Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
File: vyYxqJlAx3n72dojGh0umEDJx8Y.mft (raw, json)
Hash identifier: WH/XuA9Qja3o/kb53iza5hiMSVEMwZh7p68ocVTW9dE=
Subject key identifier: CE:B6:9C:B7:3A:64:4C:E8:23:BC:5E:5D:C9:8C:36:00:6B:0C:19:5C
Authority key identifier: BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
Certificate issuer: /CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Certificate serial: 019747B114221D571FDE550E87D38B2E2EA8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 00:01:16 +0000
Manifest this update: Sat 07 Jun 2025 00:01:16 +0000
Manifest next update: Sun 08 Jun 2025 00:01:16 +0000
Files and hashes: 1: DEn4JQPghs2T3ZxJbDlQm6KWdJI.roa (hash: L1xxxOCLHdiHBvdX2bAU1yEEGqFCGIfW3cUmFenxpnE=)
2: vyYxqJlAx3n72dojGh0umEDJx8Y.crl (hash: TEiEUamGQzAHEM+w+6eg1KnKArhPXqLbdPi3xzvaCNI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b1:14:22:1d:57:1f:de:55:0e:87:d3:8b:2e:2e:a8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2631a89940c779fbd9da231a1d2e9840c9c7c6
Validity
Not Before: Jun 7 00:01:16 2025 GMT
Not After : Jun 8 00:01:16 2025 GMT
Subject: CN=ceb69cb73a644ce823bc5e5dc98c36006b0c195c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:ca:92:79:f9:e1:b9:ab:9c:35:2d:52:2b:2d:
c5:6b:b0:d6:ab:fb:f0:58:5d:05:81:d1:36:3b:62:
ed:69:a9:77:08:e1:45:c8:20:cf:f0:0a:64:66:cb:
d5:3e:43:c4:ba:47:42:6b:1d:2c:61:c4:02:3b:78:
d8:cf:9c:b1:99:b4:07:64:8f:c4:36:2d:a8:62:61:
f4:e9:ed:e1:6f:94:fe:14:67:57:e4:79:f0:a3:f3:
cc:eb:2d:3b:dd:ae:73:5f:a3:7d:10:24:cf:d8:7e:
e7:a6:38:c4:2f:36:a9:e1:9c:e7:64:4f:58:3d:0b:
eb:e3:cb:b4:37:39:10:db:e8:52:92:14:c7:f7:9a:
b5:d6:a6:2f:75:0a:0c:f7:91:71:21:b9:20:a1:2a:
53:a8:dd:9a:ae:a0:9c:35:dc:1e:8c:e0:91:75:42:
a8:ae:43:6b:75:d6:81:5b:70:c6:76:91:e9:34:5f:
8b:a8:8c:f3:14:e1:a7:22:82:b1:c7:2b:74:dd:f6:
6f:2a:aa:15:0b:8b:e3:31:24:29:48:61:1e:0e:68:
e5:04:a4:66:72:8a:8a:fa:67:a3:f0:d6:11:6e:25:
de:55:8b:e9:19:0c:fb:f1:b1:4c:79:11:08:52:82:
0c:0d:12:bf:f2:e0:93:03:9d:99:f4:c9:be:71:c6:
67:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:B6:9C:B7:3A:64:4C:E8:23:BC:5E:5D:C9:8C:36:00:6B:0C:19:5C
X509v3 Authority Key Identifier:
keyid:BF:26:31:A8:99:40:C7:79:FB:D9:DA:23:1A:1D:2E:98:40:C9:C7:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyYxqJlAx3n72dojGh0umEDJx8Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/d60548-8608-401c-a2b5-cd7b288d6ea0/1/vyYxqJlAx3n72dojGh0umEDJx8Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:aa:e5:63:4c:5a:c2:c9:d4:29:52:e2:14:42:10:56:92:59:
14:66:61:28:ef:ec:c3:f2:c8:22:c5:06:8f:01:d2:7b:d8:da:
9c:1a:63:0a:f1:a7:f3:40:83:37:9c:38:d0:5d:61:b9:a2:a1:
f0:71:ad:3c:c1:b2:d2:7b:9d:96:ae:6e:17:a2:07:2f:17:a2:
9c:a2:d2:ec:5b:cf:27:22:af:6e:a7:bf:2d:a1:57:e2:db:43:
32:01:b8:c3:b1:d6:45:b1:3d:96:c8:ff:14:bb:df:84:61:a3:
3e:5b:6c:c2:af:ec:b4:03:d4:e6:6b:83:4b:69:df:f0:3e:fa:
96:ee:3f:9b:76:e7:e1:01:31:17:ad:cc:01:9c:91:b6:8e:19:
8c:08:5e:8c:ac:1d:06:18:30:6d:c0:95:33:9f:af:74:d4:c9:
5e:49:70:39:bf:53:21:26:55:90:15:83:7d:65:cb:93:8e:4a:
03:c5:fe:e2:3e:51:fd:75:68:53:39:8c:da:1b:25:64:33:02:
93:0a:85:3d:8f:f7:44:05:af:4a:d6:c5:22:41:17:bf:cc:2e:
8b:38:ae:0e:9d:b3:60:65:36:00:e8:5b:0b:eb:eb:cf:d1:07:
ea:33:6a:4a:b4:6a:4c:1a:51:99:0c:39:f5:11:c7:fa:e6:59:
62:06:f8:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsRQiHVcf3lUOh9OLLi6oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjYzMWE4OTk0MGM3NzlmYmQ5ZGEyMzFhMWQyZTk4NDBj
OWM3YzYwHhcNMjUwNjA3MDAwMTE2WhcNMjUwNjA4MDAwMTE2WjAzMTEwLwYDVQQD
EyhjZWI2OWNiNzNhNjQ0Y2U4MjNiYzVlNWRjOThjMzYwMDZiMGMxOTVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtcqSefnhuaucNS1SKy3Fa7DWq/vw
WF0FgdE2O2Ltaal3COFFyCDP8ApkZsvVPkPEukdCax0sYcQCO3jYz5yxmbQHZI/E
Ni2oYmH06e3hb5T+FGdX5Hnwo/PM6y073a5zX6N9ECTP2H7npjjELzap4ZznZE9Y
PQvr48u0NzkQ2+hSkhTH95q11qYvdQoM95FxIbkgoSpTqN2arqCcNdwejOCRdUKo
rkNrddaBW3DGdpHpNF+LqIzzFOGnIoKxxyt03fZvKqoVC4vjMSQpSGEeDmjlBKRm
coqK+mej8NYRbiXeVYvpGQz78bFMeREIUoIMDRK/8uCTA52Z9Mm+ccZnHwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM62nLc6ZEzoI7xeXcmMNgBrDBlcMB8GA1UdIwQY
MBaAFL8mMaiZQMd5+9naIxodLphAycfGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi9kNjA1NDgtODYwOC00MDFjLWEyYjUt
Y2Q3YjI4OGQ2ZWEwLzEvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi9kNjA1NDgtODYwOC00MDFjLWEyYjUtY2Q3YjI4OGQ2ZWEw
LzEvdnlZeHFKbEF4M243MmRvakdoMHVtRURKeDhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK6rlY0xa
wsnUKVLiFEIQVpJZFGZhKO/sw/LIIsUGjwHSe9janBpjCvGn80CDN5w40F1huaKh
8HGtPMGy0nudlq5uF6IHLxeinKLS7FvPJyKvbqe/LaFX4ttDMgG4w7HWRbE9lsj/
FLvfhGGjPltswq/stAPU5muDS2nf8D76lu4/m3bn4QExF63MAZyRto4ZjAhejKwd
BhgwbcCVM5+vdNTJXklwOb9TISZVkBWDfWXLk45KA8X+4j5R/XVoUzmM2hslZDMC
kwqFPY/3RAWvStbFIkEXv8wuiziuDp2zYGU2AOhbC+vrz9EH6jNqSrRqTBpRmQw5
9RHH+uZZYgb47w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:36:37 2025 by rpki-client