Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
File: vTvLhii9vq2xlKI1rEuMi3EeN9E.mft (raw, json)
Hash identifier: bzYADDGkzFVjDzmRAmONyFnTA7qbJF14/VERTtBCqDQ=
Subject key identifier: D7:DF:06:43:CF:FB:BA:B1:48:76:3B:21:0A:86:AC:3F:19:AD:62:8B
Authority key identifier: BD:3B:CB:86:28:BD:BE:AD:B1:94:A2:35:AC:4B:8C:8B:71:1E:37:D1
Certificate issuer: /CN=bd3bcb8628bdbeadb194a235ac4b8c8b711e37d1
Certificate serial: 0197B6A206DE38C7ABC930ACA085640F3357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
Manifest number: 0A6F
Signing time: Sat 28 Jun 2025 13:02:41 +0000
Manifest this update: Sat 28 Jun 2025 13:02:41 +0000
Manifest next update: Sun 29 Jun 2025 13:02:41 +0000
Files and hashes: 1: bW-fv4_NbG1PNojUcPp0YRQIoB0.roa (hash: 7Z5rf32BgI6fjeUEiIFvBelYmcDYWIutC0cfXs7YxV4=)
2: vTvLhii9vq2xlKI1rEuMi3EeN9E.crl (hash: ABQp8s/+/ORtnu09f+7huXoTJ+7YntwhcwDs3FZd14Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:06:de:38:c7:ab:c9:30:ac:a0:85:64:0f:33:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd3bcb8628bdbeadb194a235ac4b8c8b711e37d1
Validity
Not Before: Jun 28 13:02:41 2025 GMT
Not After : Jun 29 13:02:41 2025 GMT
Subject: CN=d7df0643cffbbab148763b210a86ac3f19ad628b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:f9:68:35:ff:f1:50:15:ba:d1:77:49:34:be:
a4:60:d6:50:05:0e:29:11:b2:a7:61:23:7a:37:28:
29:d7:ec:68:c3:ec:76:ec:73:55:f4:03:95:ad:dc:
a6:a8:f6:9d:b0:38:02:65:a8:8e:be:3b:9f:e9:07:
30:00:e6:11:b8:e5:41:db:cf:30:a7:ca:e3:5b:6e:
95:01:c7:6b:3b:f5:3f:1c:24:c3:d4:3b:f0:de:31:
a1:30:8d:61:ec:39:e7:3d:e5:ea:92:2e:a3:82:bd:
60:63:8b:68:51:5c:7c:e3:d8:ae:08:66:cd:69:f6:
13:89:71:c1:e4:7f:df:5d:ec:30:c4:45:5b:0f:b0:
aa:29:8d:2b:23:9c:6e:9f:9b:9a:41:62:4e:39:82:
58:c4:55:01:97:fd:46:7c:11:dd:94:08:fa:6d:c6:
98:99:5e:4f:b9:2f:ce:3f:16:c0:89:b9:c3:3a:2b:
a9:b9:30:ff:a0:b3:c6:57:96:34:fe:f2:27:e1:ce:
a5:59:56:63:ac:3e:4e:30:d6:6b:9f:fa:52:be:45:
e6:5a:a1:87:d2:46:7f:82:68:81:6a:ee:5f:3d:e6:
f0:7f:45:b8:44:55:f9:07:b1:25:c4:ed:52:18:a8:
e5:aa:21:fb:5d:4b:1d:3c:76:38:19:6c:6c:37:ac:
83:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:DF:06:43:CF:FB:BA:B1:48:76:3B:21:0A:86:AC:3F:19:AD:62:8B
X509v3 Authority Key Identifier:
keyid:BD:3B:CB:86:28:BD:BE:AD:B1:94:A2:35:AC:4B:8C:8B:71:1E:37:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vTvLhii9vq2xlKI1rEuMi3EeN9E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/28c2b7-667e-4def-b415-7b4adeb7a4b5/1/vTvLhii9vq2xlKI1rEuMi3EeN9E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:2c:c9:2f:d7:ce:c2:3a:d5:99:62:26:74:c1:bf:4f:92:3f:
c1:ef:40:0e:82:46:8c:8b:62:f1:c1:7e:af:d1:28:cd:fe:73:
f1:16:e0:4f:3b:cd:7c:a4:69:ae:ec:51:77:24:53:9d:c5:86:
b2:58:bd:18:fe:4c:c0:7c:b9:2c:5c:78:42:7a:8b:80:dc:86:
b6:c5:a4:ea:91:d0:6b:80:e2:5d:01:e9:06:3c:f2:18:20:46:
86:0a:7a:e1:9b:f1:be:16:f2:d4:c2:21:00:21:cf:be:3f:70:
54:d3:ec:0e:3c:d6:44:92:f6:37:a0:cf:9f:b1:33:b7:61:49:
a9:69:1a:f2:84:37:17:45:32:95:65:fb:a4:69:3c:56:97:bb:
82:9e:d3:b1:69:42:45:04:4c:f0:7e:8d:5f:d9:32:b0:30:4f:
22:7a:3c:7d:de:9f:da:52:43:e3:f9:5b:b1:3f:b5:4c:d7:62:
20:6c:97:dc:fa:6e:98:d5:cc:06:c7:68:47:65:31:c9:3c:70:
aa:81:65:8e:ef:4b:3e:e1:e3:98:30:d4:ea:d5:b2:21:b5:42:
19:33:c2:1f:9e:89:6f:41:d8:14:e1:57:78:5c:89:29:aa:25:
0d:9b:60:2a:09:04:95:d7:5f:54:9d:f9:71:d0:cb:3a:a3:cc:
af:7a:6b:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ogbeOMeryTCsoIVkDzNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkM2JjYjg2MjhiZGJlYWRiMTk0YTIzNWFjNGI4YzhiNzEx
ZTM3ZDEwHhcNMjUwNjI4MTMwMjQxWhcNMjUwNjI5MTMwMjQxWjAzMTEwLwYDVQQD
EyhkN2RmMDY0M2NmZmJiYWIxNDg3NjNiMjEwYTg2YWMzZjE5YWQ2MjhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApfloNf/xUBW60XdJNL6kYNZQBQ4p
EbKnYSN6Nygp1+xow+x27HNV9AOVrdymqPadsDgCZaiOvjuf6QcwAOYRuOVB288w
p8rjW26VAcdrO/U/HCTD1Dvw3jGhMI1h7DnnPeXqki6jgr1gY4toUVx849iuCGbN
afYTiXHB5H/fXewwxEVbD7CqKY0rI5xun5uaQWJOOYJYxFUBl/1GfBHdlAj6bcaY
mV5PuS/OPxbAibnDOiupuTD/oLPGV5Y0/vIn4c6lWVZjrD5OMNZrn/pSvkXmWqGH
0kZ/gmiBau5fPebwf0W4RFX5B7ElxO1SGKjlqiH7XUsdPHY4GWxsN6yDGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNffBkPP+7qxSHY7IQqGrD8ZrWKLMB8GA1UdIwQY
MBaAFL07y4Yovb6tsZSiNaxLjItxHjfRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlR2TGhpaTl2cTJ4bEtJMXJFdU1pM0VlTjlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yOGMyYjctNjY3ZS00ZGVmLWI0MTUt
N2I0YWRlYjdhNGI1LzEvdlR2TGhpaTl2cTJ4bEtJMXJFdU1pM0VlTjlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yOGMyYjctNjY3ZS00ZGVmLWI0MTUtN2I0YWRlYjdhNGI1
LzEvdlR2TGhpaTl2cTJ4bEtJMXJFdU1pM0VlTjlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEizJL9fO
wjrVmWImdMG/T5I/we9ADoJGjIti8cF+r9Eozf5z8RbgTzvNfKRpruxRdyRTncWG
sli9GP5MwHy5LFx4QnqLgNyGtsWk6pHQa4DiXQHpBjzyGCBGhgp64Zvxvhby1MIh
ACHPvj9wVNPsDjzWRJL2N6DPn7Ezt2FJqWka8oQ3F0UylWX7pGk8Vpe7gp7TsWlC
RQRM8H6NX9kysDBPIno8fd6f2lJD4/lbsT+1TNdiIGyX3PpumNXMBsdoR2UxyTxw
qoFlju9LPuHjmDDU6tWyIbVCGTPCH56Jb0HYFOFXeFyJKaolDZtgKgkElddfVJ35
cdDLOqPMr3preA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:19:21 2025 by rpki-client