Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
File: vZC8PjcRQLQqIdaX2DANlBCiSao.mft (raw, json)
Hash identifier: wBAjZC4f4r0H0gtFvLKnrk+UEBYRvl7V5WtXdxgmXRc=
Subject key identifier: 0C:E3:C6:EC:62:CF:54:AD:3F:75:2D:4C:7B:DC:2D:3E:BF:D8:DB:19
Authority key identifier: BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
Certificate issuer: /CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Certificate serial: 0197499ED9B6E75EEBF4BE0F7B3C296671E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
Manifest number: 0713
Signing time: Sat 07 Jun 2025 09:00:36 +0000
Manifest this update: Sat 07 Jun 2025 09:00:36 +0000
Manifest next update: Sun 08 Jun 2025 09:00:36 +0000
Files and hashes: 1: t8BDYn1_4F2TyunsqfKmIL3bpGQ.roa (hash: 96TEsEkP40hfvXfLq7oaqGEhgKhW300uagupuFMXgtg=)
2: vZC8PjcRQLQqIdaX2DANlBCiSao.crl (hash: zslMZkgrikwDPWI57k6IcIHJo/BjrbRIC1qdBsQoA1Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:d9:b6:e7:5e:eb:f4:be:0f:7b:3c:29:66:71:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd90bc3e371140b42a21d697d8300d9410a249aa
Validity
Not Before: Jun 7 09:00:36 2025 GMT
Not After : Jun 8 09:00:36 2025 GMT
Subject: CN=0ce3c6ec62cf54ad3f752d4c7bdc2d3ebfd8db19
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:c9:10:3a:08:8d:70:3a:6d:73:45:0b:34:e3:
5b:b4:db:03:71:2d:7f:ec:46:9f:79:26:71:c4:c4:
6e:46:f0:61:b2:43:61:be:1e:09:1c:07:14:85:e9:
17:1a:f1:b2:bc:89:7f:1a:ff:d2:3c:4c:cf:ad:cc:
c7:a1:d3:92:ef:a2:32:c6:1b:cd:63:84:d2:fd:1b:
63:8f:4d:10:57:32:43:e2:10:85:57:94:0d:97:d2:
c5:ed:4d:1b:33:3b:b7:5e:43:83:0c:d6:d0:ee:69:
ee:14:23:55:7d:e1:87:90:bd:84:5c:0e:15:b6:2d:
80:69:ce:74:fe:59:70:8c:b6:a1:f6:3d:2e:76:b7:
7a:34:83:cd:76:6c:c7:59:26:59:09:8a:84:fd:9f:
12:c9:c2:5c:3c:d4:19:79:b3:c1:af:7d:67:e3:43:
6b:92:bc:fb:39:bc:91:d5:e1:b3:81:a4:0b:e9:46:
25:a7:f1:cb:cf:03:cf:b6:5e:4c:12:e9:28:15:dc:
c1:46:49:99:c1:f4:48:a5:10:4e:0c:70:41:fc:49:
68:3e:9a:cc:7c:a1:22:82:db:74:0c:4a:7b:32:ba:
03:9e:92:51:ff:9a:9e:2d:c7:b0:74:ec:bd:e9:8c:
67:6e:ff:29:18:0f:04:ba:50:79:ce:fa:66:14:f6:
c7:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:E3:C6:EC:62:CF:54:AD:3F:75:2D:4C:7B:DC:2D:3E:BF:D8:DB:19
X509v3 Authority Key Identifier:
keyid:BD:90:BC:3E:37:11:40:B4:2A:21:D6:97:D8:30:0D:94:10:A2:49:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZC8PjcRQLQqIdaX2DANlBCiSao.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b2/54e8a6-4d81-4875-a987-feb0e515c02c/1/vZC8PjcRQLQqIdaX2DANlBCiSao.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:b0:cf:6f:70:dc:31:d0:1c:17:d0:12:cd:92:55:2a:43:f7:
91:1b:ed:be:b0:e6:71:0b:44:e4:f5:be:b9:77:3a:6b:1e:f9:
58:e0:14:a2:0a:7c:4d:c5:0e:8c:28:92:19:cf:dd:93:5b:d7:
18:28:bd:b6:f5:0f:da:ce:d9:4a:6d:6a:5c:18:de:77:18:e6:
0d:68:3d:e9:36:2e:e9:e7:2c:26:f6:97:20:6b:eb:e0:43:61:
36:6b:7c:3b:bc:ac:b0:01:aa:9d:33:f5:4e:53:84:cc:d5:48:
f4:74:c7:3d:af:95:5c:81:12:ce:ba:46:f3:0f:b4:85:65:75:
db:85:23:4f:f6:26:ea:ec:e7:74:c9:4c:90:d8:49:15:bb:b5:
10:84:59:c0:a9:fa:e3:59:1e:7b:c1:9d:d7:9b:83:a6:37:ad:
2b:12:6f:ab:b0:a3:47:32:e3:e0:e2:90:5d:64:0e:a5:d4:58:
08:63:e0:9b:c9:99:55:ec:6f:7c:4d:8d:7f:ae:e6:27:50:ff:
63:22:5a:b7:d7:3b:8f:b5:1c:49:30:ef:dd:96:aa:7c:60:23:
4f:c2:34:fe:f9:c4:10:70:cb:86:fb:69:4f:2f:0e:c3:1e:66:
17:3b:6b:c9:03:3d:94:25:f9:ef:cb:88:70:b0:ea:07:f9:40:
53:26:7f:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJntm2517r9L4PezwpZnHiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOTBiYzNlMzcxMTQwYjQyYTIxZDY5N2Q4MzAwZDk0MTBh
MjQ5YWEwHhcNMjUwNjA3MDkwMDM2WhcNMjUwNjA4MDkwMDM2WjAzMTEwLwYDVQQD
EygwY2UzYzZlYzYyY2Y1NGFkM2Y3NTJkNGM3YmRjMmQzZWJmZDhkYjE5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxskQOgiNcDptc0ULNONbtNsDcS1/
7EafeSZxxMRuRvBhskNhvh4JHAcUhekXGvGyvIl/Gv/SPEzPrczHodOS76IyxhvN
Y4TS/Rtjj00QVzJD4hCFV5QNl9LF7U0bMzu3XkODDNbQ7mnuFCNVfeGHkL2EXA4V
ti2Aac50/llwjLah9j0udrd6NIPNdmzHWSZZCYqE/Z8SycJcPNQZebPBr31n40Nr
krz7ObyR1eGzgaQL6UYlp/HLzwPPtl5MEukoFdzBRkmZwfRIpRBODHBB/EloPprM
fKEigtt0DEp7MroDnpJR/5qeLcewdOy96Yxnbv8pGA8EulB5zvpmFPbH+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAzjxuxiz1StP3UtTHvcLT6/2NsZMB8GA1UdIwQY
MBaAFL2QvD43EUC0KiHWl9gwDZQQokmqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMi81NGU4YTYtNGQ4MS00ODc1LWE5ODct
ZmViMGU1MTVjMDJjLzEvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMi81NGU4YTYtNGQ4MS00ODc1LWE5ODctZmViMGU1MTVjMDJj
LzEvdlpDOFBqY1JRTFFxSWRhWDJEQU5sQkNpU2FvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMLDPb3Dc
MdAcF9ASzZJVKkP3kRvtvrDmcQtE5PW+uXc6ax75WOAUogp8TcUOjCiSGc/dk1vX
GCi9tvUP2s7ZSm1qXBjedxjmDWg96TYu6ecsJvaXIGvr4ENhNmt8O7yssAGqnTP1
TlOEzNVI9HTHPa+VXIESzrpG8w+0hWV124UjT/Ym6uzndMlMkNhJFbu1EIRZwKn6
41kee8Gd15uDpjetKxJvq7CjRzLj4OKQXWQOpdRYCGPgm8mZVexvfE2Nf67mJ1D/
YyJat9c7j7UcSTDv3ZaqfGAjT8I0/vnEEHDLhvtpTy8Owx5mFztryQM9lCX578uI
cLDqB/lAUyZ/Tg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:36:12 2025 by rpki-client