Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
File: vGW0uk14adXLj5V08PT-7nDrxsU.mft (raw, json)
Hash identifier: fWWk9uLKsWFVcA2tNdw6lTksy87pA0N48EgYmx7Ju/E=
Subject key identifier: 34:9C:BC:89:AD:DD:98:3A:01:F6:7B:1A:B5:EE:5C:AF:4D:20:8D:B3
Authority key identifier: BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
Certificate issuer: /CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Certificate serial: 019751FD0FDE613844C6AAF04721D554698C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
Manifest number: 1582
Signing time: Mon 09 Jun 2025 00:00:28 +0000
Manifest this update: Mon 09 Jun 2025 00:00:28 +0000
Manifest next update: Tue 10 Jun 2025 00:00:28 +0000
Files and hashes: 1: Lyt3wxp7GPsYmae1yjcH7ZriVhY.roa (hash: hPKn4hG6PTy5BGSQf4AvDzlOXQQIjurdWjZynBc0Dss=)
2: tj6K5SjptWHwjdC118oFQLdh9d0.roa (hash: r+olKMGe/rwlvBp2fd9whUIN+tGxqF1STWjeBypW8Gg=)
3: vGW0uk14adXLj5V08PT-7nDrxsU.crl (hash: N2nkUVAJvyJTEr1QoQ5Igky/ze7mWIHG3fren0gSyTU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:fd:0f:de:61:38:44:c6:aa:f0:47:21:d5:54:69:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc65b4ba4d7869d5cb8f9574f0f4feee70ebc6c5
Validity
Not Before: Jun 9 00:00:28 2025 GMT
Not After : Jun 10 00:00:28 2025 GMT
Subject: CN=349cbc89addd983a01f67b1ab5ee5caf4d208db3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:d2:4e:f8:72:e7:ec:8d:41:dd:e3:4a:a7:ad:
4c:11:7b:65:ea:5e:8f:8b:31:8e:d5:af:a3:3d:53:
31:47:e6:f7:16:27:db:93:6c:1e:53:a6:8f:04:db:
f7:5c:bb:67:fd:c0:7c:45:95:29:f1:be:1e:19:60:
5f:b0:28:1f:f6:7a:3a:75:9b:4c:ce:49:0b:33:0b:
46:e1:68:de:9d:d3:b2:78:58:24:99:55:38:30:46:
0d:9e:48:7e:d3:2f:91:4f:b4:1c:2f:03:d1:3d:5f:
c5:ff:82:2e:5c:5b:11:52:fc:48:d1:f7:78:3a:fd:
96:af:f6:d2:9a:14:34:b7:8e:7d:86:1e:e4:53:c7:
09:78:ae:e2:51:a7:08:d0:c1:04:0d:4e:77:17:e6:
6f:04:e1:6e:11:b7:c7:f5:b5:90:81:85:02:fd:8e:
a2:e3:b4:e8:6d:87:8c:74:92:ec:b2:53:f4:ad:0a:
8d:9d:ec:c3:82:50:e5:b4:40:0b:ff:9e:46:95:69:
08:11:bd:16:c2:44:41:10:53:f9:68:e1:4b:b4:6a:
72:7b:92:73:98:01:69:b4:96:8a:04:58:b5:8b:b6:
50:28:d7:90:5d:0a:35:04:76:e1:12:13:a2:08:59:
67:40:4e:63:df:44:4f:d9:7e:4f:e2:12:20:da:0b:
04:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:9C:BC:89:AD:DD:98:3A:01:F6:7B:1A:B5:EE:5C:AF:4D:20:8D:B3
X509v3 Authority Key Identifier:
keyid:BC:65:B4:BA:4D:78:69:D5:CB:8F:95:74:F0:F4:FE:EE:70:EB:C6:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGW0uk14adXLj5V08PT-7nDrxsU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/442101-780b-47ac-857d-f9e7cb03c527/1/vGW0uk14adXLj5V08PT-7nDrxsU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:87:26:be:cf:ab:11:b7:5e:c7:de:69:eb:28:21:81:84:53:
da:fe:c4:8a:b1:26:7f:73:5a:f7:a9:2f:3f:1e:0b:e3:5a:a1:
77:43:4e:61:8b:20:91:a3:c1:f2:9a:78:82:4f:73:db:e8:0b:
7e:74:dc:4e:0d:8e:4c:a3:58:d9:08:42:47:d6:d8:a2:ef:7a:
0a:5e:d1:ae:19:84:74:8b:ae:61:eb:25:9b:af:85:63:8e:8f:
06:59:7f:b3:c5:31:b3:13:60:55:4d:b1:2a:d1:94:ab:7d:d7:
18:39:ab:fb:17:0a:11:5f:2f:fe:29:1b:97:10:bb:dc:b8:b7:
7b:3b:49:c3:91:a1:23:73:ba:cc:75:ec:4c:63:1d:38:bd:62:
5c:a3:3c:db:c7:f8:3c:92:ea:8a:a2:7e:57:23:08:da:3c:24:
71:fc:db:20:ff:e2:83:73:3b:be:77:e8:55:28:2f:f5:d9:9e:
89:b7:61:01:c2:20:56:a9:db:ad:7d:78:7d:88:af:42:f9:b1:
85:66:b3:45:08:5f:85:2e:fa:91:83:b7:34:a4:0c:03:87:b9:
72:37:a4:c4:27:c8:7a:35:ec:46:09:d7:75:90:8c:1b:07:c8:
ef:c4:38:e5:b4:d6:c3:ce:70:e8:c6:63:df:83:29:6d:80:3e:
b0:04:36:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdR/Q/eYThExqrwRyHVVGmMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNjViNGJhNGQ3ODY5ZDVjYjhmOTU3NGYwZjRmZWVlNzBl
YmM2YzUwHhcNMjUwNjA5MDAwMDI4WhcNMjUwNjEwMDAwMDI4WjAzMTEwLwYDVQQD
EygzNDljYmM4OWFkZGQ5ODNhMDFmNjdiMWFiNWVlNWNhZjRkMjA4ZGIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArtJO+HLn7I1B3eNKp61MEXtl6l6P
izGO1a+jPVMxR+b3Fifbk2weU6aPBNv3XLtn/cB8RZUp8b4eGWBfsCgf9no6dZtM
zkkLMwtG4WjendOyeFgkmVU4MEYNnkh+0y+RT7QcLwPRPV/F/4IuXFsRUvxI0fd4
Ov2Wr/bSmhQ0t459hh7kU8cJeK7iUacI0MEEDU53F+ZvBOFuEbfH9bWQgYUC/Y6i
47TobYeMdJLsslP0rQqNnezDglDltEAL/55GlWkIEb0WwkRBEFP5aOFLtGpye5Jz
mAFptJaKBFi1i7ZQKNeQXQo1BHbhEhOiCFlnQE5j30RP2X5P4hIg2gsESwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDScvImt3Zg6AfZ7GrXuXK9NII2zMB8GA1UdIwQY
MBaAFLxltLpNeGnVy4+VdPD0/u5w68bFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkdXMHVrMTRhZFhMajVWMDhQVC03bkRyeHNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80NDIxMDEtNzgwYi00N2FjLTg1N2Qt
ZjllN2NiMDNjNTI3LzEvdkdXMHVrMTRhZFhMajVWMDhQVC03bkRyeHNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80NDIxMDEtNzgwYi00N2FjLTg1N2QtZjllN2NiMDNjNTI3
LzEvdkdXMHVrMTRhZFhMajVWMDhQVC03bkRyeHNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAocmvs+r
Ebdex95p6yghgYRT2v7EirEmf3Na96kvPx4L41qhd0NOYYsgkaPB8pp4gk9z2+gL
fnTcTg2OTKNY2QhCR9bYou96Cl7RrhmEdIuuYeslm6+FY46PBll/s8UxsxNgVU2x
KtGUq33XGDmr+xcKEV8v/ikblxC73Li3eztJw5GhI3O6zHXsTGMdOL1iXKM828f4
PJLqiqJ+VyMI2jwkcfzbIP/ig3M7vnfoVSgv9dmeibdhAcIgVqnbrX14fYivQvmx
hWazRQhfhS76kYO3NKQMA4e5cjekxCfIejXsRgnXdZCMGwfI78Q45bTWw85w6MZj
34MpbYA+sAQ2hQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 05:51:26 2025 by rpki-client