Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
File: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft (raw, json)
Hash identifier: xONkZPPA1QfTEJgr2ZXBsBx6YeSzm0YZUKIwKB4WyJw=
Subject key identifier: F6:E1:E4:BD:CE:C0:A2:C2:70:BC:A3:92:3B:1E:96:E7:AD:2B:9A:91
Authority key identifier: 54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
Certificate issuer: /CN=54126f3a35539a0cd05dee05cf73300609771da0
Certificate serial: 0197488CC75B11A307E3BC1DB6B01B7C6495
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 04:01:14 +0000
Manifest this update: Sat 07 Jun 2025 04:01:14 +0000
Manifest next update: Sun 08 Jun 2025 04:01:14 +0000
Files and hashes: 1: VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl (hash: +XmlAPdsXAEv9ZZMjf11CQbRxmL1taNFKPcM8wnS1Yk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:c7:5b:11:a3:07:e3:bc:1d:b6:b0:1b:7c:64:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54126f3a35539a0cd05dee05cf73300609771da0
Validity
Not Before: Jun 7 04:01:14 2025 GMT
Not After : Jun 8 04:01:14 2025 GMT
Subject: CN=f6e1e4bdcec0a2c270bca3923b1e96e7ad2b9a91
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:99:c5:77:1e:f0:3f:23:28:d1:c0:01:ed:62:
d6:1c:e5:2a:e6:70:8c:3e:ae:b7:3f:bd:fe:4b:e1:
27:7a:24:92:95:29:a4:7e:4e:47:c9:c0:98:06:6b:
6e:c0:de:0f:3b:fe:82:5f:b0:df:df:12:ae:ca:87:
95:bf:e8:16:3a:c6:90:b9:d8:5a:34:ab:91:98:2f:
0e:08:b0:b4:1c:84:0d:21:35:b7:fa:96:a6:42:6d:
fe:5b:4c:5d:98:46:3c:12:e3:cc:d3:11:db:b1:31:
ba:36:06:a6:e2:ae:12:b7:3b:3c:16:ac:b4:e4:45:
4a:c5:22:19:e5:8b:f5:33:a3:c7:9c:34:17:8e:34:
17:28:e7:6f:42:85:81:fa:af:12:87:d2:81:a7:76:
50:06:06:29:9c:2b:66:db:b5:0c:21:90:30:7c:63:
8d:47:d2:b2:5f:ba:eb:85:99:3d:ca:ed:d9:4e:a1:
46:9f:a7:e1:9a:4c:78:8c:26:c7:9c:9a:d4:af:bd:
11:e0:e9:10:be:76:3e:36:3f:c2:0c:c0:48:e1:fe:
ae:ef:2d:bf:9f:6e:26:ef:88:c1:e3:05:45:86:f2:
b9:c7:3a:5f:b9:24:03:0d:92:cd:30:68:9b:06:24:
02:15:bd:68:8c:47:02:32:b9:7f:d0:d6:36:cd:c7:
ca:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:E1:E4:BD:CE:C0:A2:C2:70:BC:A3:92:3B:1E:96:E7:AD:2B:9A:91
X509v3 Authority Key Identifier:
keyid:54:12:6F:3A:35:53:9A:0C:D0:5D:EE:05:CF:73:30:06:09:77:1D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/eac357-f7a0-41bf-ad59-f71745b35da0/1/VBJvOjVTmgzQXe4Fz3MwBgl3HaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:e9:f4:54:93:26:3e:2e:c9:a3:f6:0f:56:02:3f:30:a1:8c:
79:5e:c1:3f:9f:da:18:82:81:54:ad:f3:c6:67:60:b7:71:23:
1b:ff:f4:dd:71:7d:cf:83:85:35:4b:aa:6d:80:64:51:96:6f:
ec:43:6f:2d:08:b6:13:43:56:7a:94:fd:54:7b:64:fe:d1:9f:
bb:b9:42:bd:16:bb:0a:21:a5:04:fd:32:53:5f:75:11:de:ee:
07:b9:73:b7:42:0f:52:29:52:a9:a0:12:1b:37:7b:81:b4:16:
c0:72:bc:7e:2e:c0:dc:df:99:89:87:85:4a:6b:22:75:4c:3a:
36:7a:64:ec:5a:7d:c4:e9:42:53:4f:de:1f:2e:7e:cb:bd:db:
da:c8:5b:42:39:7c:ea:e1:54:2b:1d:ba:cf:73:bb:b2:37:aa:
3a:fe:f5:a8:96:b3:3a:6b:46:a7:de:03:3e:c8:81:6f:c4:be:
7d:ee:74:bb:db:ed:86:9e:10:b1:6f:e1:6c:bf:99:39:b7:3a:
7c:c4:23:06:09:ba:4f:f8:d0:aa:9d:85:21:ca:a4:7e:f7:d0:
d4:95:2e:dc:f3:7b:e3:ad:a0:6c:10:c5:50:0f:28:28:77:83:
2a:e9:be:26:55:c4:b7:71:74:14:6c:49:95:bb:20:fb:63:a2:
ae:13:aa:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjMdbEaMH47wdtrAbfGSVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0MTI2ZjNhMzU1MzlhMGNkMDVkZWUwNWNmNzMzMDA2MDk3
NzFkYTAwHhcNMjUwNjA3MDQwMTE0WhcNMjUwNjA4MDQwMTE0WjAzMTEwLwYDVQQD
EyhmNmUxZTRiZGNlYzBhMmMyNzBiY2EzOTIzYjFlOTZlN2FkMmI5YTkxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4ZnFdx7wPyMo0cAB7WLWHOUq5nCM
Pq63P73+S+EneiSSlSmkfk5HycCYBmtuwN4PO/6CX7Df3xKuyoeVv+gWOsaQudha
NKuRmC8OCLC0HIQNITW3+pamQm3+W0xdmEY8EuPM0xHbsTG6Ngam4q4Stzs8Fqy0
5EVKxSIZ5Yv1M6PHnDQXjjQXKOdvQoWB+q8Sh9KBp3ZQBgYpnCtm27UMIZAwfGON
R9KyX7rrhZk9yu3ZTqFGn6fhmkx4jCbHnJrUr70R4OkQvnY+Nj/CDMBI4f6u7y2/
n24m74jB4wVFhvK5xzpfuSQDDZLNMGibBiQCFb1ojEcCMrl/0NY2zcfKlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbh5L3OwKLCcLyjkjseluetK5qRMB8GA1UdIwQY
MBaAFFQSbzo1U5oM0F3uBc9zMAYJdx2gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkJKdk9qVlRtZ3pRWGU0RnozTXdCZ2wzSGFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lYWMzNTctZjdhMC00MWJmLWFkNTkt
ZjcxNzQ1YjM1ZGEwLzEvVkJKdk9qVlRtZ3pRWGU0RnozTXdCZ2wzSGFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lYWMzNTctZjdhMC00MWJmLWFkNTktZjcxNzQ1YjM1ZGEw
LzEvVkJKdk9qVlRtZ3pRWGU0RnozTXdCZ2wzSGFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd+n0VJMm
Pi7Jo/YPVgI/MKGMeV7BP5/aGIKBVK3zxmdgt3EjG//03XF9z4OFNUuqbYBkUZZv
7ENvLQi2E0NWepT9VHtk/tGfu7lCvRa7CiGlBP0yU191Ed7uB7lzt0IPUilSqaAS
Gzd7gbQWwHK8fi7A3N+ZiYeFSmsidUw6Nnpk7Fp9xOlCU0/eHy5+y73b2shbQjl8
6uFUKx26z3O7sjeqOv71qJazOmtGp94DPsiBb8S+fe50u9vthp4QsW/hbL+ZObc6
fMQjBgm6T/jQqp2FIcqkfvfQ1JUu3PN7462gbBDFUA8oKHeDKum+JlXEt3F0FGxJ
lbsg+2OirhOqzA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:38:32 2025 by rpki-client