Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
File: vVwIMjrCerZVOlpppzpY-AJCPWg.mft (raw, json)
Hash identifier: lXKklgcE3syXq8s45lremuM/kpq4B/ytf7s9qNhompU=
Subject key identifier: 91:AC:73:AA:13:F1:75:2A:D9:36:09:EA:40:11:FB:FA:AE:3E:30:FF
Authority key identifier: BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
Certificate issuer: /CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Certificate serial: 01984A40FC8F3F553344DC03661D4C899FC6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
Manifest number: 04CE
Signing time: Sun 27 Jul 2025 05:00:29 +0000
Manifest this update: Sun 27 Jul 2025 05:00:29 +0000
Manifest next update: Mon 28 Jul 2025 05:00:29 +0000
Files and hashes: 1: G_IYoZfZUxFUxoKj63LyULDLjWc.roa (hash: p32xiHa5RLyOZriAfbie5PUear7BZRAYgBWelDYnr3o=)
2: pBa3ZIYcjmcqVmvAHshpeA-YNy8.roa (hash: 4EmI7PijPu9Hj8achdjNLKa6nAug9jEr6AHyyJ1Ale0=)
3: vVwIMjrCerZVOlpppzpY-AJCPWg.crl (hash: X4IVn+kU/0UA0AXOJCORSM8jld9VK8e8RQoL2Li8LUo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:40:fc:8f:3f:55:33:44:dc:03:66:1d:4c:89:9f:c6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd5c08323ac27ab6553a5a69a73a58f802423d68
Validity
Not Before: Jul 27 05:00:29 2025 GMT
Not After : Jul 28 05:00:29 2025 GMT
Subject: CN=91ac73aa13f1752ad93609ea4011fbfaae3e30ff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:20:7a:16:26:96:d5:90:e2:47:66:c8:42:f6:
7a:1d:69:ef:d4:05:04:2b:37:f8:5c:3e:ee:da:a3:
29:2b:1d:32:bf:71:fa:08:cf:1f:a9:f7:97:72:51:
90:04:92:47:1a:19:5f:33:28:9e:cc:ba:ba:19:ac:
cc:22:1b:ec:09:e2:97:c7:a0:c6:0c:38:80:40:5d:
e0:89:b9:7e:6e:92:de:38:14:a8:59:5e:95:2f:d7:
c3:45:e7:71:23:98:71:35:3e:54:46:56:ed:5a:c1:
75:08:82:5c:a9:8b:80:bb:b1:09:f5:ee:95:f6:a9:
44:87:c3:00:e1:40:c0:50:4a:52:89:a0:1e:bc:ae:
54:67:6e:38:88:41:b7:8b:2f:b5:79:75:26:22:d3:
e8:f3:60:6d:52:e4:1c:12:ea:9b:a7:dc:c9:9b:f5:
0a:80:73:a0:c1:a7:c3:51:4d:10:2d:6c:73:f9:98:
8d:dd:c1:0f:2c:60:6d:db:b6:80:eb:e8:56:bf:c4:
71:a9:b2:3a:bf:cb:ff:6f:bc:3d:c3:3e:73:04:7e:
8a:4a:11:e9:c2:b9:5a:cb:d9:69:59:3c:dd:0a:f8:
0a:0b:c2:bb:8c:76:e3:b5:51:66:03:41:ea:0d:b1:
57:71:f0:95:b5:9a:a0:f1:c4:57:76:ec:01:81:4c:
d2:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:AC:73:AA:13:F1:75:2A:D9:36:09:EA:40:11:FB:FA:AE:3E:30:FF
X509v3 Authority Key Identifier:
keyid:BD:5C:08:32:3A:C2:7A:B6:55:3A:5A:69:A7:3A:58:F8:02:42:3D:68
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVwIMjrCerZVOlpppzpY-AJCPWg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/8ccf07-1e8b-411f-b043-4641ab6e4bfb/1/vVwIMjrCerZVOlpppzpY-AJCPWg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8f:96:7c:21:a8:19:fe:b9:bf:04:62:47:89:81:f6:6b:2a:fe:
b7:5c:99:87:e2:54:59:d9:54:54:89:4a:c0:6a:5a:00:d6:8a:
fc:64:23:57:80:56:08:af:d8:98:72:27:62:b2:90:90:7a:b5:
e1:6a:dc:52:cd:16:66:b9:cd:ef:cd:1d:d3:02:32:d1:02:11:
a2:57:30:6e:ae:a2:8a:86:01:de:4a:f0:72:45:d5:fe:69:25:
42:20:8a:1e:37:e4:be:a3:e4:57:bb:55:a5:2a:17:2e:70:31:
11:b1:62:d8:8c:e8:cd:d1:d7:e4:e0:21:db:36:86:91:55:7f:
77:25:f2:c1:ed:d8:3f:10:eb:59:d5:20:40:08:7f:4a:51:00:
7e:4b:c1:c7:26:fe:3f:0e:8f:b9:b9:01:e1:51:d3:eb:61:58:
74:6f:2e:3e:34:24:84:45:e1:9f:13:84:b1:2f:b2:b4:67:5c:
09:69:09:da:1b:05:79:b8:4b:d4:df:05:6d:9d:1c:49:98:9b:
d8:e3:bb:6b:02:38:af:40:96:d6:51:41:63:e1:d9:e6:65:60:
bf:2a:3f:bd:11:bc:69:6b:7c:a9:9e:85:5a:99:28:4f:cc:e1:
ec:f5:3a:ce:68:8b:85:8a:33:18:b0:77:7e:b9:e4:fb:77:7b:
0c:94:8b:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQPyPP1UzRNwDZh1MiZ/GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNWMwODMyM2FjMjdhYjY1NTNhNWE2OWE3M2E1OGY4MDI0
MjNkNjgwHhcNMjUwNzI3MDUwMDI5WhcNMjUwNzI4MDUwMDI5WjAzMTEwLwYDVQQD
Eyg5MWFjNzNhYTEzZjE3NTJhZDkzNjA5ZWE0MDExZmJmYWFlM2UzMGZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6CB6FiaW1ZDiR2bIQvZ6HWnv1AUE
Kzf4XD7u2qMpKx0yv3H6CM8fqfeXclGQBJJHGhlfMyiezLq6GazMIhvsCeKXx6DG
DDiAQF3gibl+bpLeOBSoWV6VL9fDRedxI5hxNT5URlbtWsF1CIJcqYuAu7EJ9e6V
9qlEh8MA4UDAUEpSiaAevK5UZ244iEG3iy+1eXUmItPo82BtUuQcEuqbp9zJm/UK
gHOgwafDUU0QLWxz+ZiN3cEPLGBt27aA6+hWv8RxqbI6v8v/b7w9wz5zBH6KShHp
wrlay9lpWTzdCvgKC8K7jHbjtVFmA0HqDbFXcfCVtZqg8cRXduwBgUzSaQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGsc6oT8XUq2TYJ6kAR+/quPjD/MB8GA1UdIwQY
MBaAFL1cCDI6wnq2VTpaaac6WPgCQj1oMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMt
NDY0MWFiNmU0YmZiLzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS84Y2NmMDctMWU4Yi00MTFmLWIwNDMtNDY0MWFiNmU0YmZi
LzEvdlZ3SU1qckNlclpWT2xwcHB6cFktQUpDUFdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAj5Z8IagZ
/rm/BGJHiYH2ayr+t1yZh+JUWdlUVIlKwGpaANaK/GQjV4BWCK/YmHInYrKQkHq1
4WrcUs0WZrnN780d0wIy0QIRolcwbq6iioYB3krwckXV/mklQiCKHjfkvqPkV7tV
pSoXLnAxEbFi2IzozdHX5OAh2zaGkVV/dyXywe3YPxDrWdUgQAh/SlEAfkvBxyb+
Pw6PubkB4VHT62FYdG8uPjQkhEXhnxOEsS+ytGdcCWkJ2hsFebhL1N8FbZ0cSZib
2OO7awI4r0CW1lFBY+HZ5mVgvyo/vRG8aWt8qZ6FWpkoT8zh7PU6zmiLhYozGLB3
frnk+3d7DJSL7Q==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:26:12 2025 by rpki-client