Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
File: runVCGNpB2p412FjizKoqbjvcOc.mft (raw, json)
Hash identifier: X7nCHYnKjdZSYc+fbD5rJT62lfI0z5nSGovcsVhcfcQ=
Subject key identifier: B6:3D:FE:46:36:52:E0:89:89:FE:5A:DA:5C:E2:1B:A1:49:38:8D:AF
Authority key identifier: AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
Certificate issuer: /CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Certificate serial: 01976E876662C1A06788FDA82813F4909162
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
Manifest number: 1590
Signing time: Sat 14 Jun 2025 13:00:56 +0000
Manifest this update: Sat 14 Jun 2025 13:00:56 +0000
Manifest next update: Sun 15 Jun 2025 13:00:56 +0000
Files and hashes: 1: TI9bfzfYT_e9UXoNSSRvZ0SIvco.roa (hash: ysZXRJJDaCEwr01HXDnbPPBij8sh3z42AGc9cvU+Xhg=)
2: runVCGNpB2p412FjizKoqbjvcOc.crl (hash: KqEukUbGMUkY16+biPAyphnO4kMGUZb5JBG9bcIWZFo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:87:66:62:c1:a0:67:88:fd:a8:28:13:f4:90:91:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aee9d5086369076a78d761638b32a8a9b8ef70e7
Validity
Not Before: Jun 14 13:00:56 2025 GMT
Not After : Jun 15 13:00:56 2025 GMT
Subject: CN=b63dfe463652e08989fe5ada5ce21ba149388daf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:5e:3e:ab:29:c3:25:4d:b0:89:70:f7:28:e2:
08:62:8a:ca:d0:69:31:42:35:84:d1:0c:ca:57:e2:
af:9c:2c:28:2c:f9:66:61:d2:08:ec:52:3b:40:3d:
40:39:1d:81:81:76:7c:38:99:aa:2c:90:33:26:48:
49:75:1f:f5:22:9c:7a:89:e7:e9:20:3d:75:50:85:
0b:a9:17:fa:42:77:57:cf:22:00:9f:a5:bc:75:a2:
bb:79:15:f8:f2:29:05:48:6e:72:7a:95:3f:56:fe:
35:74:6f:0c:89:06:e2:47:c4:2b:20:1a:f9:84:0b:
18:9d:b4:8e:80:65:fe:84:b2:f4:e6:37:26:ce:46:
de:19:d0:55:bb:af:1a:af:00:c6:ff:a5:2c:45:17:
34:a7:7a:f3:89:e7:ea:ea:6d:36:69:be:5d:98:19:
79:8c:3b:65:b3:4d:cb:50:67:32:c5:4a:f6:ab:f9:
3d:4d:53:af:43:50:b3:61:dc:f9:5f:3b:12:d5:72:
8d:96:45:e0:0c:61:69:8c:7f:ff:91:15:a5:d2:95:
b6:3c:41:0a:50:cd:a1:92:4f:aa:ea:39:aa:e2:bd:
68:72:95:4f:07:e5:0a:b5:9f:3d:aa:e5:33:10:4e:
70:cf:9a:31:c5:dd:70:91:4b:0d:65:1f:2a:92:7b:
c7:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B6:3D:FE:46:36:52:E0:89:89:FE:5A:DA:5C:E2:1B:A1:49:38:8D:AF
X509v3 Authority Key Identifier:
keyid:AE:E9:D5:08:63:69:07:6A:78:D7:61:63:8B:32:A8:A9:B8:EF:70:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/runVCGNpB2p412FjizKoqbjvcOc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/013d7e-13f5-4e6e-ab87-2013618c04ff/1/runVCGNpB2p412FjizKoqbjvcOc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:16:60:95:c2:88:8c:53:08:5c:95:2b:b7:4e:f4:ee:c2:bf:
2b:09:2a:82:26:9f:1f:be:50:66:eb:ea:84:1b:dd:63:03:e8:
d4:d3:7d:10:5d:eb:bd:15:98:e4:09:04:7c:f9:d2:9b:e7:49:
75:db:44:27:42:aa:1d:20:a6:30:5b:d5:36:fc:65:e7:5b:c6:
7f:e2:e0:d7:72:df:96:75:67:8e:60:fa:cd:0e:68:51:57:5b:
3e:56:86:bc:50:54:79:ef:3c:e5:91:0e:72:19:de:2e:a7:cd:
ca:7d:b8:53:4b:ff:e2:99:90:1b:55:96:fb:4b:65:dc:77:91:
d5:b0:5f:eb:32:e9:b6:18:1d:71:0d:4d:15:36:13:ff:e0:d0:
da:3c:6c:6a:c6:62:19:d5:a2:ec:fe:2c:fd:26:00:e1:ce:20:
b0:73:95:b6:d2:ee:ec:00:b7:73:23:2c:28:10:89:b3:0e:cf:
0b:68:0d:b7:0c:ae:1a:1b:53:da:aa:fa:1f:a6:9c:8d:c7:8a:
c0:0b:de:7e:8c:36:af:ae:76:02:50:5e:85:fe:84:24:84:c3:
6f:05:62:78:4a:2f:03:31:02:66:a0:b3:91:e4:77:c6:6e:bf:
b3:a8:43:e3:e5:fa:ad:67:ba:5b:cb:10:51:b7:a4:3b:a8:e2:
b5:91:99:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduh2ZiwaBniP2oKBP0kJFiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZTlkNTA4NjM2OTA3NmE3OGQ3NjE2MzhiMzJhOGE5Yjhl
ZjcwZTcwHhcNMjUwNjE0MTMwMDU2WhcNMjUwNjE1MTMwMDU2WjAzMTEwLwYDVQQD
EyhiNjNkZmU0NjM2NTJlMDg5ODlmZTVhZGE1Y2UyMWJhMTQ5Mzg4ZGFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0l4+qynDJU2wiXD3KOIIYorK0Gkx
QjWE0QzKV+KvnCwoLPlmYdII7FI7QD1AOR2BgXZ8OJmqLJAzJkhJdR/1Ipx6iefp
ID11UIULqRf6QndXzyIAn6W8daK7eRX48ikFSG5yepU/Vv41dG8MiQbiR8QrIBr5
hAsYnbSOgGX+hLL05jcmzkbeGdBVu68arwDG/6UsRRc0p3rziefq6m02ab5dmBl5
jDtls03LUGcyxUr2q/k9TVOvQ1CzYdz5XzsS1XKNlkXgDGFpjH//kRWl0pW2PEEK
UM2hkk+q6jmq4r1ocpVPB+UKtZ89quUzEE5wz5oxxd1wkUsNZR8qknvHVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLY9/kY2UuCJif5a2lziG6FJOI2vMB8GA1UdIwQY
MBaAFK7p1QhjaQdqeNdhY4syqKm473DnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS8wMTNkN2UtMTNmNS00ZTZlLWFiODct
MjAxMzYxOGMwNGZmLzEvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS8wMTNkN2UtMTNmNS00ZTZlLWFiODctMjAxMzYxOGMwNGZm
LzEvcnVuVkNHTnBCMnA0MTJGaml6S29xYmp2Y09jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZBZglcKI
jFMIXJUrt0707sK/KwkqgiafH75QZuvqhBvdYwPo1NN9EF3rvRWY5AkEfPnSm+dJ
ddtEJ0KqHSCmMFvVNvxl51vGf+Lg13LflnVnjmD6zQ5oUVdbPlaGvFBUee885ZEO
chneLqfNyn24U0v/4pmQG1WW+0tl3HeR1bBf6zLpthgdcQ1NFTYT/+DQ2jxsasZi
GdWi7P4s/SYA4c4gsHOVttLu7AC3cyMsKBCJsw7PC2gNtwyuGhtT2qr6H6acjceK
wAvefow2r652AlBehf6EJITDbwVieEovAzECZqCzkeR3xm6/s6hD4+X6rWe6W8sQ
UbekO6jitZGZRw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:53:09 2025 by rpki-client