Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
File: v_h00BVAcOlio8hxmCH9ucsQFuE.mft (raw, json)
Hash identifier: gYTm2X7MlKr58cdbKJBjpxbHg3TvF/WAfUz9qbjt0lw=
Subject key identifier: CE:1D:FD:9C:3B:3C:D6:86:CF:32:28:A5:D1:41:DA:3B:BA:F2:93:FA
Authority key identifier: BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
Certificate issuer: /CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Certificate serial: 019874506AAA336D39139375A22E6DDED47E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
Manifest number: 1336
Signing time: Mon 04 Aug 2025 09:01:23 +0000
Manifest this update: Mon 04 Aug 2025 09:01:23 +0000
Manifest next update: Tue 05 Aug 2025 09:01:23 +0000
Files and hashes: 1: v_h00BVAcOlio8hxmCH9ucsQFuE.crl (hash: W5fNGPkWmKuDKyeS8H/Z+zUCRlGH/ksjwDm3wjbLVkY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:74:50:6a:aa:33:6d:39:13:93:75:a2:2e:6d:de:d4:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bff874d0154070e962a3c8719821fdb9cb1016e1
Validity
Not Before: Aug 4 09:01:23 2025 GMT
Not After : Aug 5 09:01:23 2025 GMT
Subject: CN=ce1dfd9c3b3cd686cf3228a5d141da3bbaf293fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f0:17:cf:e6:2e:b4:3f:d9:fe:46:ed:f0:04:6c:
ef:4d:48:15:fb:d3:4f:81:1e:ce:7a:75:80:fd:e6:
b5:48:02:b3:7f:03:65:9b:53:ca:f9:e4:8b:5e:f7:
81:7f:bf:a6:f2:89:f8:82:6c:3a:29:9b:43:3e:eb:
7b:9e:7a:29:f8:78:4b:80:9c:2a:38:46:6d:3d:72:
ef:22:ed:c1:55:b9:51:7a:fe:f1:e5:e9:4c:a7:c6:
f9:5d:de:55:c3:c0:51:b7:6f:6f:e6:4d:be:64:d9:
c6:2c:5b:36:4f:8f:35:3e:73:6f:72:06:f9:0f:cd:
1a:bf:48:2a:78:e9:3a:6c:ea:5b:3b:89:bf:9c:a6:
fa:d1:f5:93:15:0a:00:4f:33:86:f7:f3:a3:ca:45:
50:79:20:36:76:d8:1c:75:e5:11:ec:83:f7:e4:44:
13:27:5c:ea:df:b7:4c:27:ff:01:08:81:63:f4:6f:
ac:0d:4e:32:8b:3e:77:78:48:70:7c:62:02:82:8a:
33:b6:6c:91:21:c6:84:3a:86:ab:9e:a9:31:4f:e0:
6b:48:d1:1a:20:43:c8:78:b0:40:b9:50:d8:31:ec:
d7:f5:5a:3d:9f:56:05:0a:f5:36:f9:8c:7c:93:c9:
e1:f7:28:76:0f:b6:fb:f8:fe:89:50:e2:e3:e5:dd:
aa:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CE:1D:FD:9C:3B:3C:D6:86:CF:32:28:A5:D1:41:DA:3B:BA:F2:93:FA
X509v3 Authority Key Identifier:
keyid:BF:F8:74:D0:15:40:70:E9:62:A3:C8:71:98:21:FD:B9:CB:10:16:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v_h00BVAcOlio8hxmCH9ucsQFuE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/d5bc61-6a99-4c4e-84c4-9b21f334d028/1/v_h00BVAcOlio8hxmCH9ucsQFuE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:f3:0e:41:02:d2:9e:91:49:a0:4a:93:7a:47:5b:b3:1e:1d:
54:25:7a:f5:d5:00:f6:d9:a8:45:f8:5b:ac:66:2a:fd:7b:be:
05:b4:5a:09:55:b9:fb:5d:1c:c4:aa:84:fd:33:52:1d:35:6d:
8d:f1:7e:a0:85:89:04:a0:a2:e7:9b:f2:e8:84:1b:d5:f4:93:
d1:fd:44:a4:73:f1:34:c4:31:e0:b7:56:2e:42:32:ae:99:89:
32:39:3c:a6:1b:8e:d6:8b:6e:83:bd:87:ee:61:fb:bf:a2:3f:
2d:a9:0a:28:63:38:65:8c:6f:39:dc:9c:19:7c:d0:92:f7:a7:
88:15:21:41:82:2c:55:32:70:bd:03:29:cf:82:8a:11:00:46:
ae:1b:02:3e:29:dc:c4:7e:6b:23:4d:58:9e:dd:4f:9e:48:eb:
d0:c8:a1:d8:44:26:ee:79:5d:28:54:ea:a1:e9:fd:03:54:54:
f0:f7:93:20:6d:34:23:b4:e3:5c:1a:5c:40:37:6c:b4:78:bb:
7c:36:09:80:5b:6c:30:74:6a:fe:86:55:41:69:85:e2:46:38:
f9:55:40:79:95:6c:83:95:fb:bb:c8:41:66:6e:5e:b5:c1:42:
a4:cf:b1:51:9e:66:a5:29:fc:f0:b4:3b:75:5a:96:8d:ae:bf:
4e:2e:22:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZh0UGqqM205E5N1oi5t3tR+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmZjg3NGQwMTU0MDcwZTk2MmEzYzg3MTk4MjFmZGI5Y2Ix
MDE2ZTEwHhcNMjUwODA0MDkwMTIzWhcNMjUwODA1MDkwMTIzWjAzMTEwLwYDVQQD
EyhjZTFkZmQ5YzNiM2NkNjg2Y2YzMjI4YTVkMTQxZGEzYmJhZjI5M2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8BfP5i60P9n+Ru3wBGzvTUgV+9NP
gR7OenWA/ea1SAKzfwNlm1PK+eSLXveBf7+m8on4gmw6KZtDPut7nnop+HhLgJwq
OEZtPXLvIu3BVblRev7x5elMp8b5Xd5Vw8BRt29v5k2+ZNnGLFs2T481PnNvcgb5
D80av0gqeOk6bOpbO4m/nKb60fWTFQoATzOG9/OjykVQeSA2dtgcdeUR7IP35EQT
J1zq37dMJ/8BCIFj9G+sDU4yiz53eEhwfGICgooztmyRIcaEOoarnqkxT+BrSNEa
IEPIeLBAuVDYMezX9Vo9n1YFCvU2+Yx8k8nh9yh2D7b7+P6JUOLj5d2qawIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM4d/Zw7PNaGzzIopdFB2ju68pP6MB8GA1UdIwQY
MBaAFL/4dNAVQHDpYqPIcZgh/bnLEBbhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdl9oMDBCVkFjT2xpbzhoeG1DSDl1Y3NRRnVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9kNWJjNjEtNmE5OS00YzRlLTg0YzQt
OWIyMWYzMzRkMDI4LzEvdl9oMDBCVkFjT2xpbzhoeG1DSDl1Y3NRRnVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9kNWJjNjEtNmE5OS00YzRlLTg0YzQtOWIyMWYzMzRkMDI4
LzEvdl9oMDBCVkFjT2xpbzhoeG1DSDl1Y3NRRnVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbvMOQQLS
npFJoEqTekdbsx4dVCV69dUA9tmoRfhbrGYq/Xu+BbRaCVW5+10cxKqE/TNSHTVt
jfF+oIWJBKCi55vy6IQb1fST0f1EpHPxNMQx4LdWLkIyrpmJMjk8phuO1otug72H
7mH7v6I/LakKKGM4ZYxvOdycGXzQkveniBUhQYIsVTJwvQMpz4KKEQBGrhsCPinc
xH5rI01Ynt1Pnkjr0Mih2EQm7nldKFTqoen9A1RU8PeTIG00I7TjXBpcQDdstHi7
fDYJgFtsMHRq/oZVQWmF4kY4+VVAeZVsg5X7u8hBZm5etcFCpM+xUZ5mpSn88LQ7
dVqWja6/Ti4iEg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:07:53 2025 by rpki-client