Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
File: vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json)
Hash identifier: QfiTyyZOgmU2EaipqrmN9+aOgDO//VHM69BBL+bWRZk=
Subject key identifier: 2F:71:68:A0:0D:CB:4A:22:04:7F:5F:4F:19:01:C8:E6:A7:3E:C5:4E
Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
Certificate issuer: /CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Certificate serial: 0197B88FD7CBA0B7A46153F4E715CF4B10F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
Manifest number: 0535
Signing time: Sat 28 Jun 2025 22:02:03 +0000
Manifest this update: Sat 28 Jun 2025 22:02:03 +0000
Manifest next update: Sun 29 Jun 2025 22:02:03 +0000
Files and hashes: 1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: pBSSxshRVebq3iOB+YTLlHbqDzysjvm77YL5IkvG/eM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:d7:cb:a0:b7:a4:61:53:f4:e7:15:cf:4b:10:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Validity
Not Before: Jun 28 22:02:03 2025 GMT
Not After : Jun 29 22:02:03 2025 GMT
Subject: CN=2f7168a00dcb4a22047f5f4f1901c8e6a73ec54e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:e6:4f:a4:2d:65:9d:64:c4:d3:56:81:fd:01:
ee:97:c1:39:16:d3:d9:43:97:63:35:cb:1f:6a:36:
4d:28:e9:e4:dd:99:87:09:3e:5c:e6:72:9d:d0:5e:
8c:bb:05:67:2b:8e:d1:13:ff:7e:9e:b5:19:24:ef:
92:78:ed:5c:c7:25:a9:e6:ec:ce:76:28:98:56:61:
ae:03:40:08:48:46:2a:8d:83:2a:f1:19:a1:9b:fb:
14:d2:a1:94:b1:3b:6c:a7:eb:8b:cc:12:c7:d7:6e:
cf:89:62:34:39:6c:93:77:93:2c:d7:14:a9:cb:a8:
e9:bd:18:84:39:38:e4:a7:38:0c:c5:c6:76:6e:7a:
f4:6e:e7:8c:a1:61:74:5f:64:04:09:a2:cc:16:78:
7c:8e:16:ce:a0:d9:08:da:80:ac:80:c9:d5:1f:83:
f6:08:5f:33:77:23:63:88:d8:09:d0:0b:06:29:59:
e7:ef:c2:f2:a4:27:5e:8a:22:8c:4a:a6:c3:42:75:
77:17:35:b6:8c:59:ed:b2:f9:10:39:fe:d3:aa:97:
d7:5d:93:e7:b3:ef:ce:f7:ae:3a:5d:0e:90:3a:f0:
36:67:74:a4:f3:45:5d:de:d8:cf:52:11:fe:92:ab:
6f:f8:19:dd:32:f0:82:11:cb:ad:ad:55:46:ad:10:
19:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2F:71:68:A0:0D:CB:4A:22:04:7F:5F:4F:19:01:C8:E6:A7:3E:C5:4E
X509v3 Authority Key Identifier:
keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:3c:be:47:cb:e1:b6:74:0b:10:41:f8:35:33:9b:0f:27:c9:
12:01:fe:ac:93:db:a8:04:72:1b:8e:d2:df:f4:18:64:80:37:
e2:50:4e:85:96:a6:84:a0:b5:5d:f8:ef:55:e2:df:4a:7c:14:
14:39:5a:b0:6f:5a:8c:6b:a6:4d:d5:ed:ec:a6:b5:b2:66:85:
74:0f:60:00:57:3d:65:91:6a:29:8b:35:dc:90:22:4b:8d:49:
04:6a:01:be:e6:69:94:db:6f:c8:b3:0e:e5:c8:e8:a5:26:56:
ad:22:88:c1:cf:eb:b6:6f:48:00:2d:01:e3:1f:cb:cf:12:ad:
fd:23:1a:8b:1b:50:10:18:2e:ef:ae:69:c7:20:47:81:51:ed:
2c:4e:e5:c8:d4:0b:40:eb:19:33:d9:e5:15:d5:7c:99:9a:ca:
ea:42:83:27:ab:15:30:b1:3d:88:09:7b:29:bc:d4:55:85:8a:
fb:e9:a0:1c:dc:3a:a1:11:1c:88:81:b5:3e:cb:56:1c:e5:12:
04:1b:c7:50:86:bd:55:5b:71:97:d2:52:c7:36:e1:41:89:98:
92:bd:ba:8b:d0:a8:2a:27:79:67:e5:27:f9:c4:f8:9b:78:f4:
cb:f7:04:02:40:0c:56:43:e9:be:5e:d3:6c:6c:0b:b5:3b:21:
57:b6:8c:e9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j9fLoLekYVP05xXPSxDzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMjYzMWQ0YTM5NTM5Mjk0ZDFmOWU1NzZlNjk5NjIwYWQ5
OGEzOGQwHhcNMjUwNjI4MjIwMjAzWhcNMjUwNjI5MjIwMjAzWjAzMTEwLwYDVQQD
EygyZjcxNjhhMDBkY2I0YTIyMDQ3ZjVmNGYxOTAxYzhlNmE3M2VjNTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApuZPpC1lnWTE01aB/QHul8E5FtPZ
Q5djNcsfajZNKOnk3ZmHCT5c5nKd0F6MuwVnK47RE/9+nrUZJO+SeO1cxyWp5uzO
diiYVmGuA0AISEYqjYMq8Rmhm/sU0qGUsTtsp+uLzBLH127PiWI0OWyTd5Ms1xSp
y6jpvRiEOTjkpzgMxcZ2bnr0bueMoWF0X2QECaLMFnh8jhbOoNkI2oCsgMnVH4P2
CF8zdyNjiNgJ0AsGKVnn78LypCdeiiKMSqbDQnV3FzW2jFntsvkQOf7TqpfXXZPn
s+/O9646XQ6QOvA2Z3Sk80Vd3tjPUhH+kqtv+BndMvCCEcutrVVGrRAZGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC9xaKANy0oiBH9fTxkByOanPsVOMB8GA1UdIwQY
MBaAFLwmMdSjlTkpTR+eV25pliCtmKONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAt
MmY2ZDQ2ZDcyOTk2LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAtMmY2ZDQ2ZDcyOTk2
LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMzy+R8vh
tnQLEEH4NTObDyfJEgH+rJPbqARyG47S3/QYZIA34lBOhZamhKC1XfjvVeLfSnwU
FDlasG9ajGumTdXt7Ka1smaFdA9gAFc9ZZFqKYs13JAiS41JBGoBvuZplNtvyLMO
5cjopSZWrSKIwc/rtm9IAC0B4x/LzxKt/SMaixtQEBgu765pxyBHgVHtLE7lyNQL
QOsZM9nlFdV8mZrK6kKDJ6sVMLE9iAl7KbzUVYWK++mgHNw6oREciIG1PstWHOUS
BBvHUIa9VVtxl9JSxzbhQYmYkr26i9CoKid5Z+Un+cT4m3j0y/cEAkAMVkPpvl7T
bGwLtTshV7aM6Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 01:47:15 2025 by rpki-client