Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
File: vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft (raw, json)
Hash identifier: MumTRRGi2GCLOiKeJBtNgdlB8xmnzWmSaMBuL41D0rk=
Subject key identifier: 69:41:BC:15:8D:17:2D:F1:C1:5E:27:44:C7:51:95:EB:7E:AA:A5:7D
Authority key identifier: BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
Certificate issuer: /CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Certificate serial: 019787A23AB15F44574AF10389D7265A9A45
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
Manifest number: 159B
Signing time: Thu 19 Jun 2025 10:00:45 +0000
Manifest this update: Thu 19 Jun 2025 10:00:45 +0000
Manifest next update: Fri 20 Jun 2025 10:00:45 +0000
Files and hashes: 1: BF5uYM34somF3uKBjwVBv6TvSUc.roa (hash: LMQTKQzXnQ/SBYJGX5sPOQPjZo/gmRmiCPcpMivc64U=)
2: vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl (hash: oCWGJY3LNrP7tOPHDirx1WAHZS1jqQlfEY8dUnZmBd0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 10:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:87:a2:3a:b1:5f:44:57:4a:f1:03:89:d7:26:5a:9a:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be125cad7dd4c5f0201ee2a21deac387366981c4
Validity
Not Before: Jun 19 10:00:45 2025 GMT
Not After : Jun 20 10:00:45 2025 GMT
Subject: CN=6941bc158d172df1c15e2744c75195eb7eaaa57d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:b2:7e:41:f1:90:5b:21:58:d1:9a:27:52:b3:
ec:74:13:a0:84:2a:c0:dd:87:80:31:cf:7a:16:3a:
7d:80:18:71:27:54:ae:30:e4:69:68:be:a3:56:1c:
ea:a0:53:64:4e:4c:ab:49:e7:91:83:8e:00:d5:e7:
67:89:3d:d8:e0:69:26:d6:ec:67:a0:01:ec:ad:a9:
42:ce:cc:34:a7:d7:b7:48:86:4b:e5:6a:67:bb:fb:
75:fb:f4:e7:32:f8:0b:65:64:38:81:27:54:e9:17:
fe:a0:95:d9:2e:4d:aa:d1:b8:38:af:3e:e7:fb:40:
d6:f0:e7:bb:c1:25:6d:9a:e3:d4:10:1e:d1:3f:8c:
91:43:18:29:a3:01:be:1f:0f:78:2c:99:4a:a1:b6:
c6:49:63:0e:b2:b8:3f:9a:a4:42:fa:a5:83:39:bd:
64:6f:11:ca:f8:f8:9a:46:b5:e4:f7:e5:6d:8d:f1:
37:70:aa:e4:b2:54:0f:99:a2:76:b3:65:73:60:b8:
da:b9:5c:bf:66:3f:70:ef:cc:bc:c1:80:0f:fc:fa:
ec:52:ba:31:e9:7e:78:81:81:83:9f:08:da:be:8b:
41:64:db:9f:a6:96:b8:59:bf:f1:4d:9a:23:c5:56:
1b:88:94:c1:ba:db:8f:c0:e0:00:f6:61:ba:3c:75:
cd:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:41:BC:15:8D:17:2D:F1:C1:5E:27:44:C7:51:95:EB:7E:AA:A5:7D
X509v3 Authority Key Identifier:
keyid:BE:12:5C:AD:7D:D4:C5:F0:20:1E:E2:A2:1D:EA:C3:87:36:69:81:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vhJcrX3UxfAgHuKiHerDhzZpgcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/55a74f-49ca-4a63-9eda-517eff908975/1/vhJcrX3UxfAgHuKiHerDhzZpgcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:33:65:e5:a3:0f:bf:72:7a:ee:82:d6:14:d2:fc:75:46:46:
44:3b:1e:f3:3a:d5:bd:fc:40:f7:99:da:75:df:06:7d:a3:e3:
ea:14:82:f6:35:83:1f:b0:da:1f:4d:46:a1:f4:fa:af:e4:cc:
38:36:df:a8:fd:ea:37:7a:b0:60:f9:74:3e:e8:84:32:f8:ec:
31:66:96:35:32:e4:c8:b4:06:ad:38:fd:88:78:f9:5a:91:f9:
8a:f4:c8:f2:8d:75:ed:78:e8:29:82:84:f3:4d:13:50:a4:9c:
4c:bc:36:bd:2e:9f:c2:e9:f6:1f:a9:e2:d8:40:53:42:45:34:
e8:93:3c:ff:46:51:ea:0e:aa:4a:7e:c3:c3:43:19:3f:c0:a0:
7f:04:eb:a6:d9:db:b1:cf:e1:39:2d:8c:f8:e4:58:07:3b:41:
33:2c:15:69:64:8e:be:b4:63:f0:7e:8d:c9:f8:80:be:ef:1c:
1b:a5:e8:55:67:e9:af:60:42:f8:54:a5:4c:09:f8:52:82:d3:
32:52:d1:f1:35:c9:42:88:01:ae:ab:a0:cd:f6:51:0a:d2:e0:
7e:55:d1:c9:4a:41:d7:96:d1:f5:3a:64:a0:f7:99:22:af:c1:
88:06:dc:7c:4e:bc:45:3e:25:83:5e:f1:b3:c4:46:88:86:4d:
12:bb:c6:c8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeHojqxX0RXSvEDidcmWppFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMTI1Y2FkN2RkNGM1ZjAyMDFlZTJhMjFkZWFjMzg3MzY2
OTgxYzQwHhcNMjUwNjE5MTAwMDQ1WhcNMjUwNjIwMTAwMDQ1WjAzMTEwLwYDVQQD
Eyg2OTQxYmMxNThkMTcyZGYxYzE1ZTI3NDRjNzUxOTVlYjdlYWFhNTdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm7J+QfGQWyFY0ZonUrPsdBOghCrA
3YeAMc96Fjp9gBhxJ1SuMORpaL6jVhzqoFNkTkyrSeeRg44A1edniT3Y4Gkm1uxn
oAHsralCzsw0p9e3SIZL5Wpnu/t1+/TnMvgLZWQ4gSdU6Rf+oJXZLk2q0bg4rz7n
+0DW8Oe7wSVtmuPUEB7RP4yRQxgpowG+Hw94LJlKobbGSWMOsrg/mqRC+qWDOb1k
bxHK+PiaRrXk9+VtjfE3cKrkslQPmaJ2s2VzYLjauVy/Zj9w78y8wYAP/PrsUrox
6X54gYGDnwjavotBZNufppa4Wb/xTZojxVYbiJTButuPwOAA9mG6PHXN8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGlBvBWNFy3xwV4nRMdRlet+qqV9MB8GA1UdIwQY
MBaAFL4SXK191MXwIB7ioh3qw4c2aYHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy81NWE3NGYtNDljYS00YTYzLTllZGEt
NTE3ZWZmOTA4OTc1LzEvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy81NWE3NGYtNDljYS00YTYzLTllZGEtNTE3ZWZmOTA4OTc1
LzEvdmhKY3JYM1V4ZkFnSHVLaUhlckRoelpwZ2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmjNl5aMP
v3J67oLWFNL8dUZGRDse8zrVvfxA95nadd8GfaPj6hSC9jWDH7DaH01GofT6r+TM
ODbfqP3qN3qwYPl0PuiEMvjsMWaWNTLkyLQGrTj9iHj5WpH5ivTI8o117XjoKYKE
800TUKScTLw2vS6fwun2H6ni2EBTQkU06JM8/0ZR6g6qSn7Dw0MZP8CgfwTrptnb
sc/hOS2M+ORYBztBMywVaWSOvrRj8H6NyfiAvu8cG6XoVWfpr2BC+FSlTAn4UoLT
MlLR8TXJQogBrqugzfZRCtLgflXRyUpB15bR9TpkoPeZIq/BiAbcfE68RT4lg17x
s8RGiIZNErvGyA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 20:11:14 2025 by rpki-client