Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
File: vZctRCdupBAu9q7TDyrljpmz51E.mft (raw, json)
Hash identifier: E2iCXIJiZpVL8hQVJC9juqpRrW0ySnVdtLzYRiNfpsM=
Subject key identifier: 76:90:5A:32:E9:9E:DA:BF:26:BF:DD:BE:E8:B0:CB:BA:AB:CC:9B:8C
Authority key identifier: BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
Certificate issuer: /CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Certificate serial: 01984C66255E135203A05D52F0662EE8FE8D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 15:00:19 +0000
Manifest this update: Sun 27 Jul 2025 15:00:19 +0000
Manifest next update: Mon 28 Jul 2025 15:00:19 +0000
Files and hashes: 1: vZctRCdupBAu9q7TDyrljpmz51E.crl (hash: zVR0OwcBDu4WRVm8/uOn4jlzYi24svb6+wPmCB+wSuA=)
2: znul8D-ksNRhN2Cclb1d9oAN3m4.roa (hash: e1Z/F5VmaFQnbIQzB91uNx60SZ0/+TW0LayKFelguZs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 09:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:66:25:5e:13:52:03:a0:5d:52:f0:66:2e:e8:fe:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd972d44276ea4102ef6aed30f2ae58e99b3e751
Validity
Not Before: Jul 27 15:00:19 2025 GMT
Not After : Jul 28 15:00:19 2025 GMT
Subject: CN=76905a32e99edabf26bfddbee8b0cbbaabcc9b8c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:22:44:17:c9:ba:fc:28:c6:20:62:c0:a7:58:
02:de:7c:72:3b:81:41:94:1b:ce:d4:7b:e8:ec:90:
6c:4c:5c:bf:ff:96:5f:c5:e2:06:87:39:e5:8f:2a:
9e:6e:59:e2:9c:cb:44:c4:3f:09:1d:c5:75:77:3b:
3f:a2:1d:ae:6c:49:aa:8b:9e:c3:9d:81:7a:3b:59:
5f:58:9d:d9:ca:54:a7:01:92:d5:9b:c8:0e:5d:c8:
2c:3b:1a:81:53:47:af:e1:5b:fa:06:45:87:13:f0:
ce:e6:92:1b:01:ad:13:23:01:13:07:fb:ab:ac:9e:
b1:8b:56:4a:6a:f7:4d:68:b2:75:3a:d8:35:d4:47:
2e:70:de:d9:2d:fe:c5:7a:1e:ae:6c:ba:95:e4:97:
b2:ca:72:b7:f1:56:fc:3e:e9:7a:9e:22:7b:7a:aa:
13:c4:b4:9a:16:50:d7:69:1a:dc:a1:f5:b9:c7:d7:
9d:85:68:71:da:a5:11:a5:cb:67:ef:65:ea:7c:a5:
ed:02:cf:c9:26:e4:69:78:73:2b:3a:0b:0a:09:bd:
4e:ff:70:4e:64:47:24:0b:9c:02:7e:5c:6c:bc:7a:
f7:bc:83:55:e0:75:20:b1:72:34:7d:54:30:f9:b9:
d4:56:ce:54:d4:dd:c8:98:0b:62:0c:59:b8:90:28:
1d:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:90:5A:32:E9:9E:DA:BF:26:BF:DD:BE:E8:B0:CB:BA:AB:CC:9B:8C
X509v3 Authority Key Identifier:
keyid:BD:97:2D:44:27:6E:A4:10:2E:F6:AE:D3:0F:2A:E5:8E:99:B3:E7:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZctRCdupBAu9q7TDyrljpmz51E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/419d1b-58b0-4483-92d2-86c1ee2a9eba/1/vZctRCdupBAu9q7TDyrljpmz51E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:6a:98:33:ab:90:f5:0e:ae:12:b7:aa:71:38:81:a2:50:db:
1b:6d:0f:0c:26:b8:5d:c4:ed:b4:3d:a0:a7:f7:c5:0e:aa:38:
2d:98:68:aa:de:ab:0d:1a:bd:7c:bb:51:de:12:f4:2c:08:60:
41:66:a7:cb:ae:25:51:b5:6d:e0:b8:2a:5c:79:95:80:d2:e5:
dc:83:dd:57:34:9d:f9:a4:d3:4e:20:c0:a8:0e:83:bc:c4:2b:
60:7c:93:7e:a7:a4:19:9f:03:68:c3:0d:54:85:6d:0d:34:12:
0d:3c:f3:d5:d8:52:9a:6a:93:9a:11:45:69:d0:0f:d0:47:05:
b3:e7:71:30:08:d2:1f:a7:ef:da:9f:89:07:ea:de:ee:00:7f:
46:45:cb:07:4d:2b:34:f2:2c:09:c9:4a:91:9e:1f:a2:13:5f:
2a:06:2e:53:75:ff:86:ee:06:f3:03:bf:07:47:bf:58:1c:ed:
c3:62:a4:fe:69:c8:ba:78:a9:33:79:ff:5f:42:51:ef:c7:07:
a2:88:92:c7:04:0f:5a:68:de:33:2e:ac:c6:b8:51:89:a6:f1:
02:b7:2f:39:16:b4:bc:bd:89:53:74:9b:62:a7:de:91:9b:a7:
b8:4d:6e:92:5d:7c:7f:83:2d:51:44:25:8f:c1:56:ff:71:2c:
57:6f:30:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhMZiVeE1IDoF1S8GYu6P6NMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTcyZDQ0Mjc2ZWE0MTAyZWY2YWVkMzBmMmFlNThlOTli
M2U3NTEwHhcNMjUwNzI3MTUwMDE5WhcNMjUwNzI4MTUwMDE5WjAzMTEwLwYDVQQD
Eyg3NjkwNWEzMmU5OWVkYWJmMjZiZmRkYmVlOGIwY2JiYWFiY2M5YjhjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0CJEF8m6/CjGIGLAp1gC3nxyO4FB
lBvO1Hvo7JBsTFy//5ZfxeIGhznljyqeblninMtExD8JHcV1dzs/oh2ubEmqi57D
nYF6O1lfWJ3ZylSnAZLVm8gOXcgsOxqBU0ev4Vv6BkWHE/DO5pIbAa0TIwETB/ur
rJ6xi1ZKavdNaLJ1Otg11EcucN7ZLf7Feh6ubLqV5JeyynK38Vb8Pul6niJ7eqoT
xLSaFlDXaRrcofW5x9edhWhx2qURpctn72XqfKXtAs/JJuRpeHMrOgsKCb1O/3BO
ZEckC5wCflxsvHr3vINV4HUgsXI0fVQw+bnUVs5U1N3ImAtiDFm4kCgdowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHaQWjLpntq/Jr/dvuiwy7qrzJuMMB8GA1UdIwQY
MBaAFL2XLUQnbqQQLvau0w8q5Y6Zs+dRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS80MTlkMWItNThiMC00NDgzLTkyZDIt
ODZjMWVlMmE5ZWJhLzEvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS80MTlkMWItNThiMC00NDgzLTkyZDItODZjMWVlMmE5ZWJh
LzEvdlpjdFJDZHVwQkF1OXE3VER5cmxqcG16NTFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC2qYM6uQ
9Q6uEreqcTiBolDbG20PDCa4XcTttD2gp/fFDqo4LZhoqt6rDRq9fLtR3hL0LAhg
QWany64lUbVt4LgqXHmVgNLl3IPdVzSd+aTTTiDAqA6DvMQrYHyTfqekGZ8DaMMN
VIVtDTQSDTzz1dhSmmqTmhFFadAP0EcFs+dxMAjSH6fv2p+JB+re7gB/RkXLB00r
NPIsCclKkZ4fohNfKgYuU3X/hu4G8wO/B0e/WBztw2Kk/mnIunipM3n/X0JR78cH
ooiSxwQPWmjeMy6sxrhRiabxArcvORa0vL2JU3SbYqfekZunuE1ukl18f4MtUUQl
j8FW/3EsV28wcg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 16:33:32 2025 by rpki-client