Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
File: vIo7xH0TyD99HPcqE34AZvg9Bgg.mft (raw, json)
Hash identifier: myQdoJz2fQgj8wNglrIkoa0OXehh20VBlyyXGWSTq4A=
Subject key identifier: 70:A2:B9:4D:DF:4A:D4:99:EF:88:0C:D1:6A:D7:AB:7E:02:3E:BC:70
Authority key identifier: BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
Certificate issuer: /CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Certificate serial: 0198458973F05448D0CF6C65258CA2E21389
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
Manifest number: 1616
Signing time: Sat 26 Jul 2025 07:01:32 +0000
Manifest this update: Sat 26 Jul 2025 07:01:32 +0000
Manifest next update: Sun 27 Jul 2025 07:01:32 +0000
Files and hashes: 1: gphbKzpx6tWGj_zsNbx2el-xjBw.roa (hash: EGV6JtWjWAcUe3P+wNKh2PddbSFnyVdKJ948XnlhOEI=)
2: ndKmZul4TmrLysbdAHv2TdPx3YI.roa (hash: MA6ve6ns46O8nAHaLW/ESCUujJDx6mhMBRqi1sXugZw=)
3: vIo7xH0TyD99HPcqE34AZvg9Bgg.crl (hash: beVYDrq/2QOtalUOUrhX8xG25RS3WPtOjubIJFSUDDM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 06:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:89:73:f0:54:48:d0:cf:6c:65:25:8c:a2:e2:13:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc8a3bc47d13c83f7d1cf72a137e0066f83d0608
Validity
Not Before: Jul 26 07:01:32 2025 GMT
Not After : Jul 27 07:01:32 2025 GMT
Subject: CN=70a2b94ddf4ad499ef880cd16ad7ab7e023ebc70
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ec:11:3a:70:b3:09:c4:be:87:ef:8c:d5:73:
33:e3:17:ba:76:5f:29:53:f0:d9:9c:0e:42:5c:4a:
c2:dd:59:5f:74:be:57:46:67:31:ee:57:6e:a5:e0:
95:4e:27:b4:d9:3c:d6:85:85:a3:de:59:10:fe:25:
f0:06:eb:0b:79:13:40:b3:2c:cf:42:22:28:f1:77:
ca:6e:f5:e6:88:8a:7c:a1:2c:b4:5a:7c:22:91:21:
f3:73:f1:a8:0a:29:76:c6:3f:e2:7b:dd:e3:0b:89:
5a:0d:4d:fc:8d:7f:f4:2a:16:af:a5:1e:df:ba:15:
d3:6d:a7:f8:9b:33:02:d4:bc:27:03:b1:d9:4a:42:
9b:c0:c6:aa:fb:c7:4a:f1:30:83:05:38:ab:14:07:
66:16:a9:e5:d9:f0:04:41:67:98:4f:c7:55:97:cd:
3f:9b:0b:25:b4:88:59:0d:16:69:37:22:03:7f:d3:
26:9f:09:21:c8:10:a2:db:e5:c3:dc:d2:20:c0:34:
8e:9f:75:65:f8:aa:7d:94:e8:8c:ef:1b:14:88:90:
3b:0e:53:f0:0e:2a:01:aa:4d:d3:d2:b8:b6:ee:c7:
92:ec:ee:45:58:bf:ab:c8:45:52:40:f3:3c:d9:4f:
db:ba:cd:f0:03:8c:94:ed:7c:ff:35:25:6a:ce:cb:
cf:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:A2:B9:4D:DF:4A:D4:99:EF:88:0C:D1:6A:D7:AB:7E:02:3E:BC:70
X509v3 Authority Key Identifier:
keyid:BC:8A:3B:C4:7D:13:C8:3F:7D:1C:F7:2A:13:7E:00:66:F8:3D:06:08
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vIo7xH0TyD99HPcqE34AZvg9Bgg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/0ee921-a721-4f09-80f2-7113fc1b865b/1/vIo7xH0TyD99HPcqE34AZvg9Bgg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:3d:57:1e:e3:39:78:e2:a2:e1:99:92:ec:b1:4a:8e:a9:e4:
ae:63:c0:3c:d5:6b:a8:6c:08:46:0d:7f:c7:e2:15:f7:da:de:
a9:6c:7f:cd:24:68:f4:f6:23:e5:c4:c8:66:de:a0:62:fd:f5:
20:6a:a1:20:aa:94:6d:d1:21:ac:f3:f2:db:89:61:ce:5d:58:
9c:bb:9a:f0:23:a3:3e:b4:53:44:66:ac:18:82:7a:2d:97:78:
04:67:22:c7:1b:e9:03:e2:5c:1c:65:11:93:f4:68:aa:8e:cb:
a0:b7:7b:dd:29:14:af:41:41:e4:ad:cb:85:66:d3:22:ab:f0:
0d:8a:5b:33:c0:2c:09:4f:15:33:88:89:81:9a:5b:10:1d:37:
c5:ee:88:8d:26:63:7a:88:5b:c3:f7:c6:22:db:8c:c0:cf:08:
b2:1c:9e:a6:01:87:4f:bc:61:f6:15:54:98:5f:25:cb:d1:98:
43:09:d8:7c:d3:de:80:17:85:bd:dd:b0:d3:90:f9:e6:e7:8a:
87:2e:74:4a:b8:92:cb:97:97:9f:02:3c:2c:ba:43:1e:29:56:
c0:01:0f:1e:49:46:ef:b3:5f:bd:dc:f4:3c:da:fc:68:41:f6:
37:a1:8f:a7:9b:b2:b3:3a:b3:4a:9e:fe:35:27:d6:52:91:fb:
9a:90:f7:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFiXPwVEjQz2xlJYyi4hOJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOGEzYmM0N2QxM2M4M2Y3ZDFjZjcyYTEzN2UwMDY2Zjgz
ZDA2MDgwHhcNMjUwNzI2MDcwMTMyWhcNMjUwNzI3MDcwMTMyWjAzMTEwLwYDVQQD
Eyg3MGEyYjk0ZGRmNGFkNDk5ZWY4ODBjZDE2YWQ3YWI3ZTAyM2ViYzcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0ewROnCzCcS+h++M1XMz4xe6dl8p
U/DZnA5CXErC3VlfdL5XRmcx7ldupeCVTie02TzWhYWj3lkQ/iXwBusLeRNAsyzP
QiIo8XfKbvXmiIp8oSy0WnwikSHzc/GoCil2xj/ie93jC4laDU38jX/0KhavpR7f
uhXTbaf4mzMC1LwnA7HZSkKbwMaq+8dK8TCDBTirFAdmFqnl2fAEQWeYT8dVl80/
mwsltIhZDRZpNyIDf9MmnwkhyBCi2+XD3NIgwDSOn3Vl+Kp9lOiM7xsUiJA7DlPw
DioBqk3T0ri27seS7O5FWL+ryEVSQPM82U/bus3wA4yU7Xz/NSVqzsvP7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCiuU3fStSZ74gM0WrXq34CPrxwMB8GA1UdIwQY
MBaAFLyKO8R9E8g/fRz3KhN+AGb4PQYIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjIt
NzExM2ZjMWI4NjViLzEvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy8wZWU5MjEtYTcyMS00ZjA5LTgwZjItNzExM2ZjMWI4NjVi
LzEvdklvN3hIMFR5RDk5SFBjcUUzNEFadmc5QmdnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXD1XHuM5
eOKi4ZmS7LFKjqnkrmPAPNVrqGwIRg1/x+IV99reqWx/zSRo9PYj5cTIZt6gYv31
IGqhIKqUbdEhrPPy24lhzl1YnLua8COjPrRTRGasGIJ6LZd4BGcixxvpA+JcHGUR
k/Roqo7LoLd73SkUr0FB5K3LhWbTIqvwDYpbM8AsCU8VM4iJgZpbEB03xe6IjSZj
eohbw/fGItuMwM8IshyepgGHT7xh9hVUmF8ly9GYQwnYfNPegBeFvd2w05D55ueK
hy50SriSy5eXnwI8LLpDHilWwAEPHklG77Nfvdz0PNr8aEH2N6GPp5uyszqzSp7+
NSfWUpH7mpD3Og==
-----END CERTIFICATE-----
Generated at Sat Jul 26 14:49:17 2025 by rpki-client