Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
File: v-NULdY_7SUN5ctl9uykh-f0eEc.mft (raw, json)
Hash identifier: fGANr3blNs0/NNSw8+s+LCAFfP8k70XNB6rchE5l+zQ=
Subject key identifier: 90:0B:15:A9:3F:AD:22:2B:6C:4C:94:13:BB:44:23:67:C9:D7:D2:67
Authority key identifier: BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
Certificate issuer: /CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Certificate serial: 019874875D630BE381577077032D5D4919D5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 10:01:24 +0000
Manifest this update: Mon 04 Aug 2025 10:01:24 +0000
Manifest next update: Tue 05 Aug 2025 10:01:24 +0000
Files and hashes: 1: 7_ycmg0-2tzp7CIdo8gplL9a278.roa (hash: XEoDI5Kr97fRLNGyRswSpfdzIPuYNKJgNWwTLw/sOpg=)
2: u42E-rWAmQgBLYpngQke_W6nUiE.roa (hash: skcKb420yoQzvUX8+CNyJl60MwIyb91kXhUGkdXKV9A=)
3: v-NULdY_7SUN5ctl9uykh-f0eEc.crl (hash: FyE9ogyNy+jSKZG2MnLKqgrouS374w9ey6XejdP1s8k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 10:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:87:5d:63:0b:e3:81:57:70:77:03:2d:5d:49:19:d5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bfe3542dd63fed250de5cb65f6eca487e7f47847
Validity
Not Before: Aug 4 10:01:24 2025 GMT
Not After : Aug 5 10:01:24 2025 GMT
Subject: CN=900b15a93fad222b6c4c9413bb442367c9d7d267
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:bb:74:fb:fd:5a:7b:6f:11:77:a5:fb:af:bc:
6e:e0:93:a2:a0:ab:ec:6b:6b:3e:ce:e1:17:45:41:
c2:35:31:d8:08:d6:b6:40:5e:e9:11:a2:c0:66:50:
99:01:44:3d:9d:59:8c:38:b2:ca:04:c3:79:a8:d3:
c8:47:00:bc:4b:02:af:e5:95:a3:ce:49:63:bd:14:
5c:59:4e:1b:1e:87:38:e9:a8:b2:f2:da:19:5e:c3:
f3:03:a1:dc:f8:1d:ff:bb:5c:08:0a:d4:91:5f:a2:
06:f9:76:6b:7f:07:b4:6f:70:1a:ff:b4:8c:2f:2b:
a9:1d:de:78:c2:8b:aa:2c:b9:9d:b6:3c:1e:40:3a:
ad:94:82:71:31:e0:cc:7f:f5:b9:79:ad:69:d4:62:
e4:37:79:59:fd:cd:32:ff:67:76:37:1c:e3:a4:27:
e7:cb:b9:e0:37:2f:c2:93:b7:9a:c2:b9:ab:b4:5e:
d7:33:fb:a1:d9:f5:14:af:93:aa:5a:c5:97:58:b0:
bd:5f:ad:6e:3d:62:dd:2a:a1:d7:8d:59:b6:ac:31:
06:30:96:90:df:98:5d:85:89:26:36:93:49:3c:0d:
2f:01:f2:ff:6a:de:ac:57:82:a5:55:68:b9:76:23:
3b:7b:a4:c9:55:5c:d6:63:9c:2f:82:ee:f7:18:1e:
36:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:0B:15:A9:3F:AD:22:2B:6C:4C:94:13:BB:44:23:67:C9:D7:D2:67
X509v3 Authority Key Identifier:
keyid:BF:E3:54:2D:D6:3F:ED:25:0D:E5:CB:65:F6:EC:A4:87:E7:F4:78:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v-NULdY_7SUN5ctl9uykh-f0eEc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/b15658-10b6-4041-a3da-8d3a6d165da3/1/v-NULdY_7SUN5ctl9uykh-f0eEc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:47:3f:6a:72:df:95:43:34:c7:de:a0:59:3c:8a:0a:63:74:
34:7f:f4:4c:7e:62:28:a6:7f:53:33:ad:79:1b:db:02:89:d5:
e5:c4:ed:a7:82:fa:61:2d:56:96:1a:64:88:0e:e1:ea:ed:16:
b8:ab:2f:e8:3d:aa:16:4e:49:43:37:64:9a:98:79:68:a5:33:
fc:83:f9:0e:54:3d:a0:3e:d8:6c:98:b2:42:5e:e9:de:44:0a:
d2:36:4d:d7:bf:15:b6:29:07:f8:88:7d:c7:e6:91:c4:bf:d4:
26:07:0e:98:3f:a7:13:1a:05:22:e3:c8:ac:34:27:2a:03:f1:
fc:0a:24:6c:96:96:b5:6f:81:48:f8:1f:73:66:4e:01:42:8a:
83:23:ff:da:9a:43:71:50:ca:95:d7:1a:6d:a5:ce:a0:9d:06:
7f:b9:09:fd:e3:c9:b4:82:93:06:25:b9:4c:ad:7e:02:96:d4:
86:db:ca:b6:8e:00:45:6c:d1:86:31:b9:26:c4:af:8e:fe:c1:
74:1b:26:e7:32:76:3f:fa:fc:53:5a:cc:ef:e2:04:9d:da:38:
4a:dd:38:40:a6:f0:6c:d5:38:3e:1a:02:f2:de:79:0b:11:42:
67:b7:fc:31:75:7a:b8:9c:87:1c:a8:ed:cd:1d:b0:76:b6:f4:
75:5f:29:3b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0h11jC+OBV3B3Ay1dSRnVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZTM1NDJkZDYzZmVkMjUwZGU1Y2I2NWY2ZWNhNDg3ZTdm
NDc4NDcwHhcNMjUwODA0MTAwMTI0WhcNMjUwODA1MTAwMTI0WjAzMTEwLwYDVQQD
Eyg5MDBiMTVhOTNmYWQyMjJiNmM0Yzk0MTNiYjQ0MjM2N2M5ZDdkMjY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1Lt0+/1ae28Rd6X7r7xu4JOioKvs
a2s+zuEXRUHCNTHYCNa2QF7pEaLAZlCZAUQ9nVmMOLLKBMN5qNPIRwC8SwKv5ZWj
zkljvRRcWU4bHoc46aiy8toZXsPzA6Hc+B3/u1wICtSRX6IG+XZrfwe0b3Aa/7SM
LyupHd54wouqLLmdtjweQDqtlIJxMeDMf/W5ea1p1GLkN3lZ/c0y/2d2NxzjpCfn
y7ngNy/Ck7eawrmrtF7XM/uh2fUUr5OqWsWXWLC9X61uPWLdKqHXjVm2rDEGMJaQ
35hdhYkmNpNJPA0vAfL/at6sV4KlVWi5diM7e6TJVVzWY5wvgu73GB420wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJALFak/rSIrbEyUE7tEI2fJ19JnMB8GA1UdIwQY
MBaAFL/jVC3WP+0lDeXLZfbspIfn9HhHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9iMTU2NTgtMTBiNi00MDQxLWEzZGEt
OGQzYTZkMTY1ZGEzLzEvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9iMTU2NTgtMTBiNi00MDQxLWEzZGEtOGQzYTZkMTY1ZGEz
LzEvdi1OVUxkWV83U1VONWN0bDl1eWtoLWYwZUVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR0c/anLf
lUM0x96gWTyKCmN0NH/0TH5iKKZ/UzOteRvbAonV5cTtp4L6YS1WlhpkiA7h6u0W
uKsv6D2qFk5JQzdkmph5aKUz/IP5DlQ9oD7YbJiyQl7p3kQK0jZN178VtikH+Ih9
x+aRxL/UJgcOmD+nExoFIuPIrDQnKgPx/AokbJaWtW+BSPgfc2ZOAUKKgyP/2ppD
cVDKldcabaXOoJ0Gf7kJ/ePJtIKTBiW5TK1+ApbUhtvKto4ARWzRhjG5JsSvjv7B
dBsm5zJ2P/r8U1rM7+IEndo4St04QKbwbNU4PhoC8t55CxFCZ7f8MXV6uJyHHKjt
zR2wdrb0dV8pOw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 14:49:56 2025 by rpki-client