Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
File: vGY2Z5cyOLGE2e79NrvzgQukttk.mft (raw, json)
Hash identifier: Y4HEvkVD+vO2pEITqB68CKJfCebZYnRBqgV08USMx7g=
Subject key identifier: 4B:0A:CC:60:5E:14:FE:A2:A7:04:4D:6B:20:E1:7B:B3:A4:2F:33:AE
Authority key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
Certificate issuer: /CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Certificate serial: 0198D54E24AE25E148D654A223D06D9CE554
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
Manifest number: 1151
Signing time: Sat 23 Aug 2025 05:02:04 +0000
Manifest this update: Sat 23 Aug 2025 05:02:04 +0000
Manifest next update: Sun 24 Aug 2025 05:02:04 +0000
Files and hashes: 1: ig3YUnf06jRQJy2W3dYiO6rsejs.roa (hash: iYGiR2ToZxGUekv5mS+Li0t2IVpNRi9TVFKQBK+2Rl8=)
2: vGY2Z5cyOLGE2e79NrvzgQukttk.crl (hash: xYaUvGZBabIyIBmSHhiJzbE6rXd5O8ZkwDztlYAcEGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4e:24:ae:25:e1:48:d6:54:a2:23:d0:6d:9c:e5:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Validity
Not Before: Aug 23 05:02:04 2025 GMT
Not After : Aug 24 05:02:04 2025 GMT
Subject: CN=4b0acc605e14fea2a7044d6b20e17bb3a42f33ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:7c:e4:d2:44:a3:2e:ad:48:ac:2f:94:27:58:
70:10:e5:aa:f0:11:24:4f:ff:09:ba:d3:65:ca:ff:
26:c9:4b:4e:aa:51:8b:ad:ca:bb:2b:97:8a:d7:b6:
2c:c9:db:c8:67:a4:7e:ea:c0:f4:a0:fa:db:55:22:
b2:91:52:22:07:57:ff:0c:ae:a7:c1:27:4c:31:14:
78:02:ae:38:05:2c:e4:6b:81:ae:28:a7:89:7e:3d:
db:3c:3b:de:5a:50:61:f6:82:b9:df:01:40:fd:75:
b1:3a:27:2b:aa:50:35:13:77:60:d8:04:29:b2:83:
9e:7f:a5:a1:87:23:3b:01:df:7a:7f:dc:ca:01:96:
33:71:d7:ab:30:3d:f6:be:20:ed:19:e6:9b:26:d3:
6b:c1:8a:0a:03:5a:e7:60:4d:39:ca:45:47:fb:da:
b9:b7:4b:cd:5f:2e:b0:41:8c:79:04:1e:ff:83:6e:
17:bc:fa:15:66:df:4f:6a:5a:9b:74:64:eb:be:cf:
ba:c9:c0:04:1d:a9:55:e4:10:9b:17:b9:55:3b:2b:
1b:80:3d:11:5c:3e:0f:b6:4e:c0:fd:f7:ad:b6:45:
a8:b3:63:cf:97:da:c5:75:78:fa:ed:48:d0:34:0f:
34:1a:36:fe:4c:30:f7:c8:39:85:e3:0e:82:7e:57:
31:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:0A:CC:60:5E:14:FE:A2:A7:04:4D:6B:20:E1:7B:B3:A4:2F:33:AE
X509v3 Authority Key Identifier:
keyid:BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:01:0c:54:55:51:13:0e:4a:67:9a:af:cf:bb:bc:4f:f5:7c:
f1:3c:bb:3b:93:79:23:08:1e:85:0b:84:88:67:5c:30:eb:ab:
28:6a:8b:51:00:86:84:5e:80:78:93:fd:d3:aa:05:7c:e0:ae:
7d:3b:8d:03:b2:1a:e8:2f:45:f1:6c:b9:d6:39:26:df:c4:9e:
e9:f9:c4:48:99:4c:69:bb:91:67:a2:4d:c5:08:a1:8b:67:d9:
b2:9f:3a:3e:b0:5e:5a:ac:10:97:b4:1b:28:13:ed:fa:03:7a:
e1:e0:22:09:7f:fd:f2:70:03:81:2a:34:8d:31:ba:55:c7:0d:
e5:25:b5:0d:83:09:21:36:61:10:0c:66:56:eb:fc:71:c0:ef:
44:36:93:df:6b:a5:f2:46:d7:09:23:a5:3a:4d:5f:18:7a:bb:
81:6c:2f:ea:c2:bf:36:60:44:7d:3d:9b:61:1f:ea:f3:57:95:
f9:62:0e:ab:ca:97:af:3c:a4:20:0b:63:3b:05:43:06:20:fe:
5e:49:8d:1b:a4:7b:40:17:95:1c:48:80:e1:75:bb:d8:55:fc:
e6:51:c0:df:4d:d5:39:5b:f3:bd:1a:97:ad:d6:ae:6f:96:35:
c7:ff:08:94:28:3f:ba:bd:5b:77:de:64:8a:3a:31:9c:4e:e2:
ba:1b:c2:76
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTiSuJeFI1lSiI9BtnOVUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNjYzNjY3OTczMjM4YjE4NGQ5ZWVmZDM2YmJmMzgxMGJh
NGI2ZDkwHhcNMjUwODIzMDUwMjA0WhcNMjUwODI0MDUwMjA0WjAzMTEwLwYDVQQD
Eyg0YjBhY2M2MDVlMTRmZWEyYTcwNDRkNmIyMGUxN2JiM2E0MmYzM2FlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnzk0kSjLq1IrC+UJ1hwEOWq8BEk
T/8JutNlyv8myUtOqlGLrcq7K5eK17YsydvIZ6R+6sD0oPrbVSKykVIiB1f/DK6n
wSdMMRR4Aq44BSzka4GuKKeJfj3bPDveWlBh9oK53wFA/XWxOicrqlA1E3dg2AQp
soOef6WhhyM7Ad96f9zKAZYzcderMD32viDtGeabJtNrwYoKA1rnYE05ykVH+9q5
t0vNXy6wQYx5BB7/g24XvPoVZt9PalqbdGTrvs+6ycAEHalV5BCbF7lVOysbgD0R
XD4Ptk7A/fettkWos2PPl9rFdXj67UjQNA80Gjb+TDD3yDmF4w6CflcxEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEsKzGBeFP6ipwRNayDhe7OkLzOuMB8GA1UdIwQY
MBaAFLxmNmeXMjixhNnu/Ta784ELpLbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wYjk1MWEtOGU2Yy00NDQ1LTljMmQt
OWYwMGM3MjYyMGY2LzEvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wYjk1MWEtOGU2Yy00NDQ1LTljMmQtOWYwMGM3MjYyMGY2
LzEvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARgEMVFVR
Ew5KZ5qvz7u8T/V88Ty7O5N5IwgehQuEiGdcMOurKGqLUQCGhF6AeJP906oFfOCu
fTuNA7Ia6C9F8Wy51jkm38Se6fnESJlMabuRZ6JNxQihi2fZsp86PrBeWqwQl7Qb
KBPt+gN64eAiCX/98nADgSo0jTG6VccN5SW1DYMJITZhEAxmVuv8ccDvRDaT32ul
8kbXCSOlOk1fGHq7gWwv6sK/NmBEfT2bYR/q81eV+WIOq8qXrzykIAtjOwVDBiD+
XkmNG6R7QBeVHEiA4XW72FX85lHA303VOVvzvRqXrdaub5Y1x/8IlCg/ur1bd95k
ijoxnE7iuhvCdg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 15:28:31 2025 by rpki-client