Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
File: vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft (raw, json)
Hash identifier: 3yY2c0acOmb25Bvne3GIvQnwFDzfc6LeAEQCzl8Mb04=
Subject key identifier: B4:6A:C8:39:1A:C8:27:EF:26:F8:B7:CE:14:26:25:AD:A9:51:86:80
Authority key identifier: BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
Certificate issuer: /CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Certificate serial: 019880C27A9B03A81E72420E62244D46BF68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
Manifest number: 1621
Signing time: Wed 06 Aug 2025 19:01:25 +0000
Manifest this update: Wed 06 Aug 2025 19:01:25 +0000
Manifest next update: Thu 07 Aug 2025 19:01:25 +0000
Files and hashes: 1: FG-qCrDb70MUjmpPeG_ABqm2g4I.roa (hash: hYgrw8pe3ohnrPXEYOqOtmTKKEz+HL/P8NWGWnKRQYA=)
2: hsH2HQBoiRDw665UcWSV1lTXYOg.roa (hash: 3M/n4+ffcKMFrGFddlkXam66igSrpB60cTzmDDLi+7s=)
3: vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl (hash: 6azwtyaNFaVTodMICrSQoQRbJzClar8vmhc/slyckcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 19:01:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:c2:7a:9b:03:a8:1e:72:42:0e:62:24:4d:46:bf:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7410f4e62c7772c78d5750b21fc214339e94a2
Validity
Not Before: Aug 6 19:01:25 2025 GMT
Not After : Aug 7 19:01:25 2025 GMT
Subject: CN=b46ac8391ac827ef26f8b7ce142625ada9518680
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:a7:6c:d4:5e:c8:92:5c:d1:67:75:d0:e0:f1:
0b:f6:86:ae:24:77:ed:0f:fe:bf:ad:e1:85:f4:76:
b6:73:d3:7d:0a:41:6a:8e:46:13:04:29:1d:88:98:
04:36:b4:37:d1:ff:94:db:e9:0b:79:98:be:5e:25:
7a:52:57:1a:ed:ae:14:d5:22:9c:7f:cb:71:a4:a3:
3e:90:84:ef:34:78:da:0f:00:0c:73:c1:d2:05:9d:
8c:aa:34:9e:2d:b8:ad:96:f8:bc:2b:1c:d0:09:92:
a9:22:2c:0f:a7:cb:b6:e4:db:b0:0d:8d:3c:cd:c1:
d8:5d:20:03:14:c5:b0:56:be:0d:b1:71:02:fd:27:
6b:b6:10:c3:02:ca:94:8a:bd:64:be:39:72:9f:25:
87:e2:de:a1:7a:b0:3e:30:27:df:9e:30:79:2c:42:
04:46:e1:73:95:76:43:37:a9:d6:63:71:2f:fe:74:
e6:0d:c3:fb:07:7f:67:d4:1a:a1:0a:1b:6f:a3:0a:
10:4c:0a:a1:14:26:60:f4:04:3c:0d:9b:ad:ee:28:
6d:1c:10:59:ec:e3:4f:3c:ee:9b:b6:d8:1b:29:39:
87:33:1e:9f:91:43:13:80:48:b2:1e:ea:fd:3e:80:
d5:62:af:59:ff:5f:59:81:5e:2c:08:66:e9:f1:66:
b5:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B4:6A:C8:39:1A:C8:27:EF:26:F8:B7:CE:14:26:25:AD:A9:51:86:80
X509v3 Authority Key Identifier:
keyid:BD:74:10:F4:E6:2C:77:72:C7:8D:57:50:B2:1F:C2:14:33:9E:94:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vXQQ9OYsd3LHjVdQsh_CFDOelKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/37/22c60e-72fd-47af-99f3-26848ffee765/1/vXQQ9OYsd3LHjVdQsh_CFDOelKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:5c:1a:77:fd:05:75:2e:23:0f:9c:fc:15:80:eb:dc:20:81:
e3:3c:5a:cc:7a:92:bc:58:77:ac:ed:b5:1d:2a:f1:1b:dc:28:
8a:27:40:2b:fe:60:2e:6a:fb:5e:dd:06:d1:97:96:18:3a:6c:
93:81:2e:e7:3c:b0:d0:53:d9:12:aa:a6:a0:74:45:31:f8:ae:
43:c3:e5:5b:e7:ce:2c:8e:d4:c7:df:69:3a:e2:0e:a0:c3:bd:
72:01:17:84:9b:08:54:77:d9:9c:c2:bb:16:32:a3:d9:fc:b5:
1d:2f:23:69:61:7e:9e:1a:bf:60:f6:8c:12:bd:da:1d:3e:ef:
23:83:47:94:38:e7:d6:d3:fa:cb:b5:6d:ee:13:ab:95:4e:c8:
6a:94:9c:7c:8b:8e:e5:a6:3d:5f:3d:ac:d5:2a:05:b5:dd:12:
43:61:7b:51:fc:7c:76:08:00:10:4d:07:33:a6:14:35:61:28:
fc:f7:ea:7b:b8:26:4f:a2:34:c9:f8:63:c5:77:f1:3e:91:64:
63:03:e3:d0:aa:f8:0e:2b:a1:ae:8f:6d:d5:7f:ab:b9:bd:07:
d9:d9:1e:8f:a0:15:f1:c0:87:31:ac:85:80:d9:20:62:a0:b0:
4a:d4:70:cd:50:b5:6d:b4:5b:ec:06:e5:b8:56:40:db:bf:21:
29:13:bc:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAwnqbA6geckIOYiRNRr9oMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNzQxMGY0ZTYyYzc3NzJjNzhkNTc1MGIyMWZjMjE0MzM5
ZTk0YTIwHhcNMjUwODA2MTkwMTI1WhcNMjUwODA3MTkwMTI1WjAzMTEwLwYDVQQD
EyhiNDZhYzgzOTFhYzgyN2VmMjZmOGI3Y2UxNDI2MjVhZGE5NTE4NjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Kds1F7IklzRZ3XQ4PEL9oauJHft
D/6/reGF9Ha2c9N9CkFqjkYTBCkdiJgENrQ30f+U2+kLeZi+XiV6Ulca7a4U1SKc
f8txpKM+kITvNHjaDwAMc8HSBZ2MqjSeLbitlvi8KxzQCZKpIiwPp8u25NuwDY08
zcHYXSADFMWwVr4NsXEC/SdrthDDAsqUir1kvjlynyWH4t6herA+MCffnjB5LEIE
RuFzlXZDN6nWY3Ev/nTmDcP7B39n1BqhChtvowoQTAqhFCZg9AQ8DZut7ihtHBBZ
7ONPPO6bttgbKTmHMx6fkUMTgEiyHur9PoDVYq9Z/19ZgV4sCGbp8Wa1cQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLRqyDkayCfvJvi3zhQmJa2pUYaAMB8GA1UdIwQY
MBaAFL10EPTmLHdyx41XULIfwhQznpSiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMt
MjY4NDhmZmVlNzY1LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNy8yMmM2MGUtNzJmZC00N2FmLTk5ZjMtMjY4NDhmZmVlNzY1
LzEvdlhRUTlPWXNkM0xIalZkUXNoX0NGRE9lbEtJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD1wad/0F
dS4jD5z8FYDr3CCB4zxazHqSvFh3rO21HSrxG9woiidAK/5gLmr7Xt0G0ZeWGDps
k4Eu5zyw0FPZEqqmoHRFMfiuQ8PlW+fOLI7Ux99pOuIOoMO9cgEXhJsIVHfZnMK7
FjKj2fy1HS8jaWF+nhq/YPaMEr3aHT7vI4NHlDjn1tP6y7Vt7hOrlU7IapScfIuO
5aY9Xz2s1SoFtd0SQ2F7Ufx8dggAEE0HM6YUNWEo/Pfqe7gmT6I0yfhjxXfxPpFk
YwPj0Kr4Diuhro9t1X+rub0H2dkej6AV8cCHMayFgNkgYqCwStRwzVC1bbRb7Abl
uFZA278hKRO8vw==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:55:45 2025 by rpki-client