Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
File: VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft (raw, json)
Hash identifier: TJrbXwPcqK4+mznLC7Rl2uQh2UdXxRF2qOoBD6kvvNM=
Subject key identifier: E1:2F:23:DA:82:A3:EA:67:04:F5:2E:30:99:E9:0D:0E:06:10:7A:B9
Authority key identifier: 54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
Certificate issuer: /CN=54ba45608c008224ff23268abe03e04cd318009c
Certificate serial: 0198808AE250431C848305C478F7EA8EDE3B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
Manifest number: 0479
Signing time: Wed 06 Aug 2025 18:00:42 +0000
Manifest this update: Wed 06 Aug 2025 18:00:42 +0000
Manifest next update: Thu 07 Aug 2025 18:00:42 +0000
Files and hashes: 1: VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl (hash: 1JDzWXLT6tlW3x5WXSwj7kpj4aRlOWQ4p9J1x8CaJmE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 07 Aug 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:80:8a:e2:50:43:1c:84:83:05:c4:78:f7:ea:8e:de:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ba45608c008224ff23268abe03e04cd318009c
Validity
Not Before: Aug 6 18:00:42 2025 GMT
Not After : Aug 7 18:00:42 2025 GMT
Subject: CN=e12f23da82a3ea6704f52e3099e90d0e06107ab9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:91:7a:bb:66:c5:da:ad:71:15:24:2e:b0:20:
74:19:bb:45:6a:30:1a:23:9e:38:b5:e7:1e:64:9f:
c9:df:46:78:aa:2b:f3:0f:02:3f:80:f7:41:b5:88:
07:69:b6:35:09:19:4c:1f:41:8a:dc:ee:d6:69:8c:
30:f4:a1:92:b8:63:5f:f9:e3:3a:79:f0:95:c5:2d:
6a:b6:d3:30:43:78:80:3b:e6:0d:cd:d1:8e:55:c8:
35:43:81:ae:66:75:9d:14:8d:03:d8:09:21:9f:c8:
a0:54:a5:74:9c:65:83:7d:82:b1:db:14:b9:f3:ba:
f8:80:8c:38:ac:22:40:da:bb:c0:ce:81:a5:75:37:
e0:a0:11:d9:26:ed:34:77:12:01:b3:e8:67:5b:73:
3f:70:5a:2d:12:d2:90:c1:6b:27:76:4b:b4:61:c2:
1a:f7:bc:1c:28:1a:11:da:78:d2:f0:5e:9e:b0:4f:
26:dd:30:dc:2c:42:cf:0c:8f:fe:b2:fb:6d:0c:3a:
78:3c:28:bf:1b:de:e8:65:67:09:c5:19:76:29:e7:
8d:e3:83:f8:fe:03:f8:1a:9f:de:70:4b:d4:62:f0:
7e:9f:39:b8:69:47:fa:0c:08:42:c6:a8:9c:7f:1f:
7e:f4:ec:bc:13:24:16:58:88:4a:1b:77:69:17:97:
bc:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:2F:23:DA:82:A3:EA:67:04:F5:2E:30:99:E9:0D:0E:06:10:7A:B9
X509v3 Authority Key Identifier:
keyid:54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:b5:21:ad:e2:25:c4:c7:e1:f0:b0:d9:3b:f2:a8:a8:18:ae:
35:da:2f:76:19:74:31:29:31:e2:a7:f8:68:21:d8:dc:43:b6:
88:6c:69:77:64:52:e3:96:07:d1:42:ef:5d:05:b7:a2:0f:e7:
e6:ff:36:41:36:35:82:e4:f7:4d:f2:60:45:bf:4a:e9:25:cf:
89:e4:c4:bd:c0:bb:e4:f2:ff:b6:24:45:fe:1a:a8:e8:e9:0a:
03:c4:7c:e9:d0:b1:eb:e9:e5:b1:2c:d2:55:e1:bc:9c:98:2d:
53:a8:8c:81:99:a2:06:cb:37:cf:09:4b:bb:bf:18:1f:e4:3f:
9b:e2:05:c2:be:1b:35:70:8c:d1:eb:36:1e:c8:f7:29:5f:9f:
e8:16:3d:3c:d4:25:34:b4:16:5c:a2:a5:e1:e8:51:78:2e:ee:
50:76:52:13:b8:77:0f:8c:e2:c6:3e:b7:2e:ce:b7:f3:76:7b:
70:01:c7:bd:85:46:b6:68:a2:b2:b6:dc:72:de:08:05:71:67:
40:b7:91:1d:ad:cc:45:92:dd:60:6c:d8:d3:c8:05:68:c6:a3:
3a:a6:4f:5d:15:98:ef:9d:28:32:cd:5c:02:6d:07:ff:93:bc:
44:ac:c1:4a:1e:44:bd:e1:86:25:73:3c:dc:d5:52:52:24:72:
40:e7:82:e2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiAiuJQQxyEgwXEePfqjt47MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YmE0NTYwOGMwMDgyMjRmZjIzMjY4YWJlMDNlMDRjZDMx
ODAwOWMwHhcNMjUwODA2MTgwMDQyWhcNMjUwODA3MTgwMDQyWjAzMTEwLwYDVQQD
EyhlMTJmMjNkYTgyYTNlYTY3MDRmNTJlMzA5OWU5MGQwZTA2MTA3YWI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoJF6u2bF2q1xFSQusCB0GbtFajAa
I544teceZJ/J30Z4qivzDwI/gPdBtYgHabY1CRlMH0GK3O7WaYww9KGSuGNf+eM6
efCVxS1qttMwQ3iAO+YNzdGOVcg1Q4GuZnWdFI0D2Akhn8igVKV0nGWDfYKx2xS5
87r4gIw4rCJA2rvAzoGldTfgoBHZJu00dxIBs+hnW3M/cFotEtKQwWsndku0YcIa
97wcKBoR2njS8F6esE8m3TDcLELPDI/+svttDDp4PCi/G97oZWcJxRl2KeeN44P4
/gP4Gp/ecEvUYvB+nzm4aUf6DAhCxqicfx9+9Oy8EyQWWIhKG3dpF5e8aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEvI9qCo+pnBPUuMJnpDQ4GEHq5MB8GA1UdIwQY
MBaAFFS6RWCMAIIk/yMmir4D4EzTGACcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxwRllJd0FnaVRfSXlhS3ZnUGdUTk1ZQUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kYjZlZmMtMzg4YS00OTliLWFmYzMt
NjA4NDZkZjg4OTQ1LzEvVkxwRllJd0FnaVRfSXlhS3ZnUGdUTk1ZQUp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kYjZlZmMtMzg4YS00OTliLWFmYzMtNjA4NDZkZjg4OTQ1
LzEvVkxwRllJd0FnaVRfSXlhS3ZnUGdUTk1ZQUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbrUhreIl
xMfh8LDZO/KoqBiuNdovdhl0MSkx4qf4aCHY3EO2iGxpd2RS45YH0ULvXQW3og/n
5v82QTY1guT3TfJgRb9K6SXPieTEvcC75PL/tiRF/hqo6OkKA8R86dCx6+nlsSzS
VeG8nJgtU6iMgZmiBss3zwlLu78YH+Q/m+IFwr4bNXCM0es2Hsj3KV+f6BY9PNQl
NLQWXKKl4ehReC7uUHZSE7h3D4zixj63Ls6383Z7cAHHvYVGtmiisrbcct4IBXFn
QLeRHa3MRZLdYGzY08gFaMajOqZPXRWY750oMs1cAm0H/5O8RKzBSh5EveGGJXM8
3NVSUiRyQOeC4g==
-----END CERTIFICATE-----
Generated at Thu Aug 7 04:42:18 2025 by rpki-client