Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
File: VCcv8xcpc8hppSISv3zoAeH454M.mft (raw, json)
Hash identifier: WTDksXVuxo6R75j76n8EBNHqQ+OO83Q97PQfGJgHhjg=
Subject key identifier: 86:79:79:03:C5:81:3D:20:C1:4E:87:8C:45:46:62:51:A6:96:AF:AD
Authority key identifier: 54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
Certificate issuer: /CN=54272ff3172973c869a52212bf7ce801e1f8e783
Certificate serial: 01976E871D058F592143866A0F7A6F10B1CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 13:00:37 +0000
Manifest this update: Sat 14 Jun 2025 13:00:37 +0000
Manifest next update: Sun 15 Jun 2025 13:00:37 +0000
Files and hashes: 1: VCcv8xcpc8hppSISv3zoAeH454M.crl (hash: is5wlR70L6bbTtDOG0LunEpZ5H+ur4/ZLj2LF4JqcYo=)
2: oohgjiQIj_tIu1PGNdnlfQkGF6M.roa (hash: 6v4z144BDrgglq1LMAS7dreBWe+2oC3G15H9vrrNnFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:1d:05:8f:59:21:43:86:6a:0f:7a:6f:10:b1:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54272ff3172973c869a52212bf7ce801e1f8e783
Validity
Not Before: Jun 14 13:00:37 2025 GMT
Not After : Jun 15 13:00:37 2025 GMT
Subject: CN=86797903c5813d20c14e878c45466251a696afad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:16:a3:93:c5:3a:52:1d:19:9a:35:9e:83:98:
7b:de:50:8e:5f:25:1f:98:6f:99:8a:d0:61:66:28:
b3:30:f1:84:f4:ae:30:18:ed:59:e5:a7:a2:64:90:
ce:81:b2:c0:c8:92:85:de:03:6f:03:7e:1b:52:61:
c9:5c:59:14:58:2a:7b:53:40:4c:41:bc:96:15:b3:
cb:2b:71:e5:97:64:88:dd:f4:a8:74:a1:0b:81:b1:
62:5e:97:98:6f:bf:6c:5b:ce:34:98:84:e1:5a:0d:
42:48:b5:01:3a:42:e2:8e:e0:8a:b2:67:3c:f2:97:
9e:6b:c5:91:09:e5:0e:83:bf:86:c0:78:0d:32:c6:
04:90:44:d9:a0:74:df:a9:e9:57:d5:7b:16:4f:ae:
c0:02:b8:4d:c7:a7:9a:e2:26:cf:47:a1:06:8c:a9:
e5:12:7f:eb:bf:1d:ab:26:e2:89:e7:d9:0e:68:22:
98:72:cc:af:58:31:ec:8b:e4:4e:61:41:dd:d9:29:
49:7a:e4:ce:ce:0d:df:21:5c:57:29:20:52:e0:60:
69:a5:e9:b3:a8:95:61:d2:2a:a3:16:24:30:1f:5b:
f5:22:11:ce:ca:20:9b:d8:77:49:cd:0a:88:05:14:
64:d4:2d:d0:6c:03:3d:ed:88:60:16:af:a2:8c:93:
b0:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:79:79:03:C5:81:3D:20:C1:4E:87:8C:45:46:62:51:A6:96:AF:AD
X509v3 Authority Key Identifier:
keyid:54:27:2F:F3:17:29:73:C8:69:A5:22:12:BF:7C:E8:01:E1:F8:E7:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VCcv8xcpc8hppSISv3zoAeH454M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/e287d9-9c3b-4121-92b6-a1d9e754c12e/1/VCcv8xcpc8hppSISv3zoAeH454M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:ee:89:41:e4:51:2a:0b:26:40:e9:d0:a4:0c:87:39:fa:5e:
cb:cb:64:31:29:2d:44:42:4d:23:cd:b3:ca:82:f6:74:16:d7:
83:7e:1d:f6:e3:08:48:93:a0:ef:36:50:3c:47:12:2c:9a:34:
75:cd:9a:ba:05:de:9e:b7:dd:15:f8:3c:1f:51:b4:41:67:23:
a4:28:03:89:19:df:75:af:cd:95:e0:61:16:d2:80:18:c7:4b:
3c:f3:f6:41:3b:aa:6a:9d:0b:9e:6c:40:a3:16:5f:63:7e:60:
4b:cd:92:a9:e4:6d:6d:9d:ed:38:1f:1a:4c:07:e7:38:a1:d7:
54:0c:bf:a6:c5:cd:10:c7:11:4e:b2:18:98:7f:d2:a1:ac:e1:
03:3e:c6:23:40:af:e1:ee:12:69:ff:1d:5b:6c:d3:b2:4d:73:
0a:73:77:6d:4a:7f:e9:90:a8:58:03:0f:21:8c:2a:a1:3a:91:
a0:1d:fc:35:4e:5a:d7:7e:2f:e8:42:2e:7f:cf:0e:a4:37:8d:
26:07:7c:a4:18:0d:59:dd:f3:4e:25:93:64:87:3e:fd:d9:d7:
e6:c0:05:ee:f7:fd:ed:f0:97:11:8c:22:64:e2:53:08:ca:28:
87:8e:f6:d8:3e:a9:36:fc:1a:ae:49:16:1d:31:b3:6a:c2:93:
3f:17:43:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduhx0Fj1khQ4ZqD3pvELHNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MjcyZmYzMTcyOTczYzg2OWE1MjIxMmJmN2NlODAxZTFm
OGU3ODMwHhcNMjUwNjE0MTMwMDM3WhcNMjUwNjE1MTMwMDM3WjAzMTEwLwYDVQQD
Eyg4Njc5NzkwM2M1ODEzZDIwYzE0ZTg3OGM0NTQ2NjI1MWE2OTZhZmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvRajk8U6Uh0ZmjWeg5h73lCOXyUf
mG+ZitBhZiizMPGE9K4wGO1Z5aeiZJDOgbLAyJKF3gNvA34bUmHJXFkUWCp7U0BM
QbyWFbPLK3Hll2SI3fSodKELgbFiXpeYb79sW840mIThWg1CSLUBOkLijuCKsmc8
8peea8WRCeUOg7+GwHgNMsYEkETZoHTfqelX1XsWT67AArhNx6ea4ibPR6EGjKnl
En/rvx2rJuKJ59kOaCKYcsyvWDHsi+ROYUHd2SlJeuTOzg3fIVxXKSBS4GBppemz
qJVh0iqjFiQwH1v1IhHOyiCb2HdJzQqIBRRk1C3QbAM97YhgFq+ijJOwEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZ5eQPFgT0gwU6HjEVGYlGmlq+tMB8GA1UdIwQY
MBaAFFQnL/MXKXPIaaUiEr986AHh+OeDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkNjdjh4Y3BjOGhwcFNJU3Yzem9BZUg0NTRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9lMjg3ZDktOWMzYi00MTIxLTkyYjYt
YTFkOWU3NTRjMTJlLzEvVkNjdjh4Y3BjOGhwcFNJU3Yzem9BZUg0NTRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9lMjg3ZDktOWMzYi00MTIxLTkyYjYtYTFkOWU3NTRjMTJl
LzEvVkNjdjh4Y3BjOGhwcFNJU3Yzem9BZUg0NTRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOO6JQeRR
KgsmQOnQpAyHOfpey8tkMSktREJNI82zyoL2dBbXg34d9uMISJOg7zZQPEcSLJo0
dc2augXenrfdFfg8H1G0QWcjpCgDiRnfda/NleBhFtKAGMdLPPP2QTuqap0LnmxA
oxZfY35gS82SqeRtbZ3tOB8aTAfnOKHXVAy/psXNEMcRTrIYmH/SoazhAz7GI0Cv
4e4Saf8dW2zTsk1zCnN3bUp/6ZCoWAMPIYwqoTqRoB38NU5a134v6EIuf88OpDeN
Jgd8pBgNWd3zTiWTZIc+/dnX5sAF7vf97fCXEYwiZOJTCMooh4722D6pNvwarkkW
HTGzasKTPxdDJg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:45:22 2025 by rpki-client