Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
File: VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft (raw, json)
Hash identifier: 0SYuiMV6zrogZT4aBU/fMpSKT+tWsd34cLhbUJ95+dQ=
Subject key identifier: F2:7A:1B:F1:B0:32:19:1D:87:CF:92:7A:50:47:4B:19:71:36:1A:87
Authority key identifier: 54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
Certificate issuer: /CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Certificate serial: 019845BF42166BA5CC731297D635503CC26F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
Manifest number: 0CF8
Signing time: Sat 26 Jul 2025 08:00:18 +0000
Manifest this update: Sat 26 Jul 2025 08:00:18 +0000
Manifest next update: Sun 27 Jul 2025 08:00:18 +0000
Files and hashes: 1: VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl (hash: zyRUNs18Og/Y5bJf/rf6TQewPhhDwBQ1x8T0qYXrPz4=)
2: VtoCPIJdz7eHPyB83a7Nn8Gfd4c.roa (hash: PUXsuDYu+cUr4eIS8shnPGPZDRmbjLqE+BBuYonEPq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 02:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:45:bf:42:16:6b:a5:cc:73:12:97:d6:35:50:3c:c2:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54a14be619755eeeeb91fe2f62a1d4ee07861496
Validity
Not Before: Jul 26 08:00:18 2025 GMT
Not After : Jul 27 08:00:18 2025 GMT
Subject: CN=f27a1bf1b032191d87cf927a50474b1971361a87
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1c:5a:a6:80:d8:ac:95:96:03:71:56:47:24:
16:86:88:ce:93:f7:6b:09:a6:30:47:0d:8d:a6:51:
05:ce:a1:d6:37:92:02:ba:00:48:ba:a2:88:02:f8:
42:15:a3:d1:c9:b2:e1:a3:f4:3a:b7:28:22:6e:36:
6e:6a:b8:f7:55:18:9b:ec:bf:81:28:24:69:2e:6d:
a1:e9:27:88:48:91:f1:9e:19:07:5e:a0:1a:c1:ab:
bd:31:cb:e2:70:b5:4b:c4:89:aa:3a:9a:cd:77:13:
a0:05:72:97:40:36:13:2a:32:a9:76:bf:f1:53:bb:
52:cf:ab:e0:fc:ca:8f:ff:3f:23:51:83:7d:b3:a4:
75:09:64:a0:ff:13:2a:5d:32:24:b2:d1:50:94:34:
9f:fa:6a:ea:25:e3:96:a4:bd:20:bf:31:88:59:07:
b9:ff:ed:8d:8a:e7:b8:7a:e7:08:47:6e:dd:09:4e:
50:2a:d1:03:76:88:c2:ea:ce:63:93:e3:b0:1d:46:
7f:a0:82:3c:88:b1:be:88:f2:53:41:9b:a9:09:65:
15:d1:ed:95:25:d8:5e:a4:f3:76:df:f2:ac:2e:3b:
48:0e:70:86:c4:ea:dd:40:36:27:f3:1e:eb:ba:47:
d6:8a:d0:b9:a8:34:00:27:9d:55:f6:59:51:3c:a6:
e4:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:7A:1B:F1:B0:32:19:1D:87:CF:92:7A:50:47:4B:19:71:36:1A:87
X509v3 Authority Key Identifier:
keyid:54:A1:4B:E6:19:75:5E:EE:EB:91:FE:2F:62:A1:D4:EE:07:86:14:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VKFL5hl1Xu7rkf4vYqHU7geGFJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c3/b8a9e7-9450-436c-bf90-8e90466bad38/1/VKFL5hl1Xu7rkf4vYqHU7geGFJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:fb:26:af:21:bf:5f:43:9a:cf:3a:0d:cf:d6:fa:57:ac:46:
c5:94:1f:a7:1e:dd:ed:64:d0:64:71:18:ff:02:e7:bd:bb:13:
b6:e1:46:18:a3:77:58:32:cb:ff:20:4b:4b:62:3f:76:df:73:
0a:64:51:2d:8b:06:20:72:4c:c0:4c:e3:fd:cf:f5:b1:bc:09:
7c:65:b0:ef:fc:7c:6e:b9:6a:74:f1:2f:83:d6:98:43:03:a0:
5a:d6:3c:ae:7b:43:5e:34:51:68:cf:0d:79:f8:83:bc:56:58:
af:fc:8d:5c:da:be:b5:6f:fe:57:b9:e3:87:38:74:85:f8:07:
97:51:ee:62:f4:7b:8b:3f:0a:18:87:f7:ef:31:60:84:0c:ce:
e3:c5:83:d1:c4:e7:c1:a8:73:95:d3:b5:85:a7:5d:90:81:d6:
15:cd:72:db:7d:20:b3:26:b5:7e:72:0c:fd:8f:0f:38:a1:11:
43:0b:0f:5e:58:28:5a:3c:9a:0f:bb:a7:ef:34:22:27:d1:90:
61:cc:c4:f6:1c:1f:9b:14:2a:95:4a:df:25:51:21:bf:91:9f:
cb:79:cb:b1:08:2d:d3:ac:2b:6e:6f:86:d2:90:80:af:96:14:
db:bd:fc:62:6d:52:db:26:bf:d4:de:f5:c5:f8:58:35:ac:38:
be:33:52:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhFv0IWa6XMcxKX1jVQPMJvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YTE0YmU2MTk3NTVlZWVlYjkxZmUyZjYyYTFkNGVlMDc4
NjE0OTYwHhcNMjUwNzI2MDgwMDE4WhcNMjUwNzI3MDgwMDE4WjAzMTEwLwYDVQQD
EyhmMjdhMWJmMWIwMzIxOTFkODdjZjkyN2E1MDQ3NGIxOTcxMzYxYTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnxxapoDYrJWWA3FWRyQWhojOk/dr
CaYwRw2NplEFzqHWN5ICugBIuqKIAvhCFaPRybLho/Q6tygibjZuarj3VRib7L+B
KCRpLm2h6SeISJHxnhkHXqAawau9McvicLVLxImqOprNdxOgBXKXQDYTKjKpdr/x
U7tSz6vg/MqP/z8jUYN9s6R1CWSg/xMqXTIkstFQlDSf+mrqJeOWpL0gvzGIWQe5
/+2Niue4eucIR27dCU5QKtEDdojC6s5jk+OwHUZ/oII8iLG+iPJTQZupCWUV0e2V
JdhepPN23/KsLjtIDnCGxOrdQDYn8x7rukfWitC5qDQAJ51V9llRPKbkgwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJ6G/GwMhkdh8+SelBHSxlxNhqHMB8GA1UdIwQY
MBaAFFShS+YZdV7u65H+L2Kh1O4HhhSWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVktGTDVobDFYdTdya2Y0dllxSFU3Z2VHRkpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMy9iOGE5ZTctOTQ1MC00MzZjLWJmOTAt
OGU5MDQ2NmJhZDM4LzEvVktGTDVobDFYdTdya2Y0dllxSFU3Z2VHRkpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMy9iOGE5ZTctOTQ1MC00MzZjLWJmOTAtOGU5MDQ2NmJhZDM4
LzEvVktGTDVobDFYdTdya2Y0dllxSFU3Z2VHRkpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZPsmryG/
X0OazzoNz9b6V6xGxZQfpx7d7WTQZHEY/wLnvbsTtuFGGKN3WDLL/yBLS2I/dt9z
CmRRLYsGIHJMwEzj/c/1sbwJfGWw7/x8brlqdPEvg9aYQwOgWtY8rntDXjRRaM8N
efiDvFZYr/yNXNq+tW/+V7njhzh0hfgHl1HuYvR7iz8KGIf37zFghAzO48WD0cTn
wahzldO1haddkIHWFc1y230gsya1fnIM/Y8POKERQwsPXlgoWjyaD7un7zQiJ9GQ
YczE9hwfmxQqlUrfJVEhv5Gfy3nLsQgt06wrbm+G0pCAr5YU2738Ym1S2ya/1N71
xfhYNaw4vjNSMw==
-----END CERTIFICATE-----
Generated at Sat Jul 26 11:53:23 2025 by rpki-client