Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
File: VICpFlHjeO69hx0K3WleZ3v1DS4.mft (raw, json)
Hash identifier: EMOnrfsDi+cQInbiEeXjkTMU3eNrStTXA6Zs+ghOeUg=
Subject key identifier: F2:14:48:53:B9:F6:FD:A3:08:A7:01:A6:B5:B2:40:8E:6C:01:C2:C4
Authority key identifier: 54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
Certificate issuer: /CN=5480a91651e378eebd871d0add695e677bf50d2e
Certificate serial: 0197B6A17FC18F82D642748F7CF1497D90EE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
Manifest number: 08E7
Signing time: Sat 28 Jun 2025 13:02:06 +0000
Manifest this update: Sat 28 Jun 2025 13:02:06 +0000
Manifest next update: Sun 29 Jun 2025 13:02:06 +0000
Files and hashes: 1: VICpFlHjeO69hx0K3WleZ3v1DS4.crl (hash: f/ZE0gndYrR31vsDjQjQK8/okPDDEE4jnu6F8JbaGN0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:7f:c1:8f:82:d6:42:74:8f:7c:f1:49:7d:90:ee
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5480a91651e378eebd871d0add695e677bf50d2e
Validity
Not Before: Jun 28 13:02:06 2025 GMT
Not After : Jun 29 13:02:06 2025 GMT
Subject: CN=f2144853b9f6fda308a701a6b5b2408e6c01c2c4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:d6:43:e2:67:0c:7e:db:a0:16:13:30:75:03:
a2:90:ae:ac:36:7b:a2:20:2a:b6:dc:e4:d9:9f:1a:
17:f9:ca:32:94:c5:83:c2:7f:51:1f:3f:c7:f9:15:
ba:f8:e6:ff:c5:11:7e:e4:97:12:05:22:0b:dc:6e:
84:ed:b1:b3:30:3d:36:8e:9d:48:dd:8f:34:5b:93:
5f:c0:23:5d:21:66:42:a4:2d:63:1d:3b:f1:87:58:
84:59:84:52:d0:ce:aa:99:fe:a6:9f:ac:76:2d:95:
27:eb:44:bb:92:f4:98:af:3e:fd:84:85:78:74:f8:
1a:88:20:1a:36:ac:46:a4:4e:94:63:26:50:5e:61:
f4:d2:b8:b2:c8:65:57:eb:61:97:de:8c:c4:1c:5d:
be:a4:da:35:0a:23:f2:c1:f1:25:09:eb:39:73:bd:
51:1e:04:c9:0c:75:6d:0e:8c:f4:1a:d8:c6:37:07:
72:08:ab:0e:06:d3:b3:de:c2:41:12:a0:a7:a8:d4:
4d:44:0a:7b:5f:89:42:b6:b1:21:14:09:1e:79:71:
1c:3b:7b:ca:13:c5:0a:ba:57:61:59:d9:9f:89:ee:
95:56:72:82:25:50:f6:e1:f7:8d:20:fa:10:ce:1d:
7a:6d:6a:ac:9e:69:0e:c6:63:75:88:14:e6:f6:07:
0f:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:14:48:53:B9:F6:FD:A3:08:A7:01:A6:B5:B2:40:8E:6C:01:C2:C4
X509v3 Authority Key Identifier:
keyid:54:80:A9:16:51:E3:78:EE:BD:87:1D:0A:DD:69:5E:67:7B:F5:0D:2E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VICpFlHjeO69hx0K3WleZ3v1DS4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c12b1f-b419-4f7e-94d4-c9a5cd9c144d/1/VICpFlHjeO69hx0K3WleZ3v1DS4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:2b:9b:b2:62:73:39:d8:d7:c3:ee:27:3e:9b:62:c7:43:8f:
c2:f1:1c:44:00:c7:2f:5f:c3:c9:1f:b2:64:76:e3:43:96:d4:
2c:08:0b:99:c6:4f:c7:ed:7d:27:e4:93:41:ad:ab:a9:40:72:
37:7b:80:5e:70:e1:0c:b6:05:1b:35:73:40:b8:a4:79:03:27:
61:05:6d:25:ca:eb:83:e8:61:89:3f:9e:44:95:1e:d3:ef:70:
8f:a3:9b:e6:90:0d:7d:91:b3:5c:ab:68:d7:ba:10:d2:72:ce:
70:7f:b1:c2:bf:90:e1:c7:83:9b:0d:e2:14:e9:c9:e8:2a:15:
8b:3a:62:e5:cf:30:0c:21:8c:30:9c:ea:6b:34:86:1c:cc:33:
f7:49:bd:6c:75:19:0d:8a:49:ff:01:be:1d:1f:e0:c4:da:48:
5a:2c:0f:06:24:f6:0b:19:af:37:dc:d8:2d:43:87:07:f0:4d:
56:15:ac:19:cf:31:b5:59:10:aa:b0:5f:04:90:dd:dd:db:ea:
c4:a7:f2:35:c8:d7:37:fc:d6:55:4d:4a:53:8e:c2:a3:45:3b:
42:c9:ef:0b:c1:35:51:98:e8:f2:11:5e:c6:5f:9d:c3:41:ce:
53:f4:fc:93:b2:52:67:a3:c7:2a:05:5e:df:28:60:bc:32:92:
33:34:0c:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oX/Bj4LWQnSPfPFJfZDuMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0ODBhOTE2NTFlMzc4ZWViZDg3MWQwYWRkNjk1ZTY3N2Jm
NTBkMmUwHhcNMjUwNjI4MTMwMjA2WhcNMjUwNjI5MTMwMjA2WjAzMTEwLwYDVQQD
EyhmMjE0NDg1M2I5ZjZmZGEzMDhhNzAxYTZiNWIyNDA4ZTZjMDFjMmM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq9ZD4mcMftugFhMwdQOikK6sNnui
ICq23OTZnxoX+coylMWDwn9RHz/H+RW6+Ob/xRF+5JcSBSIL3G6E7bGzMD02jp1I
3Y80W5NfwCNdIWZCpC1jHTvxh1iEWYRS0M6qmf6mn6x2LZUn60S7kvSYrz79hIV4
dPgaiCAaNqxGpE6UYyZQXmH00riyyGVX62GX3ozEHF2+pNo1CiPywfElCes5c71R
HgTJDHVtDoz0GtjGNwdyCKsOBtOz3sJBEqCnqNRNRAp7X4lCtrEhFAkeeXEcO3vK
E8UKuldhWdmfie6VVnKCJVD24feNIPoQzh16bWqsnmkOxmN1iBTm9gcPBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIUSFO59v2jCKcBprWyQI5sAcLEMB8GA1UdIwQY
MBaAFFSAqRZR43juvYcdCt1pXmd79Q0uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVklDcEZsSGplTzY5aHgwSzNXbGVaM3YxRFM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jMTJiMWYtYjQxOS00ZjdlLTk0ZDQt
YzlhNWNkOWMxNDRkLzEvVklDcEZsSGplTzY5aHgwSzNXbGVaM3YxRFM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9jMTJiMWYtYjQxOS00ZjdlLTk0ZDQtYzlhNWNkOWMxNDRk
LzEvVklDcEZsSGplTzY5aHgwSzNXbGVaM3YxRFM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJCubsmJz
OdjXw+4nPptix0OPwvEcRADHL1/DyR+yZHbjQ5bULAgLmcZPx+19J+STQa2rqUBy
N3uAXnDhDLYFGzVzQLikeQMnYQVtJcrrg+hhiT+eRJUe0+9wj6Ob5pANfZGzXKto
17oQ0nLOcH+xwr+Q4ceDmw3iFOnJ6CoVizpi5c8wDCGMMJzqazSGHMwz90m9bHUZ
DYpJ/wG+HR/gxNpIWiwPBiT2CxmvN9zYLUOHB/BNVhWsGc8xtVkQqrBfBJDd3dvq
xKfyNcjXN/zWVU1KU47Co0U7QsnvC8E1UZjo8hFexl+dw0HOU/T8k7JSZ6PHKgVe
3yhgvDKSMzQMtg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:21:11 2025 by rpki-client