Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
File: vB5m76AFpt5TsdDJHzdVS99Gdr0.mft (raw, json)
Hash identifier: fwNfOCbkXBvery7I8uvuEEHL0ZjavXkFUERiljCMR3k=
Subject key identifier: 66:5A:F4:CF:6F:AD:CA:29:AD:3E:AE:FD:B3:11:F3:A0:E5:F7:ED:BF
Authority key identifier: BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
Certificate issuer: /CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Certificate serial: 01976C6259A88F1B42A75E330556EC766228
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
Manifest number: 0D8E
Signing time: Sat 14 Jun 2025 03:01:14 +0000
Manifest this update: Sat 14 Jun 2025 03:01:14 +0000
Manifest next update: Sun 15 Jun 2025 03:01:14 +0000
Files and hashes: 1: 6IVQyX8RgUoO3Q58rf7sMqHJv54.roa (hash: 7oxYbSUUgVn0A9C0QrCdMuBwwgHYFbY1shMdIhdZPLk=)
2: vB5m76AFpt5TsdDJHzdVS99Gdr0.crl (hash: s2jBkk5tklghTDFBK7Nr3nVJwIqkMG/1Fkxjp+ZzluI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:59:a8:8f:1b:42:a7:5e:33:05:56:ec:76:62:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc1e66efa005a6de53b1d0c91f37554bdf4676bd
Validity
Not Before: Jun 14 03:01:14 2025 GMT
Not After : Jun 15 03:01:14 2025 GMT
Subject: CN=665af4cf6fadca29ad3eaefdb311f3a0e5f7edbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:1a:61:ea:ee:38:ab:04:0c:8c:8b:7b:63:44:
96:19:8b:14:48:b9:91:60:99:90:7b:b4:80:f3:46:
5f:06:32:aa:e4:44:d7:64:01:d3:d2:65:8c:fc:93:
52:9a:8f:4b:83:7c:47:e5:66:7d:8d:07:08:2d:82:
ed:1e:b6:ae:6e:94:51:c2:6a:61:0d:40:98:fe:74:
23:44:fe:44:99:f6:39:1d:6b:55:b8:c8:c8:dd:2a:
af:e7:1c:89:f5:fa:5e:9c:8c:d9:b2:eb:be:b1:96:
89:ec:d5:0b:58:e1:78:6d:d4:b5:a5:30:d3:03:b3:
c3:22:2c:30:de:71:12:02:81:10:06:25:8f:30:24:
b9:c2:b0:7d:83:73:1d:e9:af:f6:92:a8:12:49:9e:
02:ea:13:7e:3f:67:e3:55:13:d1:af:86:67:48:9d:
2e:5e:a0:db:ea:80:49:e9:8b:3e:57:57:d3:c9:2a:
33:94:30:b0:5c:ea:86:c6:c5:33:ab:8d:a1:b5:71:
7c:b9:9b:ae:47:0a:c5:56:63:77:3b:c1:bf:28:0b:
42:ed:2b:96:c4:90:2d:ad:af:e8:18:6b:c0:96:2d:
f6:1d:db:8c:3a:c6:70:d0:d9:9d:c6:e2:85:8e:83:
80:a2:08:47:9f:5a:f7:7d:0e:77:e8:af:db:6d:50:
0b:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:5A:F4:CF:6F:AD:CA:29:AD:3E:AE:FD:B3:11:F3:A0:E5:F7:ED:BF
X509v3 Authority Key Identifier:
keyid:BC:1E:66:EF:A0:05:A6:DE:53:B1:D0:C9:1F:37:55:4B:DF:46:76:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vB5m76AFpt5TsdDJHzdVS99Gdr0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4c/bb2bdb-747d-4855-8945-7f9a3e45256e/1/vB5m76AFpt5TsdDJHzdVS99Gdr0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:1e:5d:3a:9d:fd:72:61:fc:6d:60:08:e0:e8:c8:a5:ee:e7:
2c:1d:15:ce:a3:f3:a2:7e:04:e0:c0:19:93:b7:11:b1:3e:ee:
cc:f4:7c:9a:9b:df:db:59:65:29:3c:ea:31:cd:b8:a2:13:16:
6e:5f:a1:d6:4c:5e:a9:80:24:4a:0f:7f:5e:e8:c9:7f:a3:66:
76:d9:c3:a1:d4:25:d0:5d:17:02:3a:5b:2c:ec:87:07:04:6c:
89:ac:3a:51:5e:f0:80:d9:ea:38:2f:88:cf:f2:a0:49:93:7e:
19:dd:6a:4b:97:87:49:b6:13:dd:81:9a:78:2d:98:68:49:ab:
bf:11:9f:a9:ee:96:24:05:cb:da:a7:0e:05:65:9f:31:ca:a6:
f3:40:b9:60:fa:ac:45:c1:25:b1:aa:f0:a1:ae:0b:a4:f3:31:
5d:4b:f8:bd:8c:21:0a:40:f4:2a:25:89:d1:36:3e:22:d9:60:
26:5d:ac:c5:ff:7d:f0:c7:9c:77:0c:fd:36:e2:96:8f:71:ab:
c9:b0:58:d0:d2:8b:e8:8f:ce:c4:37:16:50:5b:03:fe:64:de:
50:12:5b:04:ca:12:e4:64:da:c6:b6:eb:12:2a:8a:57:f9:3c:
32:1d:33:f1:5c:56:e0:b4:c1:6c:e0:a5:9a:9e:bb:59:cb:96:
e0:38:b4:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYlmojxtCp14zBVbsdmIoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMWU2NmVmYTAwNWE2ZGU1M2IxZDBjOTFmMzc1NTRiZGY0
Njc2YmQwHhcNMjUwNjE0MDMwMTE0WhcNMjUwNjE1MDMwMTE0WjAzMTEwLwYDVQQD
Eyg2NjVhZjRjZjZmYWRjYTI5YWQzZWFlZmRiMzExZjNhMGU1ZjdlZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuhph6u44qwQMjIt7Y0SWGYsUSLmR
YJmQe7SA80ZfBjKq5ETXZAHT0mWM/JNSmo9Lg3xH5WZ9jQcILYLtHraubpRRwmph
DUCY/nQjRP5EmfY5HWtVuMjI3Sqv5xyJ9fpenIzZsuu+sZaJ7NULWOF4bdS1pTDT
A7PDIiww3nESAoEQBiWPMCS5wrB9g3Md6a/2kqgSSZ4C6hN+P2fjVRPRr4ZnSJ0u
XqDb6oBJ6Ys+V1fTySozlDCwXOqGxsUzq42htXF8uZuuRwrFVmN3O8G/KAtC7SuW
xJAtra/oGGvAli32HduMOsZw0NmdxuKFjoOAoghHn1r3fQ536K/bbVALCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGZa9M9vrcoprT6u/bMR86Dl9+2/MB8GA1UdIwQY
MBaAFLweZu+gBabeU7HQyR83VUvfRna9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yy9iYjJiZGItNzQ3ZC00ODU1LTg5NDUt
N2Y5YTNlNDUyNTZlLzEvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yy9iYjJiZGItNzQ3ZC00ODU1LTg5NDUtN2Y5YTNlNDUyNTZl
LzEvdkI1bTc2QUZwdDVUc2RESkh6ZFZTOTlHZHIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfB5dOp39
cmH8bWAI4OjIpe7nLB0VzqPzon4E4MAZk7cRsT7uzPR8mpvf21llKTzqMc24ohMW
bl+h1kxeqYAkSg9/XujJf6NmdtnDodQl0F0XAjpbLOyHBwRsiaw6UV7wgNnqOC+I
z/KgSZN+Gd1qS5eHSbYT3YGaeC2YaEmrvxGfqe6WJAXL2qcOBWWfMcqm80C5YPqs
RcElsarwoa4LpPMxXUv4vYwhCkD0KiWJ0TY+ItlgJl2sxf998Mecdwz9NuKWj3Gr
ybBY0NKL6I/OxDcWUFsD/mTeUBJbBMoS5GTaxrbrEiqKV/k8Mh0z8VxW4LTBbOCl
mp67WcuW4Di0wQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:23:11 2025 by rpki-client