
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
File: o-VcYHJU0eKwURqFbnADn_r0MDI.mft (raw, json)
Hash identifier: fFx2ZWu7ZjY7Q3DKaw6kwqdsTI/6217wE9wprJuQB84=
Subject key identifier: FA:20:28:B0:9F:5C:C6:B7:18:3A:FF:21:07:DE:66:E9:57:D1:AD:4D
Authority key identifier: A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
Certificate issuer: /CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Certificate serial: 0198854392956E9EA04D3B496C358717B5AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
Manifest number: 119A
Signing time: Thu 07 Aug 2025 16:00:54 +0000
Manifest this update: Thu 07 Aug 2025 16:00:54 +0000
Manifest next update: Fri 08 Aug 2025 16:00:54 +0000
Files and hashes: 1: o-VcYHJU0eKwURqFbnADn_r0MDI.crl (hash: Yn45idr32KIjOPISQkJ2HLMGF3jJFWZOjtpLPaRbPhE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:43:92:95:6e:9e:a0:4d:3b:49:6c:35:87:17:b5:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3e55c607254d1e2b0511a856e70039ffaf43032
Validity
Not Before: Aug 7 16:00:54 2025 GMT
Not After : Aug 8 16:00:54 2025 GMT
Subject: CN=fa2028b09f5cc6b7183aff2107de66e957d1ad4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:f3:0c:bd:ce:93:e7:71:58:2e:c6:fe:ac:b3:
20:f9:9e:8f:2e:90:3d:36:fd:1f:4b:31:08:88:b5:
b3:26:7b:7e:1e:24:c4:45:95:a2:d2:f3:0a:e0:64:
a1:41:85:a1:48:5d:50:24:b3:e4:5d:5b:3b:6a:e6:
eb:04:c3:da:a8:36:2b:61:cf:b6:4c:83:19:4d:8c:
79:2b:44:81:4e:d4:e8:36:f8:94:ba:40:f2:aa:0f:
c2:45:bf:2c:c2:13:92:b8:ac:10:e4:08:64:5f:68:
31:f0:af:35:f2:8a:eb:6d:51:bd:a4:eb:87:46:4d:
cd:ac:7c:f8:1e:bf:6c:06:02:f8:a1:ac:25:44:91:
d3:68:2e:a7:82:7e:6b:31:86:d7:b3:8a:02:34:b3:
f8:81:45:e9:03:ba:a4:1b:4f:73:2e:92:d7:63:84:
bb:5c:fa:94:2e:ff:56:69:99:bf:fc:77:ec:53:68:
78:04:06:e0:ff:e5:dc:4b:6d:fa:86:21:95:95:46:
86:21:20:dd:4d:29:39:db:6a:2e:8d:69:5d:7d:bf:
22:9e:55:a4:4b:1d:61:38:80:86:87:f7:45:90:90:
c1:e1:a8:8f:5e:f6:4a:25:6a:4c:5a:fd:51:c3:18:
09:a4:c3:fb:f3:5d:af:15:91:fc:b5:dd:95:01:5e:
f3:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:20:28:B0:9F:5C:C6:B7:18:3A:FF:21:07:DE:66:E9:57:D1:AD:4D
X509v3 Authority Key Identifier:
keyid:A3:E5:5C:60:72:54:D1:E2:B0:51:1A:85:6E:70:03:9F:FA:F4:30:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o-VcYHJU0eKwURqFbnADn_r0MDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/206aff-459e-4abb-819a-2d361e4f345c/1/o-VcYHJU0eKwURqFbnADn_r0MDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:6c:58:c1:39:49:67:59:e6:2b:52:d9:23:82:03:8a:ae:16:
be:5a:97:6e:25:3b:4b:f0:7c:a6:49:d7:8d:7b:c6:5e:5c:1b:
b7:7c:6c:9f:20:bb:8e:18:32:23:cc:f8:8a:35:82:5f:e0:94:
1f:14:26:94:6c:be:9e:d5:27:1d:be:1d:40:15:a9:69:65:25:
4c:6d:37:4c:b7:7a:b7:63:29:b3:cc:1c:a5:c9:c9:90:a8:a2:
e9:37:01:47:37:84:cd:00:7c:4f:48:ab:30:5d:96:4d:ad:c5:
c3:07:cc:d8:64:ed:8d:f7:3a:c4:54:cb:26:c0:21:d2:da:1c:
0f:19:79:f3:ae:7b:13:e0:92:7e:fb:25:59:06:d3:2c:07:3b:
80:9e:14:ca:69:d5:2c:46:05:e0:27:90:d5:f1:02:bb:a8:c5:
67:ff:80:81:b0:00:b4:7d:49:37:03:33:1b:dd:69:cc:30:8b:
13:a3:dc:12:ca:29:02:d3:70:4a:86:71:c6:db:2c:4a:75:41:
81:73:c0:78:97:d6:c3:2f:86:b8:97:b1:c5:e6:b6:7e:93:b7:
c1:4b:6e:85:05:be:b6:6b:cb:09:f1:a3:8c:26:3e:35:21:3d:
cb:b3:1b:8f:b5:1f:39:6f:04:86:ad:ad:8f:c0:1d:e1:66:0f:
de:8c:20:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiFQ5KVbp6gTTtJbDWHF7WrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZTU1YzYwNzI1NGQxZTJiMDUxMWE4NTZlNzAwMzlmZmFm
NDMwMzIwHhcNMjUwODA3MTYwMDU0WhcNMjUwODA4MTYwMDU0WjAzMTEwLwYDVQQD
EyhmYTIwMjhiMDlmNWNjNmI3MTgzYWZmMjEwN2RlNjZlOTU3ZDFhZDRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3vMMvc6T53FYLsb+rLMg+Z6PLpA9
Nv0fSzEIiLWzJnt+HiTERZWi0vMK4GShQYWhSF1QJLPkXVs7aubrBMPaqDYrYc+2
TIMZTYx5K0SBTtToNviUukDyqg/CRb8swhOSuKwQ5AhkX2gx8K818orrbVG9pOuH
Rk3NrHz4Hr9sBgL4oawlRJHTaC6ngn5rMYbXs4oCNLP4gUXpA7qkG09zLpLXY4S7
XPqULv9WaZm//HfsU2h4BAbg/+XcS236hiGVlUaGISDdTSk522oujWldfb8inlWk
Sx1hOICGh/dFkJDB4aiPXvZKJWpMWv1RwxgJpMP7812vFZH8td2VAV7zpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPogKLCfXMa3GDr/IQfeZulX0a1NMB8GA1UdIwQY
MBaAFKPlXGByVNHisFEahW5wA5/69DAyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvby1WY1lISlUwZUt3VVJxRmJuQURuX3IwTURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC8yMDZhZmYtNDU5ZS00YWJiLTgxOWEt
MmQzNjFlNGYzNDVjLzEvby1WY1lISlUwZUt3VVJxRmJuQURuX3IwTURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC8yMDZhZmYtNDU5ZS00YWJiLTgxOWEtMmQzNjFlNGYzNDVj
LzEvby1WY1lISlUwZUt3VVJxRmJuQURuX3IwTURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARmxYwTlJ
Z1nmK1LZI4IDiq4WvlqXbiU7S/B8pknXjXvGXlwbt3xsnyC7jhgyI8z4ijWCX+CU
HxQmlGy+ntUnHb4dQBWpaWUlTG03TLd6t2Mps8wcpcnJkKii6TcBRzeEzQB8T0ir
MF2WTa3FwwfM2GTtjfc6xFTLJsAh0tocDxl58657E+CSfvslWQbTLAc7gJ4UymnV
LEYF4CeQ1fECu6jFZ/+AgbAAtH1JNwMzG91pzDCLE6PcEsopAtNwSoZxxtssSnVB
gXPAeJfWwy+GuJexxea2fpO3wUtuhQW+tmvLCfGjjCY+NSE9y7Mbj7UfOW8Ehq2t
j8Ad4WYP3owg+w==
-----END CERTIFICATE-----
Generated at Thu Aug 7 20:28:00 2025 by rpki-client