Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
File: vP76Crl0AEjYO0idnKTgKOD1z-8.mft (raw, json)
Hash identifier: gFkFbE6lw3UVICuvWHNlx19XElHDAdeTq85Jl472UP8=
Subject key identifier: 94:F3:27:82:ED:CE:34:51:05:8A:35:37:BA:84:57:FA:2A:8D:7E:1C
Authority key identifier: BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
Certificate issuer: /CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Certificate serial: 0197D7AC02A2D6BE18E957853985B4F03463
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
Manifest number: 1123
Signing time: Fri 04 Jul 2025 23:01:03 +0000
Manifest this update: Fri 04 Jul 2025 23:01:03 +0000
Manifest next update: Sat 05 Jul 2025 23:01:03 +0000
Files and hashes: 1: 2TuJ468zw177jpyYFJB20BZ9Xpw.roa (hash: 3VZS4XpdpT/Xy05QO4Zu5eaSIrPsPgN7ySrg2oUytz0=)
2: vP76Crl0AEjYO0idnKTgKOD1z-8.crl (hash: eKWSM6Mc3/BhfRBc4NeSN5OM4spUSwFTrhXnum7agPE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 05 Jul 2025 23:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:d7:ac:02:a2:d6:be:18:e9:57:85:39:85:b4:f0:34:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcfefa0ab9740048d83b489d9ca4e028e0f5cfef
Validity
Not Before: Jul 4 23:01:03 2025 GMT
Not After : Jul 5 23:01:03 2025 GMT
Subject: CN=94f32782edce3451058a3537ba8457fa2a8d7e1c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:92:9a:6b:2b:c8:e1:f5:ac:9d:d4:2d:af:7f:
29:b8:cc:92:b1:e4:5b:50:28:e0:53:1d:42:d2:1f:
86:be:90:01:ed:fb:56:26:00:2b:65:d6:70:c9:5e:
de:96:69:e5:94:6f:41:d3:91:9e:cc:ab:0e:f4:3a:
9e:c3:ad:f1:87:9a:6f:b6:b6:71:2b:11:b6:91:6b:
f3:db:4a:18:66:68:9f:5f:30:b4:f5:86:3b:6c:13:
d3:9a:35:30:e8:de:24:a2:a3:0b:48:ea:78:f0:70:
d5:8e:12:de:9d:ab:0e:c8:66:e3:3d:4a:36:87:4c:
fa:93:e7:95:6e:f1:e5:51:b8:c8:b9:50:28:5d:72:
56:b6:81:4b:ed:83:79:30:cd:80:18:6d:4a:e3:77:
ed:1d:6d:3e:09:c0:5b:a4:1f:95:39:4b:32:b1:79:
b3:f4:4f:bd:9c:5c:36:f5:75:ef:a0:09:d6:77:e7:
99:d4:24:7e:2d:5c:6e:d8:02:bf:74:d0:db:6f:89:
a2:71:0c:db:9f:ea:69:7e:d1:41:47:fc:83:e5:42:
9d:dc:61:1f:dc:17:99:09:f1:26:56:a4:76:34:1f:
35:5a:e4:39:8d:9f:e2:ff:99:ba:60:f5:9e:b7:c2:
5e:62:65:63:15:d2:97:a2:f8:a5:bd:93:bc:fb:7f:
bc:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:F3:27:82:ED:CE:34:51:05:8A:35:37:BA:84:57:FA:2A:8D:7E:1C
X509v3 Authority Key Identifier:
keyid:BC:FE:FA:0A:B9:74:00:48:D8:3B:48:9D:9C:A4:E0:28:E0:F5:CF:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vP76Crl0AEjYO0idnKTgKOD1z-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/fb8edb-e304-4714-952e-c66bea1f1aa2/1/vP76Crl0AEjYO0idnKTgKOD1z-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:73:3c:b6:7d:18:eb:15:75:73:d7:f8:b8:70:25:39:6d:c5:
83:64:6d:31:13:b6:5a:de:c6:11:fb:30:f0:1c:e3:12:49:06:
9e:ac:c2:9f:97:1f:a9:49:b4:fe:70:24:15:73:0e:b8:93:39:
86:7e:17:49:bb:7a:1f:d5:46:7d:fb:6c:6a:6a:f9:1c:c4:1d:
ff:19:23:54:ef:7c:d0:d1:d8:62:ae:50:1d:92:00:91:b4:71:
96:c3:0f:59:6a:38:2d:84:b0:0f:92:5a:1a:ba:19:ef:1f:cb:
20:39:52:f2:74:4d:60:4d:96:3d:ee:d5:6d:5d:42:dd:c4:47:
aa:92:70:fb:87:f8:0f:4d:2c:0e:cc:bc:96:aa:0a:1d:fd:7e:
81:14:aa:fa:02:fa:1b:14:45:b4:7b:ae:d9:cc:e6:5b:18:48:
e8:04:71:6c:5e:d5:7e:4b:d5:f9:93:ab:7b:7b:35:87:b1:61:
40:ae:51:c2:4f:4b:66:91:38:28:e0:63:4c:f7:2d:13:00:b5:
d3:08:e5:c6:17:c8:72:c6:07:22:f7:4c:9f:fc:34:37:55:c0:
57:11:15:ec:43:ef:fe:83:93:f6:a2:39:f1:9e:9c:b0:ef:a1:
87:6e:97:40:b2:49:80:2b:64:4c:d8:cc:e1:21:22:a8:ee:be:
5b:a6:c5:0e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfXrAKi1r4Y6VeFOYW08DRjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZmVmYTBhYjk3NDAwNDhkODNiNDg5ZDljYTRlMDI4ZTBm
NWNmZWYwHhcNMjUwNzA0MjMwMTAzWhcNMjUwNzA1MjMwMTAzWjAzMTEwLwYDVQQD
Eyg5NGYzMjc4MmVkY2UzNDUxMDU4YTM1MzdiYTg0NTdmYTJhOGQ3ZTFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv5KaayvI4fWsndQtr38puMySseRb
UCjgUx1C0h+GvpAB7ftWJgArZdZwyV7elmnllG9B05GezKsO9Dqew63xh5pvtrZx
KxG2kWvz20oYZmifXzC09YY7bBPTmjUw6N4koqMLSOp48HDVjhLenasOyGbjPUo2
h0z6k+eVbvHlUbjIuVAoXXJWtoFL7YN5MM2AGG1K43ftHW0+CcBbpB+VOUsysXmz
9E+9nFw29XXvoAnWd+eZ1CR+LVxu2AK/dNDbb4micQzbn+ppftFBR/yD5UKd3GEf
3BeZCfEmVqR2NB81WuQ5jZ/i/5m6YPWet8JeYmVjFdKXovilvZO8+3+80QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJTzJ4LtzjRRBYo1N7qEV/oqjX4cMB8GA1UdIwQY
MBaAFLz++gq5dABI2DtInZyk4Cjg9c/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi9mYjhlZGItZTMwNC00NzE0LTk1MmUt
YzY2YmVhMWYxYWEyLzEvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi9mYjhlZGItZTMwNC00NzE0LTk1MmUtYzY2YmVhMWYxYWEy
LzEvdlA3NkNybDBBRWpZTzBpZG5LVGdLT0Qxei04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVXM8tn0Y
6xV1c9f4uHAlOW3Fg2RtMRO2Wt7GEfsw8BzjEkkGnqzCn5cfqUm0/nAkFXMOuJM5
hn4XSbt6H9VGfftsamr5HMQd/xkjVO980NHYYq5QHZIAkbRxlsMPWWo4LYSwD5Ja
GroZ7x/LIDlS8nRNYE2WPe7VbV1C3cRHqpJw+4f4D00sDsy8lqoKHf1+gRSq+gL6
GxRFtHuu2czmWxhI6ARxbF7VfkvV+ZOre3s1h7FhQK5Rwk9LZpE4KOBjTPctEwC1
0wjlxhfIcsYHIvdMn/w0N1XAVxEV7EPv/oOT9qI58Z6csO+hh26XQLJJgCtkTNjM
4SEiqO6+W6bFDg==
-----END CERTIFICATE-----
Generated at Sat Jul 5 06:31:37 2025 by rpki-client