Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
File: bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft (raw, json)
Hash identifier: k9Ff4zCItpToamDRbFuKlqAT51MuS335LqrYYzI6RGw=
Subject key identifier: ED:85:0F:F3:81:4D:08:B0:99:51:3E:21:00:5B:FE:69:04:8C:7C:EB
Authority key identifier: 6D:F5:67:EC:F8:65:48:06:00:98:F5:AD:67:A1:B2:BF:FF:1B:4B:51
Certificate issuer: /CN=6df567ecf86548060098f5ad67a1b2bfff1b4b51
Certificate serial: 019893A3E1797FAF3047A59A596E505447E8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
Manifest number: 0891
Signing time: Sun 10 Aug 2025 11:00:47 +0000
Manifest this update: Sun 10 Aug 2025 11:00:47 +0000
Manifest next update: Mon 11 Aug 2025 11:00:47 +0000
Files and hashes: 1: bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.crl (hash: K6GxbmGmZi7LQy2DUDjwxwWV55ooWJi8RiKorFFlW8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
rsync://rpki.ripe.net/repository/DEFAULT/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:93:a3:e1:79:7f:af:30:47:a5:9a:59:6e:50:54:47:e8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6df567ecf86548060098f5ad67a1b2bfff1b4b51
Validity
Not Before: Aug 10 11:00:47 2025 GMT
Not After : Aug 11 11:00:47 2025 GMT
Subject: CN=ed850ff3814d08b099513e21005bfe69048c7ceb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:86:33:f5:49:4d:c0:01:18:50:d4:e9:15:bf:
ee:38:9f:a5:41:a8:16:a8:27:f4:d1:ee:eb:17:2e:
1b:64:97:29:17:94:5b:51:7b:c8:3a:33:c9:29:65:
1a:22:82:eb:d7:98:84:38:19:c8:a9:37:96:a5:76:
41:41:04:df:20:a7:49:ac:52:b1:60:5d:50:60:50:
43:72:1e:32:96:94:4a:4c:d8:26:42:ff:4b:36:ab:
5c:38:9f:51:da:11:6d:d1:78:59:39:ab:47:bd:9a:
b6:92:6a:00:cf:67:e9:2a:f8:9a:14:19:53:37:ff:
79:84:d6:00:37:27:e8:8f:09:e1:f8:ec:3c:c5:70:
2a:ae:7a:4e:a4:9c:21:a7:3c:7e:52:f0:81:6f:9a:
0c:85:9d:d7:fe:4a:2a:87:ee:7f:f9:5f:34:ad:66:
e9:0a:71:a0:1a:e5:cd:69:3b:e5:4a:c0:f9:6d:03:
9e:2a:23:e9:d7:5d:f6:d0:a4:bc:8a:08:2b:bf:05:
5b:d4:f7:21:9f:d0:a2:3f:d9:f9:d6:56:78:38:92:
92:45:82:66:1c:dc:d2:bc:61:c1:c9:2c:d9:70:eb:
43:99:9e:51:61:6a:84:41:00:12:01:02:54:42:e5:
c4:12:43:f5:90:7c:fa:95:1f:7e:0f:03:f1:22:d1:
f5:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:85:0F:F3:81:4D:08:B0:99:51:3E:21:00:5B:FE:69:04:8C:7C:EB
X509v3 Authority Key Identifier:
keyid:6D:F5:67:EC:F8:65:48:06:00:98:F5:AD:67:A1:B2:BF:FF:1B:4B:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/761b4c-8915-4319-913e-0ca8feba9585/1/bfVn7PhlSAYAmPWtZ6Gyv_8bS1E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:01:2b:22:42:58:2a:0a:3d:b7:4a:ee:8d:5f:4b:97:43:20:
1d:6d:bd:7d:35:ee:d3:50:e2:42:db:be:58:e9:ab:e0:5a:9e:
45:72:ee:ea:7b:5f:27:67:54:82:ec:3c:84:11:07:ee:39:44:
b7:53:7f:90:76:c3:63:7b:ac:65:7c:63:cc:d3:2c:15:88:e0:
0a:89:93:e6:1c:c5:b3:94:3a:9d:21:e5:ed:74:cb:a4:ce:4b:
0a:26:b9:1f:2c:53:80:88:5f:a5:34:d9:70:88:1a:9d:8c:f7:
fd:06:9f:d1:b6:08:ec:e3:af:45:2f:99:c9:36:77:cf:90:0a:
38:ec:33:20:aa:ee:e9:e4:f1:82:b6:89:a7:a1:94:ce:19:87:
bd:7d:d6:de:54:95:f3:a3:19:ab:75:51:71:b1:96:d9:4a:d8:
ab:f8:17:72:bb:6a:c0:32:f6:4c:c0:0d:98:7e:b9:95:a6:74:
a1:f2:0c:d0:47:c1:32:43:e6:20:13:4b:71:db:92:b5:eb:f5:
7f:b5:11:99:d4:ed:88:c9:40:4e:22:36:58:16:88:fd:e9:5b:
da:c3:c8:f7:52:fc:62:81:83:c4:75:75:bd:26:44:ab:aa:ba:
11:8d:f5:e7:14:f0:84:98:8c:87:6c:78:16:eb:0f:5f:0f:a7:
4c:8d:0e:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiTo+F5f68wR6WaWW5QVEfoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkZjU2N2VjZjg2NTQ4MDYwMDk4ZjVhZDY3YTFiMmJmZmYx
YjRiNTEwHhcNMjUwODEwMTEwMDQ3WhcNMjUwODExMTEwMDQ3WjAzMTEwLwYDVQQD
EyhlZDg1MGZmMzgxNGQwOGIwOTk1MTNlMjEwMDViZmU2OTA0OGM3Y2ViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqIYz9UlNwAEYUNTpFb/uOJ+lQagW
qCf00e7rFy4bZJcpF5RbUXvIOjPJKWUaIoLr15iEOBnIqTeWpXZBQQTfIKdJrFKx
YF1QYFBDch4ylpRKTNgmQv9LNqtcOJ9R2hFt0XhZOatHvZq2kmoAz2fpKviaFBlT
N/95hNYANyfojwnh+Ow8xXAqrnpOpJwhpzx+UvCBb5oMhZ3X/koqh+5/+V80rWbp
CnGgGuXNaTvlSsD5bQOeKiPp11320KS8iggrvwVb1Pchn9CiP9n51lZ4OJKSRYJm
HNzSvGHBySzZcOtDmZ5RYWqEQQASAQJUQuXEEkP1kHz6lR9+DwPxItH1bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO2FD/OBTQiwmVE+IQBb/mkEjHzrMB8GA1UdIwQY
MBaAFG31Z+z4ZUgGAJj1rWehsr//G0tRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYmZWbjdQaGxTQVlBbVBXdFo2R3l2XzhiUzFFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS83NjFiNGMtODkxNS00MzE5LTkxM2Ut
MGNhOGZlYmE5NTg1LzEvYmZWbjdQaGxTQVlBbVBXdFo2R3l2XzhiUzFFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS83NjFiNGMtODkxNS00MzE5LTkxM2UtMGNhOGZlYmE5NTg1
LzEvYmZWbjdQaGxTQVlBbVBXdFo2R3l2XzhiUzFFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAAErIkJY
Kgo9t0rujV9Ll0MgHW29fTXu01DiQtu+WOmr4FqeRXLu6ntfJ2dUguw8hBEH7jlE
t1N/kHbDY3usZXxjzNMsFYjgComT5hzFs5Q6nSHl7XTLpM5LCia5HyxTgIhfpTTZ
cIganYz3/Qaf0bYI7OOvRS+ZyTZ3z5AKOOwzIKru6eTxgraJp6GUzhmHvX3W3lSV
86MZq3VRcbGW2UrYq/gXcrtqwDL2TMANmH65laZ0ofIM0EfBMkPmIBNLcduStev1
f7URmdTtiMlATiI2WBaI/elb2sPI91L8YoGDxHV1vSZEq6q6EY315xTwhJiMh2x4
FusPXw+nTI0OXQ==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:45:32 2025 by rpki-client