Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
File: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft (raw, json)
Hash identifier: mv9qG068BmWXO+M+Yt13S12Xebq08MGavQAdPtCpD+w=
Subject key identifier: F1:16:08:CB:29:88:46:79:3B:F6:70:BA:E0:73:AC:1D:8D:0B:08:AE
Authority key identifier: D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
Certificate issuer: /CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Certificate serial: 0197469DFF5044387DB18E20DD6BC45122FA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
Manifest number: 157E
Signing time: Fri 06 Jun 2025 19:00:49 +0000
Manifest this update: Fri 06 Jun 2025 19:00:49 +0000
Manifest next update: Sat 07 Jun 2025 19:00:49 +0000
Files and hashes: 1: 1-YLF-MeFwDISim6adBK6qk3JuME.roa (hash: GapGZPBb9/hawREIr0KOF+mssvGG8XyPh9uD8dxUmf4=)
2: 1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl (hash: ze85P9ujPqLksgn2nIQJxpmkbllK7L7YD+OgtsvGDmU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9d:ff:50:44:38:7d:b1:8e:20:dd:6b:c4:51:22:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6fbd9ed504eef659ecfc919a195cd2a803b60a7
Validity
Not Before: Jun 6 19:00:49 2025 GMT
Not After : Jun 7 19:00:49 2025 GMT
Subject: CN=f11608cb298846793bf670bae073ac1d8d0b08ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:5b:7c:a9:ca:3b:8e:96:56:82:1a:eb:eb:cd:
50:e8:66:44:0d:1c:2e:86:d3:91:0d:f2:94:ee:fb:
13:eb:6f:f9:a4:37:f1:f6:62:65:0f:83:3a:e9:12:
d5:bb:ed:b0:89:92:e2:68:9c:f6:4d:75:1b:68:6a:
0e:23:0e:6c:96:61:31:e7:02:a4:23:fa:53:13:0a:
51:d4:84:e6:1f:09:8d:df:3e:d7:51:f9:08:c5:6c:
e9:0b:9e:87:fb:58:db:d8:2a:4a:ba:3b:67:64:da:
0d:dc:51:fd:12:47:82:d1:32:e1:8d:6b:6a:0e:4f:
89:cc:ba:36:38:1b:2d:9c:c8:cd:07:b6:25:88:84:
af:74:85:b7:4b:be:11:ab:1f:ea:ff:8d:48:bf:88:
25:99:93:d2:fa:f0:47:d7:bd:31:49:e6:fd:01:5b:
f6:18:02:c8:5e:f7:3e:fe:12:d5:d5:40:ac:d4:9a:
14:5a:67:a6:28:c6:f6:9e:8b:c8:7b:ed:9f:12:ae:
a6:86:d3:3d:83:c5:66:17:93:46:5e:24:b1:fe:72:
a7:1b:68:1c:23:1f:f1:5a:b6:2e:13:75:0f:71:18:
5a:02:7b:90:a9:7d:72:52:0c:17:86:dd:5e:b3:ce:
e9:1e:16:52:c5:fb:51:bf:88:40:e0:01:2d:be:65:
ae:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:16:08:CB:29:88:46:79:3B:F6:70:BA:E0:73:AC:1D:8D:0B:08:AE
X509v3 Authority Key Identifier:
keyid:D6:FB:D9:ED:50:4E:EF:65:9E:CF:C9:19:A1:95:CD:2A:80:3B:60:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1vvZ7VBO72Wez8kZoZXNKoA7YKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/4a585a-f0f0-4987-ae03-acccae690e75/1/1vvZ7VBO72Wez8kZoZXNKoA7YKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:22:50:59:42:a7:dc:ac:ed:d1:8d:eb:21:37:5a:73:4c:68:
92:08:91:9b:82:6e:c3:2b:a9:01:f8:86:15:48:fc:64:54:07:
f7:5d:a1:30:d8:7a:a7:4f:9f:1e:8e:aa:ad:d4:da:ec:43:4f:
e2:ca:b3:dd:64:38:b4:38:83:8d:9a:10:d8:53:54:ec:2d:0e:
62:42:8b:f5:21:2e:e7:45:40:11:07:8f:6b:f7:bd:a4:a9:ef:
3a:1b:e1:35:bd:48:c4:60:f9:61:eb:88:f1:63:97:86:b9:24:
6b:62:7e:c2:c5:e5:95:47:c0:0e:98:fd:6a:dc:69:f4:61:38:
ea:53:42:ef:76:df:24:54:1b:31:8d:df:49:94:f2:e1:18:1f:
95:81:00:c2:2d:e5:5d:8d:58:08:3d:83:82:13:12:f8:24:0a:
ae:20:45:d1:7d:1e:7a:c1:7e:a6:cd:07:a5:fd:9a:fa:f1:12:
54:e6:60:d9:d5:66:97:ee:06:6e:d4:02:ac:40:52:6c:6e:d6:
7e:be:20:3f:06:cc:68:cd:f2:3e:5d:2e:57:64:7e:6d:40:8d:
2f:f0:60:ed:5b:df:8f:57:bf:c1:0a:15:7f:1a:bc:84:d4:1f:
ed:7d:9a:d3:2e:60:59:87:ad:84:27:a7:1b:c3:f0:3e:cb:3d:
1c:62:3f:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnf9QRDh9sY4g3WvEUSL6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZmJkOWVkNTA0ZWVmNjU5ZWNmYzkxOWExOTVjZDJhODAz
YjYwYTcwHhcNMjUwNjA2MTkwMDQ5WhcNMjUwNjA3MTkwMDQ5WjAzMTEwLwYDVQQD
EyhmMTE2MDhjYjI5ODg0Njc5M2JmNjcwYmFlMDczYWMxZDhkMGIwOGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1lt8qco7jpZWghrr681Q6GZEDRwu
htORDfKU7vsT62/5pDfx9mJlD4M66RLVu+2wiZLiaJz2TXUbaGoOIw5slmEx5wKk
I/pTEwpR1ITmHwmN3z7XUfkIxWzpC56H+1jb2CpKujtnZNoN3FH9EkeC0TLhjWtq
Dk+JzLo2OBstnMjNB7YliISvdIW3S74Rqx/q/41Iv4glmZPS+vBH170xSeb9AVv2
GALIXvc+/hLV1UCs1JoUWmemKMb2novIe+2fEq6mhtM9g8VmF5NGXiSx/nKnG2gc
Ix/xWrYuE3UPcRhaAnuQqX1yUgwXht1es87pHhZSxftRv4hA4AEtvmWuOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPEWCMspiEZ5O/ZwuuBzrB2NCwiuMB8GA1UdIwQY
MBaAFNb72e1QTu9lns/JGaGVzSqAO2CnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC80YTU4NWEtZjBmMC00OTg3LWFlMDMt
YWNjY2FlNjkwZTc1LzEvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC80YTU4NWEtZjBmMC00OTg3LWFlMDMtYWNjY2FlNjkwZTc1
LzEvMXZ2WjdWQk83MldlejhrWm9aWE5Lb0E3WUtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtyJQWUKn
3Kzt0Y3rITdac0xokgiRm4JuwyupAfiGFUj8ZFQH912hMNh6p0+fHo6qrdTa7ENP
4sqz3WQ4tDiDjZoQ2FNU7C0OYkKL9SEu50VAEQePa/e9pKnvOhvhNb1IxGD5YeuI
8WOXhrkka2J+wsXllUfADpj9atxp9GE46lNC73bfJFQbMY3fSZTy4RgflYEAwi3l
XY1YCD2DghMS+CQKriBF0X0eesF+ps0Hpf2a+vESVOZg2dVml+4GbtQCrEBSbG7W
fr4gPwbMaM3yPl0uV2R+bUCNL/Bg7Vvfj1e/wQoVfxq8hNQf7X2a0y5gWYethCen
G8PwPss9HGI/Lg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:36:34 2025 by rpki-client