Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
File: vVhFViKSj0TenBVdcGjh0RtEVPE.mft (raw, json)
Hash identifier: d3DVjwuU6q6H2rqjnCT+iDdy+eMMn0HxOXqvpmjt/Yk=
Subject key identifier: D4:DD:DB:14:23:25:1C:7F:3F:5E:A3:CB:8E:B8:10:AA:83:03:B8:5C
Authority key identifier: BD:58:45:56:22:92:8F:44:DE:9C:15:5D:70:68:E1:D1:1B:44:54:F1
Certificate issuer: /CN=bd58455622928f44de9c155d7068e1d11b4454f1
Certificate serial: 0197B6A16395D1804A3969010FEFD7F26F81
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:59 +0000
Manifest this update: Sat 28 Jun 2025 13:01:59 +0000
Manifest next update: Sun 29 Jun 2025 13:01:59 +0000
Files and hashes: 1: vVhFViKSj0TenBVdcGjh0RtEVPE.crl (hash: BoD99X37x3wf86tY/Wg7GWpr2xB6Ag/iwnQgxvHjQFA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:63:95:d1:80:4a:39:69:01:0f:ef:d7:f2:6f:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd58455622928f44de9c155d7068e1d11b4454f1
Validity
Not Before: Jun 28 13:01:59 2025 GMT
Not After : Jun 29 13:01:59 2025 GMT
Subject: CN=d4dddb1423251c7f3f5ea3cb8eb810aa8303b85c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:56:94:ba:44:9b:9e:cb:12:54:bc:9c:8f:b2:
f4:dd:b2:23:a0:17:7f:b6:8e:d6:24:00:74:91:74:
fa:21:67:be:f9:7a:6a:73:66:aa:98:38:29:76:48:
d5:74:4d:69:ae:4a:7e:2b:df:83:5a:0b:10:30:fb:
35:bb:22:3a:3d:dc:5a:36:2c:ac:3e:1c:f5:c4:92:
f9:de:a8:83:3b:5a:b7:cf:7a:a7:29:d1:7f:2a:f8:
bb:4c:59:11:b0:1f:8b:ef:b5:1f:88:b0:46:09:97:
e6:21:1f:b4:87:ec:28:44:77:06:3a:e5:f5:a7:7c:
ad:aa:33:51:83:dc:65:d1:20:8d:73:75:65:e6:9c:
7f:93:49:c1:98:f8:fb:0d:5d:43:57:1c:aa:50:27:
53:22:9c:71:61:6a:23:f2:de:3b:c5:a2:23:9c:f1:
7d:7a:a6:7d:22:d4:14:e9:7d:2e:f1:da:b2:b0:24:
4e:2f:e6:3f:34:36:e2:80:a1:13:e4:82:07:a2:40:
3a:9a:67:28:d2:e3:a9:55:3c:0e:96:97:8a:b5:6c:
2a:90:0d:04:34:36:da:21:d0:60:c1:30:24:ca:1b:
09:80:cb:64:61:c8:0f:0a:c8:6d:66:23:2d:22:0d:
87:63:d3:d0:2d:f8:b0:bc:32:87:3c:bd:23:79:b0:
0d:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:DD:DB:14:23:25:1C:7F:3F:5E:A3:CB:8E:B8:10:AA:83:03:B8:5C
X509v3 Authority Key Identifier:
keyid:BD:58:45:56:22:92:8F:44:DE:9C:15:5D:70:68:E1:D1:1B:44:54:F1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vVhFViKSj0TenBVdcGjh0RtEVPE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/1dc97c-ee67-4c2b-80ba-29089da40c99/1/vVhFViKSj0TenBVdcGjh0RtEVPE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:ee:35:38:93:4a:c9:5d:e7:f4:eb:40:37:25:25:73:b6:bc:
db:ab:17:c9:14:fb:3d:ab:e4:ab:69:43:86:29:60:bd:3f:8f:
c0:73:51:2b:6c:68:cf:68:d2:30:85:48:12:06:f9:5f:54:62:
99:36:93:c2:8c:38:2c:eb:d8:33:2e:a4:ac:bd:12:e5:02:71:
7b:8f:cd:0f:15:76:4e:74:16:f2:79:89:81:5a:de:79:6f:b5:
d7:20:aa:01:35:54:a5:22:46:a8:f6:e0:de:b0:58:d7:6f:35:
0d:8d:5a:17:de:ee:71:9c:02:4c:2a:0f:ad:db:26:08:0a:98:
ef:1d:d4:e1:2f:4f:ed:a2:f1:72:80:af:ad:7d:ec:b9:71:6d:
cb:28:f2:af:ce:96:15:dc:4a:8f:3c:77:c3:4d:c9:5f:f7:53:
e7:8e:0b:1d:16:c0:67:d7:81:71:42:20:92:35:d9:78:c0:d1:
ee:2f:f5:19:4f:2b:77:cb:8b:73:2d:53:e8:06:9e:1f:9d:d5:
3a:b2:9f:c8:67:e1:2f:64:03:e9:3f:31:86:ba:cd:30:68:b7:
0f:35:16:5f:64:ab:ad:3a:16:b3:37:f2:a3:71:97:8b:00:8b:
39:3d:60:5f:73:3c:74:08:50:bc:39:9e:84:91:7b:ef:96:18:
95:5a:c9:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oWOV0YBKOWkBD+/X8m+BMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNTg0NTU2MjI5MjhmNDRkZTljMTU1ZDcwNjhlMWQxMWI0
NDU0ZjEwHhcNMjUwNjI4MTMwMTU5WhcNMjUwNjI5MTMwMTU5WjAzMTEwLwYDVQQD
EyhkNGRkZGIxNDIzMjUxYzdmM2Y1ZWEzY2I4ZWI4MTBhYTgzMDNiODVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmVaUukSbnssSVLycj7L03bIjoBd/
to7WJAB0kXT6IWe++Xpqc2aqmDgpdkjVdE1prkp+K9+DWgsQMPs1uyI6PdxaNiys
Phz1xJL53qiDO1q3z3qnKdF/Kvi7TFkRsB+L77UfiLBGCZfmIR+0h+woRHcGOuX1
p3ytqjNRg9xl0SCNc3Vl5px/k0nBmPj7DV1DVxyqUCdTIpxxYWoj8t47xaIjnPF9
eqZ9ItQU6X0u8dqysCROL+Y/NDbigKET5IIHokA6mmco0uOpVTwOlpeKtWwqkA0E
NDbaIdBgwTAkyhsJgMtkYcgPCshtZiMtIg2HY9PQLfiwvDKHPL0jebAN6QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNTd2xQjJRx/P16jy464EKqDA7hcMB8GA1UdIwQY
MBaAFL1YRVYiko9E3pwVXXBo4dEbRFTxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlZoRlZpS1NqMFRlbkJWZGNHamgwUnRFVlBFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS8xZGM5N2MtZWU2Ny00YzJiLTgwYmEt
MjkwODlkYTQwYzk5LzEvdlZoRlZpS1NqMFRlbkJWZGNHamgwUnRFVlBFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS8xZGM5N2MtZWU2Ny00YzJiLTgwYmEtMjkwODlkYTQwYzk5
LzEvdlZoRlZpS1NqMFRlbkJWZGNHamgwUnRFVlBFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbO41OJNK
yV3n9OtANyUlc7a826sXyRT7Pavkq2lDhilgvT+PwHNRK2xoz2jSMIVIEgb5X1Ri
mTaTwow4LOvYMy6krL0S5QJxe4/NDxV2TnQW8nmJgVreeW+11yCqATVUpSJGqPbg
3rBY1281DY1aF97ucZwCTCoPrdsmCAqY7x3U4S9P7aLxcoCvrX3suXFtyyjyr86W
FdxKjzx3w03JX/dT544LHRbAZ9eBcUIgkjXZeMDR7i/1GU8rd8uLcy1T6AaeH53V
OrKfyGfhL2QD6T8xhrrNMGi3DzUWX2SrrToWszfyo3GXiwCLOT1gX3M8dAhQvDme
hJF775YYlVrJXQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:46:02 2025 by rpki-client