Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
File: vC92jP44T5-M2QPGh9hlKsVOdJU.mft (raw, json)
Hash identifier: ixXZAm8Dbj4NbWsfMjhADhMZW4d9OpRhy8mW4Hez4tE=
Subject key identifier: 5B:B4:AD:9A:08:5C:98:34:B2:EB:92:B9:23:4B:E9:E2:E3:FC:AD:5D
Authority key identifier: BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
Certificate issuer: /CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Certificate serial: 0198D4728BD342AC82F19E569D943FFE1062
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
Manifest number: 05C8
Signing time: Sat 23 Aug 2025 01:02:13 +0000
Manifest this update: Sat 23 Aug 2025 01:02:13 +0000
Manifest next update: Sun 24 Aug 2025 01:02:13 +0000
Files and hashes: 1: vC92jP44T5-M2QPGh9hlKsVOdJU.crl (hash: MVtvyy9T+6y7KRhVGd6SEsqej+LhfoN1NsulfYyxNjs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 00:37:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:72:8b:d3:42:ac:82:f1:9e:56:9d:94:3f:fe:10:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2f768cfe384f9f8cd903c687d8652ac54e7495
Validity
Not Before: Aug 23 01:02:13 2025 GMT
Not After : Aug 24 01:02:13 2025 GMT
Subject: CN=5bb4ad9a085c9834b2eb92b9234be9e2e3fcad5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:15:d5:cc:cc:9b:11:81:71:be:b2:5c:84:76:
ea:02:24:7a:88:fb:50:fa:27:53:f2:ad:4c:4a:a8:
97:b7:26:b1:9f:5d:5d:5f:df:db:f0:e6:2f:99:fb:
b8:33:66:ed:f1:f1:71:af:8c:2c:3f:15:de:c4:bf:
1f:5a:ac:ad:fd:92:93:58:88:de:e9:85:bf:d7:84:
fe:e0:16:a8:09:08:92:31:35:c9:77:70:17:70:d5:
91:d4:b5:f1:99:c2:d2:93:8e:dc:f3:99:83:56:09:
0a:72:c4:00:f9:d2:1a:38:56:f5:75:69:ea:25:a0:
52:33:0b:92:80:66:29:c2:09:d3:20:31:d3:09:8a:
93:d3:ae:ac:f0:e2:05:43:55:cc:67:40:f5:9b:ed:
40:ae:dc:4f:0d:35:e5:8c:d5:5c:ae:3f:7d:a7:28:
90:5a:cf:ac:56:f3:f5:7c:d6:e0:41:45:08:cb:23:
8e:60:0f:62:ad:0a:71:2c:a8:6f:60:ab:35:f8:38:
51:4e:cb:08:6b:dc:d8:b2:04:b3:32:56:a7:20:30:
97:14:7f:a9:f7:db:33:b3:a4:b5:7b:24:09:a2:74:
9a:62:ae:ea:89:f9:d3:e2:fc:ef:7c:c4:c9:bf:85:
a5:73:40:73:7a:22:91:c2:8f:db:55:2f:c6:8a:e8:
19:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:B4:AD:9A:08:5C:98:34:B2:EB:92:B9:23:4B:E9:E2:E3:FC:AD:5D
X509v3 Authority Key Identifier:
keyid:BC:2F:76:8C:FE:38:4F:9F:8C:D9:03:C6:87:D8:65:2A:C5:4E:74:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vC92jP44T5-M2QPGh9hlKsVOdJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/64c99d-8188-41cf-9f49-eceb6d722a14/1/vC92jP44T5-M2QPGh9hlKsVOdJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:e3:0c:0e:fe:70:f6:cb:1a:ea:75:5e:90:5a:04:9c:db:30:
8e:c8:4f:b6:df:41:77:cf:d2:09:c6:db:d2:fb:92:65:5f:32:
4c:42:9a:11:f3:0c:ba:bd:82:00:47:2d:8a:d3:4c:e7:c9:9d:
25:03:38:fa:3e:02:4c:14:96:fb:1f:f8:51:20:0e:5d:bf:ef:
71:41:24:a3:bf:91:af:4d:bd:17:ad:88:b8:bc:c4:88:3e:8c:
d8:ed:17:08:c9:f2:f0:bf:c6:51:85:56:0f:a4:09:1a:8e:1a:
de:32:27:a6:48:e5:85:3a:06:09:55:34:bb:d8:42:0e:8d:cd:
68:84:45:cc:1d:7e:29:05:b1:ad:63:a9:39:b0:40:90:27:d4:
2d:f5:d6:f1:91:a5:19:36:a7:57:b1:a5:1c:df:80:f4:87:7c:
f2:88:6a:80:22:34:85:76:18:f5:03:f6:90:11:c0:61:91:d8:
2b:65:00:fa:a3:2f:64:d9:43:00:32:86:55:0a:07:b3:42:c0:
e6:71:27:c5:97:c9:95:42:c1:fc:a9:70:96:f1:8a:93:c6:5b:
e9:03:e4:59:c1:6a:22:25:da:88:08:70:cc:f8:a5:33:d7:cb:
48:ad:0d:79:32:81:9a:e7:9c:dd:c6:19:df:25:99:7b:ce:49:
76:b8:4a:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUcovTQqyC8Z5WnZQ//hBiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMmY3NjhjZmUzODRmOWY4Y2Q5MDNjNjg3ZDg2NTJhYzU0
ZTc0OTUwHhcNMjUwODIzMDEwMjEzWhcNMjUwODI0MDEwMjEzWjAzMTEwLwYDVQQD
Eyg1YmI0YWQ5YTA4NWM5ODM0YjJlYjkyYjkyMzRiZTllMmUzZmNhZDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBXVzMybEYFxvrJchHbqAiR6iPtQ
+idT8q1MSqiXtyaxn11dX9/b8OYvmfu4M2bt8fFxr4wsPxXexL8fWqyt/ZKTWIje
6YW/14T+4BaoCQiSMTXJd3AXcNWR1LXxmcLSk47c85mDVgkKcsQA+dIaOFb1dWnq
JaBSMwuSgGYpwgnTIDHTCYqT066s8OIFQ1XMZ0D1m+1ArtxPDTXljNVcrj99pyiQ
Ws+sVvP1fNbgQUUIyyOOYA9irQpxLKhvYKs1+DhRTssIa9zYsgSzMlanIDCXFH+p
99szs6S1eyQJonSaYq7qifnT4vzvfMTJv4Wlc0BzeiKRwo/bVS/GiugZAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFu0rZoIXJg0suuSuSNL6eLj/K1dMB8GA1UdIwQY
MBaAFLwvdoz+OE+fjNkDxofYZSrFTnSVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkM5MmpQNDRUNS1NMlFQR2g5aGxLc1ZPZEpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy82NGM5OWQtODE4OC00MWNmLTlmNDkt
ZWNlYjZkNzIyYTE0LzEvdkM5MmpQNDRUNS1NMlFQR2g5aGxLc1ZPZEpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy82NGM5OWQtODE4OC00MWNmLTlmNDktZWNlYjZkNzIyYTE0
LzEvdkM5MmpQNDRUNS1NMlFQR2g5aGxLc1ZPZEpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeeMMDv5w
9ssa6nVekFoEnNswjshPtt9Bd8/SCcbb0vuSZV8yTEKaEfMMur2CAEctitNM58md
JQM4+j4CTBSW+x/4USAOXb/vcUEko7+Rr029F62IuLzEiD6M2O0XCMny8L/GUYVW
D6QJGo4a3jInpkjlhToGCVU0u9hCDo3NaIRFzB1+KQWxrWOpObBAkCfULfXW8ZGl
GTanV7GlHN+A9Id88ohqgCI0hXYY9QP2kBHAYZHYK2UA+qMvZNlDADKGVQoHs0LA
5nEnxZfJlULB/KlwlvGKk8Zb6QPkWcFqIiXaiAhwzPilM9fLSK0NeTKBmuec3cYZ
3yWZe85JdrhK6Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 09:49:40 2025 by rpki-client