Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
File: bVVebBS5TXVtk6g6UCx_FXf5r0k.mft (raw, json)
Hash identifier: tsrebz9rGl4NOaoPpR5pCBW+civKlAvoq4ZUiv+gcnE=
Subject key identifier: A7:67:67:B5:5C:E5:53:BD:6B:E7:8A:80:25:DD:B6:27:C3:02:A6:3A
Authority key identifier: 6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
Certificate issuer: /CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Certificate serial: 01984A0A5EDDC1397CB613D16FE80E5F9969
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
Manifest number: 095A
Signing time: Sun 27 Jul 2025 04:00:50 +0000
Manifest this update: Sun 27 Jul 2025 04:00:50 +0000
Manifest next update: Mon 28 Jul 2025 04:00:50 +0000
Files and hashes: 1: _XpEMn72FeEctOAcMkQobteNSkY.roa (hash: bnxUUX45W8TpYP9Drk2/xMaW53mScgsvGUmVXogbW1Q=)
2: bVVebBS5TXVtk6g6UCx_FXf5r0k.crl (hash: FkQepCE/kftA2dnLGEMuwEdxTubSWz8obozKcARSkF4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:0a:5e:dd:c1:39:7c:b6:13:d1:6f:e8:0e:5f:99:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d555e6c14b94d756d93a83a502c7f1577f9af49
Validity
Not Before: Jul 27 04:00:50 2025 GMT
Not After : Jul 28 04:00:50 2025 GMT
Subject: CN=a76767b55ce553bd6be78a8025ddb627c302a63a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:ad:7c:44:f0:75:19:2b:10:3b:53:df:61:45:
87:8d:d1:87:7c:c9:b1:36:21:13:8f:7e:ed:dc:28:
6f:cf:bf:d4:ba:f0:95:60:c3:8e:0a:cc:6d:78:91:
5a:08:36:b2:27:18:65:d6:75:93:fa:b5:54:7f:01:
37:a2:ff:ff:3c:d2:e9:97:3a:7a:d7:73:03:76:25:
d2:5a:e0:57:9d:04:6b:89:58:29:6e:2c:96:02:4e:
cb:48:eb:b2:01:61:11:50:83:f7:8b:4b:63:db:15:
ec:57:54:90:bf:2c:b3:72:bb:4e:47:91:e6:ab:87:
ed:b2:9d:2d:d1:2e:09:81:fc:af:ca:28:a8:9c:b4:
ea:2a:26:93:a4:2d:d1:45:d7:b2:ad:ba:3e:01:2b:
f1:eb:40:09:80:0e:00:be:d1:8d:ce:51:28:3d:da:
81:64:ef:a7:42:13:18:0b:c4:9c:07:db:ad:84:d5:
80:56:7d:06:3a:55:01:f2:91:60:8a:15:32:25:35:
5c:bf:93:62:c4:e0:6a:12:cb:23:6c:a5:5d:7d:e9:
8f:a5:eb:7e:d7:f6:a1:c2:19:be:5d:ff:e1:37:be:
db:59:16:d3:ba:db:5b:c1:7c:99:69:6b:84:a8:52:
26:71:c9:2a:79:a6:28:d7:94:c0:46:c2:a0:4a:a7:
eb:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:67:67:B5:5C:E5:53:BD:6B:E7:8A:80:25:DD:B6:27:C3:02:A6:3A
X509v3 Authority Key Identifier:
keyid:6D:55:5E:6C:14:B9:4D:75:6D:93:A8:3A:50:2C:7F:15:77:F9:AF:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bVVebBS5TXVtk6g6UCx_FXf5r0k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/a32567-780f-4509-b710-97eaf9aa786f/1/bVVebBS5TXVtk6g6UCx_FXf5r0k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:4d:27:85:80:4a:46:16:78:00:37:2b:db:de:f9:a9:66:d9:
2b:62:16:63:9c:66:2c:1b:18:87:d1:86:69:9e:51:37:03:26:
cc:4d:89:00:f0:44:96:54:12:f1:d4:47:2b:4d:b6:02:97:9d:
db:ea:6f:df:aa:06:f8:56:2c:78:dd:93:22:64:9a:c8:0e:10:
e9:30:ef:56:f1:db:27:b6:a4:7e:52:c8:97:21:e0:24:0d:5d:
41:65:5d:c7:ae:52:6a:ee:76:dd:3b:41:7b:66:7c:64:fb:a1:
2c:14:8b:38:47:4d:24:3c:90:4d:e9:6b:d5:78:af:a3:1c:68:
0d:09:36:d6:47:9b:7e:70:c2:90:c7:a7:0a:19:62:2e:ce:3d:
38:c8:38:47:8b:21:e0:3c:f0:ae:97:2c:be:d8:11:bd:05:76:
89:0b:b9:cf:a7:8c:fa:ae:2d:0e:5e:76:ca:2a:f0:ff:c4:c6:
48:ac:c2:84:ad:77:d6:78:03:74:27:07:c1:0c:8c:21:8c:da:
92:5a:aa:0b:d0:c5:c5:64:1f:f5:c7:99:93:58:df:4f:69:d0:
52:f2:01:8c:7a:ad:86:26:c6:0a:5e:fa:93:4c:d7:22:f9:39:
ef:70:b4:16:5c:8c:92:39:b0:07:cd:28:ab:9b:a0:8e:7b:d9:
00:df:be:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKCl7dwTl8thPRb+gOX5lpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkNTU1ZTZjMTRiOTRkNzU2ZDkzYTgzYTUwMmM3ZjE1Nzdm
OWFmNDkwHhcNMjUwNzI3MDQwMDUwWhcNMjUwNzI4MDQwMDUwWjAzMTEwLwYDVQQD
EyhhNzY3NjdiNTVjZTU1M2JkNmJlNzhhODAyNWRkYjYyN2MzMDJhNjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjK18RPB1GSsQO1PfYUWHjdGHfMmx
NiETj37t3Chvz7/UuvCVYMOOCsxteJFaCDayJxhl1nWT+rVUfwE3ov//PNLplzp6
13MDdiXSWuBXnQRriVgpbiyWAk7LSOuyAWERUIP3i0tj2xXsV1SQvyyzcrtOR5Hm
q4ftsp0t0S4JgfyvyiionLTqKiaTpC3RRdeyrbo+ASvx60AJgA4AvtGNzlEoPdqB
ZO+nQhMYC8ScB9uthNWAVn0GOlUB8pFgihUyJTVcv5NixOBqEssjbKVdfemPpet+
1/ahwhm+Xf/hN77bWRbTuttbwXyZaWuEqFImcckqeaYo15TARsKgSqfr1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdnZ7Vc5VO9a+eKgCXdtifDAqY6MB8GA1UdIwQY
MBaAFG1VXmwUuU11bZOoOlAsfxV3+a9JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlZWZWJCUzVUWFZ0azZnNlVDeF9GWGY1cjBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9hMzI1NjctNzgwZi00NTA5LWI3MTAt
OTdlYWY5YWE3ODZmLzEvYlZWZWJCUzVUWFZ0azZnNlVDeF9GWGY1cjBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9hMzI1NjctNzgwZi00NTA5LWI3MTAtOTdlYWY5YWE3ODZm
LzEvYlZWZWJCUzVUWFZ0azZnNlVDeF9GWGY1cjBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh00nhYBK
RhZ4ADcr2975qWbZK2IWY5xmLBsYh9GGaZ5RNwMmzE2JAPBEllQS8dRHK022Aped
2+pv36oG+FYseN2TImSayA4Q6TDvVvHbJ7akflLIlyHgJA1dQWVdx65Sau523TtB
e2Z8ZPuhLBSLOEdNJDyQTelr1XivoxxoDQk21kebfnDCkMenChliLs49OMg4R4sh
4DzwrpcsvtgRvQV2iQu5z6eM+q4tDl52yirw/8TGSKzChK131ngDdCcHwQyMIYza
klqqC9DFxWQf9ceZk1jfT2nQUvIBjHqthibGCl76k0zXIvk573C0FlyMkjmwB80o
q5ugjnvZAN++MQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:09 2025 by rpki-client