Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
File: vyk4WQ4NABlyVmLUtK5Myew6c00.mft (raw, json)
Hash identifier: 9LVcrNgNJG74BPz4os9hZ3YXqw8+7XRYVMfFNokxZFg=
Subject key identifier: 87:E8:46:DA:41:11:4F:71:63:8F:D3:F8:0F:79:BA:B5:4A:87:67:9A
Authority key identifier: BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
Certificate issuer: /CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Certificate serial: 01976B85CA555FAF0FCBE9D8C8F446203C34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
Manifest number: 082D
Signing time: Fri 13 Jun 2025 23:00:19 +0000
Manifest this update: Fri 13 Jun 2025 23:00:19 +0000
Manifest next update: Sat 14 Jun 2025 23:00:19 +0000
Files and hashes: 1: vQtF-L-9ooOZxF-UCZufP97_4Tk.roa (hash: uZu5EdE4zrTNj+JjaQISrCgWGaWpGkfUNjvMVUEKljA=)
2: vyk4WQ4NABlyVmLUtK5Myew6c00.crl (hash: oJOo3rOzWkqctZ0JnL56BROZToox1V2ptPuUxPf8kOw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:85:ca:55:5f:af:0f:cb:e9:d8:c8:f4:46:20:3c:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf2938590e0d0019725662d4b4ae4cc9ec3a734d
Validity
Not Before: Jun 13 23:00:19 2025 GMT
Not After : Jun 14 23:00:19 2025 GMT
Subject: CN=87e846da41114f71638fd3f80f79bab54a87679a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:9d:b0:44:92:c1:85:0e:6e:bc:83:d6:aa:60:
0a:80:d0:c1:37:55:07:6b:03:b5:87:7b:48:68:bc:
7a:35:9e:4d:4d:3f:f6:f1:72:8e:f9:61:e9:bd:cb:
1a:cf:75:fb:47:ac:a1:00:4f:9f:46:2e:d1:a9:2a:
c8:fa:cf:d3:61:4c:12:a2:91:ef:89:81:66:b5:70:
49:ea:d9:07:cc:61:36:84:64:7c:dc:ed:d5:fe:17:
fb:55:30:26:26:63:55:1d:5e:b5:8f:47:0a:40:4d:
b4:5b:02:b0:79:a0:2d:bb:20:ad:e6:51:cc:a3:df:
ee:f3:61:25:a9:2f:45:6b:39:b4:d1:de:48:f4:b9:
dd:ea:90:2a:22:2b:9e:23:a1:fc:d8:43:5e:47:19:
ee:b6:ee:b9:cd:98:cf:e4:fa:18:cb:8b:80:e6:fc:
53:0e:15:1a:02:06:18:f3:5e:cc:3d:11:45:ae:78:
47:a9:04:5c:69:1d:e8:f3:f4:53:7f:20:5b:fb:e8:
90:8b:c4:05:0e:f5:29:65:73:27:57:11:a9:11:2d:
6c:1c:ca:75:0c:a4:a5:58:85:65:db:d0:ad:8f:dd:
cf:dd:93:6a:c8:38:04:38:9e:27:76:a7:4c:34:44:
ef:0e:06:3f:b2:3d:9d:a2:38:62:db:51:91:08:31:
9b:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E8:46:DA:41:11:4F:71:63:8F:D3:F8:0F:79:BA:B5:4A:87:67:9A
X509v3 Authority Key Identifier:
keyid:BF:29:38:59:0E:0D:00:19:72:56:62:D4:B4:AE:4C:C9:EC:3A:73:4D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyk4WQ4NABlyVmLUtK5Myew6c00.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/833aa2-af04-4f10-a167-6acd86686e85/1/vyk4WQ4NABlyVmLUtK5Myew6c00.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:0f:97:b3:12:f5:13:cc:a6:cc:b8:3a:53:ff:45:12:ca:5c:
a6:00:96:89:5c:f6:c3:fa:4b:15:59:08:07:18:91:fd:21:d7:
c0:82:f5:85:ca:b6:db:1d:d5:75:64:8f:4d:bc:59:5e:7c:a2:
cf:39:76:6a:95:7d:b5:34:22:f8:30:8f:dd:cb:c4:81:be:09:
d8:90:82:9e:7c:30:b2:22:72:74:a4:f8:ff:cd:83:86:4d:9b:
71:37:db:e8:f9:b3:13:48:64:8b:f2:a9:6f:b5:7c:f4:c5:ba:
50:b4:c0:7b:7a:21:27:08:7c:af:97:f9:19:8b:51:66:30:e4:
e1:0a:f1:57:6f:44:15:f4:6d:ba:81:38:da:5b:fe:82:ff:eb:
56:ad:5a:9e:3b:9c:c9:85:e0:1c:d4:4a:00:d6:49:4b:e2:e5:
99:89:69:a2:1d:21:c5:05:02:6e:fa:06:1e:cd:68:64:da:d8:
77:fa:d5:3c:98:07:0a:67:7b:8d:61:24:30:3c:d0:85:3f:ca:
27:54:55:dc:c7:d6:6d:63:e7:60:5b:ef:b8:5e:46:9d:f3:1b:
c3:92:e4:b4:8f:66:9b:27:55:01:86:99:bf:08:5c:38:19:89:
d0:ab:7c:8d:fd:d6:7e:e5:a3:77:3d:15:89:78:7a:63:77:ed:
26:15:81:0d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrhcpVX68Py+nYyPRGIDw0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjkzODU5MGUwZDAwMTk3MjU2NjJkNGI0YWU0Y2M5ZWMz
YTczNGQwHhcNMjUwNjEzMjMwMDE5WhcNMjUwNjE0MjMwMDE5WjAzMTEwLwYDVQQD
Eyg4N2U4NDZkYTQxMTE0ZjcxNjM4ZmQzZjgwZjc5YmFiNTRhODc2NzlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2J2wRJLBhQ5uvIPWqmAKgNDBN1UH
awO1h3tIaLx6NZ5NTT/28XKO+WHpvcsaz3X7R6yhAE+fRi7RqSrI+s/TYUwSopHv
iYFmtXBJ6tkHzGE2hGR83O3V/hf7VTAmJmNVHV61j0cKQE20WwKweaAtuyCt5lHM
o9/u82ElqS9Fazm00d5I9Lnd6pAqIiueI6H82ENeRxnutu65zZjP5PoYy4uA5vxT
DhUaAgYY817MPRFFrnhHqQRcaR3o8/RTfyBb++iQi8QFDvUpZXMnVxGpES1sHMp1
DKSlWIVl29Ctj93P3ZNqyDgEOJ4ndqdMNETvDgY/sj2dojhi21GRCDGbNQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIfoRtpBEU9xY4/T+A95urVKh2eaMB8GA1UdIwQY
MBaAFL8pOFkODQAZclZi1LSuTMnsOnNNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlrNFdRNE5BQmx5Vm1MVXRLNU15ZXc2YzAwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy84MzNhYTItYWYwNC00ZjEwLWExNjct
NmFjZDg2Njg2ZTg1LzEvdnlrNFdRNE5BQmx5Vm1MVXRLNU15ZXc2YzAwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy84MzNhYTItYWYwNC00ZjEwLWExNjctNmFjZDg2Njg2ZTg1
LzEvdnlrNFdRNE5BQmx5Vm1MVXRLNU15ZXc2YzAwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkA+XsxL1
E8ymzLg6U/9FEspcpgCWiVz2w/pLFVkIBxiR/SHXwIL1hcq22x3VdWSPTbxZXnyi
zzl2apV9tTQi+DCP3cvEgb4J2JCCnnwwsiJydKT4/82Dhk2bcTfb6PmzE0hki/Kp
b7V89MW6ULTAe3ohJwh8r5f5GYtRZjDk4QrxV29EFfRtuoE42lv+gv/rVq1anjuc
yYXgHNRKANZJS+LlmYlpoh0hxQUCbvoGHs1oZNrYd/rVPJgHCmd7jWEkMDzQhT/K
J1RV3MfWbWPnYFvvuF5GnfMbw5LktI9mmydVAYaZvwhcOBmJ0Kt8jf3WfuWjdz0V
iXh6Y3ftJhWBDQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:12:57 2025 by rpki-client