Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier: O8h9yXYkVu8Q8UjrC+gHOguKFJJKKiwQR+RINboMwO0=
Subject key identifier: D0:F5:40:56:B2:DA:21:BD:66:F5:88:B3:1B:8D:D6:54:1C:63:80:7D
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial: 0197B77C42BB382B1DA0933996C68835C064
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number: 0482
Signing time: Sat 28 Jun 2025 17:01:03 +0000
Manifest this update: Sat 28 Jun 2025 17:01:03 +0000
Manifest next update: Sun 29 Jun 2025 17:01:03 +0000
Files and hashes: 1: G_IYoZfZUxFUxoKj63LyULDLjWc.roa (hash: p32xiHa5RLyOZriAfbie5PUear7BZRAYgBWelDYnr3o=)
2: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (hash: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=)
3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: MIk08v/Gn6QM66E4Y4+neKuibvsjjfqnTCMKzrvHU2s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 17:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:42:bb:38:2b:1d:a0:93:39:96:c6:88:35:c0:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Validity
Not Before: Jun 28 17:01:03 2025 GMT
Not After : Jun 29 17:01:03 2025 GMT
Subject: CN=d0f54056b2da21bd66f588b31b8dd6541c63807d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:da:04:82:82:f1:c9:b0:12:67:8a:e2:65:6f:
dd:41:e2:e7:0c:35:ed:bb:a3:de:6b:46:01:d5:ee:
54:f5:cc:b4:89:c7:74:15:c6:1e:05:50:ee:29:80:
27:42:52:c8:ae:d6:e6:36:8b:38:10:50:e8:7a:0e:
9a:e7:59:bb:70:55:58:24:77:b7:e3:b3:bf:2f:21:
01:8b:96:f0:28:11:eb:9b:e9:e2:1a:3f:c7:3d:dc:
22:59:f6:7e:f2:f0:f3:a1:be:0a:65:17:62:46:b3:
49:72:8a:a6:0a:eb:f0:16:b3:54:74:dd:5e:b0:e5:
e2:f5:c6:35:5a:b8:ce:8f:0d:5b:00:7d:08:21:41:
1e:5c:95:05:ef:34:63:e2:11:42:65:a2:ec:cd:3a:
4f:8b:f4:d1:86:a3:f0:1e:1e:44:94:cf:cd:01:66:
51:be:b7:ef:5e:12:08:a1:8c:86:ea:45:d1:45:f1:
ed:bc:fc:eb:68:ad:71:ba:c7:98:29:05:84:e2:49:
df:61:84:48:30:21:2f:27:2c:3b:d0:6b:e5:81:55:
ca:cc:fc:61:c6:7d:0e:b8:20:e5:23:8d:a2:73:b3:
65:32:43:fe:3f:ac:29:8e:a9:b6:25:d8:31:5b:d6:
b4:cc:5a:32:00:92:81:89:8b:6d:90:a4:68:56:e0:
3b:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:F5:40:56:B2:DA:21:BD:66:F5:88:B3:1B:8D:D6:54:1C:63:80:7D
X509v3 Authority Key Identifier:
keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6b:28:7a:c4:ae:51:eb:b9:52:f5:a2:a1:34:ae:a1:8a:9d:
38:06:59:af:75:aa:dd:26:65:98:97:1c:2e:94:91:7e:f9:64:
f5:d5:99:b8:55:db:5b:f4:8e:db:4c:28:3a:43:7f:25:ad:30:
33:86:f6:8e:0f:f6:e6:e3:6e:81:dc:ff:36:d6:a9:04:5d:40:
ed:54:3f:86:e6:0f:58:67:88:82:be:06:8b:31:8b:2b:3d:5f:
46:98:22:75:6b:65:03:87:55:d6:7f:4e:41:77:ce:d2:50:0d:
13:b3:eb:c4:64:6e:c6:32:10:c7:a1:18:69:76:fe:08:87:a9:
69:2e:30:f6:ad:5d:a2:6e:f3:95:b2:ad:41:66:82:a1:6b:48:
db:f5:35:64:d4:94:c0:6d:ed:3a:a7:6b:53:01:21:3c:e2:87:
3f:78:8e:3f:17:68:2b:81:74:db:a1:d2:12:8b:4f:7b:64:85:
f3:4e:9e:be:4c:12:57:03:a8:07:df:b9:3c:09:ae:8c:b5:0e:
4e:5f:e1:26:31:e3:62:b9:2e:62:89:b6:47:f5:d1:62:45:e6:
b4:9a:6e:05:af:7f:59:eb:82:2b:4b:a3:ee:fa:04:d7:c1:fc:
dd:20:71:f7:bd:1a:1c:3a:63:da:f1:a1:68:e1:7d:11:8b:fa:
96:6d:ca:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fEK7OCsdoJM5lsaINcBkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNWMwODMyM2FjMjdhYjY1NTNhNWE2OWE3M2E1OGY4MDI0
MjNkNjgwHhcNMjUwNjI4MTcwMTAzWhcNMjUwNjI5MTcwMTAzWjAzMTEwLwYDVQQD
EyhkMGY1NDA1NmIyZGEyMWJkNjZmNTg4YjMxYjhkZDY1NDFjNjM4MDdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA09oEgoLxybASZ4riZW/dQeLnDDXt
u6Pea0YB1e5U9cy0icd0FcYeBVDuKYAnQlLIrtbmNos4EFDoeg6a51m7cFVYJHe3
47O/LyEBi5bwKBHrm+niGj/HPdwiWfZ+8vDzob4KZRdiRrNJcoqmCuvwFrNUdN1e
sOXi9cY1WrjOjw1bAH0IIUEeXJUF7zRj4hFCZaLszTpPi/TRhqPwHh5ElM/NAWZR
vrfvXhIIoYyG6kXRRfHtvPzraK1xuseYKQWE4knfYYRIMCEvJyw70GvlgVXKzPxh
xn0OuCDlI42ic7NlMkP+P6wpjqm2JdgxW9a0zFoyAJKBiYttkKRoVuA71wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFND1QFay2iG9ZvWIsxuN1lQcY4B9MB8GA1UdIwQY
MBaAFL1cCDI6wnq2VTpaaac6WPgCQj1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMt
NDY0MWFiNmU0YmZiLzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMtNDY0MWFiNmU0YmZi
LzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEGsoesSu
Ueu5UvWioTSuoYqdOAZZr3Wq3SZlmJccLpSRfvlk9dWZuFXbW/SO20woOkN/Ja0w
M4b2jg/25uNugdz/NtapBF1A7VQ/huYPWGeIgr4GizGLKz1fRpgidWtlA4dV1n9O
QXfO0lANE7PrxGRuxjIQx6EYaXb+CIepaS4w9q1dom7zlbKtQWaCoWtI2/U1ZNSU
wG3tOqdrUwEhPOKHP3iOPxdoK4F026HSEotPe2SF806evkwSVwOoB9+5PAmujLUO
Tl/hJjHjYrkuYom2R/XRYkXmtJpuBa9/WeuCK0uj7voE18H83SBx970aHDpj2vGh
aOF9EYv6lm3KZg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:49:25 2025 by rpki-client