Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
File: vCYx1KOVOSlNH55XbmmWIK2Yo40.mft (raw, json)
Hash identifier: xe3Ds8V9+5DjScOTjNZT6CEFlo2MQ2kYhSfDkDS+52U=
Subject key identifier: A0:7C:C1:01:E9:91:9C:EC:E4:14:8B:26:EE:A7:FF:22:E5:F2:A3:A3
Authority key identifier: BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
Certificate issuer: /CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Certificate serial: 01988CFD21F05017623641270554014D3592
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
Manifest number: 05A3
Signing time: Sat 09 Aug 2025 04:00:56 +0000
Manifest this update: Sat 09 Aug 2025 04:00:56 +0000
Manifest next update: Sun 10 Aug 2025 04:00:56 +0000
Files and hashes: 1: vCYx1KOVOSlNH55XbmmWIK2Yo40.crl (hash: Z+LofoX6l54iHk+7g1JCmmpccQ4yRZ/1PHqheUqKap0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 04:00:56 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8c:fd:21:f0:50:17:62:36:41:27:05:54:01:4d:35:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bc2631d4a39539294d1f9e576e699620ad98a38d
Validity
Not Before: Aug 9 04:00:56 2025 GMT
Not After : Aug 10 04:00:56 2025 GMT
Subject: CN=a07cc101e9919cece4148b26eea7ff22e5f2a3a3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:16:10:b9:4c:b6:a4:36:95:16:35:26:84:cd:
b9:c9:5c:a3:d1:51:7c:0d:be:d9:32:58:b1:7c:9d:
fb:cb:2c:96:1e:a7:ab:9f:70:5b:88:0c:c1:d7:29:
81:9f:64:52:32:24:46:c9:12:58:12:d1:aa:a4:90:
37:bf:90:4f:a7:23:86:94:5f:6c:c6:d2:e0:bd:9e:
ac:3c:03:67:f0:ec:84:62:a6:9f:27:1f:32:80:21:
0e:01:d1:2f:12:ae:d0:79:4d:87:69:2d:14:01:56:
ab:f7:5e:64:2f:f2:fc:95:97:de:19:47:0d:17:30:
66:92:28:8f:cc:be:a9:71:bc:ec:2f:40:35:d6:45:
73:61:66:0a:2e:42:e9:62:87:97:12:de:3b:73:1f:
93:61:a7:f8:9c:ab:0e:98:0f:b3:9a:1c:4e:f2:34:
34:a7:43:ac:65:da:ac:4d:65:86:2b:2c:41:75:79:
9a:6c:f6:39:0a:54:7b:a3:58:36:70:9a:b8:d4:27:
6b:10:65:39:5e:81:c6:0e:cc:44:0c:1d:73:40:34:
50:2d:9f:d9:83:d8:b2:40:86:86:2b:5b:1e:61:b3:
65:05:a4:89:7d:a0:1d:52:fd:e1:3b:de:2e:54:50:
ca:36:93:21:76:16:eb:69:99:4d:9d:19:76:7f:8e:
3b:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:7C:C1:01:E9:91:9C:EC:E4:14:8B:26:EE:A7:FF:22:E5:F2:A3:A3
X509v3 Authority Key Identifier:
keyid:BC:26:31:D4:A3:95:39:29:4D:1F:9E:57:6E:69:96:20:AD:98:A3:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vCYx1KOVOSlNH55XbmmWIK2Yo40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f9/ca4c5c-e4d5-4c78-a840-2f6d46d72996/1/vCYx1KOVOSlNH55XbmmWIK2Yo40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:d8:77:bc:95:0b:c2:9a:e2:c3:ca:f0:a7:8b:15:af:27:be:
f7:8b:18:60:71:01:53:cb:55:3e:54:bf:6c:3b:78:00:d9:d7:
dd:5d:7c:b3:4e:3c:89:af:e5:a7:5d:4d:e3:fe:ea:9d:55:cd:
f6:c6:6d:e2:ee:af:0a:23:ba:0d:bb:cf:d5:b6:a2:2a:51:e2:
60:34:98:e4:b1:18:f2:d6:9f:3d:dd:86:3a:8c:b6:d8:1e:5a:
eb:43:02:fc:5c:20:3c:a9:c7:b2:07:7f:c4:03:df:81:87:a3:
50:7b:36:c3:ac:0f:c7:e3:e9:22:b0:17:8f:8f:b2:4b:48:60:
b4:7d:87:9a:11:35:66:5a:9f:15:27:e7:72:c5:cb:d3:8e:9a:
33:82:5f:6e:ae:43:4f:78:01:22:4e:24:04:64:42:16:a7:fe:
87:1b:d0:76:d2:57:31:e3:b6:da:e2:e6:3c:a2:c4:e9:9d:0b:
0f:f1:0c:3b:45:8f:df:f1:85:f8:60:14:5d:5c:07:0f:a4:51:
e1:aa:ae:1b:74:94:69:e9:bb:49:f0:a0:51:73:f9:75:f3:9a:
83:3d:6b:84:1a:bb:0c:fd:7a:3b:a4:c6:5a:5e:aa:6b:9d:ce:
27:2a:72:81:65:17:b7:d8:80:47:08:34:2e:70:be:78:59:cd:
83:2e:40:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiM/SHwUBdiNkEnBVQBTTWSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJjMjYzMWQ0YTM5NTM5Mjk0ZDFmOWU1NzZlNjk5NjIwYWQ5
OGEzOGQwHhcNMjUwODA5MDQwMDU2WhcNMjUwODEwMDQwMDU2WjAzMTEwLwYDVQQD
EyhhMDdjYzEwMWU5OTE5Y2VjZTQxNDhiMjZlZWE3ZmYyMmU1ZjJhM2EzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiBYQuUy2pDaVFjUmhM25yVyj0VF8
Db7ZMlixfJ37yyyWHqern3BbiAzB1ymBn2RSMiRGyRJYEtGqpJA3v5BPpyOGlF9s
xtLgvZ6sPANn8OyEYqafJx8ygCEOAdEvEq7QeU2HaS0UAVar915kL/L8lZfeGUcN
FzBmkiiPzL6pcbzsL0A11kVzYWYKLkLpYoeXEt47cx+TYaf4nKsOmA+zmhxO8jQ0
p0OsZdqsTWWGKyxBdXmabPY5ClR7o1g2cJq41CdrEGU5XoHGDsxEDB1zQDRQLZ/Z
g9iyQIaGK1seYbNlBaSJfaAdUv3hO94uVFDKNpMhdhbraZlNnRl2f447jwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKB8wQHpkZzs5BSLJu6n/yLl8qOjMB8GA1UdIwQY
MBaAFLwmMdSjlTkpTR+eV25pliCtmKONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAt
MmY2ZDQ2ZDcyOTk2LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOS9jYTRjNWMtZTRkNS00Yzc4LWE4NDAtMmY2ZDQ2ZDcyOTk2
LzEvdkNZeDFLT1ZPU2xOSDU1WGJtbVdJSzJZbzQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAANh3vJUL
wpriw8rwp4sVrye+94sYYHEBU8tVPlS/bDt4ANnX3V18s048ia/lp11N4/7qnVXN
9sZt4u6vCiO6DbvP1baiKlHiYDSY5LEY8tafPd2GOoy22B5a60MC/FwgPKnHsgd/
xAPfgYejUHs2w6wPx+PpIrAXj4+yS0hgtH2HmhE1ZlqfFSfncsXL046aM4Jfbq5D
T3gBIk4kBGRCFqf+hxvQdtJXMeO22uLmPKLE6Z0LD/EMO0WP3/GF+GAUXVwHD6RR
4aquG3SUaem7SfCgUXP5dfOagz1rhBq7DP16O6TGWl6qa53OJypygWUXt9iARwg0
LnC+eFnNgy5AuQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 10:32:53 2025 by rpki-client