Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
File: vfyFyRfr69yH36Ne4JvEAoX19Ac.mft (raw, json)
Hash identifier: b/bI4dc2e418eIoGVC5I4T6aApc+lYM7HDZohx+NXgo=
Subject key identifier: B5:4E:4D:EA:9D:93:2A:E1:BD:6B:AB:4A:B3:5C:86:6F:BC:8B:39:8A
Authority key identifier: BD:FC:85:C9:17:EB:EB:DC:87:DF:A3:5E:E0:9B:C4:02:85:F5:F4:07
Certificate issuer: /CN=bdfc85c917ebebdc87dfa35ee09bc40285f5f407
Certificate serial: 0197B6A1939C99A2B212FC8107F041D55E74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
Manifest number: 0276
Signing time: Sat 28 Jun 2025 13:02:11 +0000
Manifest this update: Sat 28 Jun 2025 13:02:11 +0000
Manifest next update: Sun 29 Jun 2025 13:02:11 +0000
Files and hashes: 1: vfyFyRfr69yH36Ne4JvEAoX19Ac.crl (hash: QqAu9fD7rTTldgQ4ZHCpl4SopreJ5HJ+KaFYcS20mzY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:93:9c:99:a2:b2:12:fc:81:07:f0:41:d5:5e:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdfc85c917ebebdc87dfa35ee09bc40285f5f407
Validity
Not Before: Jun 28 13:02:11 2025 GMT
Not After : Jun 29 13:02:11 2025 GMT
Subject: CN=b54e4dea9d932ae1bd6bab4ab35c866fbc8b398a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:7a:53:bb:e0:17:9b:d7:79:d9:8f:99:13:2f:
da:18:59:bc:c3:45:49:ab:ba:ce:be:88:87:d1:fb:
27:e2:7e:5b:75:86:86:d6:14:25:15:e6:55:81:92:
60:a4:25:ad:20:db:f7:02:56:b5:37:54:5e:c1:9e:
8a:8a:db:bf:0c:b9:43:be:d4:14:d6:8f:51:e2:c7:
9f:49:42:03:4b:57:52:e2:62:2a:70:01:a4:a3:08:
ca:f0:30:b6:69:71:6e:27:33:ef:75:6b:a0:35:5d:
9d:e9:c8:c7:1f:b7:0e:be:e1:37:53:f6:a7:89:03:
14:6e:76:ef:14:af:e2:46:a3:41:d8:09:2e:85:6d:
e4:94:3d:54:f1:88:89:63:1d:aa:47:5a:84:2a:6e:
54:ef:85:76:2c:0f:97:b0:4e:d3:c1:5a:b3:f9:80:
c2:0e:7e:cf:17:ee:e5:6c:58:69:bb:b0:d1:3e:00:
bf:cb:9c:7c:99:9c:fa:36:87:c2:80:66:27:22:f2:
0d:e3:32:dd:b4:25:fd:99:8c:7e:d0:cb:f0:64:3c:
bd:36:01:c4:40:f3:19:93:0c:96:42:f0:23:4f:93:
e1:5c:d6:9a:40:6f:df:b9:3e:c3:cc:5f:5f:87:14:
57:04:4d:da:f6:06:68:4d:41:a7:e8:80:38:67:1c:
89:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:4E:4D:EA:9D:93:2A:E1:BD:6B:AB:4A:B3:5C:86:6F:BC:8B:39:8A
X509v3 Authority Key Identifier:
keyid:BD:FC:85:C9:17:EB:EB:DC:87:DF:A3:5E:E0:9B:C4:02:85:F5:F4:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfyFyRfr69yH36Ne4JvEAoX19Ac.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ad0e22-2449-41e2-9367-7bad9457a42f/1/vfyFyRfr69yH36Ne4JvEAoX19Ac.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:3f:84:81:85:e1:ac:ee:9a:db:f2:e1:d7:57:59:df:4d:bd:
e0:67:54:80:ed:c7:58:9a:70:38:87:15:78:51:3d:6b:c9:c0:
45:c7:3e:7a:25:78:fd:bf:1c:23:cb:46:c5:b2:76:14:6c:67:
60:6a:a2:09:a9:f5:b6:8f:1b:31:ce:7d:a1:cf:fe:7a:7e:9a:
26:b2:0a:37:7b:be:99:1b:5c:61:a2:da:dd:cb:64:4d:84:84:
4e:17:e9:3f:4d:2a:c9:0a:f4:40:cd:4e:5f:05:26:a1:c6:98:
0b:db:85:2c:5b:18:63:bc:f1:c7:94:52:b6:64:b5:36:94:c0:
10:30:d2:37:85:56:56:ca:38:f7:67:f4:23:8e:1e:ee:32:73:
f6:89:96:c4:26:bf:d1:12:1a:48:da:2a:9d:19:6f:87:ae:22:
a4:c7:03:40:30:7b:1f:fd:4d:98:b8:83:8b:80:c9:03:53:2a:
06:d9:61:47:99:2f:d1:21:78:0e:44:bd:87:59:e5:63:e7:c2:
b6:35:44:67:a4:f0:5d:cf:97:f1:4d:ce:82:ee:16:3f:72:ec:
9a:4f:dc:ed:ff:a6:d3:36:3a:00:8d:7a:8c:f0:f4:f5:61:c9:
43:be:21:34:b7:c7:81:c5:ee:8d:ed:94:65:3e:f5:c2:de:f2:
fa:b9:c7:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oZOcmaKyEvyBB/BB1V50MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZmM4NWM5MTdlYmViZGM4N2RmYTM1ZWUwOWJjNDAyODVm
NWY0MDcwHhcNMjUwNjI4MTMwMjExWhcNMjUwNjI5MTMwMjExWjAzMTEwLwYDVQQD
EyhiNTRlNGRlYTlkOTMyYWUxYmQ2YmFiNGFiMzVjODY2ZmJjOGIzOThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuXpTu+AXm9d52Y+ZEy/aGFm8w0VJ
q7rOvoiH0fsn4n5bdYaG1hQlFeZVgZJgpCWtINv3Ala1N1RewZ6Kitu/DLlDvtQU
1o9R4sefSUIDS1dS4mIqcAGkowjK8DC2aXFuJzPvdWugNV2d6cjHH7cOvuE3U/an
iQMUbnbvFK/iRqNB2AkuhW3klD1U8YiJYx2qR1qEKm5U74V2LA+XsE7TwVqz+YDC
Dn7PF+7lbFhpu7DRPgC/y5x8mZz6NofCgGYnIvIN4zLdtCX9mYx+0MvwZDy9NgHE
QPMZkwyWQvAjT5PhXNaaQG/fuT7DzF9fhxRXBE3a9gZoTUGn6IA4ZxyJlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLVOTeqdkyrhvWurSrNchm+8izmKMB8GA1UdIwQY
MBaAFL38hckX6+vch9+jXuCbxAKF9fQHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9hZDBlMjItMjQ0OS00MWUyLTkzNjct
N2JhZDk0NTdhNDJmLzEvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9hZDBlMjItMjQ0OS00MWUyLTkzNjctN2JhZDk0NTdhNDJm
LzEvdmZ5RnlSZnI2OXlIMzZOZTRKdkVBb1gxOUFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUz+EgYXh
rO6a2/Lh11dZ30294GdUgO3HWJpwOIcVeFE9a8nARcc+eiV4/b8cI8tGxbJ2FGxn
YGqiCan1to8bMc59oc/+en6aJrIKN3u+mRtcYaLa3ctkTYSEThfpP00qyQr0QM1O
XwUmocaYC9uFLFsYY7zxx5RStmS1NpTAEDDSN4VWVso492f0I44e7jJz9omWxCa/
0RIaSNoqnRlvh64ipMcDQDB7H/1NmLiDi4DJA1MqBtlhR5kv0SF4DkS9h1nlY+fC
tjVEZ6TwXc+X8U3Ogu4WP3Lsmk/c7f+m0zY6AI16jPD09WHJQ74hNLfHgcXuje2U
ZT71wt7y+rnH/w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:14 2025 by rpki-client