Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
File: vUltYJRIpG2YZUJqjp7aWICI0Fc.mft (raw, json)
Hash identifier: 7m2BBz0Emvk1XRg9vop2i3SA21JTffmefwWPuat4tuI=
Subject key identifier: 8B:DA:53:2E:BD:2D:11:2C:38:51:9E:6E:FA:5A:B2:8A:D9:62:BF:FA
Authority key identifier: BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
Certificate issuer: /CN=bd496d609448a46d9865426a8e9eda588088d057
Certificate serial: 0197B6A0E65D26856CC96CF15641D5E96B92
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
Manifest number: 11E9
Signing time: Sat 28 Jun 2025 13:01:27 +0000
Manifest this update: Sat 28 Jun 2025 13:01:27 +0000
Manifest next update: Sun 29 Jun 2025 13:01:27 +0000
Files and hashes: 1: vUltYJRIpG2YZUJqjp7aWICI0Fc.crl (hash: h4f1NUMuXdaYAdJsiKtSbNlBhB/r/fwDTGaD1Qfsfp0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e6:5d:26:85:6c:c9:6c:f1:56:41:d5:e9:6b:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd496d609448a46d9865426a8e9eda588088d057
Validity
Not Before: Jun 28 13:01:27 2025 GMT
Not After : Jun 29 13:01:27 2025 GMT
Subject: CN=8bda532ebd2d112c38519e6efa5ab28ad962bffa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:eb:16:ca:fe:81:b8:33:86:4c:bd:3b:13:61:7c:
9f:9c:ec:96:1a:a6:fa:43:73:d3:37:e1:f9:ce:9a:
ce:0f:1d:11:fa:ea:c1:53:6e:47:79:86:24:28:d8:
a7:5d:36:23:71:46:70:ba:ce:6b:9e:f5:a8:ba:12:
1e:45:fe:1a:bc:16:04:33:7f:ce:78:ca:0e:20:95:
4c:c5:ab:aa:c7:00:36:1b:f8:e8:b5:3d:cf:db:db:
bb:2b:11:50:f9:2c:d5:3d:99:48:c5:de:42:2e:aa:
70:2c:7d:7f:22:cd:93:db:28:61:82:48:71:e7:17:
ae:b0:d7:20:58:80:7d:d2:1a:a7:33:e3:71:35:4b:
9e:cb:77:b2:fc:de:fb:b2:5f:c5:59:a7:cb:1f:7b:
72:45:50:1b:8b:83:09:40:8d:00:5c:16:9f:47:99:
78:04:39:82:fa:29:e8:15:22:3e:c2:19:46:b9:70:
c9:11:44:a9:10:4e:31:ed:fd:2b:6b:44:2a:c2:b9:
63:10:50:e4:94:d7:ae:c1:fb:47:e8:91:4b:49:6f:
68:5f:44:73:c9:8f:10:74:41:1a:96:54:81:b0:66:
68:d9:65:f1:1c:10:ce:e5:de:36:16:e8:ab:a8:55:
ad:9d:6a:cb:cc:b4:47:f8:fa:91:30:ca:27:c3:96:
bc:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:DA:53:2E:BD:2D:11:2C:38:51:9E:6E:FA:5A:B2:8A:D9:62:BF:FA
X509v3 Authority Key Identifier:
keyid:BD:49:6D:60:94:48:A4:6D:98:65:42:6A:8E:9E:DA:58:80:88:D0:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vUltYJRIpG2YZUJqjp7aWICI0Fc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/ba93f6-e57c-4295-b028-94240aadfe96/1/vUltYJRIpG2YZUJqjp7aWICI0Fc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:9c:4a:41:05:03:26:63:dc:b6:c2:5f:99:fb:a1:83:e0:cb:
68:fb:6b:0e:2f:1a:63:b1:cf:97:76:94:a8:a4:0e:d3:41:b4:
25:64:b8:c4:a8:e1:4f:68:b7:c1:8c:96:7d:ee:57:80:2e:b8:
2a:cd:8f:c6:7a:be:81:a4:6a:41:bb:c9:bd:43:7d:47:85:b4:
94:88:09:01:92:7b:49:19:c5:c0:7d:f0:76:fa:c9:74:82:f0:
48:56:92:31:a7:99:30:0c:5a:9e:ea:47:c8:35:ff:8b:32:02:
36:fc:96:16:9c:b0:42:62:e2:75:53:04:d8:50:8a:76:ad:64:
e4:56:48:39:82:21:2e:b5:a3:80:fa:d3:8a:0c:c0:4f:9a:23:
51:f8:55:49:af:6f:40:7b:a5:f3:1e:99:a0:61:0e:15:6a:72:
91:d8:4f:3e:9a:c7:8e:93:99:51:dc:32:41:96:33:cf:49:9f:
04:04:24:f5:5f:d6:02:fd:72:7e:c8:99:03:01:e3:72:b7:a1:
e9:60:df:fe:b9:da:41:23:5a:ef:9d:4f:c1:18:7c:55:a1:4a:
02:66:a3:ed:06:87:93:89:a8:b6:c8:6e:21:c1:5d:5b:76:10:
4e:13:0d:19:e6:d6:23:0a:12:d7:de:8b:6e:9c:1f:49:55:03:
8a:2a:ba:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oOZdJoVsyWzxVkHV6WuSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkNDk2ZDYwOTQ0OGE0NmQ5ODY1NDI2YThlOWVkYTU4ODA4
OGQwNTcwHhcNMjUwNjI4MTMwMTI3WhcNMjUwNjI5MTMwMTI3WjAzMTEwLwYDVQQD
Eyg4YmRhNTMyZWJkMmQxMTJjMzg1MTllNmVmYTVhYjI4YWQ5NjJiZmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6xbK/oG4M4ZMvTsTYXyfnOyWGqb6
Q3PTN+H5zprODx0R+urBU25HeYYkKNinXTYjcUZwus5rnvWouhIeRf4avBYEM3/O
eMoOIJVMxauqxwA2G/jotT3P29u7KxFQ+SzVPZlIxd5CLqpwLH1/Is2T2yhhgkhx
5xeusNcgWIB90hqnM+NxNUuey3ey/N77sl/FWafLH3tyRVAbi4MJQI0AXBafR5l4
BDmC+inoFSI+whlGuXDJEUSpEE4x7f0ra0QqwrljEFDklNeuwftH6JFLSW9oX0Rz
yY8QdEEallSBsGZo2WXxHBDO5d42FuirqFWtnWrLzLRH+PqRMMonw5a86QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvaUy69LREsOFGebvpasorZYr/6MB8GA1UdIwQY
MBaAFL1JbWCUSKRtmGVCao6e2liAiNBXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9iYTkzZjYtZTU3Yy00Mjk1LWIwMjgt
OTQyNDBhYWRmZTk2LzEvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9iYTkzZjYtZTU3Yy00Mjk1LWIwMjgtOTQyNDBhYWRmZTk2
LzEvdlVsdFlKUklwRzJZWlVKcWpwN2FXSUNJMEZjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd5xKQQUD
JmPctsJfmfuhg+DLaPtrDi8aY7HPl3aUqKQO00G0JWS4xKjhT2i3wYyWfe5XgC64
Ks2Pxnq+gaRqQbvJvUN9R4W0lIgJAZJ7SRnFwH3wdvrJdILwSFaSMaeZMAxanupH
yDX/izICNvyWFpywQmLidVME2FCKdq1k5FZIOYIhLrWjgPrTigzAT5ojUfhVSa9v
QHul8x6ZoGEOFWpykdhPPprHjpOZUdwyQZYzz0mfBAQk9V/WAv1yfsiZAwHjcreh
6WDf/rnaQSNa751PwRh8VaFKAmaj7QaHk4motshuIcFdW3YQThMNGebWIwoS196L
bpwfSVUDiiq64w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:27 2025 by rpki-client