Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
File: 1-VkY92suBLF1FE4jy-SKY8yaqo8.mft (raw, json)
Hash identifier: ef432SgEmF8TFf1dZ1pCcSKg0B2vAar3IhIbCJgBRL4=
Subject key identifier: B8:BE:4F:E2:60:84:2E:4A:2D:44:3A:37:01:1B:03:5F:91:BB:CB:01
Authority key identifier: F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
Certificate issuer: /CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Certificate serial: 019892FF20629411C5338CD257FDB6DF971E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
Manifest number: 09DE
Signing time: Sun 10 Aug 2025 08:00:50 +0000
Manifest this update: Sun 10 Aug 2025 08:00:50 +0000
Manifest next update: Mon 11 Aug 2025 08:00:50 +0000
Files and hashes: 1: 1-VkY92suBLF1FE4jy-SKY8yaqo8.crl (hash: vahSCu1m5ls/Aka0cQqpwvqoBFaECf9b83xtMC5HA1E=)
2: 7-j4zYeoEZb3GyJAS87cCTQvMeg.roa (hash: EAdEDlZP/7sT6Qp3HfzjAY/RfoPmZ+aNXdW6ptqfGUA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 11 Aug 2025 08:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:92:ff:20:62:94:11:c5:33:8c:d2:57:fd:b6:df:97:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95918f76b2e04b175144e23cbe48a63cc9aaa8f
Validity
Not Before: Aug 10 08:00:50 2025 GMT
Not After : Aug 11 08:00:50 2025 GMT
Subject: CN=b8be4fe260842e4a2d443a37011b035f91bbcb01
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:69:e7:39:30:15:2b:73:dc:81:78:46:47:6b:
70:61:c0:31:c6:2f:b4:b7:22:0d:2e:2b:12:f7:b6:
1b:18:51:72:a4:3c:0c:42:8f:e8:46:39:22:df:f1:
ad:2d:f2:a8:d7:b6:d9:4c:fb:ca:ba:75:8c:50:79:
f1:41:49:44:46:7c:4b:77:93:e2:dd:17:0b:df:6f:
3e:e9:5c:26:e5:c4:4a:52:86:c5:d6:b0:0a:f9:df:
53:4f:60:a5:30:6a:94:67:38:85:20:a2:b8:bf:1e:
c3:b4:d3:b1:76:ca:a6:35:01:de:92:f5:69:21:6c:
85:60:29:6e:2b:11:b5:ae:9c:ae:ab:48:c7:09:33:
c4:5f:ed:e6:9e:c6:31:7c:75:ad:95:c7:43:83:28:
39:a6:0e:21:47:25:7c:fa:e9:5c:e9:3c:a6:45:2a:
da:04:31:30:df:56:f6:14:35:29:0a:bd:3b:7b:ad:
40:72:be:3b:6c:83:f8:e9:e3:38:03:9e:d5:8d:00:
02:05:de:27:f6:45:fb:2d:27:19:a4:53:d5:56:8f:
d8:ea:ae:49:4f:d9:4a:46:3d:d1:96:fa:09:b5:eb:
85:7d:18:7d:82:28:42:77:94:78:aa:d7:57:b6:83:
94:a9:cf:c1:92:45:75:00:21:a5:0e:34:54:c3:07:
17:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:BE:4F:E2:60:84:2E:4A:2D:44:3A:37:01:1B:03:5F:91:BB:CB:01
X509v3 Authority Key Identifier:
keyid:F9:59:18:F7:6B:2E:04:B1:75:14:4E:23:CB:E4:8A:63:CC:9A:AA:8F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VkY92suBLF1FE4jy-SKY8yaqo8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/25d092-81a4-47f3-bdc6-19778c87fed5/1/1-VkY92suBLF1FE4jy-SKY8yaqo8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cd:1e:a8:31:39:19:84:21:50:af:df:48:d4:e0:23:98:58:3a:
e6:11:4b:a7:3f:0d:07:c2:d7:47:46:e0:b2:46:a7:0e:27:90:
21:0a:3f:a0:08:63:9c:95:c1:ec:51:06:dd:b2:c2:0c:a9:9e:
ff:7d:d5:cc:22:ef:5c:51:6c:b8:b8:09:1e:43:09:c8:55:f0:
0d:6e:72:b4:c5:bc:db:0d:e7:85:58:46:8f:f2:ba:f0:94:af:
64:88:3a:63:be:fe:09:b7:6b:fc:c9:47:bf:b2:94:46:71:42:
a4:5d:8e:8f:d5:80:c3:6e:6b:02:fe:56:b0:ff:81:a1:c0:25:
5b:b0:0b:9e:a1:24:77:21:bb:f3:36:bc:78:71:b6:e4:5d:90:
e1:19:de:c2:10:d0:7b:78:25:33:f0:45:11:d7:33:38:47:01:
3d:e9:0b:d6:84:59:aa:5e:29:cf:1a:10:4e:d5:66:f2:c9:bb:
5a:5b:dd:30:2d:6a:87:b6:e8:b4:12:6d:67:47:76:b4:8c:31:
e3:09:12:1b:98:a2:c8:ab:d4:55:bf:c6:52:63:55:bd:e7:1c:
c9:19:ff:ee:3d:75:8f:9c:b1:99:ee:4c:72:91:1c:a0:e2:ea:
52:d3:8c:fc:d3:73:fe:61:9b:21:e5:7c:80:72:fe:35:3e:1a:
af:0c:3a:66
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZiS/yBilBHFM4zSV/2235ceMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NTkxOGY3NmIyZTA0YjE3NTE0NGUyM2NiZTQ4YTYzY2M5
YWFhOGYwHhcNMjUwODEwMDgwMDUwWhcNMjUwODExMDgwMDUwWjAzMTEwLwYDVQQD
EyhiOGJlNGZlMjYwODQyZTRhMmQ0NDNhMzcwMTFiMDM1ZjkxYmJjYjAxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA52nnOTAVK3PcgXhGR2twYcAxxi+0
tyINLisS97YbGFFypDwMQo/oRjki3/GtLfKo17bZTPvKunWMUHnxQUlERnxLd5Pi
3RcL328+6Vwm5cRKUobF1rAK+d9TT2ClMGqUZziFIKK4vx7DtNOxdsqmNQHekvVp
IWyFYCluKxG1rpyuq0jHCTPEX+3mnsYxfHWtlcdDgyg5pg4hRyV8+ulc6TymRSra
BDEw31b2FDUpCr07e61Acr47bIP46eM4A57VjQACBd4n9kX7LScZpFPVVo/Y6q5J
T9lKRj3RlvoJteuFfRh9gihCd5R4qtdXtoOUqc/BkkV1ACGlDjRUwwcX1wIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLi+T+JghC5KLUQ6NwEbA1+Ru8sBMB8GA1UdIwQY
MBaAFPlZGPdrLgSxdRROI8vkimPMmqqPMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Wa1k5MnN1QkxGMUZFNGp5LVNLWTh5YXFvOC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZmEvMjVkMDkyLTgxYTQtNDdmMy1iZGM2
LTE5Nzc4Yzg3ZmVkNS8xLzEtVmtZOTJzdUJMRjFGRTRqeS1TS1k4eWFxbzgubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2ZhLzI1ZDA5Mi04MWE0LTQ3ZjMtYmRjNi0xOTc3OGM4N2Zl
ZDUvMS8xLVZrWTkyc3VCTEYxRkU0anktU0tZOHlhcW84LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzR6o
MTkZhCFQr99I1OAjmFg65hFLpz8NB8LXR0bgskanDieQIQo/oAhjnJXB7FEG3bLC
DKme/33VzCLvXFFsuLgJHkMJyFXwDW5ytMW82w3nhVhGj/K68JSvZIg6Y77+Cbdr
/MlHv7KURnFCpF2Oj9WAw25rAv5WsP+BocAlW7ALnqEkdyG78za8eHG25F2Q4Rne
whDQe3glM/BFEdczOEcBPekL1oRZql4pzxoQTtVm8sm7WlvdMC1qh7botBJtZ0d2
tIwx4wkSG5iiyKvUVb/GUmNVveccyRn/7j11j5yxme5McpEcoOLqUtOM/NNz/mGb
IeV8gHL+NT4arww6Zg==
-----END CERTIFICATE-----
Generated at Sun Aug 10 13:58:14 2025 by rpki-client