Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
File: vfyFyRfr69yH36Ne4JvEAoX19Ac.mft (raw, json)
Hash identifier: dVFakJuX4r3avlzcXukTMuj5r0roopdARfNmHWVBzGo=
Subject key identifier: BA:24:9A:5C:A4:77:2C:FF:0E:43:5F:29:D0:17:59:82:25:5A:92:6A
Authority key identifier: BD:FC:85:C9:17:EB:EB:DC:87:DF:A3:5E:E0:9B:C4:02:85:F5:F4:07
Certificate issuer: /CN=bdfc85c917ebebdc87dfa35ee09bc40285f5f407
Certificate serial: 0198D473EA69AC0AADB7DADF06B6E41E2C56
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
Manifest number: 030A
Signing time: Sat 23 Aug 2025 01:03:43 +0000
Manifest this update: Sat 23 Aug 2025 01:03:43 +0000
Manifest next update: Sun 24 Aug 2025 01:03:43 +0000
Files and hashes: 1: vfyFyRfr69yH36Ne4JvEAoX19Ac.crl (hash: 2kVNFHCrC8qaZ1KvILboMYYLD2rNi9RnsQooVf/vFl0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:03:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:ea:69:ac:0a:ad:b7:da:df:06:b6:e4:1e:2c:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfc85c917ebebdc87dfa35ee09bc40285f5f407
Validity
Not Before: Aug 23 01:03:43 2025 GMT
Not After : Aug 24 01:03:43 2025 GMT
Subject: CN=ba249a5ca4772cff0e435f29d0175982255a926a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:69:6c:49:54:f8:2a:e2:da:a2:dd:03:81:b2:
31:fa:5b:f4:32:39:56:4a:3b:a6:73:57:b3:87:5b:
88:b8:ed:24:17:3e:fd:c5:ff:0b:f0:5f:d3:8d:82:
10:50:4c:85:ef:08:81:c8:11:12:f1:f0:2d:17:e1:
04:a9:8f:0c:0f:e3:c6:8a:b9:65:25:ac:48:79:73:
b6:77:53:18:f3:0b:c0:1a:c2:25:5c:78:e4:c3:15:
96:e6:27:0e:68:ea:d2:31:a8:e7:ea:89:b1:96:ef:
d3:8e:a7:dd:e8:32:a6:fe:88:0d:20:6d:ec:fb:92:
05:6a:ef:2f:cb:da:2b:64:8b:c6:c2:70:08:7f:41:
da:d1:7b:4f:dc:4d:ee:4e:68:68:f2:49:36:85:3c:
52:d4:39:f5:3e:bf:8a:38:6c:fa:58:33:6d:37:ec:
a3:d7:34:46:0f:a2:ad:44:6d:9c:a8:19:d2:13:db:
4c:a2:4e:9a:58:ac:73:e0:99:53:ed:ad:d3:46:a1:
e7:ec:e8:c3:00:6f:20:9e:98:14:ad:63:d8:5a:0a:
fb:65:34:d9:bc:d7:83:82:8e:07:c6:51:83:e7:97:
6a:4b:9a:21:9a:76:8c:ec:86:c5:65:04:a7:89:98:
98:b2:53:d6:12:24:d3:e0:db:f5:ba:34:06:86:d4:
88:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:24:9A:5C:A4:77:2C:FF:0E:43:5F:29:D0:17:59:82:25:5A:92:6A
X509v3 Authority Key Identifier:
keyid:BD:FC:85:C9:17:EB:EB:DC:87:DF:A3:5E:E0:9B:C4:02:85:F5:F4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:4b:4e:d9:45:3c:50:93:d5:fb:f7:46:ea:12:56:25:ff:5f:
b3:b4:d0:71:ca:40:06:57:d2:f8:0d:76:7d:b6:54:db:bd:05:
73:22:1d:5c:33:97:06:c6:c6:88:88:98:b4:59:74:8d:aa:7f:
84:6a:fe:82:13:c8:7c:7f:06:ad:7c:c4:f4:b5:1e:55:d9:9e:
90:b5:d6:53:5d:1c:a8:16:aa:52:ef:47:6a:ab:d8:7b:97:d2:
aa:e2:ab:8a:66:32:57:d3:a8:a2:32:14:93:10:b4:5f:68:3f:
7f:db:09:ed:e7:7c:07:e4:b2:ca:23:82:65:1f:fe:53:d2:d9:
fc:ef:15:71:f4:fa:ec:56:a7:27:74:35:06:df:31:2e:de:f2:
13:75:2d:0b:0b:1f:9c:f5:dc:ea:f7:ca:ab:b1:03:1a:f0:81:
af:79:91:d1:0a:27:80:6b:c9:44:cb:73:39:9f:60:85:74:32:
c7:1c:e9:30:9a:f6:fa:8a:65:9c:7d:b0:c6:28:4e:6d:5a:8d:
c3:b0:d1:59:50:9e:10:1f:d3:a8:af:f1:a6:8b:c9:4a:b6:09:
0d:7b:34:d1:3f:3c:c2:27:84:38:ab:c5:fe:f0:15:57:ea:e4:
e6:cd:a6:3f:c6:3c:e2:97:43:59:08:46:3e:f1:ac:2f:6f:9a:
89:60:b6:7e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUc+pprAqtt9rfBrbkHixWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmM4NWM5MTdlYmViZGM4N2RmYTM1ZWUwOWJjNDAyODVm
NWY0MDcwHhcNMjUwODIzMDEwMzQzWhcNMjUwODI0MDEwMzQzWjAzMTEwLwYDVQQD
EyhiYTI0OWE1Y2E0NzcyY2ZmMGU0MzVmMjlkMDE3NTk4MjI1NWE5MjZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp2lsSVT4KuLaot0DgbIx+lv0MjlW
Sjumc1ezh1uIuO0kFz79xf8L8F/TjYIQUEyF7wiByBES8fAtF+EEqY8MD+PGirll
JaxIeXO2d1MY8wvAGsIlXHjkwxWW5icOaOrSMajn6omxlu/Tjqfd6DKm/ogNIG3s
+5IFau8vy9orZIvGwnAIf0Ha0XtP3E3uTmho8kk2hTxS1Dn1Pr+KOGz6WDNtN+yj
1zRGD6KtRG2cqBnSE9tMok6aWKxz4JlT7a3TRqHn7OjDAG8gnpgUrWPYWgr7ZTTZ
vNeDgo4HxlGD55dqS5ohmnaM7IbFZQSniZiYslPWEiTT4Nv1ujQGhtSIvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLokmlykdyz/DkNfKdAXWYIlWpJqMB8GA1UdIwQY
MBaAFL38hckX6+vch9+jXuCbxAKF9fQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hZDBlMjItMjQ0OS00MWUyLTkzNjct
N2JhZDk0NTdhNDJmLzEvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hZDBlMjItMjQ0OS00MWUyLTkzNjctN2JhZDk0NTdhNDJm
LzEvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs0tO2UU8
UJPV+/dG6hJWJf9fs7TQccpABlfS+A12fbZU270FcyIdXDOXBsbGiIiYtFl0jap/
hGr+ghPIfH8GrXzE9LUeVdmekLXWU10cqBaqUu9HaqvYe5fSquKrimYyV9OoojIU
kxC0X2g/f9sJ7ed8B+SyyiOCZR/+U9LZ/O8VcfT67FanJ3Q1Bt8xLt7yE3UtCwsf
nPXc6vfKq7EDGvCBr3mR0QongGvJRMtzOZ9ghXQyxxzpMJr2+oplnH2wxihObVqN
w7DRWVCeEB/TqK/xpovJSrYJDXs00T88wieEOKvF/vAVV+rk5s2mP8Y84pdDWQhG
PvGsL2+aiWC2fg==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:37:28 2025 by rpki-client