Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
File: 0bvzaAza5sJnqY0D0I9rI9DtHUY.mft (raw, json)
Hash identifier: NNHaVpbMw+79bnbdm6Oa4ZmU8mHArRONPtpOH3ddrk0=
Subject key identifier: A5:3E:7F:E2:B4:AB:8E:10:16:6C:C6:F8:44:CA:69:22:83:48:44:50
Authority key identifier: D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
Certificate issuer: /CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Certificate serial: 0198499C6CAE58F658D053F58E9B4BFF6324
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 02:00:44 +0000
Manifest this update: Sun 27 Jul 2025 02:00:44 +0000
Manifest next update: Mon 28 Jul 2025 02:00:44 +0000
Files and hashes: 1: 0bvzaAza5sJnqY0D0I9rI9DtHUY.crl (hash: VNtK1Hu6rAj1Q8HU+sINGSlgLqtSSDvfG914CQM28eI=)
2: Mbm6QXqJoPSY8lmJ2uuYnoixdss.roa (hash: YVUXdFTCHChTHodePJ+65GQKTip7VafzN3LWZ67guNY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 02:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:6c:ae:58:f6:58:d0:53:f5:8e:9b:4b:ff:63:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d1bbf3680cdae6c267a98d03d08f6b23d0ed1d46
Validity
Not Before: Jul 27 02:00:44 2025 GMT
Not After : Jul 28 02:00:44 2025 GMT
Subject: CN=a53e7fe2b4ab8e10166cc6f844ca692283484450
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b4:92:f4:56:67:8e:19:dd:c5:12:87:15:92:
69:14:d6:d6:d0:a8:df:b4:e6:44:1b:29:98:96:01:
6a:9c:70:d9:55:64:9e:0b:cb:d2:a0:87:8b:4d:3d:
59:6d:90:23:5c:a2:72:0b:35:db:7f:12:cc:eb:2a:
14:59:58:bf:60:fc:bf:09:36:44:a3:cb:47:e2:44:
4c:2d:05:a3:2f:5d:93:a8:76:72:94:0a:10:77:d8:
35:e4:a4:5e:5d:a0:2e:37:3e:41:6d:c9:d4:f0:56:
b5:46:99:b2:af:ff:47:48:db:d7:39:63:97:bd:5b:
1d:ee:64:37:53:89:0a:5e:65:37:ee:ca:27:33:84:
4e:91:df:97:91:c7:e0:66:df:43:2c:51:27:ba:71:
58:5d:43:73:38:32:4b:f1:b6:ce:9f:21:c1:23:dc:
98:4f:9b:10:03:0a:94:94:b6:74:52:f9:7b:96:56:
a0:02:de:7d:4c:77:6d:f0:0c:3a:cc:12:f0:9c:3b:
27:f1:6b:fd:d9:b1:ad:05:12:a7:43:22:a4:e2:dd:
52:6a:a6:96:c3:96:3e:69:87:9d:b8:00:d1:22:c0:
35:e0:7a:0b:73:ff:eb:82:5e:b8:3f:73:c4:f8:4a:
68:72:b4:cb:b8:66:f0:9d:a4:8e:6b:55:1c:11:5e:
0b:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:3E:7F:E2:B4:AB:8E:10:16:6C:C6:F8:44:CA:69:22:83:48:44:50
X509v3 Authority Key Identifier:
keyid:D1:BB:F3:68:0C:DA:E6:C2:67:A9:8D:03:D0:8F:6B:23:D0:ED:1D:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0bvzaAza5sJnqY0D0I9rI9DtHUY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d52e84-eb84-45c2-b6c5-51c1faa4718f/1/0bvzaAza5sJnqY0D0I9rI9DtHUY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:14:69:b3:2d:31:0c:bc:df:28:46:da:97:f0:e0:5b:d5:0a:
9c:de:cb:eb:69:39:5c:b0:26:c0:cc:7a:f4:78:5e:3f:c3:aa:
0e:50:1d:66:a1:6b:d9:a1:30:f4:a9:fd:57:28:ec:0b:f2:0b:
32:25:e7:d8:55:0e:c8:92:40:b3:4a:9d:48:b6:d1:5c:6b:71:
61:b2:01:15:13:fc:60:2e:33:06:f8:dc:0f:1a:d1:cc:ba:6c:
27:f2:c3:58:37:08:fb:26:20:5e:eb:66:23:b6:bc:3c:13:3f:
fa:22:02:ad:c2:9a:c7:a9:ae:13:23:89:0d:6d:0e:96:80:39:
06:fc:2d:00:6d:b7:d7:ee:9d:0d:c9:fe:34:21:4c:d6:93:51:
20:94:22:0f:e7:94:b5:2f:b1:b8:85:9e:19:be:93:d1:76:86:
c6:b4:fb:6f:ac:95:61:25:f2:64:1e:36:ee:de:37:45:7e:43:
b5:8e:4a:6c:90:38:94:f4:61:c2:73:04:da:0d:e2:e6:bb:59:
cb:b8:ec:12:e1:77:6e:2d:ad:4f:c2:5c:0b:dc:18:46:87:e7:
b5:ef:58:cc:23:d3:e8:de:c1:1e:0a:1d:3b:a8:29:2e:b8:ce:
ac:5b:7b:02:0b:d4:d7:38:11:50:50:65:ea:13:a9:d9:ab:a7:
aa:ec:ae:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnGyuWPZY0FP1jptL/2MkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxYmJmMzY4MGNkYWU2YzI2N2E5OGQwM2QwOGY2YjIzZDBl
ZDFkNDYwHhcNMjUwNzI3MDIwMDQ0WhcNMjUwNzI4MDIwMDQ0WjAzMTEwLwYDVQQD
EyhhNTNlN2ZlMmI0YWI4ZTEwMTY2Y2M2Zjg0NGNhNjkyMjgzNDg0NDUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrSS9FZnjhndxRKHFZJpFNbW0Kjf
tOZEGymYlgFqnHDZVWSeC8vSoIeLTT1ZbZAjXKJyCzXbfxLM6yoUWVi/YPy/CTZE
o8tH4kRMLQWjL12TqHZylAoQd9g15KReXaAuNz5BbcnU8Fa1Rpmyr/9HSNvXOWOX
vVsd7mQ3U4kKXmU37sonM4ROkd+XkcfgZt9DLFEnunFYXUNzODJL8bbOnyHBI9yY
T5sQAwqUlLZ0Uvl7llagAt59THdt8Aw6zBLwnDsn8Wv92bGtBRKnQyKk4t1SaqaW
w5Y+aYeduADRIsA14HoLc//rgl64P3PE+EpocrTLuGbwnaSOa1UcEV4LRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKU+f+K0q44QFmzG+ETKaSKDSERQMB8GA1UdIwQY
MBaAFNG782gM2ubCZ6mNA9CPayPQ7R1GMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNTJlODQtZWI4NC00NWMyLWI2YzUt
NTFjMWZhYTQ3MThmLzEvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kNTJlODQtZWI4NC00NWMyLWI2YzUtNTFjMWZhYTQ3MThm
LzEvMGJ2emFBemE1c0pucVkwRDBJOXJJOUR0SFVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyhRpsy0x
DLzfKEbal/DgW9UKnN7L62k5XLAmwMx69HheP8OqDlAdZqFr2aEw9Kn9VyjsC/IL
MiXn2FUOyJJAs0qdSLbRXGtxYbIBFRP8YC4zBvjcDxrRzLpsJ/LDWDcI+yYgXutm
I7a8PBM/+iICrcKax6muEyOJDW0OloA5BvwtAG231+6dDcn+NCFM1pNRIJQiD+eU
tS+xuIWeGb6T0XaGxrT7b6yVYSXyZB427t43RX5DtY5KbJA4lPRhwnME2g3i5rtZ
y7jsEuF3bi2tT8JcC9wYRofnte9YzCPT6N7BHgodO6gpLrjOrFt7AgvU1zgRUFBl
6hOp2aunquyu/A==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:44:05 2025 by rpki-client