Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: GZa5U7yRQGaO8817dj6yASCMv5F7EpWvbd9asTIUIi4=
Subject key identifier: 90:D0:29:F2:1B:D5:A0:25:03:AD:5B:89:B6:C6:82:86:49:7F:51:C5
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 01974D0D9BAA9AD2293D2BD3EBF193A51403
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 157E
Signing time: Sun 08 Jun 2025 01:00:26 +0000
Manifest this update: Sun 08 Jun 2025 01:00:26 +0000
Manifest next update: Mon 09 Jun 2025 01:00:26 +0000
Files and hashes: 1: 7_ycmg0-2tzp7CIdo8gplL9a278.roa (hash: XEoDI5Kr97fRLNGyRswSpfdzIPuYNKJgNWwTLw/sOpg=)
2: u42E-rWAmQgBLYpngQke_W6nUiE.roa (hash: skcKb420yoQzvUX8+CNyJl60MwIyb91kXhUGkdXKV9A=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: WiJmKVmY4MXVcLlXXscTeJAaWWx5Jqf9DAx40ZshFwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:0d:9b:aa:9a:d2:29:3d:2b:d3:eb:f1:93:a5:14:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Jun 8 01:00:26 2025 GMT
Not After : Jun 9 01:00:26 2025 GMT
Subject: CN=90d029f21bd5a02503ad5b89b6c68286497f51c5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:9d:79:f9:56:36:c1:e6:b8:cc:71:b6:97:b9:
9d:00:c0:ab:8d:42:ca:11:ae:cf:76:71:7e:9e:ec:
8e:84:3b:27:20:4e:ab:2c:76:1e:b7:d1:05:70:be:
54:9a:b6:e1:60:83:7c:7d:a9:62:85:9a:2a:e9:67:
13:d3:45:04:d2:2d:b0:5d:86:75:e1:0c:cc:ce:e6:
33:ce:50:e1:0f:df:d8:f3:9d:9a:29:69:ac:17:fd:
29:a7:c8:52:26:8f:1b:f5:41:d1:f6:d0:12:f9:06:
30:1e:08:42:56:96:07:3d:7c:17:bb:4d:35:f5:85:
c4:12:a8:41:75:e0:56:2f:41:01:f7:66:ff:0d:24:
c9:2e:c7:27:4f:5a:bc:4c:38:7e:b5:86:64:a5:60:
77:80:5c:cf:48:df:88:53:05:15:eb:a6:d1:0d:41:
01:0d:53:6e:f7:63:85:35:45:37:51:4c:92:fe:b6:
a5:28:a3:95:61:b6:56:5e:f0:9d:08:a4:34:e1:5e:
fa:a7:d8:47:ab:92:fe:16:6d:64:fc:22:96:4b:66:
fd:28:84:18:d1:38:8b:c5:33:bf:42:f4:5f:41:b2:
0f:12:a1:93:91:58:94:cf:e8:a6:bd:c7:32:bf:4a:
31:31:f8:00:2b:cb:a2:77:96:7a:60:e6:1e:27:b7:
f9:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:D0:29:F2:1B:D5:A0:25:03:AD:5B:89:B6:C6:82:86:49:7F:51:C5
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:a1:c7:93:13:be:8b:44:5e:0d:26:a3:49:7f:fd:00:b3:b0:
a6:ee:07:72:c5:9a:ca:9f:aa:c2:90:8a:da:29:d2:a8:e7:65:
b5:c6:cf:e0:a0:1a:7b:b6:d4:b8:5b:ab:03:0d:ea:1a:4b:89:
ae:2d:65:b7:c9:72:66:5c:9a:54:33:b6:52:ab:d4:1c:d2:d8:
a1:7a:ef:88:c0:0f:00:2b:92:ed:7b:91:38:44:8e:ee:a3:ee:
87:a3:53:fd:83:df:cf:41:a1:3a:1f:91:85:72:98:8d:c8:4b:
3f:29:cb:06:c8:f8:eb:0e:2e:8c:f6:f1:ff:bc:ba:35:57:b4:
24:89:2f:db:2b:1d:b1:3a:ae:6e:a6:c2:ac:1a:0a:95:61:db:
39:c7:1b:b5:b9:31:73:cb:ed:64:c8:65:ec:5b:14:28:b7:d5:
f3:d8:ab:0d:03:fb:34:fd:e3:ab:8d:55:93:f9:61:c8:c9:96:
12:ff:a2:55:26:50:64:e0:30:68:82:31:f9:54:97:36:ed:b4:
e6:de:4f:9d:05:52:10:6b:6a:b6:fd:ea:b5:84:e6:22:16:59:
76:88:9e:7f:d5:83:8a:4d:57:ff:2d:84:f6:18:30:15:bf:cc:
61:63:3b:93:d7:68:08:ac:da:62:b7:2a:ea:c9:d2:bd:59:bf:
d3:44:c6:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNDZuqmtIpPSvT6/GTpRQDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZTM1NDJkZDYzZmVkMjUwZGU1Y2I2NWY2ZWNhNDg3ZTdm
NDc4NDcwHhcNMjUwNjA4MDEwMDI2WhcNMjUwNjA5MDEwMDI2WjAzMTEwLwYDVQQD
Eyg5MGQwMjlmMjFiZDVhMDI1MDNhZDViODliNmM2ODI4NjQ5N2Y1MWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtJ15+VY2wea4zHG2l7mdAMCrjULK
Ea7PdnF+nuyOhDsnIE6rLHYet9EFcL5UmrbhYIN8falihZoq6WcT00UE0i2wXYZ1
4QzMzuYzzlDhD9/Y852aKWmsF/0pp8hSJo8b9UHR9tAS+QYwHghCVpYHPXwXu001
9YXEEqhBdeBWL0EB92b/DSTJLscnT1q8TDh+tYZkpWB3gFzPSN+IUwUV66bRDUEB
DVNu92OFNUU3UUyS/ralKKOVYbZWXvCdCKQ04V76p9hHq5L+Fm1k/CKWS2b9KIQY
0TiLxTO/QvRfQbIPEqGTkViUz+imvccyv0oxMfgAK8uid5Z6YOYeJ7f5wQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJDQKfIb1aAlA61bibbGgoZJf1HFMB8GA1UdIwQY
MBaAFL/jVC3WP+0lDeXLZfbspIfn9HhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMTU2NTgtMTBiNi00MDQxLWEzZGEt
OGQzYTZkMTY1ZGEzLzEvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9iMTU2NTgtMTBiNi00MDQxLWEzZGEtOGQzYTZkMTY1ZGEz
LzEvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUqHHkxO+
i0ReDSajSX/9ALOwpu4HcsWayp+qwpCK2inSqOdltcbP4KAae7bUuFurAw3qGkuJ
ri1lt8lyZlyaVDO2UqvUHNLYoXrviMAPACuS7XuROESO7qPuh6NT/YPfz0GhOh+R
hXKYjchLPynLBsj46w4ujPbx/7y6NVe0JIkv2ysdsTqubqbCrBoKlWHbOccbtbkx
c8vtZMhl7FsUKLfV89irDQP7NP3jq41Vk/lhyMmWEv+iVSZQZOAwaIIx+VSXNu20
5t5PnQVSEGtqtv3qtYTmIhZZdoief9WDik1X/y2E9hgwFb/MYWM7k9doCKzaYrcq
6snSvVm/00TG+w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 05:21:43 2025 by rpki-client