Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
File: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft (raw, json)
Hash identifier: SrSyV8dGPdKDlYvPjRX6zmbsA2IZSyUKXCYrCGFdm5c=
Subject key identifier: 2B:17:DE:82:21:EE:95:20:F6:5F:79:DB:32:BE:26:1D:52:AF:C6:81
Authority key identifier: BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
Certificate issuer: /CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Certificate serial: 01985720F2B1D278DD0C1721778925C738CE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
Manifest number: 0A13
Signing time: Tue 29 Jul 2025 17:00:33 +0000
Manifest this update: Tue 29 Jul 2025 17:00:33 +0000
Manifest next update: Wed 30 Jul 2025 17:00:33 +0000
Files and hashes: 1: 4zZX5zJWUsfZ5zmG6bPbMr0lvbs.roa (hash: Qk/9tkVuHYR7bI8BB1K5v6WoVgCSt0kT7wqGusdLxvQ=)
2: Cd4rO-Hjh_1s-LE7zVhil5Tbff8.roa (hash: 1HerR65Yb0tTxX+akt3GL/BhgF51Uoa+ZBuv4yRBK4o=)
3: vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl (hash: Hz9/wztGConHOwq/s8ipugW/4TQ8VbwLwU+WnbfhOPQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 30 Jul 2025 14:07:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:57:20:f2:b1:d2:78:dd:0c:17:21:77:89:25:c7:38:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc443f7aae47e0ab38bcf8d536cca60350d17270
Validity
Not Before: Jul 29 17:00:33 2025 GMT
Not After : Jul 30 17:00:33 2025 GMT
Subject: CN=2b17de8221ee9520f65f79db32be261d52afc681
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:14:3d:54:7c:b9:8d:56:ee:72:29:5c:9e:bf:
50:f0:0b:d9:72:52:f4:e8:8f:e2:8a:97:b5:bc:1c:
fb:e1:75:dd:00:26:cc:d0:cb:f9:4f:c4:f0:67:69:
32:de:a4:77:72:a2:d1:db:0c:dd:89:f7:b2:b2:e4:
1b:eb:6b:c2:0b:08:15:af:25:13:09:93:90:66:8c:
d2:0c:39:42:17:42:39:6e:d0:45:21:c8:ba:4f:fe:
20:8f:e6:85:cf:56:49:31:b1:5c:18:22:0b:43:2f:
ad:47:58:94:f9:bb:08:52:21:2b:ee:ab:86:5d:38:
78:7d:23:86:3b:39:54:ec:05:d6:ff:f6:3f:13:1e:
d1:81:8a:f8:3b:95:bd:5f:ca:83:62:f4:6f:70:46:
a2:1e:07:76:35:d5:4d:85:5d:85:f4:03:ca:dd:28:
ee:3a:73:4b:12:d8:0f:fa:97:fe:bb:90:67:ae:47:
7a:4c:f5:53:6a:82:f4:b1:45:5e:ff:a6:c6:0a:67:
bb:59:5f:64:37:c0:9e:91:17:79:5b:4c:08:ca:e7:
9c:7d:1f:57:d8:ec:91:f6:d4:4a:2e:0b:ea:39:57:
b8:6c:00:c7:65:3a:79:89:7f:ed:fa:f0:e0:62:5b:
c3:98:63:8d:02:16:26:10:53:08:d1:7b:15:cc:32:
d9:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2B:17:DE:82:21:EE:95:20:F6:5F:79:DB:32:BE:26:1D:52:AF:C6:81
X509v3 Authority Key Identifier:
keyid:BC:44:3F:7A:AE:47:E0:AB:38:BC:F8:D5:36:CC:A6:03:50:D1:72:70
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/75b68b-fa56-44b7-bfba-5034f19953a3/1/vEQ_eq5H4Ks4vPjVNsymA1DRcnA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:81:98:40:bd:85:29:a5:d8:74:0c:ff:f6:90:bf:91:42:37:
28:fb:c0:7c:37:f8:6e:50:94:e7:43:06:c6:5d:4d:26:7d:2c:
e3:f0:ab:2d:bf:c6:35:de:5a:51:43:31:b5:19:e4:74:da:8d:
65:be:b2:24:68:9b:aa:b9:ac:57:9b:ca:06:3e:3e:81:4d:95:
e5:e2:59:ae:f3:3c:6a:d0:58:b8:33:bc:78:3e:ff:4b:74:9c:
17:6a:94:58:d8:1e:a2:0c:f8:1a:7b:b9:1a:02:2d:da:38:0f:
47:35:a5:10:ce:36:fb:48:b9:d9:64:83:f8:16:5a:1f:f6:fa:
50:52:b2:a9:6d:63:e0:8b:7d:22:32:cd:29:be:44:8e:cb:ad:
ba:05:c2:a6:12:e7:0e:d8:ce:75:a4:a8:3c:33:64:9f:d7:42:
89:68:56:49:79:61:9c:eb:56:f7:e4:ae:78:48:22:cd:03:4c:
83:8f:c4:a2:a3:57:31:a9:2b:ed:52:68:f2:96:d7:96:55:20:
ee:25:31:c4:c1:53:a8:9d:49:a2:ac:7a:dd:de:f6:1a:02:db:
ff:27:56:5c:2d:07:7b:3b:a8:ff:e2:d6:77:ce:a2:3d:b0:62:
1f:8d:13:f7:69:e3:5d:2f:40:88:b1:2d:b6:6d:97:d2:57:aa:
94:3e:0b:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhXIPKx0njdDBchd4klxzjOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNDQzZjdhYWU0N2UwYWIzOGJjZjhkNTM2Y2NhNjAzNTBk
MTcyNzAwHhcNMjUwNzI5MTcwMDMzWhcNMjUwNzMwMTcwMDMzWjAzMTEwLwYDVQQD
EygyYjE3ZGU4MjIxZWU5NTIwZjY1Zjc5ZGIzMmJlMjYxZDUyYWZjNjgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlhQ9VHy5jVbucilcnr9Q8AvZclL0
6I/iipe1vBz74XXdACbM0Mv5T8TwZ2ky3qR3cqLR2wzdifeysuQb62vCCwgVryUT
CZOQZozSDDlCF0I5btBFIci6T/4gj+aFz1ZJMbFcGCILQy+tR1iU+bsIUiEr7quG
XTh4fSOGOzlU7AXW//Y/Ex7RgYr4O5W9X8qDYvRvcEaiHgd2NdVNhV2F9APK3Sju
OnNLEtgP+pf+u5Bnrkd6TPVTaoL0sUVe/6bGCme7WV9kN8CekRd5W0wIyuecfR9X
2OyR9tRKLgvqOVe4bADHZTp5iX/t+vDgYlvDmGONAhYmEFMI0XsVzDLZuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCsX3oIh7pUg9l952zK+Jh1Sr8aBMB8GA1UdIwQY
MBaAFLxEP3quR+CrOLz41TbMpgNQ0XJwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEt
NTAzNGYxOTk1M2EzLzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC83NWI2OGItZmE1Ni00NGI3LWJmYmEtNTAzNGYxOTk1M2Ez
LzEvdkVRX2VxNUg0S3M0dlBqVk5zeW1BMURSY25BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfoGYQL2F
KaXYdAz/9pC/kUI3KPvAfDf4blCU50MGxl1NJn0s4/CrLb/GNd5aUUMxtRnkdNqN
Zb6yJGibqrmsV5vKBj4+gU2V5eJZrvM8atBYuDO8eD7/S3ScF2qUWNgeogz4Gnu5
GgIt2jgPRzWlEM42+0i52WSD+BZaH/b6UFKyqW1j4It9IjLNKb5EjsutugXCphLn
DtjOdaSoPDNkn9dCiWhWSXlhnOtW9+SueEgizQNMg4/EoqNXMakr7VJo8pbXllUg
7iUxxMFTqJ1Joqx63d72GgLb/ydWXC0Hezuo/+LWd86iPbBiH40T92njXS9AiLEt
tm2X0leqlD4LNw==
-----END CERTIFICATE-----
Generated at Tue Jul 29 18:57:36 2025 by rpki-client