Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
File: VHdrhI_CS9SRduL0-cR0MkrycLU.mft (raw, json)
Hash identifier: AOrNzyaeqqUpHhqfuBHdR32CR1Nr04AAuEX71SdsPuE=
Subject key identifier: A3:3A:22:97:E3:24:7C:76:27:71:37:B3:76:DC:70:2C:E2:5F:3B:BF
Authority key identifier: 54:77:6B:84:8F:C2:4B:D4:91:76:E2:F4:F9:C4:74:32:4A:F2:70:B5
Certificate issuer: /CN=54776b848fc24bd49176e2f4f9c474324af270b5
Certificate serial: 019879AD5098F24CD2A4697D912EE8BEB92F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
Manifest number: 1617
Signing time: Tue 05 Aug 2025 10:00:57 +0000
Manifest this update: Tue 05 Aug 2025 10:00:57 +0000
Manifest next update: Wed 06 Aug 2025 10:00:57 +0000
Files and hashes: 1: VHdrhI_CS9SRduL0-cR0MkrycLU.crl (hash: NC4O2YylSUsUEW124WA8vi7cFoLkd7betFFkTB9oLNs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 06 Aug 2025 10:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:79:ad:50:98:f2:4c:d2:a4:69:7d:91:2e:e8:be:b9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54776b848fc24bd49176e2f4f9c474324af270b5
Validity
Not Before: Aug 5 10:00:57 2025 GMT
Not After : Aug 6 10:00:57 2025 GMT
Subject: CN=a33a2297e3247c76277137b376dc702ce25f3bbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:c0:88:d6:0d:f5:ab:b5:83:d6:d3:fa:da:e1:
7b:ab:3f:10:d6:d7:4c:61:7e:cf:22:d3:e0:56:44:
71:27:35:1d:c7:cb:12:a9:b2:13:64:14:48:27:61:
75:5f:9c:41:51:26:4d:39:ca:34:39:39:9d:91:18:
e4:1c:d9:7b:58:ab:29:03:9f:f2:9e:07:f5:84:7c:
11:42:c2:86:1e:c7:db:7e:bb:c5:b5:c9:46:af:14:
67:27:fc:53:be:8b:97:c5:42:02:ac:35:d0:72:69:
7c:f0:c9:88:ab:01:51:b2:4a:61:cd:85:4a:be:36:
f7:3c:f4:60:a1:36:05:9f:fa:a5:45:c4:b3:8e:98:
1a:45:a1:28:0d:49:74:ae:07:7f:49:b6:f6:8b:93:
54:86:c4:60:6f:3e:f2:63:47:ba:a1:80:6a:7a:9b:
7c:42:d8:9f:24:13:ab:11:d3:be:4d:8a:ef:6e:b8:
fe:1d:f5:33:21:5d:e6:0f:06:83:8a:78:c1:e0:23:
32:2a:89:c2:3e:5f:98:e3:36:04:64:d5:28:2a:69:
65:6d:3f:4a:6d:a7:f4:18:68:77:8e:93:cd:fb:9f:
bf:1a:ab:e2:95:e1:08:e5:8d:a6:77:b8:24:31:8e:
7e:03:7f:c3:e2:9c:63:1a:fa:a6:41:02:8b:f2:7f:
11:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A3:3A:22:97:E3:24:7C:76:27:71:37:B3:76:DC:70:2C:E2:5F:3B:BF
X509v3 Authority Key Identifier:
keyid:54:77:6B:84:8F:C2:4B:D4:91:76:E2:F4:F9:C4:74:32:4A:F2:70:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VHdrhI_CS9SRduL0-cR0MkrycLU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/ba8e58-ed60-4a7c-9891-63f2450befee/1/VHdrhI_CS9SRduL0-cR0MkrycLU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:fb:aa:59:aa:b0:4d:7a:b8:71:01:17:5d:a8:d7:82:f1:d2:
77:f4:bf:5a:4a:e7:7d:d2:9a:42:82:f7:df:a3:b7:05:db:be:
a8:82:c2:12:26:68:29:d5:de:87:b3:f2:01:1a:3b:ef:09:55:
63:2d:e1:2d:75:58:36:62:0f:67:6c:7e:df:11:d5:3a:80:d1:
86:b1:cb:62:be:d8:a8:57:d9:c9:ce:4e:f9:4f:bf:bc:86:b6:
3d:3d:0f:4f:43:a8:60:ca:dc:77:52:88:4f:a4:da:57:98:ae:
93:1e:31:83:24:bf:0c:5f:50:01:07:a2:0f:fe:c1:a6:62:8b:
12:e4:be:44:d9:ce:81:a2:8c:cd:02:83:25:ea:17:b8:c7:0d:
a5:62:5e:35:59:c6:b8:ca:58:c3:91:84:b7:0c:e5:fd:44:e4:
72:90:01:71:cb:c8:df:d8:2a:05:4c:85:1a:50:f2:fd:e1:dc:
03:ea:22:80:c3:bc:d4:36:09:32:96:70:77:ff:37:99:52:65:
c0:40:5a:84:06:e4:cc:9a:f9:13:d4:de:d8:2a:ff:f7:9b:f5:
24:86:d1:b2:89:4d:a7:37:19:07:06:10:f5:06:82:d4:76:ff:
3e:93:37:35:f0:77:6c:8f:9b:e6:67:af:45:0d:3a:0e:be:d6:
f7:46:76:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh5rVCY8kzSpGl9kS7ovrkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0Nzc2Yjg0OGZjMjRiZDQ5MTc2ZTJmNGY5YzQ3NDMyNGFm
MjcwYjUwHhcNMjUwODA1MTAwMDU3WhcNMjUwODA2MTAwMDU3WjAzMTEwLwYDVQQD
EyhhMzNhMjI5N2UzMjQ3Yzc2Mjc3MTM3YjM3NmRjNzAyY2UyNWYzYmJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvMCI1g31q7WD1tP62uF7qz8Q1tdM
YX7PItPgVkRxJzUdx8sSqbITZBRIJ2F1X5xBUSZNOco0OTmdkRjkHNl7WKspA5/y
ngf1hHwRQsKGHsfbfrvFtclGrxRnJ/xTvouXxUICrDXQcml88MmIqwFRskphzYVK
vjb3PPRgoTYFn/qlRcSzjpgaRaEoDUl0rgd/Sbb2i5NUhsRgbz7yY0e6oYBqept8
QtifJBOrEdO+TYrvbrj+HfUzIV3mDwaDinjB4CMyKonCPl+Y4zYEZNUoKmllbT9K
baf0GGh3jpPN+5+/GqvileEI5Y2md7gkMY5+A3/D4pxjGvqmQQKL8n8RIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKM6IpfjJHx2J3E3s3bccCziXzu/MB8GA1UdIwQY
MBaAFFR3a4SPwkvUkXbi9PnEdDJK8nC1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkhkcmhJX0NTOVNSZHVMMC1jUjBNa3J5Y0xVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS9iYThlNTgtZWQ2MC00YTdjLTk4OTEt
NjNmMjQ1MGJlZmVlLzEvVkhkcmhJX0NTOVNSZHVMMC1jUjBNa3J5Y0xVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS9iYThlNTgtZWQ2MC00YTdjLTk4OTEtNjNmMjQ1MGJlZmVl
LzEvVkhkcmhJX0NTOVNSZHVMMC1jUjBNa3J5Y0xVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADvuqWaqw
TXq4cQEXXajXgvHSd/S/WkrnfdKaQoL336O3Bdu+qILCEiZoKdXeh7PyARo77wlV
Yy3hLXVYNmIPZ2x+3xHVOoDRhrHLYr7YqFfZyc5O+U+/vIa2PT0PT0OoYMrcd1KI
T6TaV5iukx4xgyS/DF9QAQeiD/7BpmKLEuS+RNnOgaKMzQKDJeoXuMcNpWJeNVnG
uMpYw5GEtwzl/UTkcpABccvI39gqBUyFGlDy/eHcA+oigMO81DYJMpZwd/83mVJl
wEBahAbkzJr5E9Te2Cr/95v1JIbRsolNpzcZBwYQ9QaC1Hb/PpM3NfB3bI+b5mev
RQ06Dr7W90Z2Xw==
-----END CERTIFICATE-----
Generated at Tue Aug 5 17:14:24 2025 by rpki-client