Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
File: vGY2Z5cyOLGE2e79NrvzgQukttk.mft (raw, json)
Hash identifier: FnSH+357DaciR7HFYkmWPXr6ZeJyrsaqUAqIkhEXKvY=
Subject key identifier: 7B:21:0B:C3:70:39:B9:5B:9E:19:D1:25:E4:48:E5:6D:19:2D:3E:A2
Authority key identifier: BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
Certificate issuer: /CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Certificate serial: 01984A412443EC58A26EB10893A123AB5E5D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
Manifest number: 1109
Signing time: Sun 27 Jul 2025 05:00:39 +0000
Manifest this update: Sun 27 Jul 2025 05:00:39 +0000
Manifest next update: Mon 28 Jul 2025 05:00:39 +0000
Files and hashes: 1: ig3YUnf06jRQJy2W3dYiO6rsejs.roa (hash: iYGiR2ToZxGUekv5mS+Li0t2IVpNRi9TVFKQBK+2Rl8=)
2: vGY2Z5cyOLGE2e79NrvzgQukttk.crl (hash: ISek7FAlwsrSelgLQhZCkz7tjTqnig3YZfD4go8Sn5A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:41:24:43:ec:58:a2:6e:b1:08:93:a1:23:ab:5e:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc663667973238b184d9eefd36bbf3810ba4b6d9
Validity
Not Before: Jul 27 05:00:39 2025 GMT
Not After : Jul 28 05:00:39 2025 GMT
Subject: CN=7b210bc37039b95b9e19d125e448e56d192d3ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:bf:45:9d:a3:ab:8a:14:41:6e:49:c9:34:e1:
7c:e4:b4:8d:72:d6:af:e4:99:2d:3d:08:e0:69:ea:
10:98:be:cc:95:b4:8e:17:75:6e:b9:e9:64:85:4f:
23:20:73:f7:02:ac:e3:8c:99:e0:0d:f5:84:06:87:
64:26:ea:ee:7c:c7:56:dd:8d:06:3f:94:64:d3:f5:
42:9a:c4:2a:cd:78:ad:d3:8a:71:9d:d7:2e:48:a6:
84:29:ea:14:77:63:44:b7:98:eb:b4:0e:19:71:f6:
5f:f3:08:c9:fe:60:7c:a7:5f:98:6e:84:7f:60:37:
9e:ae:e9:ef:ef:53:28:66:f8:1f:1d:93:b1:a4:8c:
4f:24:14:98:8a:24:f7:05:44:ae:d9:fe:b4:9d:23:
8f:f8:72:2e:68:9b:56:66:bb:60:8d:68:48:9e:bb:
7b:26:fb:f6:97:78:00:67:0f:7b:71:8e:c9:c5:1d:
cf:89:ea:2f:a3:05:10:8a:0e:db:ea:e9:7f:e4:86:
b8:f3:84:73:e0:b3:1b:37:3e:51:25:98:2f:46:14:
c6:29:38:6a:4a:3b:3e:6c:06:97:9d:92:2b:e3:4a:
b0:ca:7d:15:bc:bd:2b:85:40:26:47:68:c2:56:28:
e2:2b:89:34:95:60:5e:35:c0:5e:3a:81:4d:c1:05:
66:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:21:0B:C3:70:39:B9:5B:9E:19:D1:25:E4:48:E5:6D:19:2D:3E:A2
X509v3 Authority Key Identifier:
keyid:BC:66:36:67:97:32:38:B1:84:D9:EE:FD:36:BB:F3:81:0B:A4:B6:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vGY2Z5cyOLGE2e79NrvzgQukttk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/0b951a-8e6c-4445-9c2d-9f00c72620f6/1/vGY2Z5cyOLGE2e79NrvzgQukttk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:0b:52:bc:13:b1:db:c4:f3:0a:95:eb:32:75:e7:13:58:d3:
8a:fd:07:b6:7b:d6:c7:51:d4:87:3f:5d:0d:7d:6d:97:12:6d:
fb:56:a1:cf:88:6c:c4:4c:5b:cf:3f:96:d6:a0:ed:12:4b:15:
5f:0a:7b:43:3c:30:74:9a:31:96:6f:ab:2a:83:71:7f:71:cd:
96:63:40:f8:1f:93:b7:2c:84:66:da:fb:f5:1a:ad:bf:8f:af:
7b:6a:d8:11:f9:73:51:d1:1b:23:2b:b0:e6:14:f4:11:af:bb:
02:69:c9:6c:b5:49:d6:03:63:99:23:e4:68:67:02:fe:7e:ca:
63:b9:59:87:f4:f4:1e:fd:cc:2e:c4:ee:14:82:5d:9b:cb:ae:
7e:d5:b3:60:19:c9:57:4d:db:76:0f:9d:2c:e4:dc:7d:36:01:
bc:c8:c6:31:6c:66:88:93:cb:de:6b:2e:21:da:ba:6e:94:d6:
c6:d5:77:01:29:04:b5:76:15:f9:02:ce:76:7e:d7:6a:58:8a:
53:38:79:4c:4b:1a:16:d2:92:bf:9f:77:15:e4:50:a4:75:9f:
2a:2c:b0:f7:0c:f8:28:ec:1e:38:5a:41:b5:9f:cb:5e:cb:ef:
99:01:f7:19:d4:ed:73:ae:b0:a0:ad:56:1e:13:3c:31:2e:2f:
52:2c:33:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKQSRD7FiibrEIk6Ejq15dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjNjYzNjY3OTczMjM4YjE4NGQ5ZWVmZDM2YmJmMzgxMGJh
NGI2ZDkwHhcNMjUwNzI3MDUwMDM5WhcNMjUwNzI4MDUwMDM5WjAzMTEwLwYDVQQD
Eyg3YjIxMGJjMzcwMzliOTViOWUxOWQxMjVlNDQ4ZTU2ZDE5MmQzZWEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu79FnaOrihRBbknJNOF85LSNctav
5JktPQjgaeoQmL7MlbSOF3VuuelkhU8jIHP3AqzjjJngDfWEBodkJurufMdW3Y0G
P5Rk0/VCmsQqzXit04pxndcuSKaEKeoUd2NEt5jrtA4ZcfZf8wjJ/mB8p1+YboR/
YDeerunv71MoZvgfHZOxpIxPJBSYiiT3BUSu2f60nSOP+HIuaJtWZrtgjWhInrt7
Jvv2l3gAZw97cY7JxR3PieovowUQig7b6ul/5Ia484Rz4LMbNz5RJZgvRhTGKThq
Sjs+bAaXnZIr40qwyn0VvL0rhUAmR2jCVijiK4k0lWBeNcBeOoFNwQVm/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHshC8NwOblbnhnRJeRI5W0ZLT6iMB8GA1UdIwQY
MBaAFLxmNmeXMjixhNnu/Ta784ELpLbZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZC8wYjk1MWEtOGU2Yy00NDQ1LTljMmQt
OWYwMGM3MjYyMGY2LzEvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZC8wYjk1MWEtOGU2Yy00NDQ1LTljMmQtOWYwMGM3MjYyMGY2
LzEvdkdZMlo1Y3lPTEdFMmU3OU5ydnpnUXVrdHRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHwtSvBOx
28TzCpXrMnXnE1jTiv0HtnvWx1HUhz9dDX1tlxJt+1ahz4hsxExbzz+W1qDtEksV
Xwp7QzwwdJoxlm+rKoNxf3HNlmNA+B+TtyyEZtr79Rqtv4+ve2rYEflzUdEbIyuw
5hT0Ea+7AmnJbLVJ1gNjmSPkaGcC/n7KY7lZh/T0Hv3MLsTuFIJdm8uuftWzYBnJ
V03bdg+dLOTcfTYBvMjGMWxmiJPL3msuIdq6bpTWxtV3ASkEtXYV+QLOdn7XaliK
Uzh5TEsaFtKSv593FeRQpHWfKiyw9wz4KOweOFpBtZ/LXsvvmQH3GdTtc66woK1W
HhM8MS4vUiwzkg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 11:54:07 2025 by rpki-client