Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
File: vB0gk2YmtVdDxllFEt5C75-OkF8.mft (raw, json)
Hash identifier: UArkD/MlgOpiC4dBJLHyQZe7NZC5BLis+XQ+fIoCIEQ=
Subject key identifier: E7:CE:45:E2:F1:F3:9A:AE:4B:99:44:B9:3F:C6:59:27:7E:20:4A:B8
Authority key identifier: BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
Certificate issuer: /CN=bc1d20936626b55743c6594512de42ef9f8e905f
Certificate serial: 01984AE5D3D45285522A6D0AAA6E3DDC1BBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 08:00:32 +0000
Manifest this update: Sun 27 Jul 2025 08:00:32 +0000
Manifest next update: Mon 28 Jul 2025 08:00:32 +0000
Files and hashes: 1: 5sX-DGEXiD0BFlvf-Fmo0E_zIWA.roa (hash: 9QROXrOe8DbEbrWzP6N+sqZkzzd6XWEYKMJ32P4x344=)
2: vB0gk2YmtVdDxllFEt5C75-OkF8.crl (hash: HJRX4CpyElfc66dPXhuyK5LteIAcYdOQ7LvQJXB0ADo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:d3:d4:52:85:52:2a:6d:0a:aa:6e:3d:dc:1b:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1d20936626b55743c6594512de42ef9f8e905f
Validity
Not Before: Jul 27 08:00:32 2025 GMT
Not After : Jul 28 08:00:32 2025 GMT
Subject: CN=e7ce45e2f1f39aae4b9944b93fc659277e204ab8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:99:9d:81:0f:4c:16:a7:eb:d9:65:41:b4:8c:
ec:e8:54:86:42:e7:5f:7f:77:4a:03:8b:04:e7:b2:
e5:2b:0f:c1:3f:07:28:46:d2:76:98:39:57:86:c7:
e7:30:46:32:e6:c6:f6:02:55:7d:69:9f:33:61:73:
b1:1e:1d:a2:de:2a:b1:45:79:ff:ba:50:6c:a9:7b:
48:9e:65:2a:a4:20:e5:cc:1c:af:44:5d:a3:e4:e0:
19:8e:53:de:6a:4f:db:31:0b:b8:1b:69:b0:75:5b:
bb:d4:35:d8:87:51:00:83:44:c6:fc:98:8c:fe:66:
37:a1:a6:e5:09:ae:50:98:c2:65:34:f4:63:c7:fe:
da:fd:b1:10:e1:43:b1:df:23:3a:c3:f4:fd:e7:4c:
67:60:fb:3b:8f:a4:eb:43:e1:d3:d7:66:ee:c2:eb:
89:f0:89:12:02:80:a9:26:94:54:52:f1:75:b7:47:
a6:db:f2:aa:43:52:93:19:b3:9d:8c:2b:3a:30:e1:
53:78:18:dd:ad:aa:3e:df:fd:a9:17:6f:21:55:6f:
3b:f1:fb:16:df:17:75:34:51:5a:ad:48:85:da:44:
79:18:d2:68:4f:9a:df:40:3b:3c:fc:51:cf:2b:c0:
92:13:1f:02:af:29:a3:d1:16:84:5d:84:45:63:d1:
0d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:CE:45:E2:F1:F3:9A:AE:4B:99:44:B9:3F:C6:59:27:7E:20:4A:B8
X509v3 Authority Key Identifier:
keyid:BC:1D:20:93:66:26:B5:57:43:C6:59:45:12:DE:42:EF:9F:8E:90:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB0gk2YmtVdDxllFEt5C75-OkF8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/22/bfda12-76b3-43b2-88e8-1f1dc52bbb98/1/vB0gk2YmtVdDxllFEt5C75-OkF8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:0f:b9:99:bb:a8:25:0b:ae:3a:b6:c2:b0:8f:2a:d4:57:89:
75:29:e0:28:34:04:db:3e:05:45:de:99:9d:96:52:49:3d:70:
05:9a:05:44:a4:64:dd:14:59:96:6f:de:36:f4:b4:4a:ed:3b:
99:04:a9:e5:0e:e0:71:8b:3d:a3:bc:bb:78:a0:fa:51:d1:81:
6e:5a:1d:ae:6b:fc:59:65:1e:0c:24:50:42:c8:86:ce:de:59:
65:49:2c:a8:1f:56:29:2d:a6:d7:8c:d8:77:94:3f:c3:14:3a:
7d:77:8a:fe:41:3f:c6:c1:7b:a6:e1:f5:81:e5:21:b0:2a:e6:
83:3b:27:20:7d:cc:b0:ad:f9:85:98:16:26:f8:fe:c7:eb:25:
aa:e2:80:76:e7:71:10:e6:7c:9e:1c:2a:72:86:81:68:7b:ad:
af:a1:9d:62:bb:a2:a0:64:43:fa:d0:1d:3b:86:14:d8:74:cb:
aa:1b:e9:e2:d3:b8:c9:34:9a:ef:48:d4:6a:f8:6f:ba:57:84:
63:76:00:b4:98:48:a1:5c:2b:d8:79:77:b9:b8:43:87:1c:f7:
e8:73:55:2a:4c:bc:21:d0:1e:16:5d:7d:b5:11:5a:fc:7f:af:
ab:7d:0f:8a:a6:d7:ea:34:5f:73:06:c8:5b:2f:40:96:39:7a:
9d:90:01:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5dPUUoVSKm0Kqm493Bu9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMWQyMDkzNjYyNmI1NTc0M2M2NTk0NTEyZGU0MmVmOWY4
ZTkwNWYwHhcNMjUwNzI3MDgwMDMyWhcNMjUwNzI4MDgwMDMyWjAzMTEwLwYDVQQD
EyhlN2NlNDVlMmYxZjM5YWFlNGI5OTQ0YjkzZmM2NTkyNzdlMjA0YWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJmdgQ9MFqfr2WVBtIzs6FSGQudf
f3dKA4sE57LlKw/BPwcoRtJ2mDlXhsfnMEYy5sb2AlV9aZ8zYXOxHh2i3iqxRXn/
ulBsqXtInmUqpCDlzByvRF2j5OAZjlPeak/bMQu4G2mwdVu71DXYh1EAg0TG/JiM
/mY3oablCa5QmMJlNPRjx/7a/bEQ4UOx3yM6w/T950xnYPs7j6TrQ+HT12buwuuJ
8IkSAoCpJpRUUvF1t0em2/KqQ1KTGbOdjCs6MOFTeBjdrao+3/2pF28hVW878fsW
3xd1NFFarUiF2kR5GNJoT5rfQDs8/FHPK8CSEx8Crymj0RaEXYRFY9ENpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOfOReLx85quS5lEuT/GWSd+IEq4MB8GA1UdIwQY
MBaAFLwdIJNmJrVXQ8ZZRRLeQu+fjpBfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMi9iZmRhMTItNzZiMy00M2IyLTg4ZTgt
MWYxZGM1MmJiYjk4LzEvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMi9iZmRhMTItNzZiMy00M2IyLTg4ZTgtMWYxZGM1MmJiYjk4
LzEvdkIwZ2syWW10VmREeGxsRkV0NUM3NS1Pa0Y4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaQ+5mbuo
JQuuOrbCsI8q1FeJdSngKDQE2z4FRd6ZnZZSST1wBZoFRKRk3RRZlm/eNvS0Su07
mQSp5Q7gcYs9o7y7eKD6UdGBblodrmv8WWUeDCRQQsiGzt5ZZUksqB9WKS2m14zY
d5Q/wxQ6fXeK/kE/xsF7puH1geUhsCrmgzsnIH3MsK35hZgWJvj+x+slquKAdudx
EOZ8nhwqcoaBaHutr6GdYruioGRD+tAdO4YU2HTLqhvp4tO4yTSa70jUavhvuleE
Y3YAtJhIoVwr2Hl3ubhDhxz36HNVKky8IdAeFl19tRFa/H+vq30PiqbX6jRfcwbI
Wy9Aljl6nZAB2w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:01:50 2025 by rpki-client