Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
File: vKOYyNMoLIjZ09AComTkKOa67DY.mft (raw, json)
Hash identifier: 0lSQrXXnna7oyFX+8i3e3dmefBegcomlIoDw9huyxW0=
Subject key identifier: FF:4E:36:C8:FE:0B:06:45:31:04:D2:D4:7F:44:6F:C5:5E:24:11:E9
Authority key identifier: BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
Certificate issuer: /CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Certificate serial: 01988167C2DB3E797F1903C3D7D73607C159
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
Manifest number: 0865
Signing time: Wed 06 Aug 2025 22:01:57 +0000
Manifest this update: Wed 06 Aug 2025 22:01:57 +0000
Manifest next update: Thu 07 Aug 2025 22:01:57 +0000
Files and hashes: 1: vKOYyNMoLIjZ09AComTkKOa67DY.crl (hash: N/i7XT7LLOEONvRVujdI5CacQewhSPlHXhuVu9ZjGNA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 20:46:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:81:67:c2:db:3e:79:7f:19:03:c3:d7:d7:36:07:c1:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bca398c8d3282c88d9d3d002a264e428e6baec36
Validity
Not Before: Aug 6 22:01:57 2025 GMT
Not After : Aug 7 22:01:57 2025 GMT
Subject: CN=ff4e36c8fe0b06453104d2d47f446fc55e2411e9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:b3:ea:c5:8e:bc:0a:a2:6e:02:59:fa:15:d6:
dc:8f:84:e0:2d:f9:7d:93:d8:cf:08:8c:b0:30:a0:
da:53:6f:3a:5a:b4:6b:f2:49:95:e0:82:8f:d3:9a:
6c:9b:a4:35:74:83:0b:da:bf:fc:70:94:f4:65:09:
e7:b0:b1:b9:8e:10:e6:ba:54:c4:1a:89:2b:ac:8f:
15:21:85:2a:ba:f5:38:e1:d0:e8:aa:7d:c2:35:10:
a2:61:e3:f0:14:d5:b4:fc:b4:15:72:63:7b:f5:99:
f6:be:78:2a:00:86:75:c9:ef:64:24:bb:40:46:5c:
9d:9c:f6:1d:a1:9b:9a:7c:75:43:20:d6:ee:00:8f:
eb:61:fe:87:b7:cf:a2:70:7e:92:21:9c:74:93:23:
83:0e:4c:f4:ee:3c:70:e3:76:5c:a8:80:8d:12:c1:
fd:08:f0:82:f7:18:51:2a:f6:e9:18:82:eb:07:c4:
85:12:fd:2c:0e:75:42:40:1b:b8:c3:af:83:fb:ac:
22:14:5c:cf:ac:db:da:52:87:b1:9b:ac:e8:81:49:
11:32:73:d0:5f:01:ac:f0:33:00:3f:57:cb:a9:02:
fa:98:95:79:8e:b1:31:2e:c8:cd:f3:a5:83:43:bb:
34:c1:eb:fa:80:fc:df:ea:be:7e:fa:6a:c2:64:5e:
ac:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4E:36:C8:FE:0B:06:45:31:04:D2:D4:7F:44:6F:C5:5E:24:11:E9
X509v3 Authority Key Identifier:
keyid:BC:A3:98:C8:D3:28:2C:88:D9:D3:D0:02:A2:64:E4:28:E6:BA:EC:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vKOYyNMoLIjZ09AComTkKOa67DY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/8454c6-31c6-4f8b-91d4-267ba172d46d/1/vKOYyNMoLIjZ09AComTkKOa67DY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:c9:58:d3:53:5a:c0:46:1d:3e:32:49:f6:93:24:09:26:21:
ed:56:83:23:c2:b0:8a:8e:3b:cc:7f:9b:cb:d4:28:82:60:d3:
49:23:6b:ca:ba:ef:c9:9b:09:ce:16:29:49:1d:d8:cb:16:a2:
6b:f7:c5:36:46:27:b0:11:9e:a7:f7:85:ba:b8:72:86:79:1d:
b2:52:6b:d6:ed:0e:61:1e:09:d4:c9:64:bb:37:30:b6:3d:59:
d4:df:83:51:2e:05:cf:67:78:f1:47:19:16:a1:33:ff:fc:4b:
09:53:ab:49:88:4c:3d:85:2f:ab:41:eb:9a:92:c3:a8:70:17:
94:bd:ae:fc:ff:5a:d3:fd:ed:d3:ef:56:f7:eb:7f:41:df:b0:
2d:ca:25:1d:18:57:57:09:76:b4:65:39:55:f1:28:fe:5b:b7:
0d:70:9e:3e:46:e3:f1:6e:52:02:4f:38:dc:45:16:7c:7a:26:
e7:a3:72:9f:8b:27:f7:c8:f7:b8:94:b7:de:a4:37:67:a2:c7:
31:12:26:3f:3e:e8:44:e7:18:22:ce:35:5d:e6:c7:f6:f5:a8:
e6:78:b4:ec:e7:d8:34:a7:54:9e:5d:01:00:84:1f:27:0b:6a:
f0:74:10:4a:05:20:53:e5:ee:eb:14:18:5a:9c:12:3b:5a:04:
39:41:df:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiBZ8LbPnl/GQPD19c2B8FZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjYTM5OGM4ZDMyODJjODhkOWQzZDAwMmEyNjRlNDI4ZTZi
YWVjMzYwHhcNMjUwODA2MjIwMTU3WhcNMjUwODA3MjIwMTU3WjAzMTEwLwYDVQQD
EyhmZjRlMzZjOGZlMGIwNjQ1MzEwNGQyZDQ3ZjQ0NmZjNTVlMjQxMWU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxLPqxY68CqJuAln6Fdbcj4TgLfl9
k9jPCIywMKDaU286WrRr8kmV4IKP05psm6Q1dIML2r/8cJT0ZQnnsLG5jhDmulTE
GokrrI8VIYUquvU44dDoqn3CNRCiYePwFNW0/LQVcmN79Zn2vngqAIZ1ye9kJLtA
RlydnPYdoZuafHVDINbuAI/rYf6Ht8+icH6SIZx0kyODDkz07jxw43ZcqICNEsH9
CPCC9xhRKvbpGILrB8SFEv0sDnVCQBu4w6+D+6wiFFzPrNvaUoexm6zogUkRMnPQ
XwGs8DMAP1fLqQL6mJV5jrExLsjN86WDQ7s0wev6gPzf6r5++mrCZF6s7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9ONsj+CwZFMQTS1H9Eb8VeJBHpMB8GA1UdIwQY
MBaAFLyjmMjTKCyI2dPQAqJk5Cjmuuw2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi84NDU0YzYtMzFjNi00ZjhiLTkxZDQt
MjY3YmExNzJkNDZkLzEvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi84NDU0YzYtMzFjNi00ZjhiLTkxZDQtMjY3YmExNzJkNDZk
LzEvdktPWXlOTW9MSWpaMDlBQ29tVGtLT2E2N0RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD8lY01Na
wEYdPjJJ9pMkCSYh7VaDI8Kwio47zH+by9QogmDTSSNryrrvyZsJzhYpSR3Yyxai
a/fFNkYnsBGep/eFurhyhnkdslJr1u0OYR4J1Mlkuzcwtj1Z1N+DUS4Fz2d48UcZ
FqEz//xLCVOrSYhMPYUvq0HrmpLDqHAXlL2u/P9a0/3t0+9W9+t/Qd+wLcolHRhX
Vwl2tGU5VfEo/lu3DXCePkbj8W5SAk843EUWfHom56Nyn4sn98j3uJS33qQ3Z6LH
MRImPz7oROcYIs41XebH9vWo5ni07OfYNKdUnl0BAIQfJwtq8HQQSgUgU+Xu6xQY
WpwSO1oEOUHf4Q==
-----END CERTIFICATE-----
Generated at Thu Aug 7 03:20:05 2025 by rpki-client