Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
File: vygFmS5lMdPaMe4a9rzVwG0Ctso.mft (raw, json)
Hash identifier: vo59AzfhoeDvzxd0s4v+ayk3n/FUTyhvT13s8BtOZSE=
Subject key identifier: 1A:22:A5:42:03:3D:D1:FE:AD:F6:A9:30:7B:F3:1F:CF:22:C5:75:1B
Authority key identifier: BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
Certificate issuer: /CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Certificate serial: 019747B0D0F001CCE7291714741201885588
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 00:00:59 +0000
Manifest this update: Sat 07 Jun 2025 00:00:59 +0000
Manifest next update: Sun 08 Jun 2025 00:00:59 +0000
Files and hashes: 1: ZA2eo4PhOO6YarPBjFuZYerlXM8.roa (hash: OaUR9ntwZSMTqF4rae/f45ntDF7DCdGD74N9a3x5n8s=)
2: iU6o8UX2fMqdnVT4GPBZLMHQUVk.roa (hash: L7qS2Pktcg+3MFOhFw0UCguQbXdIgIfJZ4PXXKIQFAI=)
3: vygFmS5lMdPaMe4a9rzVwG0Ctso.crl (hash: jP1Z4dUC98A6gXWFKqfQcmr/xpkiQ1KxSu4mWKBfI3k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:d0:f0:01:cc:e7:29:17:14:74:12:01:88:55:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2805992e6531d3da31ee1af6bcd5c06d02b6ca
Validity
Not Before: Jun 7 00:00:59 2025 GMT
Not After : Jun 8 00:00:59 2025 GMT
Subject: CN=1a22a542033dd1feadf6a9307bf31fcf22c5751b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:35:65:47:78:d3:b4:33:94:53:1d:66:51:c7:
78:67:8b:6d:c9:ef:67:e5:6b:83:28:34:4e:11:49:
18:df:5b:50:a4:c2:f9:bf:df:6f:16:b2:98:18:b4:
16:e1:d8:57:d2:fb:af:9e:7a:ce:b1:4b:41:50:fe:
77:f0:5c:cb:3f:1b:8d:75:3e:b4:93:88:d4:35:d6:
00:31:37:4d:89:31:20:e9:36:a1:8c:a2:8f:2b:ec:
a5:5f:a4:f4:c8:4b:85:04:9f:52:b7:84:da:3f:69:
52:e6:83:87:d8:52:f2:ee:fb:7d:2b:f9:fc:79:6e:
dd:2b:77:be:94:30:43:65:b8:a4:72:37:71:6c:84:
e5:a8:79:d7:25:66:1d:a4:62:1f:a8:55:92:55:00:
e7:70:f5:54:1e:df:f1:25:cb:e2:45:4f:35:c7:24:
0f:93:a4:9f:2d:b1:fa:61:d1:06:aa:07:21:3e:39:
e4:3b:f3:23:ff:c2:ae:5d:06:4d:f0:89:ca:32:f4:
10:a7:a2:35:1e:66:06:f8:31:98:cc:0b:44:65:8b:
03:67:64:0d:fc:82:89:95:20:37:9f:bb:0d:51:80:
eb:5d:c1:26:7d:09:cb:61:43:be:fd:df:fe:60:fb:
2b:32:18:17:27:77:34:92:95:0a:c1:d2:3e:c5:b8:
71:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:22:A5:42:03:3D:D1:FE:AD:F6:A9:30:7B:F3:1F:CF:22:C5:75:1B
X509v3 Authority Key Identifier:
keyid:BF:28:05:99:2E:65:31:D3:DA:31:EE:1A:F6:BC:D5:C0:6D:02:B6:CA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vygFmS5lMdPaMe4a9rzVwG0Ctso.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/758467-6818-4e84-87ba-5d838668bebe/1/vygFmS5lMdPaMe4a9rzVwG0Ctso.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:b4:0c:65:ad:eb:34:61:5c:b6:6c:71:df:fa:20:f9:ac:32:
96:b7:71:4b:2a:0c:12:48:5b:3a:83:c9:7c:95:f7:5f:1e:4e:
17:cb:a8:ad:3c:70:c2:28:f8:04:aa:19:ca:8c:ec:e9:f8:3d:
6e:68:e6:61:57:a5:fa:f1:cd:40:6c:c6:db:61:67:b4:04:ee:
11:50:45:61:1f:1d:60:32:dd:26:d6:42:39:db:ac:2a:a5:db:
a8:34:07:86:52:b0:55:ec:a3:9b:21:8d:a7:44:c5:4a:9b:5a:
1d:e4:58:f9:2d:db:b6:51:a4:f8:1d:eb:0e:b8:60:1b:d2:85:
05:81:e6:ce:69:91:a2:a8:36:25:f8:ca:a9:c8:8a:25:dd:aa:
92:92:92:7d:ea:d5:ae:5d:25:22:74:ce:a1:92:5c:f3:4e:d7:
3c:91:e0:1d:91:4d:14:65:e6:0f:d5:f7:5f:db:0e:3c:fd:88:
6d:9e:53:62:7b:fb:e3:4e:00:41:8d:23:77:34:0d:ec:85:b6:
56:72:97:85:51:cd:e4:b7:26:fd:6a:9f:99:77:2c:b1:bd:89:
35:b6:a4:c6:96:42:e5:ce:b1:48:52:23:1b:bf:d4:90:16:8f:
b3:6f:63:ff:44:75:6b:33:ea:e2:f9:f7:6e:6d:c7:3a:0f:af:
8e:eb:71:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsNDwAcznKRcUdBIBiFWIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjgwNTk5MmU2NTMxZDNkYTMxZWUxYWY2YmNkNWMwNmQw
MmI2Y2EwHhcNMjUwNjA3MDAwMDU5WhcNMjUwNjA4MDAwMDU5WjAzMTEwLwYDVQQD
EygxYTIyYTU0MjAzM2RkMWZlYWRmNmE5MzA3YmYzMWZjZjIyYzU3NTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjVlR3jTtDOUUx1mUcd4Z4ttye9n
5WuDKDROEUkY31tQpML5v99vFrKYGLQW4dhX0vuvnnrOsUtBUP538FzLPxuNdT60
k4jUNdYAMTdNiTEg6TahjKKPK+ylX6T0yEuFBJ9St4TaP2lS5oOH2FLy7vt9K/n8
eW7dK3e+lDBDZbikcjdxbITlqHnXJWYdpGIfqFWSVQDncPVUHt/xJcviRU81xyQP
k6SfLbH6YdEGqgchPjnkO/Mj/8KuXQZN8InKMvQQp6I1HmYG+DGYzAtEZYsDZ2QN
/IKJlSA3n7sNUYDrXcEmfQnLYUO+/d/+YPsrMhgXJ3c0kpUKwdI+xbhx8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBoipUIDPdH+rfapMHvzH88ixXUbMB8GA1UdIwQY
MBaAFL8oBZkuZTHT2jHuGva81cBtArbKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi83NTg0NjctNjgxOC00ZTg0LTg3YmEt
NWQ4Mzg2NjhiZWJlLzEvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi83NTg0NjctNjgxOC00ZTg0LTg3YmEtNWQ4Mzg2NjhiZWJl
LzEvdnlnRm1TNWxNZFBhTWU0YTlyelZ3RzBDdHNvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALLQMZa3r
NGFctmxx3/og+awylrdxSyoMEkhbOoPJfJX3Xx5OF8uorTxwwij4BKoZyozs6fg9
bmjmYVel+vHNQGzG22FntATuEVBFYR8dYDLdJtZCOdusKqXbqDQHhlKwVeyjmyGN
p0TFSptaHeRY+S3btlGk+B3rDrhgG9KFBYHmzmmRoqg2JfjKqciKJd2qkpKSferV
rl0lInTOoZJc807XPJHgHZFNFGXmD9X3X9sOPP2IbZ5TYnv7404AQY0jdzQN7IW2
VnKXhVHN5Lcm/WqfmXcssb2JNbakxpZC5c6xSFIjG7/UkBaPs29j/0R1azPq4vn3
bm3HOg+vjutxtA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:41:29 2025 by rpki-client