Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
File: vJ8LmsHVZS89yh7xYjv5mrKWR98.mft (raw, json)
Hash identifier: nsKDEGEgIPTlXwL6Jf8SVUKgOQEb1b55VoezCRCwROU=
Subject key identifier: 2F:AC:EF:94:1C:74:C9:39:F5:F0:40:EA:4C:4A:00:CC:C0:C9:B1:E1
Authority key identifier: BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
Certificate issuer: /CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Certificate serial: 019747B09A2370BA8BBABD671032B5734C27
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 00:00:45 +0000
Manifest this update: Sat 07 Jun 2025 00:00:45 +0000
Manifest next update: Sun 08 Jun 2025 00:00:45 +0000
Files and hashes: 1: FrLoQw9Tk2q53G3qePuE3CPqiJw.roa (hash: w3xxWOqtTqCnhtgzBMiz0Hnx9M0t8vYZOEOxsv+EFns=)
2: XuWyQ_h13oHMYelX1eEehMBE4QM.roa (hash: 55GFOmkogCsmTmcypUyvrH3xFalGu40zdpw3o3u8qPY=)
3: vJ8LmsHVZS89yh7xYjv5mrKWR98.crl (hash: kxyluZt0cOw1X9gYeC/vEX7OJr348omuDy7yOn6djPs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:9a:23:70:ba:8b:ba:bd:67:10:32:b5:73:4c:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc9f0b9ac1d5652f3dca1ef1623bf99ab29647df
Validity
Not Before: Jun 7 00:00:45 2025 GMT
Not After : Jun 8 00:00:45 2025 GMT
Subject: CN=2facef941c74c939f5f040ea4c4a00ccc0c9b1e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:80:db:3a:02:27:1c:ae:44:13:1a:2d:65:53:
78:d1:7f:2d:38:95:9a:55:63:c3:64:d1:65:7b:db:
18:30:e2:33:6f:16:75:dd:a2:80:43:a1:89:c9:28:
71:ed:22:96:e9:a8:03:f9:34:5f:8a:d9:54:b3:74:
66:bc:01:cf:cd:e7:4a:84:ba:b0:bf:7b:95:02:23:
bb:f6:e1:10:90:cd:8e:c1:52:5e:b3:c4:b1:0e:50:
c8:6c:4f:ba:6e:f7:2d:66:e5:06:b6:6f:9b:2d:f1:
70:d8:3b:b9:03:13:9d:bb:27:d3:e1:79:46:33:e2:
36:f9:ae:24:43:52:8b:89:30:e8:56:6b:f7:51:56:
60:04:68:d9:77:66:86:21:79:ad:f6:52:be:02:98:
93:1c:1b:58:13:66:2c:b6:a2:af:39:61:8b:f1:ed:
74:73:bd:d6:b0:ad:37:87:08:22:a3:c2:83:6d:65:
58:32:be:5d:08:d0:ab:23:84:37:3a:dc:36:54:b2:
7c:57:14:b7:0d:4f:86:2b:c0:7a:d8:a5:fb:a7:56:
9d:e7:35:60:41:01:51:fa:1d:07:aa:8b:fe:7e:2a:
e1:11:24:ce:d1:75:d0:6e:91:32:1d:5a:8c:29:30:
df:66:11:7e:bc:47:a9:ad:dc:ac:7d:98:89:a1:ae:
8b:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:AC:EF:94:1C:74:C9:39:F5:F0:40:EA:4C:4A:00:CC:C0:C9:B1:E1
X509v3 Authority Key Identifier:
keyid:BC:9F:0B:9A:C1:D5:65:2F:3D:CA:1E:F1:62:3B:F9:9A:B2:96:47:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vJ8LmsHVZS89yh7xYjv5mrKWR98.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/05/4992b6-fdae-4c9f-bf3e-95c8942df724/1/vJ8LmsHVZS89yh7xYjv5mrKWR98.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
22:d4:48:3e:01:1e:44:d0:04:fa:24:c4:a5:55:a6:f3:c8:ba:
f8:6b:86:23:e2:fb:2c:9c:0c:17:28:f3:5e:4e:db:70:f9:75:
a1:86:e7:0b:1d:20:54:33:df:20:b3:75:72:60:ee:db:a1:fd:
c1:67:58:45:89:98:89:49:5c:fa:f0:a5:c3:9f:a8:1e:7f:ab:
db:d9:16:4f:a7:29:58:f9:a3:1d:fa:78:71:7e:75:bd:1e:66:
9e:d7:ea:c5:37:a0:00:f6:a6:27:a3:7f:2d:1a:74:55:42:9a:
1d:9f:e0:29:3a:f3:12:85:36:16:cf:9d:21:74:38:d2:92:3a:
8e:37:4f:0c:b6:30:f3:6f:0d:1a:19:f4:27:4f:78:9c:3c:95:
e9:16:a4:ee:d5:69:01:55:c0:3d:af:0b:51:a3:e7:e4:ec:4e:
f0:05:dd:d5:e8:bb:27:8a:84:98:3f:97:26:6f:77:e5:b1:ef:
9e:99:33:92:d5:e9:54:f5:b0:8f:27:72:e1:02:a6:99:47:cf:
5d:93:90:e4:a2:b4:42:c2:14:6b:34:f9:ee:b7:6e:43:0c:6c:
d6:34:a5:d7:89:f6:0c:d3:62:e9:62:0d:da:14:46:b6:01:45:
18:b2:67:a8:bd:7d:2c:fd:c1:e4:7a:0d:b4:d6:75:74:fc:63:
8d:12:58:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsJojcLqLur1nEDK1c0wnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjOWYwYjlhYzFkNTY1MmYzZGNhMWVmMTYyM2JmOTlhYjI5
NjQ3ZGYwHhcNMjUwNjA3MDAwMDQ1WhcNMjUwNjA4MDAwMDQ1WjAzMTEwLwYDVQQD
EygyZmFjZWY5NDFjNzRjOTM5ZjVmMDQwZWE0YzRhMDBjY2MwYzliMWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkYDbOgInHK5EExotZVN40X8tOJWa
VWPDZNFle9sYMOIzbxZ13aKAQ6GJyShx7SKW6agD+TRfitlUs3RmvAHPzedKhLqw
v3uVAiO79uEQkM2OwVJes8SxDlDIbE+6bvctZuUGtm+bLfFw2Du5AxOduyfT4XlG
M+I2+a4kQ1KLiTDoVmv3UVZgBGjZd2aGIXmt9lK+ApiTHBtYE2YstqKvOWGL8e10
c73WsK03hwgio8KDbWVYMr5dCNCrI4Q3Otw2VLJ8VxS3DU+GK8B62KX7p1ad5zVg
QQFR+h0Hqov+firhESTO0XXQbpEyHVqMKTDfZhF+vEeprdysfZiJoa6LhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+s75QcdMk59fBA6kxKAMzAybHhMB8GA1UdIwQY
MBaAFLyfC5rB1WUvPcoe8WI7+ZqylkffMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2Ut
OTVjODk0MmRmNzI0LzEvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNS80OTkyYjYtZmRhZS00YzlmLWJmM2UtOTVjODk0MmRmNzI0
LzEvdko4TG1zSFZaUzg5eWg3eFlqdjVtcktXUjk4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAItRIPgEe
RNAE+iTEpVWm88i6+GuGI+L7LJwMFyjzXk7bcPl1oYbnCx0gVDPfILN1cmDu26H9
wWdYRYmYiUlc+vClw5+oHn+r29kWT6cpWPmjHfp4cX51vR5mntfqxTegAPamJ6N/
LRp0VUKaHZ/gKTrzEoU2Fs+dIXQ40pI6jjdPDLYw828NGhn0J094nDyV6Rak7tVp
AVXAPa8LUaPn5OxO8AXd1ei7J4qEmD+XJm935bHvnpkzktXpVPWwjydy4QKmmUfP
XZOQ5KK0QsIUazT57rduQwxs1jSl14n2DNNi6WIN2hRGtgFFGLJnqL19LP3B5HoN
tNZ1dPxjjRJYIw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 04:06:01 2025 by rpki-client