Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
File: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft (raw, json)
Hash identifier: 3lvSI25rdfkuF/M+Zhy+wP3URD3V2PdjGnbc/69okXg=
Subject key identifier: 2D:29:16:6E:89:28:2A:45:D1:34:6A:79:A6:3B:03:31:A2:62:9B:BF
Authority key identifier: BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
Certificate issuer: /CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Certificate serial: 0198744F9ADEFC63F7350DB0C5A08E3FF72D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
Manifest number: 0CFC
Signing time: Mon 04 Aug 2025 09:00:30 +0000
Manifest this update: Mon 04 Aug 2025 09:00:30 +0000
Manifest next update: Tue 05 Aug 2025 09:00:30 +0000
Files and hashes: 1: vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl (hash: YRBCrscYsto4t/Cu+AHgHyKhE80TNbxJueCodRk3QkA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:4f:9a:de:fc:63:f7:35:0d:b0:c5:a0:8e:3f:f7:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bcd884e154c21c9f459f42a836abcbc8ac0f415a
Validity
Not Before: Aug 4 09:00:30 2025 GMT
Not After : Aug 5 09:00:30 2025 GMT
Subject: CN=2d29166e89282a45d1346a79a63b0331a2629bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:73:3f:51:cb:08:c4:d0:48:b6:c0:a9:7a:f2:
6f:e0:ba:5b:3f:3a:a4:90:01:01:b5:9a:13:d3:05:
82:b7:34:cd:c0:5d:a0:b2:49:50:ad:ca:13:48:68:
5e:1c:b7:b9:21:5c:14:e1:ff:7b:6f:47:ea:7f:fa:
ba:2e:71:28:48:9b:75:ba:63:a8:4a:9c:e8:ae:67:
6a:12:71:2c:15:ca:a1:fc:41:ad:b9:e3:e5:8a:a8:
bc:76:6a:05:a2:f8:49:34:b3:f7:a8:95:24:4f:04:
1c:b8:c4:f9:7d:b3:90:40:7f:d3:41:c2:ae:34:22:
13:07:76:6d:ec:55:8c:50:0f:03:ef:45:97:b2:ee:
7e:ab:4d:c6:f8:ab:1e:07:ed:34:09:54:ed:71:a1:
ec:c2:6b:58:a7:c1:65:9e:7b:ce:b7:0f:5b:39:37:
ef:0a:36:33:79:c8:ba:19:63:28:f7:1d:7e:7d:78:
b3:a3:16:93:3d:25:3e:eb:d1:6b:e8:7e:45:23:5e:
fe:c4:ba:8c:0a:80:ce:62:28:d9:c7:86:c1:bf:3d:
5b:6f:06:25:ae:e6:93:fc:2c:0f:05:28:d1:22:ec:
3b:cf:2a:47:a7:1c:82:f5:71:eb:52:c3:00:0f:98:
14:45:67:b1:ab:34:df:fe:8c:cb:cb:af:86:db:c7:
c8:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2D:29:16:6E:89:28:2A:45:D1:34:6A:79:A6:3B:03:31:A2:62:9B:BF
X509v3 Authority Key Identifier:
keyid:BC:D8:84:E1:54:C2:1C:9F:45:9F:42:A8:36:AB:CB:C8:AC:0F:41:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/8c275e-90c7-4c97-a492-5d318a22ca96/1/vNiE4VTCHJ9Fn0KoNqvLyKwPQVo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:ae:89:57:fc:a1:bc:b5:19:ba:f4:8f:c3:a8:fe:29:a3:ae:
5a:f3:1e:bf:e1:bb:b0:26:63:b3:28:ea:5b:7d:98:3d:32:b6:
d8:99:61:c0:dc:e7:57:e2:63:89:39:b7:11:ea:f9:fb:80:af:
77:6d:1e:53:d9:a7:d3:26:ad:2e:ea:fe:59:4b:48:cc:49:0e:
53:f3:31:2b:9f:1a:b9:96:a8:b6:be:eb:92:44:c0:00:35:ab:
4a:5b:1e:02:b6:f5:36:01:10:d2:ad:a2:8a:41:a5:87:47:b2:
3d:8a:64:07:80:0d:57:1d:23:91:e9:16:a2:17:45:3f:fd:db:
f7:36:25:86:b1:cc:4e:d2:28:aa:5b:5e:d6:50:da:1f:11:8d:
2c:15:a9:5e:89:42:d7:60:88:d9:52:42:71:66:02:79:31:b9:
f0:7e:4e:7e:3e:36:80:1e:11:b2:a1:f5:f7:21:9c:3b:dd:fe:
73:db:f4:dd:cf:7a:a2:7a:a3:90:a1:b1:d0:90:5c:97:1f:aa:
21:a5:5d:62:10:d0:7c:19:a4:e5:5f:71:81:03:a1:46:83:ac:
52:83:c5:cb:ce:12:0e:5e:c9:56:01:57:91:dc:98:06:4d:74:
02:17:c3:44:66:fd:ff:7c:9f:ef:6b:bf:1f:e6:78:04:ea:58:
f3:5e:82:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0T5re/GP3NQ2wxaCOP/ctMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjZDg4NGUxNTRjMjFjOWY0NTlmNDJhODM2YWJjYmM4YWMw
ZjQxNWEwHhcNMjUwODA0MDkwMDMwWhcNMjUwODA1MDkwMDMwWjAzMTEwLwYDVQQD
EygyZDI5MTY2ZTg5MjgyYTQ1ZDEzNDZhNzlhNjNiMDMzMWEyNjI5YmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsXM/UcsIxNBItsCpevJv4LpbPzqk
kAEBtZoT0wWCtzTNwF2gsklQrcoTSGheHLe5IVwU4f97b0fqf/q6LnEoSJt1umOo
SpzormdqEnEsFcqh/EGtuePliqi8dmoFovhJNLP3qJUkTwQcuMT5fbOQQH/TQcKu
NCITB3Zt7FWMUA8D70WXsu5+q03G+KseB+00CVTtcaHswmtYp8FlnnvOtw9bOTfv
CjYzeci6GWMo9x1+fXizoxaTPSU+69Fr6H5FI17+xLqMCoDOYijZx4bBvz1bbwYl
ruaT/CwPBSjRIuw7zypHpxyC9XHrUsMAD5gURWexqzTf/ozLy6+G28fItQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC0pFm6JKCpF0TRqeaY7AzGiYpu/MB8GA1UdIwQY
MBaAFLzYhOFUwhyfRZ9CqDary8isD0FaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdk5pRTRWVENISjlGbjBLb05xdkx5S3dQUVZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS84YzI3NWUtOTBjNy00Yzk3LWE0OTIt
NWQzMThhMjJjYTk2LzEvdk5pRTRWVENISjlGbjBLb05xdkx5S3dQUVZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS84YzI3NWUtOTBjNy00Yzk3LWE0OTItNWQzMThhMjJjYTk2
LzEvdk5pRTRWVENISjlGbjBLb05xdkx5S3dQUVZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATq6JV/yh
vLUZuvSPw6j+KaOuWvMev+G7sCZjsyjqW32YPTK22JlhwNznV+JjiTm3Eer5+4Cv
d20eU9mn0yatLur+WUtIzEkOU/MxK58auZaotr7rkkTAADWrSlseArb1NgEQ0q2i
ikGlh0eyPYpkB4ANVx0jkekWohdFP/3b9zYlhrHMTtIoqlte1lDaHxGNLBWpXolC
12CI2VJCcWYCeTG58H5Ofj42gB4RsqH19yGcO93+c9v03c96onqjkKGx0JBclx+q
IaVdYhDQfBmk5V9xgQOhRoOsUoPFy84SDl7JVgFXkdyYBk10AhfDRGb9/3yf72u/
H+Z4BOpY816CQw==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:24:52 2025 by rpki-client