Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
File: vMY_AQxUC81FVDRL-5pZou26vCk.mft (raw, json)
Hash identifier: 34cMgTYZ3ViMm2vzwsmmKJOXA58UX85VOPQDUX88SaA=
Subject key identifier: A9:B3:09:2C:B3:87:71:73:B1:51:08:2A:88:15:1F:D2:06:92:88:95
Authority key identifier: BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
Certificate issuer: /CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Certificate serial: 0198499BE7CBD1EE6274F5E713C512B96BCE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
Manifest number: 1609
Signing time: Sun 27 Jul 2025 02:00:10 +0000
Manifest this update: Sun 27 Jul 2025 02:00:10 +0000
Manifest next update: Mon 28 Jul 2025 02:00:10 +0000
Files and hashes: 1: f54g9Idv6PqQc5NMQvmsvFWJIzA.roa (hash: l130lZQGnDRQWTrBtDjmk6wY+7GBZMzcTr0yBlbCoVI=)
2: vMY_AQxUC81FVDRL-5pZou26vCk.crl (hash: Gj5GYVcRhOECQ7aMNbW0atkDw04T1HCH13EzumFh5uw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9b:e7:cb:d1:ee:62:74:f5:e7:13:c5:12:b9:6b:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcc63f010c540bcd4554344bfb9a59a2edbabc29
Validity
Not Before: Jul 27 02:00:10 2025 GMT
Not After : Jul 28 02:00:10 2025 GMT
Subject: CN=a9b3092cb3877173b151082a88151fd206928895
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:14:29:65:c8:3f:7a:5a:08:1b:d4:63:b3:4e:
a3:b7:7e:31:e0:f3:83:5e:d7:88:09:69:7b:03:f4:
66:3e:a8:2e:7f:7c:7d:64:d6:d5:3c:3f:79:55:9e:
d4:24:df:2b:1c:76:a3:72:f4:f8:c0:36:48:e7:bc:
e1:b4:7f:23:83:f3:04:78:22:33:a9:06:ba:5a:6e:
88:48:7c:06:c3:83:99:28:0e:3a:0d:f4:f0:a8:18:
d0:d1:a1:10:d9:3d:0d:3b:1c:f8:97:d3:15:7b:95:
94:84:87:89:d0:3c:e6:0d:07:67:9f:e7:0f:6b:73:
fd:8a:e2:df:4b:6a:69:4f:36:bc:77:15:3b:45:e0:
c7:47:23:78:fc:37:3a:5c:03:78:ae:36:93:04:68:
bb:c4:35:42:0c:33:24:f9:20:84:af:c1:e5:97:dd:
3d:b5:53:e9:f6:ca:b7:99:d6:7a:db:33:4c:34:b4:
0c:44:6e:4e:17:e5:66:fc:ad:da:b0:4e:ba:db:63:
06:e9:cf:2b:80:c9:9b:25:cd:04:66:29:e6:1b:49:
02:a4:65:fd:59:72:c0:cc:33:2e:c1:d0:e6:c1:9e:
a6:e8:d0:95:1f:c0:bf:4d:a0:f3:55:4f:49:02:c2:
06:9c:0c:c5:dd:8c:c7:30:bb:2c:b0:1e:22:ce:cf:
86:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:B3:09:2C:B3:87:71:73:B1:51:08:2A:88:15:1F:D2:06:92:88:95
X509v3 Authority Key Identifier:
keyid:BC:C6:3F:01:0C:54:0B:CD:45:54:34:4B:FB:9A:59:A2:ED:BA:BC:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vMY_AQxUC81FVDRL-5pZou26vCk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/a29c67-f24d-4979-b2af-cc41c4a3198d/1/vMY_AQxUC81FVDRL-5pZou26vCk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:89:d4:65:03:54:ac:ec:6a:38:4d:9b:18:ff:af:ac:89:66:
b4:7a:ee:e5:4e:4b:0d:f8:c2:a8:bc:f6:d6:42:31:d8:75:2f:
13:cb:8f:67:66:3b:e3:c2:e9:cf:b7:7f:47:2d:37:a0:a5:1d:
7f:c8:3f:fb:9a:5d:11:ce:4e:1f:76:fd:45:7e:29:c3:3e:07:
22:eb:5c:7d:72:2c:8b:2e:8d:1d:74:54:af:1e:59:b1:37:4b:
97:1f:ea:9f:d6:f4:49:a7:f4:02:eb:dc:d0:6c:69:5e:e0:1b:
39:32:b6:f0:54:f4:1b:81:f9:4f:75:58:22:ae:4b:17:e9:f7:
02:5b:5a:fd:ab:1b:c1:f0:4c:74:0b:74:c2:57:b1:1f:b6:ed:
c2:6a:b1:21:20:9d:f4:8d:69:8a:03:36:83:c1:1a:aa:32:20:
21:55:1f:a1:1a:42:1a:62:b9:74:e1:c5:27:12:7d:6b:eb:ea:
de:2d:18:af:0d:7a:b8:0b:90:25:bc:38:5a:b8:47:7c:a2:4b:
19:d2:15:34:79:43:c6:45:9b:7d:a0:22:c4:a7:bc:18:57:64:
99:d3:43:02:3d:09:a7:bf:f9:f5:08:62:74:e1:34:c1:78:40:
25:ad:5a:4b:74:6f:7e:06:54:b1:e2:4a:a5:e8:cb:32:c0:60:
5b:6c:37:62
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJm+fL0e5idPXnE8USuWvOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYzYzZjAxMGM1NDBiY2Q0NTU0MzQ0YmZiOWE1OWEyZWRi
YWJjMjkwHhcNMjUwNzI3MDIwMDEwWhcNMjUwNzI4MDIwMDEwWjAzMTEwLwYDVQQD
EyhhOWIzMDkyY2IzODc3MTczYjE1MTA4MmE4ODE1MWZkMjA2OTI4ODk1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwxQpZcg/eloIG9Rjs06jt34x4POD
XteICWl7A/RmPqguf3x9ZNbVPD95VZ7UJN8rHHajcvT4wDZI57zhtH8jg/MEeCIz
qQa6Wm6ISHwGw4OZKA46DfTwqBjQ0aEQ2T0NOxz4l9MVe5WUhIeJ0DzmDQdnn+cP
a3P9iuLfS2ppTza8dxU7ReDHRyN4/Dc6XAN4rjaTBGi7xDVCDDMk+SCEr8Hll909
tVPp9sq3mdZ62zNMNLQMRG5OF+Vm/K3asE6622MG6c8rgMmbJc0EZinmG0kCpGX9
WXLAzDMuwdDmwZ6m6NCVH8C/TaDzVU9JAsIGnAzF3YzHMLsssB4izs+GrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKmzCSyzh3FzsVEIKogVH9IGkoiVMB8GA1UdIwQY
MBaAFLzGPwEMVAvNRVQ0S/uaWaLturwpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYt
Y2M0MWM0YTMxOThkLzEvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9hMjljNjctZjI0ZC00OTc5LWIyYWYtY2M0MWM0YTMxOThk
LzEvdk1ZX0FReFVDODFGVkRSTC01cFpvdTI2dkNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAronUZQNU
rOxqOE2bGP+vrIlmtHru5U5LDfjCqLz21kIx2HUvE8uPZ2Y748Lpz7d/Ry03oKUd
f8g/+5pdEc5OH3b9RX4pwz4HIutcfXIsiy6NHXRUrx5ZsTdLlx/qn9b0Saf0Auvc
0GxpXuAbOTK28FT0G4H5T3VYIq5LF+n3Alta/asbwfBMdAt0wlexH7btwmqxISCd
9I1pigM2g8EaqjIgIVUfoRpCGmK5dOHFJxJ9a+vq3i0Yrw16uAuQJbw4WrhHfKJL
GdIVNHlDxkWbfaAixKe8GFdkmdNDAj0Jp7/59QhidOE0wXhAJa1aS3RvfgZUseJK
pejLMsBgW2w3Yg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:53:03 2025 by rpki-client