Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
File: vLKFmOvl92DrY-BRpVABF12cY_8.mft (raw, json)
Hash identifier: 5xsQxddzf6vFxse80UAVAds0P/rQ/pJge+EcJhvvDR4=
Subject key identifier: 6D:6A:E2:B3:8D:3C:60:BB:43:4D:A3:25:C0:99:DF:2D:FC:5C:F7:64
Authority key identifier: BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
Certificate issuer: /CN=bcb28598ebe5f760eb63e051a55001175d9c63ff
Certificate serial: 0198D65F6BA52206F528D407E758191E61CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
Manifest number: 017F
Signing time: Sat 23 Aug 2025 10:00:34 +0000
Manifest this update: Sat 23 Aug 2025 10:00:34 +0000
Manifest next update: Sun 24 Aug 2025 10:00:34 +0000
Files and hashes: 1: vLKFmOvl92DrY-BRpVABF12cY_8.crl (hash: 1yVdt/+/VuZBJnNVpq+vMqARC9UD8bU/JJFuKqry57s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl
rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:5f:6b:a5:22:06:f5:28:d4:07:e7:58:19:1e:61:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcb28598ebe5f760eb63e051a55001175d9c63ff
Validity
Not Before: Aug 23 10:00:34 2025 GMT
Not After : Aug 24 10:00:34 2025 GMT
Subject: CN=6d6ae2b38d3c60bb434da325c099df2dfc5cf764
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:ff:2b:e3:e2:d8:64:fe:c2:55:75:e1:fc:99:
a4:6c:0e:0b:45:07:e5:29:8a:77:38:4b:f0:b7:4a:
75:54:3f:90:7c:79:4f:8a:d8:39:33:4c:04:5a:b6:
21:cc:c9:05:89:b9:00:3d:2b:a1:ca:79:33:5c:d0:
5e:16:44:6b:c1:a4:05:a1:5b:da:e6:fb:22:02:12:
06:9d:3f:3a:6f:01:39:78:e0:58:f2:ad:dc:d4:f2:
02:39:ab:17:55:20:6d:db:22:90:b0:71:bc:7c:7d:
4d:91:ac:67:c9:49:24:c9:e8:d7:ee:40:7e:86:04:
a1:5a:20:a7:f3:a3:35:cc:2b:84:bd:1e:ad:58:fd:
45:05:70:d4:f5:71:72:b9:d1:6f:ce:06:2e:28:ad:
04:66:bc:44:ed:52:00:50:41:88:8c:cf:13:b5:af:
82:1c:67:a6:19:f0:65:5a:18:84:6f:74:cb:ea:00:
f5:df:f4:07:5c:dd:90:44:cb:10:ce:54:fb:3b:56:
38:6b:c9:b0:59:5c:38:dd:eb:50:92:45:fe:01:99:
d4:c0:63:eb:f0:d2:0e:4e:1e:5a:18:99:f9:03:9b:
22:f7:99:58:1d:5a:58:11:02:92:c2:11:35:b6:1e:
3f:6d:3e:ba:b5:10:31:94:fa:e3:c3:89:71:f6:fd:
e6:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:6A:E2:B3:8D:3C:60:BB:43:4D:A3:25:C0:99:DF:2D:FC:5C:F7:64
X509v3 Authority Key Identifier:
keyid:BC:B2:85:98:EB:E5:F7:60:EB:63:E0:51:A5:50:01:17:5D:9C:63:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vLKFmOvl92DrY-BRpVABF12cY_8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/85/d5a635-11b9-4a4e-8da7-7c7706898ad8/1/vLKFmOvl92DrY-BRpVABF12cY_8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:20:6d:ed:9f:2f:74:9f:47:9e:0c:ec:16:37:2b:ed:4b:f6:
52:e1:29:dd:6b:5b:da:27:7f:b3:de:74:f0:f4:bb:22:e5:3b:
e4:ca:2f:83:66:f3:7c:19:9b:3f:ab:58:c7:0f:50:3d:ff:99:
06:6e:b0:22:b2:47:1a:46:3d:6d:99:88:46:a0:a7:c6:c3:ad:
bf:23:05:f8:7e:fb:e1:b1:29:17:86:a6:81:48:af:f3:1a:0e:
7c:fc:a9:63:b1:74:44:61:af:84:31:c3:2a:3f:96:b7:74:75:
93:7c:c9:f6:7b:6a:8e:34:3f:7f:44:27:69:ab:d8:04:42:35:
e1:8d:48:31:a9:d1:e8:10:03:9a:d7:f4:80:1f:f5:db:2a:ec:
8c:c0:58:d9:c8:05:55:3b:bf:8b:3f:3d:dd:36:43:6c:82:84:
f0:00:04:67:4c:28:54:39:62:37:41:f1:f2:c8:03:5b:14:5d:
7e:cd:92:eb:39:bb:af:fb:3a:b9:27:5f:f9:22:65:83:69:e9:
58:ca:9a:76:77:35:a7:75:8c:41:2b:75:b1:4d:75:b5:be:18:
41:46:4d:f3:cf:e6:68:f6:ce:a6:78:94:c2:02:1b:06:24:00:
b1:46:0a:b1:b9:31:05:cb:dd:2f:2e:7e:9f:0b:01:4f:61:32:
43:11:85:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWX2ulIgb1KNQH51gZHmHMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYjI4NTk4ZWJlNWY3NjBlYjYzZTA1MWE1NTAwMTE3NWQ5
YzYzZmYwHhcNMjUwODIzMTAwMDM0WhcNMjUwODI0MTAwMDM0WjAzMTEwLwYDVQQD
Eyg2ZDZhZTJiMzhkM2M2MGJiNDM0ZGEzMjVjMDk5ZGYyZGZjNWNmNzY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk/8r4+LYZP7CVXXh/JmkbA4LRQfl
KYp3OEvwt0p1VD+QfHlPitg5M0wEWrYhzMkFibkAPSuhynkzXNBeFkRrwaQFoVva
5vsiAhIGnT86bwE5eOBY8q3c1PICOasXVSBt2yKQsHG8fH1NkaxnyUkkyejX7kB+
hgShWiCn86M1zCuEvR6tWP1FBXDU9XFyudFvzgYuKK0EZrxE7VIAUEGIjM8Tta+C
HGemGfBlWhiEb3TL6gD13/QHXN2QRMsQzlT7O1Y4a8mwWVw43etQkkX+AZnUwGPr
8NIOTh5aGJn5A5si95lYHVpYEQKSwhE1th4/bT66tRAxlPrjw4lx9v3mHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG1q4rONPGC7Q02jJcCZ3y38XPdkMB8GA1UdIwQY
MBaAFLyyhZjr5fdg62PgUaVQARddnGP/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkxLRm1Pdmw5MkRyWS1CUnBWQUJGMTJjWV84LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NS9kNWE2MzUtMTFiOS00YTRlLThkYTct
N2M3NzA2ODk4YWQ4LzEvdkxLRm1Pdmw5MkRyWS1CUnBWQUJGMTJjWV84Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NS9kNWE2MzUtMTFiOS00YTRlLThkYTctN2M3NzA2ODk4YWQ4
LzEvdkxLRm1Pdmw5MkRyWS1CUnBWQUJGMTJjWV84LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSBt7Z8v
dJ9HngzsFjcr7Uv2UuEp3Wtb2id/s9508PS7IuU75Movg2bzfBmbP6tYxw9QPf+Z
Bm6wIrJHGkY9bZmIRqCnxsOtvyMF+H774bEpF4amgUiv8xoOfPypY7F0RGGvhDHD
Kj+Wt3R1k3zJ9ntqjjQ/f0QnaavYBEI14Y1IManR6BADmtf0gB/12yrsjMBY2cgF
VTu/iz893TZDbIKE8AAEZ0woVDliN0Hx8sgDWxRdfs2S6zm7r/s6uSdf+SJlg2np
WMqadnc1p3WMQSt1sU11tb4YQUZN88/maPbOpniUwgIbBiQAsUYKsbkxBcvdLy5+
nwsBT2EyQxGFEQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:04:57 2025 by rpki-client