Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
File: vfyN37hBh58OUw3OO3-Fgn8MGT8.mft (raw, json)
Hash identifier: AQWnSRSEZEGZrvHCYZDzuM/yHawPIz81lGUIUCZ97EU=
Subject key identifier: AF:9B:70:CF:2E:29:30:84:F2:5E:4F:B7:51:FB:59:E3:80:53:3F:3A
Authority key identifier: BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
Certificate issuer: /CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Certificate serial: 01976EF52B9F082F45754464799B739BF945
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
Manifest number: 0510
Signing time: Sat 14 Jun 2025 15:00:50 +0000
Manifest this update: Sat 14 Jun 2025 15:00:50 +0000
Manifest next update: Sun 15 Jun 2025 15:00:50 +0000
Files and hashes: 1: evKF7Ghixw06TsX8m9WS1kttuTQ.roa (hash: C0t0ubGvyf/fMEfN+yYg9iML6okU33nNE7cYDrXAdGg=)
2: vfyN37hBh58OUw3OO3-Fgn8MGT8.crl (hash: TO0mZxb8JUfxPsoJf02mFkqIvf5ceW6JR7DzG7zebPU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:f5:2b:9f:08:2f:45:75:44:64:79:9b:73:9b:f9:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfc8ddfb841879f0e530dce3b7f85827f0c193f
Validity
Not Before: Jun 14 15:00:50 2025 GMT
Not After : Jun 15 15:00:50 2025 GMT
Subject: CN=af9b70cf2e293084f25e4fb751fb59e380533f3a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:76:b4:17:16:18:99:8c:03:f6:b5:96:fb:f1:
d5:c2:1e:c9:80:31:df:46:52:7c:67:50:8e:67:68:
98:cf:1d:5b:7d:f3:9d:c5:c7:06:13:6d:47:06:c9:
26:d1:91:89:d4:ae:d7:f6:5c:55:f7:69:e4:10:1b:
9d:da:21:e2:16:18:1d:55:97:84:3a:8b:64:c0:73:
63:c8:5e:9a:96:72:85:d9:85:82:6f:ea:7f:f4:4d:
98:00:72:17:ec:e2:e2:47:25:93:ff:61:09:ad:5a:
1f:39:58:a1:e8:df:9a:44:55:0a:11:a4:a1:50:34:
ed:40:81:54:9a:fa:b0:2f:a7:8f:97:21:e9:4a:4e:
d7:c5:6e:df:39:e7:36:53:6c:3f:50:2d:7f:c5:a0:
9b:8a:62:a1:02:9c:b2:38:20:9b:07:ed:f3:b2:89:
b0:a4:51:52:e1:9d:1c:e8:8c:90:96:3f:41:1e:42:
11:55:2b:84:ae:13:d9:e2:84:27:c6:09:ff:9b:1d:
da:7b:4a:11:43:ca:5e:8b:dc:ed:ba:c4:72:d8:a8:
8e:ba:e2:1f:09:6b:ed:15:77:0d:3a:8a:87:ab:7d:
96:9b:b0:cd:27:eb:23:31:e5:d1:2c:97:dd:1a:4c:
b3:42:1f:66:b0:15:e7:0b:c4:b5:cf:fd:5a:f7:e6:
c4:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:9B:70:CF:2E:29:30:84:F2:5E:4F:B7:51:FB:59:E3:80:53:3F:3A
X509v3 Authority Key Identifier:
keyid:BD:FC:8D:DF:B8:41:87:9F:0E:53:0D:CE:3B:7F:85:82:7F:0C:19:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyN37hBh58OUw3OO3-Fgn8MGT8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d4/7b2f20-49ad-4712-9c3e-b1d4f8a86d09/1/vfyN37hBh58OUw3OO3-Fgn8MGT8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:b3:7c:ea:c3:af:bf:c3:b7:0a:d6:26:11:27:7a:d7:99:57:
2d:d2:db:85:50:61:cb:54:ad:20:e0:4f:f9:91:f8:9a:4a:98:
d0:0f:28:a4:fe:6b:17:b0:78:c9:01:eb:f5:ff:ec:4e:8e:60:
2f:2e:07:9f:a3:a6:da:77:92:99:43:ad:ca:37:65:eb:db:1c:
42:ef:88:61:90:15:3d:68:90:ec:40:14:60:b6:a4:b9:a7:89:
a8:56:9d:36:1d:10:a2:24:3c:5c:ad:b5:de:91:f3:ea:23:af:
a5:cd:b5:fd:84:d1:bd:68:f1:90:c5:b8:22:e5:9d:c8:33:5c:
e1:17:3d:7c:85:ed:56:cc:53:9a:52:67:5b:94:e8:79:ee:9b:
57:ce:da:fe:fe:f5:37:82:8d:7b:da:cd:f1:1d:66:42:1e:8b:
82:3d:cf:5d:e8:38:eb:fc:44:a7:f1:bb:eb:92:db:3b:42:af:
51:ed:aa:bc:fe:05:95:9f:79:5e:d6:91:8e:d7:83:9e:b3:f5:
be:a9:70:1b:b5:60:0a:3e:79:06:6b:4a:77:3d:21:7d:1b:f4:
d7:85:a4:53:bd:fa:52:7a:92:44:99:7e:79:8e:3a:34:21:a9:
e9:bf:7a:89:19:49:16:0d:fe:28:10:a0:66:ee:26:ac:8e:3f:
b6:2e:f2:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdu9SufCC9FdURkeZtzm/lFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmM4ZGRmYjg0MTg3OWYwZTUzMGRjZTNiN2Y4NTgyN2Yw
YzE5M2YwHhcNMjUwNjE0MTUwMDUwWhcNMjUwNjE1MTUwMDUwWjAzMTEwLwYDVQQD
EyhhZjliNzBjZjJlMjkzMDg0ZjI1ZTRmYjc1MWZiNTllMzgwNTMzZjNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHa0FxYYmYwD9rWW+/HVwh7JgDHf
RlJ8Z1COZ2iYzx1bffOdxccGE21HBskm0ZGJ1K7X9lxV92nkEBud2iHiFhgdVZeE
OotkwHNjyF6alnKF2YWCb+p/9E2YAHIX7OLiRyWT/2EJrVofOVih6N+aRFUKEaSh
UDTtQIFUmvqwL6ePlyHpSk7XxW7fOec2U2w/UC1/xaCbimKhApyyOCCbB+3zsomw
pFFS4Z0c6IyQlj9BHkIRVSuErhPZ4oQnxgn/mx3ae0oRQ8pei9ztusRy2KiOuuIf
CWvtFXcNOoqHq32Wm7DNJ+sjMeXRLJfdGkyzQh9msBXnC8S1z/1a9+bExQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK+bcM8uKTCE8l5Pt1H7WeOAUz86MB8GA1UdIwQY
MBaAFL38jd+4QYefDlMNzjt/hYJ/DBk/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNC83YjJmMjAtNDlhZC00NzEyLTljM2Ut
YjFkNGY4YTg2ZDA5LzEvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNC83YjJmMjAtNDlhZC00NzEyLTljM2UtYjFkNGY4YTg2ZDA5
LzEvdmZ5TjM3aEJoNThPVXczT08zLUZnbjhNR1Q4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhbN86sOv
v8O3CtYmESd615lXLdLbhVBhy1StIOBP+ZH4mkqY0A8opP5rF7B4yQHr9f/sTo5g
Ly4Hn6Om2neSmUOtyjdl69scQu+IYZAVPWiQ7EAUYLakuaeJqFadNh0QoiQ8XK21
3pHz6iOvpc21/YTRvWjxkMW4IuWdyDNc4Rc9fIXtVsxTmlJnW5Toee6bV87a/v71
N4KNe9rN8R1mQh6Lgj3PXeg46/xEp/G765LbO0KvUe2qvP4FlZ95XtaRjteDnrP1
vqlwG7VgCj55BmtKdz0hfRv014WkU736UnqSRJl+eY46NCGp6b96iRlJFg3+KBCg
Zu4mrI4/ti7yWg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:55:56 2025 by rpki-client