:2f:b6:29:64:aa:e3:ac:8d:b9:f3:83:
df:0b:63:e1:94:ca:18:34:23:1f:aa:92:73:db:62:25:2f:96:
4d:c8:be:65:fb:6c:35:70:e6:7f:0a:90:56:39:d5:35:2e:54:
45:53:af:95:7b:60:b8:23:93:3e:17:4b:44:03:62:40:bc:9b:
db:14:dd:30:42:03:5a:e1:a8:01:43:d3:02:2c:17:ea:b4:14:
fa:6e:f6:f8:da:f5:bd:af:6a:82:f9:7f:48:99:e2:3e:88:e0:
95:5d:0d:2d:c1:31:ad:64:bc:91:e6:89:2c:1d:c3:98:10:da:
06:f4:0e:16:64:9a:0c:33:0f:57:44:7e:12:cd:97:55:4e:20:
3a:83:f8:8b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DsLYlCpmuMFCQmfGtt6qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOTk1ZDE1NTAyNzgwYWNkZjdiNmU2YTE4NjVlZGI1YTBl
N2RjNGIwHhcNMjUwNjI4MTUwMTI3WhcNMjUwNjI5MTUwMTI3WjAzMTEwLwYDVQQD
Eyg1ZWY4NjA5OTRiZTcwZmNkYzBmZjMyZmE3MDAwOTA0NTQyNTM4MGU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoyzMMcBW6dMwamF8v1Hkqxj14sF1
YXGNqXBZ3Zo0C/8UAeixjUd9fQPUqlQux/WLO9+A5DcX0baJX+Ltl68tHH0KHTD6
q3+7S1B531yH+ph0kVFzrCOm3vcAucYDwAbl7pSS+ODyMcBlgVr+Mnmz9Cs570YO
QyBHjwrX1UnHNIF0vn3HvN5wxMmdV1xpSTO1J70A9dMJAzS26YHYhTxdapCYuDBf
FbjH9Cxwx8MiQC2sfRG/NltVg3I3oCeKwTbeudjlTKQv0vvkJBqTlCkQqwfC+4TP
SuG41qgfMmFmjsHUyDZPFK3gF1Hg8XIANKQOpnMbEJOtbDPnsyu11cTr2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF74YJlL5w/NwP8y+nAAkEVCU4DnMB8GA1UdIwQY
MBaAFLyZXRVQJ4Cs33tuahhl7bWg59xLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkpsZEZWQW5nS3pmZTI1cUdHWHR0YURuM0VzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYS8wNDQzNTAtOGNjOS00ODZkLTg3Yzkt
NTcyYzRlMTI5ZDMyLzEvdkpsZEZWQW5nS3pmZTI1cUdHWHR0YURuM0VzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYS8wNDQzNTAtOGNjOS00ODZkLTg3YzktNTcyYzRlMTI5ZDMy
LzEvdkpsZEZWQW5nS3pmZTI1cUdHWHR0YURuM0VzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPSyJcH6O
BCQkw1mAO5k0ASsb5854tJY65djgf0I80aKVtWa3bp9DMGzrQGEWIvhj9F1JO1ix
fU2JzKf3JSAAgyRJKqRW3v20+WECP/cJHgsH5cEg0oHL9CvcAPvdzkhTqcVhvJPs
XSzfGdv5Ia+LCOU+Qy+2KWSq46yNufOD3wtj4ZTKGDQjH6qSc9tiJS+WTci+Zfts
NXDmfwqQVjnVNS5URVOvlXtguCOTPhdLRANiQLyb2xTdMEIDWuGoAUPTAiwX6rQU
+m72+Nr1va9qgvl/SJniPojglV0NLcExrWS8keaJLB3DmBDaBvQOFmSaDDMPV0R+
Es2XVU4gOoP4iw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:09 2025 by rpki-client