Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
File: vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft (raw, json)
Hash identifier: d8jZR6ukS7Fr3inWQy57RIbrDh21IbmI0GPXzELwIeE=
Subject key identifier: B5:3B:46:D3:DE:1A:03:ED:E5:77:89:4B:F8:F1:D7:A9:55:26:74:B2
Authority key identifier: BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
Certificate issuer: /CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Certificate serial: 01984C9DA58706A9AD795F94E38D926ED549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
Manifest number: 140F
Signing time: Sun 27 Jul 2025 16:00:56 +0000
Manifest this update: Sun 27 Jul 2025 16:00:56 +0000
Manifest next update: Mon 28 Jul 2025 16:00:56 +0000
Files and hashes: 1: j55rwmP0M5U3k7x3VXFxJgSVySg.roa (hash: 5VX+pyc2hFJtXaEa0bGAy71RA09akkBJFD4zo26BAY8=)
2: kkSPJZVB96rAbN17P-YUAJN7aaE.roa (hash: 8dKJzCnviJKMMlZ3r9gbzAQciz/e0KQ17aqwbgXszyU=)
3: vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl (hash: i9Fd0pq0u/YGDjmP4+HB0qvgsO8Hmg+wUAhfKPHLhPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 14:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4c:9d:a5:87:06:a9:ad:79:5f:94:e3:8d:92:6e:d5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be3364bc38f75b18d6f6eef203209f71c2768d85
Validity
Not Before: Jul 27 16:00:56 2025 GMT
Not After : Jul 28 16:00:56 2025 GMT
Subject: CN=b53b46d3de1a03ede577894bf8f1d7a9552674b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:d4:81:59:e9:d7:e8:38:97:3d:97:ce:0c:c6:
67:43:3e:a3:8b:36:01:7e:dd:98:6f:f3:e5:3c:b2:
42:92:57:a5:04:8a:75:b8:79:76:3a:5f:9a:81:92:
5b:d0:04:9a:ca:e1:39:a9:cb:b3:21:cd:b0:42:5b:
d9:81:b6:87:c9:f5:c3:c8:e3:81:13:4d:db:9a:56:
ec:dc:88:28:54:53:ed:91:8f:27:8b:d0:43:bd:13:
e9:16:24:eb:6e:62:ca:1a:9e:e2:2a:6d:13:73:f3:
64:38:3a:60:66:7b:43:dc:ec:46:33:73:21:7e:1b:
a4:ee:23:f9:39:f9:75:48:eb:4f:d6:31:6a:42:ed:
7c:af:ed:e0:b7:17:68:09:89:a2:9a:74:ad:1b:fe:
ae:c3:81:c7:26:39:6c:8f:8f:c3:c2:4c:5d:74:83:
42:97:9a:ce:0c:98:3a:8a:ae:8c:08:d2:53:fd:ec:
bd:de:48:31:ff:ee:37:04:6f:d9:7f:33:b9:f3:30:
1b:09:78:60:44:67:4c:30:fd:be:14:17:de:c0:7f:
f3:4d:2a:2f:b5:5d:9e:11:99:05:5e:56:f9:31:06:
3c:95:45:fa:85:3c:a5:6e:b0:89:b3:bb:81:15:a8:
f5:8f:69:ec:1b:ab:ee:fd:34:ca:e2:55:95:1b:3b:
21:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:3B:46:D3:DE:1A:03:ED:E5:77:89:4B:F8:F1:D7:A9:55:26:74:B2
X509v3 Authority Key Identifier:
keyid:BE:33:64:BC:38:F7:5B:18:D6:F6:EE:F2:03:20:9F:71:C2:76:8D:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vjNkvDj3WxjW9u7yAyCfccJ2jYU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/97be50-2ce6-4e2b-a3e7-1a6ac98ac6f9/1/vjNkvDj3WxjW9u7yAyCfccJ2jYU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:aa:49:f6:2f:75:4d:4a:b9:ae:df:dc:75:7c:1b:89:2d:ed:
9e:f4:ee:a5:76:c4:4c:9a:40:f7:59:6f:0a:1f:66:14:28:0f:
18:1e:14:cb:04:72:5f:26:30:d9:fe:22:38:e3:0d:50:e7:83:
37:64:a9:a8:c0:c1:33:75:6e:ad:ea:64:cd:f3:ea:7a:a0:a9:
97:a8:12:b7:3e:00:68:ad:0a:de:d4:5e:fd:aa:87:16:ce:54:
a3:77:82:0e:a1:27:e6:44:c9:75:6f:d0:fe:4b:09:75:38:e2:
82:85:94:44:13:5c:a6:11:99:4c:80:ae:24:57:c2:4d:23:01:
51:54:25:15:d5:83:92:a4:1f:f8:ee:74:d1:ab:60:28:54:92:
5e:f0:82:05:ec:2a:63:cd:6a:c5:9c:fd:9f:65:4d:55:f1:5b:
81:89:83:9c:b5:94:25:92:a5:76:6b:8e:b4:ff:57:57:19:c7:
01:41:7f:e5:89:ed:98:b7:fb:f2:aa:73:8c:51:5b:3d:d1:1c:
cf:22:74:c6:9c:3a:e3:ce:e3:f5:2c:9e:cb:7b:73:19:5f:70:
85:88:69:41:0c:65:64:a6:e9:8c:c5:c0:37:c6:70:9b:26:bd:
f0:e8:2c:ad:14:44:41:5c:0a:b2:ce:df:d6:88:20:8a:04:51:
4b:61:23:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhMnaWHBqmteV+U442SbtVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMzM2NGJjMzhmNzViMThkNmY2ZWVmMjAzMjA5ZjcxYzI3
NjhkODUwHhcNMjUwNzI3MTYwMDU2WhcNMjUwNzI4MTYwMDU2WjAzMTEwLwYDVQQD
EyhiNTNiNDZkM2RlMWEwM2VkZTU3Nzg5NGJmOGYxZDdhOTU1MjY3NGIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw9SBWenX6DiXPZfODMZnQz6jizYB
ft2Yb/PlPLJCklelBIp1uHl2Ol+agZJb0ASayuE5qcuzIc2wQlvZgbaHyfXDyOOB
E03bmlbs3IgoVFPtkY8ni9BDvRPpFiTrbmLKGp7iKm0Tc/NkODpgZntD3OxGM3Mh
fhuk7iP5Ofl1SOtP1jFqQu18r+3gtxdoCYmimnStG/6uw4HHJjlsj4/DwkxddINC
l5rODJg6iq6MCNJT/ey93kgx/+43BG/ZfzO58zAbCXhgRGdMMP2+FBfewH/zTSov
tV2eEZkFXlb5MQY8lUX6hTylbrCJs7uBFaj1j2nsG6vu/TTK4lWVGzshFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLU7RtPeGgPt5XeJS/jx16lVJnSyMB8GA1UdIwQY
MBaAFL4zZLw491sY1vbu8gMgn3HCdo2FMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmpOa3ZEajNXeGpXOXU3eUF5Q2ZjY0oyallVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy85N2JlNTAtMmNlNi00ZTJiLWEzZTct
MWE2YWM5OGFjNmY5LzEvdmpOa3ZEajNXeGpXOXU3eUF5Q2ZjY0oyallVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy85N2JlNTAtMmNlNi00ZTJiLWEzZTctMWE2YWM5OGFjNmY5
LzEvdmpOa3ZEajNXeGpXOXU3eUF5Q2ZjY0oyallVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJapJ9i91
TUq5rt/cdXwbiS3tnvTupXbETJpA91lvCh9mFCgPGB4UywRyXyYw2f4iOOMNUOeD
N2SpqMDBM3VurepkzfPqeqCpl6gStz4AaK0K3tRe/aqHFs5Uo3eCDqEn5kTJdW/Q
/ksJdTjigoWURBNcphGZTICuJFfCTSMBUVQlFdWDkqQf+O500atgKFSSXvCCBewq
Y81qxZz9n2VNVfFbgYmDnLWUJZKldmuOtP9XVxnHAUF/5YntmLf78qpzjFFbPdEc
zyJ0xpw6487j9Syey3tzGV9whYhpQQxlZKbpjMXAN8Zwmya98OgsrRREQVwKss7f
1oggigRRS2Ej1w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 21:57:31 2025 by rpki-client