
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
File: VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft (raw, json)
Hash identifier: gvez7+MaafDH6vR513av9nqPQuIOzA9qMtl+h4txN68=
Subject key identifier: 1B:6A:F9:C6:4A:AE:78:38:64:F4:B5:0F:BE:AC:54:09:B6:38:14:E0
Authority key identifier: 57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD
Certificate issuer: /CN=57060106b416792b2a2e9a7eb402a238570168bd
Certificate serial: 019889C4D090FA380543B092494B40EE3F86
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
Manifest number: 1387
Signing time: Fri 08 Aug 2025 13:00:33 +0000
Manifest this update: Fri 08 Aug 2025 13:00:33 +0000
Manifest next update: Sat 09 Aug 2025 13:00:33 +0000
Files and hashes: 1: VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl (hash: Fg2kxpeB8wnRuEKhnNs0LqsmypZQST+cyvwVejOcU4Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 11:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:89:c4:d0:90:fa:38:05:43:b0:92:49:4b:40:ee:3f:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57060106b416792b2a2e9a7eb402a238570168bd
Validity
Not Before: Aug 8 13:00:33 2025 GMT
Not After : Aug 9 13:00:33 2025 GMT
Subject: CN=1b6af9c64aae783864f4b50fbeac5409b63814e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:a2:f6:38:fd:15:b3:ec:b8:4c:6c:07:70:bb:
2e:50:63:46:6b:a4:64:4a:be:1b:37:6a:f2:09:dc:
e5:7c:ca:25:b9:7e:55:1e:3c:d5:7a:aa:5f:9a:e6:
07:be:a4:83:03:c5:89:6e:a5:a8:74:b3:e1:e0:3b:
35:59:64:6e:21:0c:56:7f:d6:49:69:0b:73:3a:5c:
7a:c1:8b:22:2f:9d:60:05:10:31:1e:53:22:a2:a7:
07:cc:8f:44:ee:0e:45:02:ea:28:a2:e7:59:9f:67:
36:de:90:21:70:3f:cb:7f:5b:3f:bc:ab:e7:e6:73:
d5:d2:96:cb:32:49:aa:e9:15:a5:2e:43:41:5d:71:
a5:0e:e2:34:dd:36:d3:14:63:6a:e1:0b:5a:98:ce:
c2:9c:4b:28:b4:72:2d:ce:b3:d9:c2:05:24:53:8d:
ae:7d:c4:8a:de:24:87:ef:3c:d6:f4:06:dc:b1:4d:
40:27:e8:25:26:57:47:7f:b2:28:78:6a:19:dd:98:
9e:a1:38:3f:c3:98:f8:f7:c0:f8:2a:44:03:38:fb:
9c:02:b4:ad:12:d1:3a:6b:5f:96:a6:92:5f:e2:2a:
3e:68:4c:e6:21:d6:62:32:4b:16:d7:cc:14:a5:b5:
a5:4e:75:99:4b:f3:50:68:b7:a4:e7:c5:c3:de:4a:
45:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:6A:F9:C6:4A:AE:78:38:64:F4:B5:0F:BE:AC:54:09:B6:38:14:E0
X509v3 Authority Key Identifier:
keyid:57:06:01:06:B4:16:79:2B:2A:2E:9A:7E:B4:02:A2:38:57:01:68:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VwYBBrQWeSsqLpp-tAKiOFcBaL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/91/799278-6f35-4c3a-97d0-9bfcfdd7969b/1/VwYBBrQWeSsqLpp-tAKiOFcBaL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ca:e4:90:e4:d2:f2:e9:20:ab:01:b6:6d:a6:09:4c:51:3e:52:
c4:88:22:7e:bd:4d:d3:d8:85:da:1d:18:6e:f4:83:b9:d1:42:
b4:2a:82:2c:6d:24:d6:e4:ad:49:cb:93:b3:60:b7:c9:b4:4f:
0b:3a:ff:74:b7:2b:cf:af:73:bf:92:ff:d7:7c:b2:f7:2a:21:
3a:ea:b1:b3:cd:62:4d:f2:9c:6f:51:5a:03:81:a3:b9:b0:24:
81:fb:84:6b:fe:d1:41:bf:38:54:e6:bd:d3:d0:2e:7f:38:76:
32:85:06:e8:92:2c:92:85:05:c8:cd:b3:e9:4d:58:af:66:6e:
66:41:31:1d:d7:9f:b8:6a:2e:e8:25:ee:20:0d:bb:9b:a0:02:
07:9d:22:b5:5a:35:4a:b8:1b:11:fb:c7:18:cd:03:73:8d:94:
d8:f2:57:42:91:9e:7e:19:60:83:3a:66:d7:0b:bd:e9:07:2e:
6c:ba:4a:a5:ce:12:70:54:b1:74:e1:ce:51:55:84:e0:4d:89:
d7:e9:4d:25:ff:38:de:df:d7:5a:b0:df:25:60:77:05:cc:85:
06:6b:b6:ba:da:d3:c2:6a:c1:f3:fa:9a:9b:20:62:ce:e5:99:
44:37:f5:ad:e1:60:45:d0:09:aa:a9:63:91:2c:61:aa:15:d6:
8d:ae:c1:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiJxNCQ+jgFQ7CSSUtA7j+GMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3MDYwMTA2YjQxNjc5MmIyYTJlOWE3ZWI0MDJhMjM4NTcw
MTY4YmQwHhcNMjUwODA4MTMwMDMzWhcNMjUwODA5MTMwMDMzWjAzMTEwLwYDVQQD
EygxYjZhZjljNjRhYWU3ODM4NjRmNGI1MGZiZWFjNTQwOWI2MzgxNGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiqL2OP0Vs+y4TGwHcLsuUGNGa6Rk
Sr4bN2ryCdzlfMoluX5VHjzVeqpfmuYHvqSDA8WJbqWodLPh4Ds1WWRuIQxWf9ZJ
aQtzOlx6wYsiL51gBRAxHlMioqcHzI9E7g5FAuoooudZn2c23pAhcD/Lf1s/vKvn
5nPV0pbLMkmq6RWlLkNBXXGlDuI03TbTFGNq4QtamM7CnEsotHItzrPZwgUkU42u
fcSK3iSH7zzW9AbcsU1AJ+glJldHf7IoeGoZ3ZieoTg/w5j498D4KkQDOPucArSt
EtE6a1+WppJf4io+aEzmIdZiMksW18wUpbWlTnWZS/NQaLek58XD3kpFqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBtq+cZKrng4ZPS1D76sVAm2OBTgMB8GA1UdIwQY
MBaAFFcGAQa0FnkrKi6afrQCojhXAWi9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVndZQkJyUVdlU3NxTHBwLXRBS2lPRmNCYUwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MS83OTkyNzgtNmYzNS00YzNhLTk3ZDAt
OWJmY2ZkZDc5NjliLzEvVndZQkJyUVdlU3NxTHBwLXRBS2lPRmNCYUwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MS83OTkyNzgtNmYzNS00YzNhLTk3ZDAtOWJmY2ZkZDc5Njli
LzEvVndZQkJyUVdlU3NxTHBwLXRBS2lPRmNCYUwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyuSQ5NLy
6SCrAbZtpglMUT5SxIgifr1N09iF2h0YbvSDudFCtCqCLG0k1uStScuTs2C3ybRP
Czr/dLcrz69zv5L/13yy9yohOuqxs81iTfKcb1FaA4GjubAkgfuEa/7RQb84VOa9
09Aufzh2MoUG6JIskoUFyM2z6U1Yr2ZuZkExHdefuGou6CXuIA27m6ACB50itVo1
SrgbEfvHGM0Dc42U2PJXQpGefhlggzpm1wu96QcubLpKpc4ScFSxdOHOUVWE4E2J
1+lNJf843t/XWrDfJWB3BcyFBmu2utrTwmrB8/qamyBizuWZRDf1reFgRdAJqqlj
kSxhqhXWja7BkA==
-----END CERTIFICATE-----
Generated at Fri Aug 8 19:23:36 2025 by rpki-client