Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
File: vDImMeLrfqv7XttPywq4yZaCPEg.mft (raw, json)
Hash identifier: XC1FwhGuO0B5iokLtzIprh65tvU7bvY1E9sw83tmMzs=
Subject key identifier: 4F:0A:65:D4:E7:5A:47:B7:84:7F:01:80:EA:AD:81:80:7C:FA:14:CA
Authority key identifier: BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
Certificate issuer: /CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Certificate serial: 01976F2C305C15ABD4A9442171434B4E348D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
Manifest number: 05F3
Signing time: Sat 14 Jun 2025 16:00:56 +0000
Manifest this update: Sat 14 Jun 2025 16:00:56 +0000
Manifest next update: Sun 15 Jun 2025 16:00:56 +0000
Files and hashes: 1: vDImMeLrfqv7XttPywq4yZaCPEg.crl (hash: 5X4XD8yXKpSv76/QCy+a3bh7swei7pcnW3441u2t//0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 16:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2c:30:5c:15:ab:d4:a9:44:21:71:43:4b:4e:34:8d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc322631e2eb7eabfb5edb4fcb0ab8c996823c48
Validity
Not Before: Jun 14 16:00:56 2025 GMT
Not After : Jun 15 16:00:56 2025 GMT
Subject: CN=4f0a65d4e75a47b7847f0180eaad81807cfa14ca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:f3:dd:fd:ac:af:e3:9e:dc:06:52:23:a0:98:
50:f7:b0:51:ef:42:16:58:2d:dc:db:64:06:19:3a:
de:a6:ef:53:7e:c7:e6:3a:3d:48:b2:83:cf:7f:b3:
f1:fa:e8:22:25:9d:96:f2:5e:32:8f:54:dc:64:30:
46:0e:fc:cf:14:8d:0d:88:0a:56:d7:85:52:c6:af:
9b:16:1e:8c:36:36:55:2d:0a:55:c1:12:c8:9d:98:
b6:2a:f5:1c:e2:cf:4c:ab:f2:0f:c6:d7:a4:2a:1a:
18:ab:f5:f5:86:99:f4:9e:df:a1:47:c3:93:f4:70:
eb:68:33:03:c9:f6:0b:34:80:a5:b6:e4:d3:c6:22:
63:4b:06:95:26:29:07:f3:65:7d:57:8e:d5:be:4d:
64:04:43:34:f4:7b:fc:0b:c1:f8:e4:08:f5:ea:6b:
51:ee:da:c7:7d:6d:6f:cd:5a:3e:aa:d2:ea:be:29:
59:c6:57:71:b7:5c:f0:ab:76:33:61:0d:df:86:94:
dc:c9:16:0b:20:b2:83:a2:5a:e3:35:da:71:fb:a2:
16:67:57:9e:32:19:89:fa:70:13:4f:18:7f:f4:1d:
e9:54:47:99:d1:8b:5a:41:d0:6a:cc:14:3d:7f:6b:
22:38:de:ee:b7:1a:aa:61:df:80:a4:de:e2:ef:c4:
78:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:0A:65:D4:E7:5A:47:B7:84:7F:01:80:EA:AD:81:80:7C:FA:14:CA
X509v3 Authority Key Identifier:
keyid:BC:32:26:31:E2:EB:7E:AB:FB:5E:DB:4F:CB:0A:B8:C9:96:82:3C:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vDImMeLrfqv7XttPywq4yZaCPEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/3086b8-71f3-4a8d-9451-29edfab39f49/1/vDImMeLrfqv7XttPywq4yZaCPEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:0f:36:5c:8c:4c:b3:58:83:c0:48:0f:51:cd:db:97:a8:ee:
44:bc:d3:f0:68:12:0b:89:0a:89:a6:2e:df:b0:40:f7:a9:7c:
39:44:c4:71:54:2d:a1:83:0d:09:bf:78:81:77:59:99:00:70:
ab:b1:5a:7c:d7:94:fa:1d:4b:6c:db:ea:db:de:bc:a7:99:f4:
90:a5:ec:e8:4a:4d:37:54:70:a0:6c:90:5b:3d:d0:3c:c1:17:
36:81:85:68:ba:1f:ae:be:bd:90:cf:c6:39:c7:ea:cf:22:49:
e3:82:e5:7b:2c:3b:09:7d:2b:f4:c7:78:85:4c:78:65:e4:f9:
8e:ea:7a:83:1c:9a:6b:d9:3c:61:ac:c2:9b:81:5a:c9:f5:5f:
d4:75:b1:af:9c:76:cc:41:a3:5a:d4:3b:d3:95:ed:19:ce:dd:
99:ef:07:d6:81:9e:32:cd:e3:62:9f:68:a2:42:0c:dc:04:7d:
c9:4e:28:e1:31:a6:ef:e5:74:5e:51:47:c1:27:e2:d8:6e:b4:
82:7a:68:c4:f4:93:5c:e7:b0:61:7e:e7:ab:65:5f:a0:72:57:
aa:42:af:e9:41:0c:9b:a6:fa:96:ae:a9:49:7c:65:76:40:38:
56:40:56:0c:6f:c9:71:06:44:48:6a:8e:e4:fd:ff:4e:e0:bb:
71:32:8d:19
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvLDBcFavUqUQhcUNLTjSNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMzIyNjMxZTJlYjdlYWJmYjVlZGI0ZmNiMGFiOGM5OTY4
MjNjNDgwHhcNMjUwNjE0MTYwMDU2WhcNMjUwNjE1MTYwMDU2WjAzMTEwLwYDVQQD
Eyg0ZjBhNjVkNGU3NWE0N2I3ODQ3ZjAxODBlYWFkODE4MDdjZmExNGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn/Pd/ayv457cBlIjoJhQ97BR70IW
WC3c22QGGTrepu9TfsfmOj1IsoPPf7Px+ugiJZ2W8l4yj1TcZDBGDvzPFI0NiApW
14VSxq+bFh6MNjZVLQpVwRLInZi2KvUc4s9Mq/IPxtekKhoYq/X1hpn0nt+hR8OT
9HDraDMDyfYLNICltuTTxiJjSwaVJikH82V9V47Vvk1kBEM09Hv8C8H45Aj16mtR
7trHfW1vzVo+qtLqvilZxldxt1zwq3YzYQ3fhpTcyRYLILKDolrjNdpx+6IWZ1ee
MhmJ+nATTxh/9B3pVEeZ0YtaQdBqzBQ9f2siON7utxqqYd+ApN7i78R4uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE8KZdTnWke3hH8BgOqtgYB8+hTKMB8GA1UdIwQY
MBaAFLwyJjHi636r+17bT8sKuMmWgjxIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkRJbU1lTHJmcXY3WHR0UHl3cTR5WmFDUEVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS8zMDg2YjgtNzFmMy00YThkLTk0NTEt
MjllZGZhYjM5ZjQ5LzEvdkRJbU1lTHJmcXY3WHR0UHl3cTR5WmFDUEVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS8zMDg2YjgtNzFmMy00YThkLTk0NTEtMjllZGZhYjM5ZjQ5
LzEvdkRJbU1lTHJmcXY3WHR0UHl3cTR5WmFDUEVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOA82XIxM
s1iDwEgPUc3bl6juRLzT8GgSC4kKiaYu37BA96l8OUTEcVQtoYMNCb94gXdZmQBw
q7FafNeU+h1LbNvq2968p5n0kKXs6EpNN1RwoGyQWz3QPMEXNoGFaLofrr69kM/G
OcfqzyJJ44Lleyw7CX0r9Md4hUx4ZeT5jup6gxyaa9k8YazCm4FayfVf1HWxr5x2
zEGjWtQ705XtGc7dme8H1oGeMs3jYp9ookIM3AR9yU4o4TGm7+V0XlFHwSfi2G60
gnpoxPSTXOewYX7nq2VfoHJXqkKv6UEMm6b6lq6pSXxldkA4VkBWDG/JcQZESGqO
5P3/TuC7cTKNGQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 00:05:44 2025 by rpki-client