Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
File: VRTyx8ZG7DGgSV4FHWpN4avwx04.mft (raw, json)
Hash identifier: 8TNGL3irRZ3Jw2WQt+LzEHiQREo57LgnRoMB6MucewE=
Subject key identifier: 85:0E:3D:23:D2:D1:B5:46:3B:50:6D:D1:5D:8C:10:F9:20:B9:AC:03
Authority key identifier: 55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
Certificate issuer: /CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Certificate serial: 01984966AFD110DD90B6EFFB78479014BB39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
Manifest number: 1129
Signing time: Sun 27 Jul 2025 01:02:03 +0000
Manifest this update: Sun 27 Jul 2025 01:02:03 +0000
Manifest next update: Mon 28 Jul 2025 01:02:03 +0000
Files and hashes: 1: VRTyx8ZG7DGgSV4FHWpN4avwx04.crl (hash: EPawfkaGPY12w58DCsZb6oPj2ymrxW6YTSQSiDOIx0k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:66:af:d1:10:dd:90:b6:ef:fb:78:47:90:14:bb:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5514f2c7c646ec31a0495e051d6a4de1abf0c74e
Validity
Not Before: Jul 27 01:02:03 2025 GMT
Not After : Jul 28 01:02:03 2025 GMT
Subject: CN=850e3d23d2d1b5463b506dd15d8c10f920b9ac03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:b0:b7:3d:0c:eb:98:2d:6a:88:ac:72:99:29:
db:e2:8a:3e:51:6d:b4:1a:53:e2:e4:a3:a1:b5:74:
e9:09:75:71:b2:9f:c8:3b:f2:f0:36:50:93:55:f8:
45:bb:8b:0e:d9:98:11:f8:4d:8e:b1:ca:81:bf:94:
5b:30:81:49:6c:bc:d4:48:cb:c1:b9:f5:49:e5:c9:
8f:0b:94:d9:a0:88:ef:7c:88:d3:96:80:4e:34:67:
27:c9:a5:51:cd:f1:32:a5:d3:1e:bd:e8:2b:4e:bf:
51:fe:93:a8:0b:7d:05:3f:93:62:43:fb:05:95:31:
b2:6a:9d:bf:10:b4:f1:d5:f8:d6:93:69:e4:73:8e:
c8:74:e3:f9:35:8b:63:f3:76:e3:5f:92:40:c0:16:
e3:f7:8d:de:36:8f:62:0e:5a:18:51:76:02:da:20:
a6:69:61:50:84:4a:51:65:ea:6c:70:9e:db:c7:a7:
8a:e2:e9:04:69:3b:e5:85:e3:61:68:54:1e:04:7a:
ea:3b:d0:69:fe:e1:5b:65:71:38:91:84:74:ea:a1:
b6:7d:80:8d:36:55:33:82:32:0d:8d:96:b7:3c:11:
a7:21:80:93:34:e3:56:e0:53:38:b5:70:f9:7e:d0:
75:05:01:37:e5:af:8c:6f:69:da:ac:5c:2a:f8:eb:
de:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:0E:3D:23:D2:D1:B5:46:3B:50:6D:D1:5D:8C:10:F9:20:B9:AC:03
X509v3 Authority Key Identifier:
keyid:55:14:F2:C7:C6:46:EC:31:A0:49:5E:05:1D:6A:4D:E1:AB:F0:C7:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VRTyx8ZG7DGgSV4FHWpN4avwx04.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ad/90bd21-acd0-48e5-9adf-2780d6f1612c/1/VRTyx8ZG7DGgSV4FHWpN4avwx04.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c2:7d:2a:54:4a:8a:e1:e7:a4:df:47:b2:bb:c3:a6:4c:6a:14:
39:b8:71:74:ad:8d:b1:1a:43:6c:ea:07:65:2a:c1:fc:8a:5e:
40:e9:f1:a3:f8:56:a2:52:a6:06:c2:1f:8f:e1:03:58:2c:e7:
ff:85:f8:ac:7c:4d:5f:4d:7d:8e:77:4a:23:6e:ec:bd:82:1e:
f2:98:eb:b5:ee:89:51:37:ef:74:53:18:9b:18:00:d9:ac:d6:
9f:f9:c5:90:29:6e:92:9a:2e:d5:f8:a3:ac:41:74:43:71:98:
61:76:16:a2:66:af:7f:9a:ed:af:85:7f:d5:02:b0:97:83:66:
e5:36:dd:bb:77:fd:21:aa:95:b2:24:c4:45:39:bb:41:6e:d6:
74:8d:44:8d:73:aa:45:62:f9:e3:3c:98:0a:83:fd:8c:98:9f:
65:2c:4c:9a:c2:d7:0b:74:a6:d1:5b:b4:78:3a:3e:34:63:71:
3b:41:ae:20:b7:9b:96:ca:16:76:d5:9a:7c:0c:18:bb:18:54:
cb:d5:60:1e:f6:36:d2:1d:42:4f:4b:7d:8d:b1:8a:a9:09:f1:
a0:94:0e:98:88:02:93:96:8b:66:0c:45:2f:b5:dc:8e:24:1c:
c4:b1:6c:e3:5b:1c:fb:32:7b:7a:61:63:1b:68:30:1f:75:a8:
bc:97:3b:e7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJZq/REN2Qtu/7eEeQFLs5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU1MTRmMmM3YzY0NmVjMzFhMDQ5NWUwNTFkNmE0ZGUxYWJm
MGM3NGUwHhcNMjUwNzI3MDEwMjAzWhcNMjUwNzI4MDEwMjAzWjAzMTEwLwYDVQQD
Eyg4NTBlM2QyM2QyZDFiNTQ2M2I1MDZkZDE1ZDhjMTBmOTIwYjlhYzAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqLC3PQzrmC1qiKxymSnb4oo+UW20
GlPi5KOhtXTpCXVxsp/IO/LwNlCTVfhFu4sO2ZgR+E2OscqBv5RbMIFJbLzUSMvB
ufVJ5cmPC5TZoIjvfIjTloBONGcnyaVRzfEypdMevegrTr9R/pOoC30FP5NiQ/sF
lTGyap2/ELTx1fjWk2nkc47IdOP5NYtj83bjX5JAwBbj943eNo9iDloYUXYC2iCm
aWFQhEpRZepscJ7bx6eK4ukEaTvlheNhaFQeBHrqO9Bp/uFbZXE4kYR06qG2fYCN
NlUzgjINjZa3PBGnIYCTNONW4FM4tXD5ftB1BQE35a+Mb2narFwq+OveTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIUOPSPS0bVGO1Bt0V2MEPkguawDMB8GA1UdIwQY
MBaAFFUU8sfGRuwxoEleBR1qTeGr8MdOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZC85MGJkMjEtYWNkMC00OGU1LTlhZGYt
Mjc4MGQ2ZjE2MTJjLzEvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZC85MGJkMjEtYWNkMC00OGU1LTlhZGYtMjc4MGQ2ZjE2MTJj
LzEvVlJUeXg4Wkc3REdnU1Y0RkhXcE40YXZ3eDA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAwn0qVEqK
4eek30eyu8OmTGoUObhxdK2NsRpDbOoHZSrB/IpeQOnxo/hWolKmBsIfj+EDWCzn
/4X4rHxNX019jndKI27svYIe8pjrte6JUTfvdFMYmxgA2azWn/nFkClukpou1fij
rEF0Q3GYYXYWomavf5rtr4V/1QKwl4Nm5Tbdu3f9IaqVsiTERTm7QW7WdI1EjXOq
RWL54zyYCoP9jJifZSxMmsLXC3Sm0Vu0eDo+NGNxO0GuILeblsoWdtWafAwYuxhU
y9VgHvY20h1CT0t9jbGKqQnxoJQOmIgCk5aLZgxFL7XcjiQcxLFs41sc+zJ7emFj
G2gwH3WovJc75w==
-----END CERTIFICATE-----
Generated at Sun Jul 27 10:04:10 2025 by rpki-client