Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
File: vouurnYAGofa7rC8Ko3RDOZfhl0.mft (raw, json)
Hash identifier: 2CfDB1ddOQCT4X/lUuPLLvtkWbfCsOpn9gKngBfuZA4=
Subject key identifier: 74:DC:44:45:1A:72:F1:AB:49:46:C8:A7:F6:22:2F:EA:BF:55:0B:89
Authority key identifier: BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D
Certificate issuer: /CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
Certificate serial: 0197733F959DE4C3DAEEC265ECE2A8509565
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
Manifest number: 0F4B
Signing time: Sun 15 Jun 2025 11:00:36 +0000
Manifest this update: Sun 15 Jun 2025 11:00:36 +0000
Manifest next update: Mon 16 Jun 2025 11:00:36 +0000
Files and hashes: 1: 46j1tt7qHpvV87bnAFMEiJ1r1Ks.roa (hash: e6vcIxT4dfv15f9EpnyGTV3GOABteiMDMxyJleMHiCM=)
2: vouurnYAGofa7rC8Ko3RDOZfhl0.crl (hash: meXf0Ci0/opMZ9Fzo6CgKglisFkM5lN4/TqDLh6NHFM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 11:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:73:3f:95:9d:e4:c3:da:ee:c2:65:ec:e2:a8:50:95:65
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be8baeae76001a87daeeb0bc2a8dd10ce65f865d
Validity
Not Before: Jun 15 11:00:36 2025 GMT
Not After : Jun 16 11:00:36 2025 GMT
Subject: CN=74dc44451a72f1ab4946c8a7f6222feabf550b89
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:3a:90:01:09:b3:00:d5:46:73:19:86:1f:3b:
49:4c:99:79:95:bf:eb:b3:32:95:7a:2f:b2:e0:6c:
ba:e2:59:ec:4b:68:14:1d:1f:63:df:1a:b3:3d:6d:
d0:46:8c:3e:ee:41:c2:fa:57:0b:4b:fb:88:02:f4:
3f:bc:c5:ee:5b:df:b2:0a:5d:3f:df:ec:34:c8:f7:
84:ac:c2:e5:ca:78:f0:b3:37:f7:a7:36:7f:ef:8f:
72:87:0f:3d:5e:58:b7:52:15:ea:72:f1:6d:f2:2f:
5f:ad:99:37:74:c9:d4:61:af:48:ba:4e:b5:bf:89:
35:e1:04:18:d4:62:2a:53:6a:87:3d:95:d3:92:c1:
d3:cd:29:26:b7:78:f0:d3:14:96:33:37:ba:d1:d3:
4a:26:35:73:3f:df:37:5f:38:07:2e:92:e6:06:bf:
d5:65:78:9f:c8:b3:2c:6a:29:59:1d:06:64:d2:1c:
a7:03:74:37:41:b2:15:6c:d1:7d:d7:eb:5c:4c:0d:
b9:97:20:bf:b5:4c:fa:3d:a0:b4:ea:ad:40:f5:2a:
66:9b:02:ec:9b:d1:2c:3c:1f:03:62:90:6c:aa:e7:
84:92:c8:4d:8f:12:e4:00:74:a4:87:0c:9d:ea:24:
87:93:e7:19:3f:a9:0b:08:8e:05:9a:f9:ca:2c:ec:
23:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:DC:44:45:1A:72:F1:AB:49:46:C8:A7:F6:22:2F:EA:BF:55:0B:89
X509v3 Authority Key Identifier:
keyid:BE:8B:AE:AE:76:00:1A:87:DA:EE:B0:BC:2A:8D:D1:0C:E6:5F:86:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vouurnYAGofa7rC8Ko3RDOZfhl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/07bf93-6b71-4752-887e-71b5056d5b02/1/vouurnYAGofa7rC8Ko3RDOZfhl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:5f:6b:78:cb:e5:f4:97:46:16:ad:48:30:9d:2b:d2:4c:11:
ca:f4:99:cd:6b:13:fe:22:cd:aa:02:94:9e:0f:e3:8e:72:8a:
89:ea:94:ae:2b:22:9d:30:ba:f6:f8:71:6e:3c:46:cc:d8:5e:
49:06:7a:3f:82:8e:49:23:c5:7f:e6:19:8c:f3:be:64:db:62:
15:e0:e8:23:8f:1f:34:9c:8b:6d:e3:df:22:43:7b:70:70:71:
6c:5d:70:6a:c6:a0:96:6f:b4:37:d0:10:9d:23:ed:08:1d:79:
fb:a2:02:cc:07:ec:42:6f:93:46:53:c1:3d:9d:c7:af:cd:5f:
b7:d2:d7:23:54:ea:d1:9e:a7:7a:c9:32:59:f3:24:74:fc:c8:
40:19:f0:3e:d9:11:52:1b:47:b2:b5:1e:d0:fe:b6:65:94:76:
7e:f4:00:4b:dc:83:9a:f0:78:53:0b:f1:4f:f6:8b:45:25:ad:
32:0c:a5:3c:01:12:8d:02:c4:c9:94:fa:9a:90:79:8b:bf:1b:
0c:25:14:a1:ab:93:4d:2c:a3:ab:06:be:76:87:54:22:97:c2:
b9:dc:ba:4b:e9:72:c1:5c:d5:44:23:72:2a:32:61:b2:75:78:
68:68:95:43:ef:d9:a8:70:21:d3:18:03:79:a5:36:fd:99:28:
b4:ad:53:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdzP5Wd5MPa7sJl7OKoUJVlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlOGJhZWFlNzYwMDFhODdkYWVlYjBiYzJhOGRkMTBjZTY1
Zjg2NWQwHhcNMjUwNjE1MTEwMDM2WhcNMjUwNjE2MTEwMDM2WjAzMTEwLwYDVQQD
Eyg3NGRjNDQ0NTFhNzJmMWFiNDk0NmM4YTdmNjIyMmZlYWJmNTUwYjg5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoDqQAQmzANVGcxmGHztJTJl5lb/r
szKVei+y4Gy64lnsS2gUHR9j3xqzPW3QRow+7kHC+lcLS/uIAvQ/vMXuW9+yCl0/
3+w0yPeErMLlynjwszf3pzZ/749yhw89Xli3UhXqcvFt8i9frZk3dMnUYa9Iuk61
v4k14QQY1GIqU2qHPZXTksHTzSkmt3jw0xSWMze60dNKJjVzP983XzgHLpLmBr/V
ZXifyLMsailZHQZk0hynA3Q3QbIVbNF91+tcTA25lyC/tUz6PaC06q1A9SpmmwLs
m9EsPB8DYpBsqueEkshNjxLkAHSkhwyd6iSHk+cZP6kLCI4FmvnKLOwj1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHTcREUacvGrSUbIp/YiL+q/VQuJMB8GA1UdIwQY
MBaAFL6Lrq52ABqH2u6wvCqN0QzmX4ZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdm91dXJuWUFHb2ZhN3JDOEtvM1JET1pmaGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8wN2JmOTMtNmI3MS00NzUyLTg4N2Ut
NzFiNTA1NmQ1YjAyLzEvdm91dXJuWUFHb2ZhN3JDOEtvM1JET1pmaGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8wN2JmOTMtNmI3MS00NzUyLTg4N2UtNzFiNTA1NmQ1YjAy
LzEvdm91dXJuWUFHb2ZhN3JDOEtvM1JET1pmaGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUl9reMvl
9JdGFq1IMJ0r0kwRyvSZzWsT/iLNqgKUng/jjnKKieqUrisinTC69vhxbjxGzNhe
SQZ6P4KOSSPFf+YZjPO+ZNtiFeDoI48fNJyLbePfIkN7cHBxbF1wasaglm+0N9AQ
nSPtCB15+6ICzAfsQm+TRlPBPZ3Hr81ft9LXI1Tq0Z6neskyWfMkdPzIQBnwPtkR
UhtHsrUe0P62ZZR2fvQAS9yDmvB4UwvxT/aLRSWtMgylPAESjQLEyZT6mpB5i78b
DCUUoauTTSyjqwa+dodUIpfCudy6S+lywVzVRCNyKjJhsnV4aGiVQ+/ZqHAh0xgD
eaU2/ZkotK1TeQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 21:58:49 2025 by rpki-client