Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
File: vKOYyNMoLIjZ09AComTkKOa67DY.mft (raw, json)
Hash identifier: zy7ZJ3H09cstDDXhfhiWhUi1//s+WNz0B+3MEyKXNqw=
Subject key identifier: 5B:89:43:AC:50:2A:23:31:5E:5C:93:98:71:87:71:F0:82:48:CE:0F
Authority key identifier: BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
Certificate issuer: /CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Certificate serial: 0197B6A201EB99FD79953B82E52C78A49F6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
Manifest number: 07FC
Signing time: Sat 28 Jun 2025 13:02:39 +0000
Manifest this update: Sat 28 Jun 2025 13:02:39 +0000
Manifest next update: Sun 29 Jun 2025 13:02:39 +0000
Files and hashes: 1: vKOYyNMoLIjZ09AComTkKOa67DY.crl (hash: jX6OoZHDS/bq3ARlN112/0LCHuJzQ/MPYrFmPen1vXg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:01:eb:99:fd:79:95:3b:82:e5:2c:78:a4:9f:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Validity
Not Before: Jun 28 13:02:39 2025 GMT
Not After : Jun 29 13:02:39 2025 GMT
Subject: CN=5b8943ac502a23315e5c9398718771f08248ce0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ea:bc:6f:31:ae:2a:f1:0e:39:3d:6a:c4:b6:96:
d0:33:3d:6e:4b:ec:34:dd:58:ab:d8:e2:68:c5:a1:
49:85:88:67:64:f0:15:14:71:cd:4b:1c:7a:9f:99:
df:d0:39:91:71:73:91:2b:3a:f8:29:fa:02:d7:e9:
27:e2:e7:c0:ef:3b:25:41:97:38:51:fc:02:e8:ff:
0d:1c:b3:e6:c4:f7:c0:93:2d:4a:b0:6e:d7:4c:e1:
09:d0:40:c5:89:9f:48:45:ce:14:34:e9:ed:ac:ad:
db:3c:dd:53:8b:10:ba:06:28:45:c0:e7:da:9f:1c:
76:32:6a:4f:46:35:a4:3b:64:4e:04:f2:39:6e:7b:
87:b3:cc:19:38:2d:1c:58:53:40:27:6e:90:e9:15:
cd:3a:cd:d6:d1:f8:1a:49:54:0a:4f:8f:ff:e2:3a:
50:d6:73:8b:ba:bc:d0:2e:ac:4a:a5:51:72:08:d1:
a1:24:c3:95:cc:4a:6b:26:0f:a7:04:a1:30:4c:e4:
2a:c1:d0:a2:e6:98:1a:c7:ab:0e:87:32:06:13:4e:
38:75:ed:63:8b:50:5b:1a:88:a9:78:ef:c1:fa:29:
91:13:de:16:b8:37:10:cb:06:a0:90:03:3c:d7:84:
a2:03:9b:9f:74:9f:d3:4e:88:45:ee:a8:44:d6:d5:
ac:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:89:43:AC:50:2A:23:31:5E:5C:93:98:71:87:71:F0:82:48:CE:0F
X509v3 Authority Key Identifier:
keyid:BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a1:e7:82:a7:72:55:e9:64:05:86:e0:8c:eb:bc:0f:5f:3c:f8:
ca:41:f3:cb:06:9b:3c:d4:45:33:c2:74:4b:de:ab:c3:6f:96:
0d:88:af:37:fb:aa:36:5e:00:2e:69:75:a6:e7:be:2c:34:e5:
aa:94:26:06:db:c6:6a:47:cc:ef:3a:31:09:0a:f2:4e:89:04:
e9:8e:e9:18:6f:69:36:8f:ec:24:19:e8:9a:51:9a:18:2c:0a:
43:6c:2c:25:00:63:9b:f0:b6:27:93:f4:68:f9:8b:47:25:60:
d6:a7:51:4c:da:4f:d5:f4:7b:6c:17:8e:c0:63:03:53:a3:f2:
54:c0:3d:3e:fc:7b:e3:2a:c7:3a:24:8a:ff:38:38:b9:76:75:
a7:3b:25:89:13:e0:c5:96:1f:4e:d7:e3:27:1e:b6:a1:ed:35:
92:2d:f8:27:e2:0f:ad:6d:8a:c4:42:b8:36:84:3f:7b:37:3f:
fd:a8:97:3b:f3:a3:82:45:22:cb:c2:b1:db:94:98:50:25:da:
b1:89:57:e3:17:25:15:bf:08:03:a8:5c:d4:63:c1:fa:99:8e:
49:9d:57:90:73:0d:1b:e1:12:7e:a6:35:43:92:3f:22:51:f7:
7b:7c:43:ee:8f:59:f6:3b:59:40:e1:e9:1b:5f:4b:29:eb:8b:
f6:15:c8:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ogHrmf15lTuC5Sx4pJ9uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYTM5OGM4ZDMyODJjODhkOWQzZDAwMmEyNjRlNDI4ZTZi
YWVjMzYwHhcNMjUwNjI4MTMwMjM5WhcNMjUwNjI5MTMwMjM5WjAzMTEwLwYDVQQD
Eyg1Yjg5NDNhYzUwMmEyMzMxNWU1YzkzOTg3MTg3NzFmMDgyNDhjZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6rxvMa4q8Q45PWrEtpbQMz1uS+w0
3Vir2OJoxaFJhYhnZPAVFHHNSxx6n5nf0DmRcXORKzr4KfoC1+kn4ufA7zslQZc4
UfwC6P8NHLPmxPfAky1KsG7XTOEJ0EDFiZ9IRc4UNOntrK3bPN1TixC6BihFwOfa
nxx2MmpPRjWkO2ROBPI5bnuHs8wZOC0cWFNAJ26Q6RXNOs3W0fgaSVQKT4//4jpQ
1nOLurzQLqxKpVFyCNGhJMOVzEprJg+nBKEwTOQqwdCi5pgax6sOhzIGE044de1j
i1BbGoipeO/B+imRE94WuDcQywagkAM814SiA5ufdJ/TTohF7qhE1tWs8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuJQ6xQKiMxXlyTmHGHcfCCSM4PMB8GA1UdIwQY
MBaAFLyjmMjTKCyI2dPQAqJk5Cjmuuw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi84NDU0YzYtMzFjNi00ZjhiLTkxZDQt
MjY3YmExNzJkNDZkLzEvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi84NDU0YzYtMzFjNi00ZjhiLTkxZDQtMjY3YmExNzJkNDZk
LzEvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoeeCp3JV
6WQFhuCM67wPXzz4ykHzywabPNRFM8J0S96rw2+WDYivN/uqNl4ALml1pue+LDTl
qpQmBtvGakfM7zoxCQryTokE6Y7pGG9pNo/sJBnomlGaGCwKQ2wsJQBjm/C2J5P0
aPmLRyVg1qdRTNpP1fR7bBeOwGMDU6PyVMA9Pvx74yrHOiSK/zg4uXZ1pzsliRPg
xZYfTtfjJx62oe01ki34J+IPrW2KxEK4NoQ/ezc//aiXO/OjgkUiy8Kx25SYUCXa
sYlX4xclFb8IA6hc1GPB+pmOSZ1XkHMNG+ESfqY1Q5I/IlH3e3xD7o9Z9jtZQOHp
G19LKeuL9hXIXw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:32 2025 by rpki-client