Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
File: VrWL59KDOsOZKLi4aCdBtQMUZF0.mft (raw, json)
Hash identifier: CuBDXuwU5zZyM8BFXvGhLK4OR1SI/n2/OewDhO7gGxo=
Subject key identifier: 8F:D1:E4:96:BE:D3:19:0F:72:86:96:48:0B:12:E4:94:F0:19:B8:33
Authority key identifier: 56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
Certificate issuer: /CN=56b58be7d2833ac39928b8b8682741b50314645d
Certificate serial: 0197B6A051C3E9F7179E764E335DE7DE5448
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
Manifest number: 08A4
Signing time: Sat 28 Jun 2025 13:00:49 +0000
Manifest this update: Sat 28 Jun 2025 13:00:49 +0000
Manifest next update: Sun 29 Jun 2025 13:00:49 +0000
Files and hashes: 1: VrWL59KDOsOZKLi4aCdBtQMUZF0.crl (hash: 82hmB5YFxfsSChHgSsZnmEbvK22OprUZYpDD7H+LZsQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:51:c3:e9:f7:17:9e:76:4e:33:5d:e7:de:54:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56b58be7d2833ac39928b8b8682741b50314645d
Validity
Not Before: Jun 28 13:00:49 2025 GMT
Not After : Jun 29 13:00:49 2025 GMT
Subject: CN=8fd1e496bed3190f728696480b12e494f019b833
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:24:6d:d8:16:9d:cd:49:6f:b2:78:24:d6:40:
68:dc:36:6f:ce:6f:bc:8c:0d:14:e3:e6:ee:a8:2f:
18:d0:0f:1d:0b:1a:f6:ae:30:8e:db:84:17:e3:1d:
97:af:cb:8f:15:a0:30:ce:3c:b4:e7:f3:01:38:48:
fc:f5:5d:4c:d2:f7:6a:a6:6f:26:b1:33:e6:65:4d:
3b:33:43:c7:67:37:df:ef:3e:20:af:3e:a7:be:b7:
6a:07:60:1f:57:31:8d:c6:23:86:66:8a:d6:06:af:
ae:c1:f9:56:75:0e:4c:5a:65:1a:95:1b:cc:fd:97:
a2:87:d2:8b:a7:d0:fb:66:dd:90:26:d4:43:55:0f:
73:38:85:af:de:ac:41:cd:a4:3a:35:33:31:07:d1:
20:4f:da:27:6f:d4:30:fa:e5:fe:0d:c9:5d:4e:be:
d7:2e:56:02:9d:a5:09:60:d8:7a:9b:14:a5:b7:e9:
68:1d:eb:0d:7e:68:38:42:bd:8d:22:05:4e:e2:44:
42:84:03:6f:d4:c3:54:b5:c4:04:0e:03:7a:4b:fc:
f8:c7:fd:a9:b9:08:88:1c:14:c7:e3:a8:7b:df:97:
f0:d3:cb:cc:83:c5:da:4c:7e:59:28:b8:68:ac:83:
a9:6c:3e:3f:f2:ef:12:f7:60:02:4a:c1:7e:42:b4:
2e:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8F:D1:E4:96:BE:D3:19:0F:72:86:96:48:0B:12:E4:94:F0:19:B8:33
X509v3 Authority Key Identifier:
keyid:56:B5:8B:E7:D2:83:3A:C3:99:28:B8:B8:68:27:41:B5:03:14:64:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VrWL59KDOsOZKLi4aCdBtQMUZF0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/ea9579-3532-49fb-9182-f3a8bf372056/1/VrWL59KDOsOZKLi4aCdBtQMUZF0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:4d:b7:da:fc:59:14:b2:c5:78:4f:09:a4:52:6d:72:a5:7c:
34:ae:18:a4:60:46:11:25:3f:98:24:18:81:92:7f:64:40:da:
00:d5:06:0b:15:73:8e:05:6a:ff:94:c4:4a:2b:9c:1d:85:e2:
9f:ee:23:2d:52:78:44:a5:f7:f9:8a:9a:1a:01:d4:9a:af:20:
f3:ea:5b:0b:6c:d2:5e:54:d7:28:21:df:b4:3a:4c:48:39:42:
24:d0:0f:7e:41:00:4d:76:9b:50:b7:0a:04:a3:c3:fe:f2:33:
f3:d5:4b:93:ae:a6:c3:20:e5:48:b1:29:33:b8:5e:9a:e4:ad:
14:87:ed:1f:49:26:66:7b:b4:dc:7d:f5:e8:14:80:5b:3a:a3:
11:1a:a0:83:91:fc:e1:56:40:e0:e1:b6:ab:92:37:71:dc:65:
36:8f:c0:9b:c3:2d:68:c8:95:6e:fb:26:1d:de:0a:5a:6f:2a:
25:27:bf:ae:2a:5c:7a:4d:f7:f8:13:4b:5c:6c:54:fc:bd:cf:
de:ad:a3:2d:9b:e0:7f:0a:e3:a2:3e:30:b8:89:a9:ff:2f:21:
c0:6d:44:e8:ea:be:f0:e2:59:65:a5:45:10:0f:a8:54:25:b3:
d3:34:bc:a2:c8:b2:64:47:e8:eb:5c:64:f7:e6:86:dd:72:45:
08:67:92:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oFHD6fcXnnZOM13n3lRIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2YjU4YmU3ZDI4MzNhYzM5OTI4YjhiODY4Mjc0MWI1MDMx
NDY0NWQwHhcNMjUwNjI4MTMwMDQ5WhcNMjUwNjI5MTMwMDQ5WjAzMTEwLwYDVQQD
Eyg4ZmQxZTQ5NmJlZDMxOTBmNzI4Njk2NDgwYjEyZTQ5NGYwMTliODMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuiRt2BadzUlvsngk1kBo3DZvzm+8
jA0U4+buqC8Y0A8dCxr2rjCO24QX4x2Xr8uPFaAwzjy05/MBOEj89V1M0vdqpm8m
sTPmZU07M0PHZzff7z4grz6nvrdqB2AfVzGNxiOGZorWBq+uwflWdQ5MWmUalRvM
/Zeih9KLp9D7Zt2QJtRDVQ9zOIWv3qxBzaQ6NTMxB9EgT9onb9Qw+uX+DcldTr7X
LlYCnaUJYNh6mxSlt+loHesNfmg4Qr2NIgVO4kRChANv1MNUtcQEDgN6S/z4x/2p
uQiIHBTH46h735fw08vMg8XaTH5ZKLhorIOpbD4/8u8S92ACSsF+QrQuIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFI/R5Ja+0xkPcoaWSAsS5JTwGbgzMB8GA1UdIwQY
MBaAFFa1i+fSgzrDmSi4uGgnQbUDFGRdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODIt
ZjNhOGJmMzcyMDU2LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi9lYTk1NzktMzUzMi00OWZiLTkxODItZjNhOGJmMzcyMDU2
LzEvVnJXTDU5S0RPc09aS0xpNGFDZEJ0UU1VWkYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsE232vxZ
FLLFeE8JpFJtcqV8NK4YpGBGESU/mCQYgZJ/ZEDaANUGCxVzjgVq/5TESiucHYXi
n+4jLVJ4RKX3+YqaGgHUmq8g8+pbC2zSXlTXKCHftDpMSDlCJNAPfkEATXabULcK
BKPD/vIz89VLk66mwyDlSLEpM7hemuStFIftH0kmZnu03H316BSAWzqjERqgg5H8
4VZA4OG2q5I3cdxlNo/Am8MtaMiVbvsmHd4KWm8qJSe/ripcek33+BNLXGxU/L3P
3q2jLZvgfwrjoj4wuImp/y8hwG1E6Oq+8OJZZaVFEA+oVCWz0zS8osiyZEfo61xk
9+aG3XJFCGeStg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:22 2025 by rpki-client