Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
File: Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft (raw, json)
Hash identifier: B6UXgt/HEuJaaCqvLCF0Cxwg8y5bzpgLvf2/siePLKI=
Subject key identifier: 05:42:1E:39:74:19:5C:C4:E3:90:BF:21:E3:72:9F:10:0A:2A:EC:C4
Authority key identifier: 55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
Certificate issuer: /CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Certificate serial: 0197B77BFE04B801A516942C6B1C2B7001E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
Manifest number: 05C7
Signing time: Sat 28 Jun 2025 17:00:45 +0000
Manifest this update: Sat 28 Jun 2025 17:00:45 +0000
Manifest next update: Sun 29 Jun 2025 17:00:45 +0000
Files and hashes: 1: Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl (hash: O4xGmJLaPRTTHOiKVHPbn+7F/S15R7cY4K9c9Gm3oio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:fe:04:b8:01:a5:16:94:2c:6b:1c:2b:70:01:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=55e7397e45306185102bfd9ee0a1f94d1ac01012
Validity
Not Before: Jun 28 17:00:45 2025 GMT
Not After : Jun 29 17:00:45 2025 GMT
Subject: CN=05421e3974195cc4e390bf21e3729f100a2aecc4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:02:f0:a4:43:40:a8:20:ce:ca:b3:34:59:26:
bc:c0:cf:d5:27:54:9c:45:97:f0:3c:5a:c1:49:06:
10:20:ef:a0:25:a3:a2:3c:84:a5:70:17:2d:7f:e3:
52:56:6a:c8:bd:98:16:18:d7:0e:47:6a:cf:6d:ba:
e7:85:51:8b:2d:1f:ba:d1:eb:78:fa:75:a7:86:ac:
27:30:46:c4:cb:f3:07:fd:fe:9d:50:85:9f:b6:a7:
b8:c1:97:c2:81:bb:a9:10:bd:a9:0d:e7:fb:7a:79:
f1:1b:f7:ab:f3:4f:64:a3:61:4c:01:77:82:f8:56:
57:f2:a4:39:3c:1b:81:9a:5c:97:7b:2b:18:8f:4c:
57:e7:ab:4f:54:1c:66:45:8a:a7:d5:a4:0a:72:2a:
73:10:45:cb:22:f0:0a:15:09:5a:78:96:9e:db:f3:
7c:e5:db:b1:bc:4c:0e:a5:c3:c8:7b:9a:3f:f0:c2:
94:0e:58:ed:dd:8e:f8:ef:8c:0c:4c:3b:55:ab:73:
81:c6:ec:76:3d:ea:d7:ad:ba:5c:26:99:51:8a:6a:
84:dd:64:8c:50:ba:e0:e3:69:a9:e1:f0:69:24:e1:
85:f2:73:ee:8d:ab:39:dd:49:41:02:f7:d9:08:bc:
c3:dd:c5:53:40:b5:1a:9f:6a:94:35:5a:3c:9e:d6:
2b:73
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:42:1E:39:74:19:5C:C4:E3:90:BF:21:E3:72:9F:10:0A:2A:EC:C4
X509v3 Authority Key Identifier:
keyid:55:E7:39:7E:45:30:61:85:10:2B:FD:9E:E0:A1:F9:4D:1A:C0:10:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Vec5fkUwYYUQK_2e4KH5TRrAEBI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/f0273f-d998-46e7-8608-310554682223/1/Vec5fkUwYYUQK_2e4KH5TRrAEBI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:61:25:00:67:b8:b6:ad:d7:94:ff:38:a5:fa:fe:b4:b2:df:
e8:db:a3:f3:e3:8a:db:77:8b:2f:43:9a:11:6c:80:bb:b0:af:
1b:7b:72:0e:78:9e:d0:d3:4f:72:93:ea:12:86:4c:f4:f5:98:
3d:b9:c6:09:4e:a6:07:50:42:51:ae:40:30:2c:46:ab:24:87:
cb:a9:8f:bb:da:1e:ae:30:62:57:73:63:fa:88:4a:0f:f7:b4:
80:8d:9d:73:f4:ed:c0:a2:15:8a:50:9d:ee:60:65:c8:64:f7:
53:1b:2c:c1:ef:35:75:7c:3d:73:da:c2:f3:b2:03:27:da:af:
d7:c3:c3:6e:46:b3:13:68:e9:3b:0e:69:57:7d:cc:14:7e:71:
f6:43:73:c5:02:ad:a5:a1:10:92:9e:b8:48:37:60:73:0f:48:
45:c9:68:61:6a:81:8e:c2:32:1b:c4:75:1a:70:18:7e:e2:c9:
cc:7e:0f:19:d5:0c:ba:64:91:e4:7f:4a:05:32:2b:dd:ae:77:
cb:b3:d9:d8:26:a2:0c:a4:5f:f6:37:a0:3d:26:e7:c2:a9:55:
55:7e:dd:5a:aa:48:4c:07:9b:b3:a6:83:60:ea:8a:20:53:f3:
e4:44:c1:51:ba:99:07:7d:b3:8a:66:38:62:c6:57:4a:ff:a3:
af:d9:80:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3e/4EuAGlFpQsaxwrcAHnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1ZTczOTdlNDUzMDYxODUxMDJiZmQ5ZWUwYTFmOTRkMWFj
MDEwMTIwHhcNMjUwNjI4MTcwMDQ1WhcNMjUwNjI5MTcwMDQ1WjAzMTEwLwYDVQQD
EygwNTQyMWUzOTc0MTk1Y2M0ZTM5MGJmMjFlMzcyOWYxMDBhMmFlY2M0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ALwpENAqCDOyrM0WSa8wM/VJ1Sc
RZfwPFrBSQYQIO+gJaOiPISlcBctf+NSVmrIvZgWGNcOR2rPbbrnhVGLLR+60et4
+nWnhqwnMEbEy/MH/f6dUIWftqe4wZfCgbupEL2pDef7ennxG/er809ko2FMAXeC
+FZX8qQ5PBuBmlyXeysYj0xX56tPVBxmRYqn1aQKcipzEEXLIvAKFQlaeJae2/N8
5duxvEwOpcPIe5o/8MKUDljt3Y7474wMTDtVq3OBxux2PerXrbpcJplRimqE3WSM
ULrg42mp4fBpJOGF8nPujas53UlBAvfZCLzD3cVTQLUan2qUNVo8ntYrcwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAVCHjl0GVzE45C/IeNynxAKKuzEMB8GA1UdIwQY
MBaAFFXnOX5FMGGFECv9nuCh+U0awBASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmVjNWZrVXdZWVVRS18yZTRLSDVUUnJBRUJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9mMDI3M2YtZDk5OC00NmU3LTg2MDgt
MzEwNTU0NjgyMjIzLzEvVmVjNWZrVXdZWVVRS18yZTRLSDVUUnJBRUJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9mMDI3M2YtZDk5OC00NmU3LTg2MDgtMzEwNTU0NjgyMjIz
LzEvVmVjNWZrVXdZWVVRS18yZTRLSDVUUnJBRUJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAGElAGe4
tq3XlP84pfr+tLLf6Nuj8+OK23eLL0OaEWyAu7CvG3tyDnie0NNPcpPqEoZM9PWY
PbnGCU6mB1BCUa5AMCxGqySHy6mPu9oerjBiV3Nj+ohKD/e0gI2dc/TtwKIVilCd
7mBlyGT3Uxsswe81dXw9c9rC87IDJ9qv18PDbkazE2jpOw5pV33MFH5x9kNzxQKt
paEQkp64SDdgcw9IRcloYWqBjsIyG8R1GnAYfuLJzH4PGdUMumSR5H9KBTIr3a53
y7PZ2CaiDKRf9jegPSbnwqlVVX7dWqpITAebs6aDYOqKIFPz5ETBUbqZB32zimY4
YsZXSv+jr9mAmQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:28 2025 by rpki-client