Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
File: VBfj2w0cLPwitL6HTiWY3QmSlO0.mft (raw, json)
Hash identifier: 8mKd/28dJcG+JPmhfbCS3QH5GUG2JLV1jHUHbcbJ6ec=
Subject key identifier: 2F:8F:0B:F0:3E:16:1D:9E:8B:5C:1B:F1:F5:90:3E:D1:F9:5D:BE:F6
Authority key identifier: 54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
Certificate issuer: /CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Certificate serial: 0197B5FC09C7672DC89503F95CD8112D689A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 10:01:22 +0000
Manifest this update: Sat 28 Jun 2025 10:01:22 +0000
Manifest next update: Sun 29 Jun 2025 10:01:22 +0000
Files and hashes: 1: VBfj2w0cLPwitL6HTiWY3QmSlO0.crl (hash: bOVhA5RJ5idXt2YM5l1zEz3fQUhDlkJ67nkOOaqvFZ8=)
2: Xon3ZRUmiHyafmwSbpFGnaeltWw.roa (hash: M4Nh/8K2vjAav0TbJZxKf47ENVLTCLivupIBPIaomOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:09:c7:67:2d:c8:95:03:f9:5c:d8:11:2d:68:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5417e3db0d1c2cfc22b4be874e2598dd099294ed
Validity
Not Before: Jun 28 10:01:22 2025 GMT
Not After : Jun 29 10:01:22 2025 GMT
Subject: CN=2f8f0bf03e161d9e8b5c1bf1f5903ed1f95dbef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:38:f3:8e:c6:d9:aa:99:91:36:a0:2d:b9:d3:
17:f6:c3:26:3c:2e:38:b7:7e:c1:67:7c:e2:d7:f9:
62:0b:69:84:b1:2a:f5:f4:b5:77:20:1f:60:9c:35:
bb:88:ce:6e:69:cf:92:19:d0:38:87:dd:cf:ab:f4:
90:03:86:aa:dc:68:87:a1:01:72:4f:50:f3:ab:fc:
e2:e2:15:c2:74:92:47:93:8b:21:44:55:ab:88:6b:
dd:b6:df:89:89:1b:d1:a3:11:25:73:8a:52:c0:1d:
25:9b:df:bc:3a:23:6b:be:e1:52:d3:97:6e:14:d8:
75:4e:94:7a:f8:16:b2:78:81:59:38:52:fd:a5:fb:
79:0a:d2:43:eb:04:83:67:ef:85:68:81:b5:6b:6a:
da:7d:6c:f1:81:5b:d2:7d:1d:de:1a:bc:08:51:fe:
e5:27:44:d5:ad:1b:8d:8b:07:f3:0f:9d:86:77:c8:
0c:5e:e5:37:4c:24:c0:b6:1c:53:0e:33:22:56:36:
6b:bf:07:82:d5:ee:17:4a:0d:75:fb:a5:fa:67:c6:
f0:41:7e:8a:e3:8d:59:3a:11:00:a8:24:df:a2:8f:
cd:03:2b:d9:92:cb:02:c9:b1:73:e1:ac:c9:98:41:
ba:79:d7:30:2a:bd:fe:4e:6c:78:26:db:fb:9d:b6:
47:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:8F:0B:F0:3E:16:1D:9E:8B:5C:1B:F1:F5:90:3E:D1:F9:5D:BE:F6
X509v3 Authority Key Identifier:
keyid:54:17:E3:DB:0D:1C:2C:FC:22:B4:BE:87:4E:25:98:DD:09:92:94:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBfj2w0cLPwitL6HTiWY3QmSlO0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/50248d-825c-45e1-b5ff-b29a2cbc3580/1/VBfj2w0cLPwitL6HTiWY3QmSlO0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:31:a7:86:ee:62:bd:c1:46:ae:8e:33:b3:a7:ca:94:26:6f:
8e:f3:e0:01:ee:89:66:6e:ca:56:da:21:18:eb:21:90:83:0e:
f3:bd:91:50:6e:95:4d:d6:6a:2e:19:ab:25:d1:54:f9:3f:5c:
cd:3b:9e:3e:1b:1e:79:fb:c8:4f:1d:e3:9c:a7:9e:48:4e:2a:
32:d7:9d:ca:b6:e7:9a:3b:7f:20:02:fe:75:07:8a:36:c5:3b:
54:e9:3d:3d:30:2b:47:ee:d5:77:34:c4:8e:cd:d5:a1:14:81:
b1:88:c7:b2:9f:24:97:58:be:b4:9a:2a:d5:a6:fa:5e:4a:20:
b3:21:aa:b9:af:e9:0d:4b:97:0b:0e:5d:cb:93:28:ec:0d:3a:
ee:88:06:97:44:86:ac:24:35:e6:68:93:70:f7:cf:14:26:cf:
2f:02:8d:45:65:2d:40:03:d3:1b:98:5b:4a:35:43:51:59:20:
32:a6:9e:39:e5:21:90:90:c5:84:39:a5:7d:b4:60:e3:70:29:
df:62:88:5e:c7:08:21:d3:04:74:71:d8:ed:25:94:83:00:07:
45:a0:7e:c7:40:b3:90:59:fe:e0:de:31:7a:43:3c:5f:42:3c:
58:0c:c3:32:5b:10:e4:12:83:42:72:f6:29:41:ed:b1:f5:74:
43:f4:68:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/AnHZy3IlQP5XNgRLWiaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MTdlM2RiMGQxYzJjZmMyMmI0YmU4NzRlMjU5OGRkMDk5
Mjk0ZWQwHhcNMjUwNjI4MTAwMTIyWhcNMjUwNjI5MTAwMTIyWjAzMTEwLwYDVQQD
EygyZjhmMGJmMDNlMTYxZDllOGI1YzFiZjFmNTkwM2VkMWY5NWRiZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszjzjsbZqpmRNqAtudMX9sMmPC44
t37BZ3zi1/liC2mEsSr19LV3IB9gnDW7iM5uac+SGdA4h93Pq/SQA4aq3GiHoQFy
T1Dzq/zi4hXCdJJHk4shRFWriGvdtt+JiRvRoxElc4pSwB0lm9+8OiNrvuFS05du
FNh1TpR6+BayeIFZOFL9pft5CtJD6wSDZ++FaIG1a2rafWzxgVvSfR3eGrwIUf7l
J0TVrRuNiwfzD52Gd8gMXuU3TCTAthxTDjMiVjZrvweC1e4XSg11+6X6Z8bwQX6K
441ZOhEAqCTfoo/NAyvZkssCybFz4azJmEG6edcwKr3+Tmx4Jtv7nbZHRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC+PC/A+Fh2ei1wb8fWQPtH5Xb72MB8GA1UdIwQY
MBaAFFQX49sNHCz8IrS+h04lmN0JkpTtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJmajJ3MGNMUHdpdEw2SFRpV1kzUW1TbE8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC81MDI0OGQtODI1Yy00NWUxLWI1ZmYt
YjI5YTJjYmMzNTgwLzEvVkJmajJ3MGNMUHdpdEw2SFRpV1kzUW1TbE8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC81MDI0OGQtODI1Yy00NWUxLWI1ZmYtYjI5YTJjYmMzNTgw
LzEvVkJmajJ3MGNMUHdpdEw2SFRpV1kzUW1TbE8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdDGnhu5i
vcFGro4zs6fKlCZvjvPgAe6JZm7KVtohGOshkIMO872RUG6VTdZqLhmrJdFU+T9c
zTuePhseefvITx3jnKeeSE4qMtedyrbnmjt/IAL+dQeKNsU7VOk9PTArR+7VdzTE
js3VoRSBsYjHsp8kl1i+tJoq1ab6XkogsyGqua/pDUuXCw5dy5Mo7A067ogGl0SG
rCQ15miTcPfPFCbPLwKNRWUtQAPTG5hbSjVDUVkgMqaeOeUhkJDFhDmlfbRg43Ap
32KIXscIIdMEdHHY7SWUgwAHRaB+x0CzkFn+4N4xekM8X0I8WAzDMlsQ5BKDQnL2
KUHtsfV0Q/RouQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:04:42 2025 by rpki-client