Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
File: vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft (raw, json)
Hash identifier: gs7P732fDO0BQ7ZpQJumiBKPTzsENSadthy+mY7lHhM=
Subject key identifier: 58:CA:D4:B8:CB:13:AA:61:0E:BA:02:F8:01:49:2C:52:F0:29:82:34
Authority key identifier: BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
Certificate issuer: /CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Certificate serial: 019895249D4844553644D583CC8133077FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
Manifest number: 0219
Signing time: Sun 10 Aug 2025 18:01:01 +0000
Manifest this update: Sun 10 Aug 2025 18:01:01 +0000
Manifest next update: Mon 11 Aug 2025 18:01:01 +0000
Files and hashes: 1: vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl (hash: nMO+TOu7j1FrFeJId7hj4oBJazOXxeV3fDCa0TSMH4A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 18:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:95:24:9d:48:44:55:36:44:d5:83:cc:81:33:07:7f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Validity
Not Before: Aug 10 18:01:01 2025 GMT
Not After : Aug 11 18:01:01 2025 GMT
Subject: CN=58cad4b8cb13aa610eba02f801492c52f0298234
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:19:68:89:9a:45:1c:63:f7:48:7c:0a:fd:a1:
ca:2e:7b:0b:e2:ef:76:da:93:af:9a:b2:99:6e:48:
6f:2b:dd:c2:aa:87:a7:7d:62:54:6c:9d:8e:77:9b:
3d:aa:30:5c:7d:95:d6:a5:ec:d2:a4:57:23:6a:13:
af:28:a0:64:8b:cf:ab:9b:6c:fe:7f:dc:f9:e0:96:
8c:29:94:2c:a6:cf:63:3b:6f:04:99:c7:1e:b3:ac:
09:e4:36:f0:d8:71:af:77:a4:f4:b0:e1:96:d4:b4:
41:55:75:0e:96:ee:e0:e0:54:c7:33:a1:e2:d0:53:
2b:f3:93:66:bb:35:50:91:73:a4:39:bf:de:3c:49:
be:0f:dd:77:38:85:a8:de:9b:e3:4e:f2:0b:e3:4e:
cb:a6:8a:88:c8:98:99:8c:1c:f9:6c:8f:5a:45:b7:
1f:4d:b3:6b:b4:3e:3f:72:97:8a:4c:19:61:eb:06:
ad:c8:bd:37:91:46:5d:90:6c:55:7a:c0:dd:f7:4f:
29:a0:c0:27:81:ba:d7:eb:2b:ac:d4:9d:64:48:a3:
a8:2b:8d:63:51:29:71:06:a6:03:39:13:7a:eb:cb:
e8:6a:4a:1a:5c:b6:d9:d3:48:79:44:5e:db:b4:b0:
d5:99:24:1e:3d:65:a1:ef:6f:d9:33:0c:14:a1:59:
d4:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:CA:D4:B8:CB:13:AA:61:0E:BA:02:F8:01:49:2C:52:F0:29:82:34
X509v3 Authority Key Identifier:
keyid:BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8d:ca:a8:d7:b6:0d:8f:fe:94:1b:44:de:ad:98:91:3d:79:d4:
ad:12:09:06:41:5b:62:18:ef:1d:4f:ba:d4:84:82:01:ab:60:
71:c5:40:1c:9f:30:c3:43:15:8f:9b:15:e1:83:55:c7:5b:cd:
56:47:59:14:ba:e4:f5:ad:5b:aa:15:a9:f5:38:2e:6a:57:c5:
32:cf:c9:5b:2b:00:34:9e:57:2d:99:aa:23:39:cf:c5:ba:ea:
72:65:58:85:c9:65:07:c1:8d:1b:8d:78:7a:76:fd:67:ff:73:
fb:82:49:07:a6:77:f4:9f:17:d8:b2:b3:48:87:19:4a:ea:eb:
32:94:c7:b2:4c:5d:65:0b:ea:dc:09:fc:b1:b8:fc:e0:3d:ce:
84:3a:da:97:6a:0e:12:93:a4:3e:ba:b0:fe:34:a0:20:94:8a:
bd:3c:b8:c5:a5:67:d3:c1:58:b6:0b:ee:01:21:ec:af:14:b7:
2c:1b:77:79:7a:17:11:b0:f9:e7:75:eb:a4:d3:d7:ea:8c:08:
25:80:b5:88:a8:f1:4c:be:ea:cf:a6:0d:49:0b:b9:5a:da:18:
d0:c4:b9:b6:95:93:23:25:36:0a:c4:65:b4:f5:ab:f5:12:4f:
7d:2b:dd:a3:97:40:be:26:6c:f8:78:17:fd:43:76:e1:f4:e1:
9a:db:1e:11
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiVJJ1IRFU2RNWDzIEzB3/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkN2U3NTdkMDQzYWQzMTdmMmQ0MDQzYTczY2M1ZmFmOTc0
MzQ2MGUwHhcNMjUwODEwMTgwMTAxWhcNMjUwODExMTgwMTAxWjAzMTEwLwYDVQQD
Eyg1OGNhZDRiOGNiMTNhYTYxMGViYTAyZjgwMTQ5MmM1MmYwMjk4MjM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnRloiZpFHGP3SHwK/aHKLnsL4u92
2pOvmrKZbkhvK93CqoenfWJUbJ2Od5s9qjBcfZXWpezSpFcjahOvKKBki8+rm2z+
f9z54JaMKZQsps9jO28Emcces6wJ5Dbw2HGvd6T0sOGW1LRBVXUOlu7g4FTHM6Hi
0FMr85NmuzVQkXOkOb/ePEm+D913OIWo3pvjTvIL407LpoqIyJiZjBz5bI9aRbcf
TbNrtD4/cpeKTBlh6watyL03kUZdkGxVesDd908poMAngbrX6yus1J1kSKOoK41j
USlxBqYDORN668voakoaXLbZ00h5RF7btLDVmSQePWWh72/ZMwwUoVnUOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFjK1LjLE6phDroC+AFJLFLwKYI0MB8GA1UdIwQY
MBaAFL1+dX0EOtMX8tQEOnPMX6+XQ0YOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlg1MWZRUTYweGZ5MUFRNmM4eGZyNWREUmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80NzE3MDAtYmM0My00ZWZkLTljZTUt
NmRkODY3MGZhM2UwLzEvdlg1MWZRUTYweGZ5MUFRNmM4eGZyNWREUmc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80NzE3MDAtYmM0My00ZWZkLTljZTUtNmRkODY3MGZhM2Uw
LzEvdlg1MWZRUTYweGZ5MUFRNmM4eGZyNWREUmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjcqo17YN
j/6UG0TerZiRPXnUrRIJBkFbYhjvHU+61ISCAatgccVAHJ8ww0MVj5sV4YNVx1vN
VkdZFLrk9a1bqhWp9TgualfFMs/JWysANJ5XLZmqIznPxbrqcmVYhcllB8GNG414
enb9Z/9z+4JJB6Z39J8X2LKzSIcZSurrMpTHskxdZQvq3An8sbj84D3OhDral2oO
EpOkPrqw/jSgIJSKvTy4xaVn08FYtgvuASHsrxS3LBt3eXoXEbD553XrpNPX6owI
JYC1iKjxTL7qz6YNSQu5WtoY0MS5tpWTIyU2CsRltPWr9RJPfSvdo5dAviZs+HgX
/UN24fThmtseEQ==
-----END CERTIFICATE-----
Generated at Mon Aug 11 04:12:37 2025 by rpki-client