Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
File: vx1ZdLTlmcpy3MTawGbXcUIC78k.mft (raw, json)
Hash identifier: uTjmb8fFFxmAdqLDKYKnoKhhmxODIfRtXaXV+u3Z0ng=
Subject key identifier: 97:1A:E9:36:FD:2A:F7:82:D0:BA:6F:DD:05:54:1C:6E:98:31:D3:8A
Authority key identifier: BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
Certificate issuer: /CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Certificate serial: 019746300964D4EA750A7724D5780ADE7811
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
Manifest number: 157C
Signing time: Fri 06 Jun 2025 17:00:42 +0000
Manifest this update: Fri 06 Jun 2025 17:00:42 +0000
Manifest next update: Sat 07 Jun 2025 17:00:42 +0000
Files and hashes: 1: oj5pO6PbAIedrwIhX-SgXkuxPgQ.roa (hash: chkdnhybp0jJ1hG80xmgFXkOcgLkze7nqAVVBuJ+bhU=)
2: vx1ZdLTlmcpy3MTawGbXcUIC78k.crl (hash: p29oKbT+WwgfoN6UdHvQI0rYVKYN+K1lN8Cn7k05YX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:30:09:64:d4:ea:75:0a:77:24:d5:78:0a:de:78:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf1d5974b4e599ca72dcc4dac066d7714202efc9
Validity
Not Before: Jun 6 17:00:42 2025 GMT
Not After : Jun 7 17:00:42 2025 GMT
Subject: CN=971ae936fd2af782d0ba6fdd05541c6e9831d38a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:6e:7c:4e:f6:2b:53:3b:cd:ee:ce:cb:63:ef:
07:11:ff:6a:38:d3:66:c2:4c:3f:3b:4c:92:61:9f:
43:bc:53:47:52:fa:5b:bb:20:e3:2a:07:a6:35:69:
e8:54:7a:35:83:fb:32:a7:46:a2:92:63:82:0a:b1:
a7:49:d0:77:6c:94:64:7a:75:59:72:e9:e9:16:ac:
6a:97:91:e9:7b:58:32:73:ee:32:2c:7d:42:fe:ad:
cf:4b:c2:9d:36:aa:b3:01:b8:be:72:bd:25:25:df:
f3:99:06:81:e9:85:fb:a3:27:07:1e:e1:ce:6d:db:
c6:db:92:20:94:b5:b6:cb:da:47:04:60:7c:ea:c5:
9e:95:9f:2a:20:63:a7:24:8a:e2:44:b8:f3:4d:6e:
fe:24:cb:05:e5:2a:af:15:fd:86:a5:4a:cc:81:a2:
98:2b:21:30:66:bf:4f:b7:8d:9a:32:16:b0:f2:63:
1e:8d:01:df:5f:b2:ca:42:09:fe:00:36:9f:bb:89:
01:0b:a3:48:48:a0:5d:df:bf:24:6e:52:c9:e5:2f:
70:93:6c:12:09:c4:54:fc:e4:e9:4c:ec:9b:b2:f0:
20:87:5f:c2:79:35:34:27:c7:90:a0:0d:52:50:16:
d0:e5:c8:1f:79:9a:e8:64:93:f0:1e:47:f2:68:69:
d6:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
97:1A:E9:36:FD:2A:F7:82:D0:BA:6F:DD:05:54:1C:6E:98:31:D3:8A
X509v3 Authority Key Identifier:
keyid:BF:1D:59:74:B4:E5:99:CA:72:DC:C4:DA:C0:66:D7:71:42:02:EF:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vx1ZdLTlmcpy3MTawGbXcUIC78k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/94a062-8510-44d5-9e4b-c32a9a085ae0/1/vx1ZdLTlmcpy3MTawGbXcUIC78k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:9c:30:da:a5:e5:23:61:40:49:fd:1b:9d:58:1e:da:6c:2b:
5b:67:9d:55:2a:50:9a:7c:a7:3d:70:23:ac:3f:db:cc:65:1b:
74:b4:2e:73:8a:9a:a2:62:93:d5:1c:d5:e5:e0:b4:88:e3:fc:
65:96:19:bb:0b:82:24:1a:68:9d:ff:6c:1e:92:0e:a7:ae:5f:
5f:9c:95:00:c0:8d:e5:5f:dc:d2:82:d0:dc:74:2d:74:1e:6b:
fe:ec:bf:a6:8b:5d:2d:5c:65:10:08:49:4f:6f:9c:71:6c:f1:
7e:93:95:cc:c8:88:8c:eb:54:6a:a8:68:2d:d4:99:94:29:91:
c8:5f:9e:33:42:38:0b:2c:a4:41:a4:9b:2a:59:cb:5c:4d:66:
a7:ce:06:b0:35:6b:81:70:32:21:88:ef:ef:6c:e3:68:5e:b9:
b9:b7:dd:dc:32:3f:75:9f:f3:a3:e4:a0:8b:e1:77:e7:32:3b:
c1:55:42:12:5f:0f:b6:0c:c4:61:2f:08:9d:c1:af:95:24:b1:
26:1c:da:fb:ef:b1:8e:db:8d:23:cb:54:14:bd:46:b4:55:55:
73:21:77:7e:cb:af:16:d8:0d:5d:93:d3:b8:48:30:a7:bd:25:
25:b5:f4:95:1d:3b:ea:d9:0a:9a:c3:fa:71:c5:0a:89:31:41:
cf:b8:6d:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGMAlk1Op1Cnck1XgK3ngRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMWQ1OTc0YjRlNTk5Y2E3MmRjYzRkYWMwNjZkNzcxNDIw
MmVmYzkwHhcNMjUwNjA2MTcwMDQyWhcNMjUwNjA3MTcwMDQyWjAzMTEwLwYDVQQD
Eyg5NzFhZTkzNmZkMmFmNzgyZDBiYTZmZGQwNTU0MWM2ZTk4MzFkMzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnm58TvYrUzvN7s7LY+8HEf9qONNm
wkw/O0ySYZ9DvFNHUvpbuyDjKgemNWnoVHo1g/syp0aikmOCCrGnSdB3bJRkenVZ
cunpFqxql5Hpe1gyc+4yLH1C/q3PS8KdNqqzAbi+cr0lJd/zmQaB6YX7oycHHuHO
bdvG25IglLW2y9pHBGB86sWelZ8qIGOnJIriRLjzTW7+JMsF5SqvFf2GpUrMgaKY
KyEwZr9Pt42aMhaw8mMejQHfX7LKQgn+ADafu4kBC6NISKBd378kblLJ5S9wk2wS
CcRU/OTpTOybsvAgh1/CeTU0J8eQoA1SUBbQ5cgfeZroZJPwHkfyaGnWwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJca6Tb9KveC0Lpv3QVUHG6YMdOKMB8GA1UdIwQY
MBaAFL8dWXS05ZnKctzE2sBm13FCAu/JMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdngxWmRMVGxtY3B5M01UYXdHYlhjVUlDNzhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi85NGEwNjItODUxMC00NGQ1LTllNGIt
YzMyYTlhMDg1YWUwLzEvdngxWmRMVGxtY3B5M01UYXdHYlhjVUlDNzhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi85NGEwNjItODUxMC00NGQ1LTllNGItYzMyYTlhMDg1YWUw
LzEvdngxWmRMVGxtY3B5M01UYXdHYlhjVUlDNzhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcJww2qXl
I2FASf0bnVge2mwrW2edVSpQmnynPXAjrD/bzGUbdLQuc4qaomKT1RzV5eC0iOP8
ZZYZuwuCJBponf9sHpIOp65fX5yVAMCN5V/c0oLQ3HQtdB5r/uy/potdLVxlEAhJ
T2+ccWzxfpOVzMiIjOtUaqhoLdSZlCmRyF+eM0I4CyykQaSbKlnLXE1mp84GsDVr
gXAyIYjv72zjaF65ubfd3DI/dZ/zo+Sgi+F35zI7wVVCEl8PtgzEYS8IncGvlSSx
Jhza+++xjtuNI8tUFL1GtFVVcyF3fsuvFtgNXZPTuEgwp70lJbX0lR076tkKmsP6
ccUKiTFBz7htEA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:54:18 2025 by rpki-client