Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
File: vBWSH1umvRR_9AAReqlzhjPxWH0.mft (raw, json)
Hash identifier: g7a+47zOYcjJOeggw3JovMyzEAHqjVKQpfc96ouZmFc=
Subject key identifier: 42:69:2A:04:03:47:F2:9F:8A:64:5B:37:40:77:3D:83:4E:0E:A9:49
Authority key identifier: BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
Certificate issuer: /CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Certificate serial: 01988DA181C58B964DAB33D0043F7554B10D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
Manifest number: 162A
Signing time: Sat 09 Aug 2025 07:00:28 +0000
Manifest this update: Sat 09 Aug 2025 07:00:28 +0000
Manifest next update: Sun 10 Aug 2025 07:00:28 +0000
Files and hashes: 1: 9cE7vjT6DzlEjW81UqTEgPCC5kk.roa (hash: YeyZuOMLUCYoKrtFyEejrMk173P/JZ9uykjJbI6/Rr0=)
2: U77ECX22fJUQ9Szp6lrBtYkTrQY.roa (hash: jYSTL2r9IXnyVhPYQjdEYfmkmSawy+babAO2lCpGCAs=)
3: vBWSH1umvRR_9AAReqlzhjPxWH0.crl (hash: NGUK4VVxxFdfX3SiY3QGEpim9jnh5N4VCwucO/LxX+0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 05:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8d:a1:81:c5:8b:96:4d:ab:33:d0:04:3f:75:54:b1:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc15921f5ba6bd147ff400117aa9738633f1587d
Validity
Not Before: Aug 9 07:00:28 2025 GMT
Not After : Aug 10 07:00:28 2025 GMT
Subject: CN=42692a040347f29f8a645b3740773d834e0ea949
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:97:60:85:a6:2b:ce:00:3d:b4:61:3d:8a:30:
9a:0d:06:8a:cd:2b:57:7c:be:81:7b:c0:63:90:79:
b2:1d:e2:3b:44:e5:c6:c3:43:90:95:7e:99:43:b5:
17:7f:64:cd:dc:c3:69:51:c2:cf:be:00:a1:0b:71:
2d:5c:f1:be:83:1e:2b:44:6b:41:ca:95:06:0f:39:
95:0f:36:31:02:72:5f:da:22:bd:08:e2:bc:8d:6c:
46:fa:c0:e0:21:e6:16:ae:87:aa:28:89:a3:9c:dc:
3b:dd:2b:c7:b2:29:53:36:a9:a4:07:50:12:e7:f8:
e8:75:93:23:75:18:2e:ff:ea:40:9b:f9:14:16:b8:
b1:6b:dc:00:9b:2b:62:5c:52:28:c1:0f:ed:f2:00:
71:cf:5f:c6:36:63:77:b9:0c:82:50:b2:10:03:68:
51:60:bf:f4:66:b1:5c:30:2b:00:b0:31:06:e3:48:
2e:2d:69:cc:f6:e5:89:9c:f5:00:42:10:11:6e:60:
ae:76:14:46:58:f4:7f:50:3e:73:27:d3:7a:71:b5:
d9:34:d2:a8:77:48:52:9e:70:49:23:df:44:03:b1:
a7:97:96:5d:31:bc:e7:b4:f3:b8:d1:ee:50:13:08:
59:22:a8:2e:0a:36:70:70:8c:74:cf:49:f5:27:5f:
9a:ab
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:69:2A:04:03:47:F2:9F:8A:64:5B:37:40:77:3D:83:4E:0E:A9:49
X509v3 Authority Key Identifier:
keyid:BC:15:92:1F:5B:A6:BD:14:7F:F4:00:11:7A:A9:73:86:33:F1:58:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vBWSH1umvRR_9AAReqlzhjPxWH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/8e79ab-ba83-44cb-aec0-0990ce7481e7/1/vBWSH1umvRR_9AAReqlzhjPxWH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:36:ca:89:61:e2:52:4f:4d:e1:11:f4:72:78:79:fd:a0:ba:
b0:03:2e:17:d9:1f:09:44:46:32:ce:7d:7f:ae:9c:57:ac:cd:
be:7e:8e:9c:53:0f:43:09:45:02:df:9f:de:58:c3:7c:e6:37:
83:ad:e0:6b:3e:1d:20:70:67:bd:d2:bb:b7:ee:d0:80:eb:1b:
9a:ba:c7:6f:f1:fb:c2:39:ca:a1:fe:71:26:77:d8:40:2d:b6:
07:19:49:32:64:5c:97:13:b1:51:ac:6c:ef:32:1b:bf:3f:36:
74:00:6b:75:64:5b:9b:5c:b3:50:6c:a1:d1:d2:b4:15:59:b3:
fc:ed:3b:a9:e2:6d:20:66:64:61:cd:cf:ea:5e:04:28:42:cb:
e1:26:f1:5f:c4:b0:ba:8b:1f:ee:34:45:3c:3d:34:e9:1d:03:
be:67:e4:61:ec:77:b5:3f:66:cd:66:e7:49:13:22:1b:22:31:
27:ef:9b:47:c7:b3:98:52:ef:ff:68:08:cc:2c:c0:a4:f9:7e:
46:2b:03:3b:c6:be:35:4c:d1:7b:24:6c:3a:aa:3c:6e:ec:b0:
21:d4:36:6d:81:a8:c0:10:04:91:3c:61:7c:d5:6d:80:d9:2e:
65:69:ce:77:d6:81:73:ce:76:eb:93:c7:f8:4b:98:7e:6e:43:
8a:f7:aa:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiNoYHFi5ZNqzPQBD91VLENMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMTU5MjFmNWJhNmJkMTQ3ZmY0MDAxMTdhYTk3Mzg2MzNm
MTU4N2QwHhcNMjUwODA5MDcwMDI4WhcNMjUwODEwMDcwMDI4WjAzMTEwLwYDVQQD
Eyg0MjY5MmEwNDAzNDdmMjlmOGE2NDViMzc0MDc3M2Q4MzRlMGVhOTQ5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJdghaYrzgA9tGE9ijCaDQaKzStX
fL6Be8BjkHmyHeI7ROXGw0OQlX6ZQ7UXf2TN3MNpUcLPvgChC3EtXPG+gx4rRGtB
ypUGDzmVDzYxAnJf2iK9COK8jWxG+sDgIeYWroeqKImjnNw73SvHsilTNqmkB1AS
5/jodZMjdRgu/+pAm/kUFrixa9wAmytiXFIowQ/t8gBxz1/GNmN3uQyCULIQA2hR
YL/0ZrFcMCsAsDEG40guLWnM9uWJnPUAQhARbmCudhRGWPR/UD5zJ9N6cbXZNNKo
d0hSnnBJI99EA7Gnl5ZdMbzntPO40e5QEwhZIqguCjZwcIx0z0n1J1+aqwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJpKgQDR/KfimRbN0B3PYNODqlJMB8GA1UdIwQY
MBaAFLwVkh9bpr0Uf/QAEXqpc4Yz8Vh9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAt
MDk5MGNlNzQ4MWU3LzEvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC84ZTc5YWItYmE4My00NGNiLWFlYzAtMDk5MGNlNzQ4MWU3
LzEvdkJXU0gxdW12UlJfOUFBUmVxbHpoalB4V0gwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZTbKiWHi
Uk9N4RH0cnh5/aC6sAMuF9kfCURGMs59f66cV6zNvn6OnFMPQwlFAt+f3ljDfOY3
g63gaz4dIHBnvdK7t+7QgOsbmrrHb/H7wjnKof5xJnfYQC22BxlJMmRclxOxUaxs
7zIbvz82dABrdWRbm1yzUGyh0dK0FVmz/O07qeJtIGZkYc3P6l4EKELL4SbxX8Sw
uosf7jRFPD006R0DvmfkYex3tT9mzWbnSRMiGyIxJ++bR8ezmFLv/2gIzCzApPl+
RisDO8a+NUzReyRsOqo8buywIdQ2bYGowBAEkTxhfNVtgNkuZWnOd9aBc85265PH
+EuYfm5DiveqWw==
-----END CERTIFICATE-----
Generated at Sat Aug 9 14:33:13 2025 by rpki-client