Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
File: vZoDUhhk_eVxr63vAfMpdZg9H2I.mft (raw, json)
Hash identifier: Jnvw+JmUj7S2KRsfTlivxuAvluk8snJp6Yn0V1henDI=
Subject key identifier: 00:5A:AD:78:D6:5F:A3:DC:48:A2:28:D8:46:CE:D9:BE:65:02:0E:B9
Authority key identifier: BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
Certificate issuer: /CN=bd9a03521864fde571afadef01f32975983d1f62
Certificate serial: 019921B1F86A11B74E6648100205DE7A2FB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
Manifest number: 0156
Signing time: Sun 07 Sep 2025 01:02:15 +0000
Manifest this update: Sun 07 Sep 2025 01:02:15 +0000
Manifest next update: Mon 08 Sep 2025 01:02:15 +0000
Files and hashes: 1: RJNuysFIW66Gw4c0piXvnXkEo9o.roa (hash: /TsRrqxKejX5cWBdLvn7sFDNt5iNj6A7iHaePoLLWJk=)
2: vZoDUhhk_eVxr63vAfMpdZg9H2I.crl (hash: o0nmB3ZGouYWz/nZI/9tsUmsxTPxe/7P6HTGhY/lSfs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 01:02:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:21:b1:f8:6a:11:b7:4e:66:48:10:02:05:de:7a:2f:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd9a03521864fde571afadef01f32975983d1f62
Validity
Not Before: Sep 7 01:02:15 2025 GMT
Not After : Sep 8 01:02:15 2025 GMT
Subject: CN=005aad78d65fa3dc48a228d846ced9be65020eb9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:03:43:65:ad:84:61:12:09:13:b9:95:ae:6a:
a8:66:e5:20:86:7c:73:ec:bb:b7:0a:7d:15:0b:fa:
50:fb:ee:c6:85:3c:52:07:a7:31:ae:bf:de:10:bb:
db:a1:d8:fc:ed:00:14:df:d4:c5:67:15:62:b0:57:
db:0e:b0:a5:ac:00:39:bb:1c:c9:99:c3:92:a2:ce:
0c:93:b2:c9:e6:e3:ff:96:50:3b:2c:12:e3:f8:64:
73:49:ed:a3:3a:9b:6a:31:72:c9:c7:09:df:1e:ca:
e8:5e:2b:cb:49:94:f6:c2:31:18:8d:ea:a6:ea:7d:
94:d8:28:bb:cc:77:e3:32:bc:f6:02:90:e2:00:ea:
38:d3:18:26:3c:fe:c2:c9:b5:52:56:a8:02:39:ff:
d7:46:a5:79:b9:27:4b:56:d4:8c:69:a1:b4:cc:be:
02:32:eb:e1:7c:93:14:11:42:66:aa:89:ae:8d:58:
b8:ee:80:36:95:00:6d:8d:b9:ce:52:b3:4d:bb:c1:
45:f3:50:df:8c:7e:67:a3:cd:39:d5:70:46:bc:16:
b1:51:78:18:e5:33:b2:27:f8:1e:61:14:a6:12:43:
14:ca:89:33:b5:2f:87:d7:a3:0c:f2:2f:4e:18:44:
f0:17:41:65:2d:02:e2:a4:59:28:0c:82:e1:a2:d9:
0b:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:5A:AD:78:D6:5F:A3:DC:48:A2:28:D8:46:CE:D9:BE:65:02:0E:B9
X509v3 Authority Key Identifier:
keyid:BD:9A:03:52:18:64:FD:E5:71:AF:AD:EF:01:F3:29:75:98:3D:1F:62
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vZoDUhhk_eVxr63vAfMpdZg9H2I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bf/ad570e-7e21-4671-a7bd-6795e6c87247/1/vZoDUhhk_eVxr63vAfMpdZg9H2I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:ad:8c:40:02:ee:2d:50:09:f5:d4:69:1f:80:d9:2f:23:de:
96:fa:0d:e3:0d:ff:bd:c4:17:9f:30:b6:1c:d6:b3:9b:07:a6:
89:ae:30:4f:aa:41:35:81:47:15:d0:1d:1d:e1:2b:9b:1b:70:
cf:17:f7:fa:15:5b:bb:2b:1f:ea:31:0e:e6:09:3b:91:a6:39:
40:11:62:6e:6e:b9:fb:f5:21:18:ef:74:21:75:f8:f3:d5:9d:
91:2e:ff:90:f0:03:37:46:52:4a:49:d2:76:12:a0:22:66:4d:
42:a2:43:55:dd:8b:0c:7d:19:bd:e2:a7:2f:19:7c:45:32:36:
6c:b4:19:c8:96:b1:e7:11:3c:03:34:e2:de:0b:bd:16:02:d6:
a9:ce:3e:7d:88:95:17:7c:33:0d:12:11:4f:32:4e:1b:d5:3a:
76:45:2d:ec:bf:ed:cd:5d:0c:a8:88:e9:98:a2:f2:ca:d9:3a:
fd:ef:89:44:e8:05:9b:67:74:83:6d:79:3a:59:3f:c1:58:d5:
64:00:11:7f:b3:2f:6e:1c:49:d6:d0:0e:77:a7:94:db:53:cc:
78:31:61:c8:8e:3c:7a:ee:26:86:14:b1:f8:42:51:d0:1b:06:
b9:37:53:7f:85:9e:1a:96:76:5c:2b:e0:b6:d3:78:01:44:62:
e0:e7:79:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkhsfhqEbdOZkgQAgXeei+wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkOWEwMzUyMTg2NGZkZTU3MWFmYWRlZjAxZjMyOTc1OTgz
ZDFmNjIwHhcNMjUwOTA3MDEwMjE1WhcNMjUwOTA4MDEwMjE1WjAzMTEwLwYDVQQD
EygwMDVhYWQ3OGQ2NWZhM2RjNDhhMjI4ZDg0NmNlZDliZTY1MDIwZWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6gNDZa2EYRIJE7mVrmqoZuUghnxz
7Lu3Cn0VC/pQ++7GhTxSB6cxrr/eELvbodj87QAU39TFZxVisFfbDrClrAA5uxzJ
mcOSos4Mk7LJ5uP/llA7LBLj+GRzSe2jOptqMXLJxwnfHsroXivLSZT2wjEYjeqm
6n2U2Ci7zHfjMrz2ApDiAOo40xgmPP7CybVSVqgCOf/XRqV5uSdLVtSMaaG0zL4C
MuvhfJMUEUJmqomujVi47oA2lQBtjbnOUrNNu8FF81DfjH5no8051XBGvBaxUXgY
5TOyJ/geYRSmEkMUyokztS+H16MM8i9OGETwF0FlLQLipFkoDILhotkLzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFABarXjWX6PcSKIo2EbO2b5lAg65MB8GA1UdIwQY
MBaAFL2aA1IYZP3lca+t7wHzKXWYPR9iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZi9hZDU3MGUtN2UyMS00NjcxLWE3YmQt
Njc5NWU2Yzg3MjQ3LzEvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZi9hZDU3MGUtN2UyMS00NjcxLWE3YmQtNjc5NWU2Yzg3MjQ3
LzEvdlpvRFVoaGtfZVZ4cjYzdkFmTXBkWmc5SDJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAK2MQALu
LVAJ9dRpH4DZLyPelvoN4w3/vcQXnzC2HNazmwemia4wT6pBNYFHFdAdHeErmxtw
zxf3+hVbuysf6jEO5gk7kaY5QBFibm65+/UhGO90IXX489WdkS7/kPADN0ZSSknS
dhKgImZNQqJDVd2LDH0ZveKnLxl8RTI2bLQZyJax5xE8AzTi3gu9FgLWqc4+fYiV
F3wzDRIRTzJOG9U6dkUt7L/tzV0MqIjpmKLyytk6/e+JROgFm2d0g215Olk/wVjV
ZAARf7MvbhxJ1tAOd6eU21PMeDFhyI48eu4mhhSx+EJR0BsGuTdTf4WeGpZ2XCvg
ttN4AURi4Od5GQ==
-----END CERTIFICATE-----
Generated at Sun Sep 7 11:24:52 2025 by rpki-client