Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
File: VoF64vtRPl4A1hv9MpOuTve_Im4.mft (raw, json)
Hash identifier: QX5XEOotHCWPM+4GBdofJpyZ6IVJEiAf6jnEI1Q7NcI=
Subject key identifier: 48:C8:9B:C8:3F:4A:06:D5:9E:CA:8E:3C:71:6E:A4:EB:A7:DE:36:93
Authority key identifier: 56:81:7A:E2:FB:51:3E:5E:00:D6:1B:FD:32:93:AE:4E:F7:BF:22:6E
Certificate issuer: /CN=56817ae2fb513e5e00d61bfd3293ae4ef7bf226e
Certificate serial: 0199228C3921158132EA3EF41A7767851BFA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
Manifest number: 7E
Signing time: Sun 07 Sep 2025 05:00:38 +0000
Manifest this update: Sun 07 Sep 2025 05:00:38 +0000
Manifest next update: Mon 08 Sep 2025 05:00:38 +0000
Files and hashes: 1: VoF64vtRPl4A1hv9MpOuTve_Im4.crl (hash: tJP6R0vacZR2K1URkqEHsOY4wn1PXf/D/Pc8Xxb03T8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.crl
rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:39:21:15:81:32:ea:3e:f4:1a:77:67:85:1b:fa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56817ae2fb513e5e00d61bfd3293ae4ef7bf226e
Validity
Not Before: Sep 7 05:00:38 2025 GMT
Not After : Sep 8 05:00:38 2025 GMT
Subject: CN=48c89bc83f4a06d59eca8e3c716ea4eba7de3693
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:28:e2:3c:ff:6e:41:e7:67:bb:19:0b:4b:9d:
46:91:19:25:d6:7b:87:00:66:98:5d:8b:45:14:3a:
76:a0:c1:25:d9:87:8b:4b:6d:a9:ff:05:13:d9:e1:
bd:1e:99:c2:cb:ea:4d:38:5a:3e:35:dd:82:98:94:
95:6e:fb:cf:fc:5b:e9:d1:5a:8b:c4:f0:5e:a7:8e:
3d:fb:7c:3a:71:b1:c9:87:de:41:bf:4c:82:d5:94:
aa:aa:2a:19:09:5c:12:71:bf:ea:79:10:8b:aa:a3:
93:74:40:4e:0d:af:4c:c9:bf:f2:e7:8e:ba:3f:5f:
e7:84:44:59:91:db:66:01:a1:e3:df:fb:bd:19:6a:
16:c9:59:53:fd:e9:a8:4d:76:bc:85:82:ae:6f:07:
a6:54:97:90:c7:60:f5:d2:26:40:86:3a:3c:82:1c:
df:48:bb:a8:e4:bb:69:c7:e3:6f:6d:ec:d1:7e:30:
16:27:3c:85:7d:f6:f6:a9:5d:ee:b4:a6:7c:f0:df:
63:47:c3:4a:5c:ed:94:91:29:70:22:11:59:85:be:
35:d8:a2:68:8b:cf:e4:67:46:12:5f:b0:73:62:bd:
60:36:da:6e:88:91:eb:0b:99:1b:63:9c:6d:17:60:
05:93:3f:3d:36:5d:9a:2a:44:4e:f8:cc:0f:2a:70:
fc:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:C8:9B:C8:3F:4A:06:D5:9E:CA:8E:3C:71:6E:A4:EB:A7:DE:36:93
X509v3 Authority Key Identifier:
keyid:56:81:7A:E2:FB:51:3E:5E:00:D6:1B:FD:32:93:AE:4E:F7:BF:22:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoF64vtRPl4A1hv9MpOuTve_Im4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0b/8a6ecb-0928-45a6-b90f-3862b7240895/1/VoF64vtRPl4A1hv9MpOuTve_Im4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:50:a0:41:87:30:71:8e:ec:59:cc:22:10:69:c6:e2:93:80:
c0:e6:31:c2:f3:5b:0c:74:8a:45:c9:93:a1:8c:91:52:c5:1b:
0b:05:c1:8a:ae:44:09:61:e5:dd:9b:a5:83:4a:e9:36:a4:1c:
45:82:d9:16:6b:5a:f4:b9:9e:f7:b1:32:db:61:44:37:e6:76:
d6:c5:28:48:fa:f1:d1:fc:a4:c8:1e:c7:fd:1d:a0:04:8f:c6:
4e:34:bf:4c:84:fc:35:56:73:81:ff:03:82:bd:19:c8:b3:82:
90:36:f1:b3:af:de:2a:de:3f:0c:31:a2:b7:e0:73:db:62:d9:
fc:47:1c:ef:62:c6:fe:2e:49:35:46:80:ad:51:c1:9e:06:a8:
fc:1b:39:80:ac:55:00:e1:3b:eb:c7:ef:ac:e3:43:38:97:d1:
67:dd:8d:a8:8e:7f:50:f0:38:16:25:b1:79:6f:5b:44:f3:1c:
ef:53:d7:54:b9:81:b8:14:9c:de:04:95:73:94:3c:b0:d3:c4:
b2:b5:60:5d:01:40:82:1b:6f:37:db:d7:f0:a7:88:49:3a:1e:
31:8f:6d:fd:03:0e:d6:02:3d:e7:1d:ae:bf:99:6c:2b:49:6e:
de:85:b7:82:a4:32:be:2b:7b:1c:b0:95:ea:33:44:aa:c8:6d:
10:49:7c:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijDkhFYEy6j70GndnhRv6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ODE3YWUyZmI1MTNlNWUwMGQ2MWJmZDMyOTNhZTRlZjdi
ZjIyNmUwHhcNMjUwOTA3MDUwMDM4WhcNMjUwOTA4MDUwMDM4WjAzMTEwLwYDVQQD
Eyg0OGM4OWJjODNmNGEwNmQ1OWVjYThlM2M3MTZlYTRlYmE3ZGUzNjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnijiPP9uQednuxkLS51GkRkl1nuH
AGaYXYtFFDp2oMEl2YeLS22p/wUT2eG9HpnCy+pNOFo+Nd2CmJSVbvvP/Fvp0VqL
xPBep449+3w6cbHJh95Bv0yC1ZSqqioZCVwScb/qeRCLqqOTdEBODa9Myb/y5466
P1/nhERZkdtmAaHj3/u9GWoWyVlT/emoTXa8hYKubwemVJeQx2D10iZAhjo8ghzf
SLuo5Ltpx+NvbezRfjAWJzyFffb2qV3utKZ88N9jR8NKXO2UkSlwIhFZhb412KJo
i8/kZ0YSX7BzYr1gNtpuiJHrC5kbY5xtF2AFkz89Nl2aKkRO+MwPKnD85wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEjIm8g/SgbVnsqOPHFupOun3jaTMB8GA1UdIwQY
MBaAFFaBeuL7UT5eANYb/TKTrk73vyJuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9GNjR2dFJQbDRBMWh2OU1wT3VUdmVfSW00LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYi84YTZlY2ItMDkyOC00NWE2LWI5MGYt
Mzg2MmI3MjQwODk1LzEvVm9GNjR2dFJQbDRBMWh2OU1wT3VUdmVfSW00Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYi84YTZlY2ItMDkyOC00NWE2LWI5MGYtMzg2MmI3MjQwODk1
LzEvVm9GNjR2dFJQbDRBMWh2OU1wT3VUdmVfSW00LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFFCgQYcw
cY7sWcwiEGnG4pOAwOYxwvNbDHSKRcmToYyRUsUbCwXBiq5ECWHl3Zulg0rpNqQc
RYLZFmta9Lme97Ey22FEN+Z21sUoSPrx0fykyB7H/R2gBI/GTjS/TIT8NVZzgf8D
gr0ZyLOCkDbxs6/eKt4/DDGit+Bz22LZ/Ecc72LG/i5JNUaArVHBngao/Bs5gKxV
AOE768fvrONDOJfRZ92NqI5/UPA4FiWxeW9bRPMc71PXVLmBuBSc3gSVc5Q8sNPE
srVgXQFAghtvN9vX8KeISToeMY9t/QMO1gI95x2uv5lsK0lu3oW3gqQyvit7HLCV
6jNEqshtEEl8IA==
-----END CERTIFICATE-----
Generated at Sun Sep 7 13:50:24 2025 by rpki-client