Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
File: vyOcd5D8PVd2JtW78YYeWcm0cK4.mft (raw, json)
Hash identifier: tSldVt8kJi06IrdZp0pUz33Z/SC8VnvUxUVasUG85YA=
Subject key identifier: 09:F8:FF:21:BC:03:11:96:9C:ED:0C:05:5A:66:87:BC:39:0D:32:CF
Authority key identifier: BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
Certificate issuer: /CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Certificate serial: 0197488C004EF2F4217C29637EB6D2D91EEF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
Manifest number: 1577
Signing time: Sat 07 Jun 2025 04:00:24 +0000
Manifest this update: Sat 07 Jun 2025 04:00:24 +0000
Manifest next update: Sun 08 Jun 2025 04:00:24 +0000
Files and hashes: 1: vyOcd5D8PVd2JtW78YYeWcm0cK4.crl (hash: PDphMuv0jsRdeXeq49aTGKIjHPEySU8sKHCqRoxOQZc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:00:4e:f2:f4:21:7c:29:63:7e:b6:d2:d9:1e:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf239c7790fc3d577626d5bbf1861e59c9b470ae
Validity
Not Before: Jun 7 04:00:24 2025 GMT
Not After : Jun 8 04:00:24 2025 GMT
Subject: CN=09f8ff21bc0311969ced0c055a6687bc390d32cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:42:2e:cc:e8:b1:6a:7a:d0:7f:4c:34:20:a5:
b5:6d:62:1f:0e:dc:dd:7f:09:24:58:83:53:7e:12:
c0:d9:72:27:c1:68:fc:32:79:fb:fa:52:e8:15:31:
f2:01:89:19:d2:04:ac:a9:a9:28:a5:1b:54:31:f5:
02:1d:41:65:87:0c:40:34:f5:9d:97:33:77:0c:45:
20:a7:a9:ff:f3:6f:7a:63:3c:2b:cd:04:28:1f:f2:
f8:62:ed:b1:25:bc:d6:10:9f:3e:3c:95:1a:85:4a:
66:71:30:e7:5a:e4:ae:dd:40:1e:13:b7:ae:22:d2:
87:03:ba:77:3e:62:63:e2:93:a8:13:48:0b:c3:73:
3e:4c:91:4b:8e:2b:15:c9:13:29:91:a1:eb:df:7a:
67:37:7d:c1:44:55:68:20:cf:23:26:8c:af:e9:a2:
41:51:e6:d7:a8:87:20:82:fa:61:28:09:16:56:4d:
60:cf:3b:e2:f0:4f:32:c0:61:fb:10:21:3c:b3:37:
8c:7b:38:e4:24:ee:77:c4:1d:93:d9:e3:83:2d:03:
91:a4:03:e3:2a:a0:35:41:f4:f6:46:91:5a:9f:dd:
c3:f6:83:eb:9b:d2:74:c8:ab:3f:ac:48:16:51:cd:
6c:6e:78:a7:40:5e:c6:2b:9d:ad:e2:cf:97:95:b5:
7e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
09:F8:FF:21:BC:03:11:96:9C:ED:0C:05:5A:66:87:BC:39:0D:32:CF
X509v3 Authority Key Identifier:
keyid:BF:23:9C:77:90:FC:3D:57:76:26:D5:BB:F1:86:1E:59:C9:B4:70:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vyOcd5D8PVd2JtW78YYeWcm0cK4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0deec-7233-42f3-8767-b5503a32edfe/1/vyOcd5D8PVd2JtW78YYeWcm0cK4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:f2:99:44:17:e0:8a:94:e7:1f:96:8e:fc:65:7f:3e:50:f2:
67:f4:d6:67:aa:0c:d7:aa:08:43:3d:d6:08:ad:4b:c8:20:eb:
98:33:90:b8:4b:18:7c:8b:02:67:b3:09:cb:af:67:da:bc:98:
a6:38:10:51:3a:a2:47:26:08:7d:f7:d2:06:c7:c6:53:a8:99:
0e:ae:2c:70:f6:1a:44:f9:0b:1f:33:21:06:f0:e3:2f:dc:f2:
e7:a7:77:2a:3a:9a:8d:0c:d0:7c:66:eb:ec:ff:c0:70:bf:86:
fb:ab:36:cb:2f:f2:21:6d:e9:b1:6e:bc:ce:30:99:29:e4:8f:
93:ab:45:d7:ab:22:9d:9b:21:60:f2:c6:c6:07:6d:2e:6b:0e:
e6:4b:bd:32:d7:70:1c:76:4a:ed:6b:bd:60:11:59:eb:86:e0:
0c:36:5c:6e:0a:33:1c:e5:e4:c3:07:9e:52:7c:db:0e:84:ad:
c5:f0:53:0b:d6:41:ac:c3:b4:fa:63:ab:4e:55:6a:94:ea:23:
10:e7:25:fd:82:15:eb:68:8c:3a:8e:70:3a:d7:89:0e:49:da:
09:37:0e:e9:be:46:a7:49:f8:b3:e4:ec:a1:33:f1:cb:9f:b0:
85:95:d5:4f:b8:1a:8b:c1:44:c8:7c:0d:7d:4f:e2:c8:c7:f0:
8e:66:e5:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjABO8vQhfCljfrbS2R7vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmMjM5Yzc3OTBmYzNkNTc3NjI2ZDViYmYxODYxZTU5Yzli
NDcwYWUwHhcNMjUwNjA3MDQwMDI0WhcNMjUwNjA4MDQwMDI0WjAzMTEwLwYDVQQD
EygwOWY4ZmYyMWJjMDMxMTk2OWNlZDBjMDU1YTY2ODdiYzM5MGQzMmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAykIuzOixanrQf0w0IKW1bWIfDtzd
fwkkWINTfhLA2XInwWj8Mnn7+lLoFTHyAYkZ0gSsqakopRtUMfUCHUFlhwxANPWd
lzN3DEUgp6n/8296YzwrzQQoH/L4Yu2xJbzWEJ8+PJUahUpmcTDnWuSu3UAeE7eu
ItKHA7p3PmJj4pOoE0gLw3M+TJFLjisVyRMpkaHr33pnN33BRFVoIM8jJoyv6aJB
UebXqIcggvphKAkWVk1gzzvi8E8ywGH7ECE8szeMezjkJO53xB2T2eODLQORpAPj
KqA1QfT2RpFan93D9oPrm9J0yKs/rEgWUc1sbninQF7GK52t4s+XlbV+kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAn4/yG8AxGWnO0MBVpmh7w5DTLPMB8GA1UdIwQY
MBaAFL8jnHeQ/D1XdibVu/GGHlnJtHCuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGRlZWMtNzIzMy00MmYzLTg3Njct
YjU1MDNhMzJlZGZlLzEvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iMGRlZWMtNzIzMy00MmYzLTg3NjctYjU1MDNhMzJlZGZl
LzEvdnlPY2Q1RDhQVmQySnRXNzhZWWVXY20wY0s0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm/KZRBfg
ipTnH5aO/GV/PlDyZ/TWZ6oM16oIQz3WCK1LyCDrmDOQuEsYfIsCZ7MJy69n2ryY
pjgQUTqiRyYIfffSBsfGU6iZDq4scPYaRPkLHzMhBvDjL9zy56d3KjqajQzQfGbr
7P/AcL+G+6s2yy/yIW3psW68zjCZKeSPk6tF16sinZshYPLGxgdtLmsO5ku9Mtdw
HHZK7Wu9YBFZ64bgDDZcbgozHOXkwweeUnzbDoStxfBTC9ZBrMO0+mOrTlVqlOoj
EOcl/YIV62iMOo5wOteJDknaCTcO6b5Gp0n4s+TsoTPxy5+whZXVT7gai8FEyHwN
fU/iyMfwjmbl+g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:30:34 2025 by rpki-client