Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
File: ViVsbA6dSVdlruOixqdPWAqzZqo.mft (raw, json)
Hash identifier: MU6sZOv8dooZjbj/egL1y2cWAeGBDZAna42lWoS0pHY=
Subject key identifier: DC:F4:E3:67:A4:C6:12:5D:C2:9E:CE:D6:35:67:9C:AB:80:E0:DB:97
Authority key identifier: 56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA
Certificate issuer: /CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
Certificate serial: 0199228CB1AE760F49AD853769AF2D480356
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
Manifest number: 166D
Signing time: Sun 07 Sep 2025 05:01:09 +0000
Manifest this update: Sun 07 Sep 2025 05:01:09 +0000
Manifest next update: Mon 08 Sep 2025 05:01:09 +0000
Files and hashes: 1: ViVsbA6dSVdlruOixqdPWAqzZqo.crl (hash: D2eG/1cambpChe4FVhEipqTLR5raXFEMAMlVuEkdJJo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8c:b1:ae:76:0f:49:ad:85:37:69:af:2d:48:03:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=56256c6c0e9d495765aee3a2c6a74f580ab366aa
Validity
Not Before: Sep 7 05:01:09 2025 GMT
Not After : Sep 8 05:01:09 2025 GMT
Subject: CN=dcf4e367a4c6125dc29eced635679cab80e0db97
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ce:aa:2e:b7:fa:1c:63:b0:2a:e7:4e:cd:68:d3:
94:3a:f0:87:88:98:62:d1:d9:93:d6:2c:81:77:4a:
f8:e7:f5:fb:23:dd:dc:35:6d:b3:6c:ff:14:e8:c1:
41:7d:51:5c:3e:4e:00:73:91:d8:cd:47:76:4e:4a:
1c:8b:da:50:a3:d9:36:c7:59:21:31:05:a5:76:65:
ac:8b:55:a5:a9:fd:9a:f9:e9:a7:22:13:04:ea:af:
b3:7c:e4:b1:8b:e0:21:b1:e6:1c:6a:ed:51:44:f3:
27:2c:23:ed:b7:0c:de:e8:8b:a2:ca:93:99:23:b3:
9b:ab:6a:08:c4:70:79:31:6a:ed:6f:df:6e:e4:cf:
6f:7a:8d:ae:b5:9d:93:65:8b:56:4c:4d:8a:cf:21:
27:cb:41:36:06:32:2d:33:65:cc:b0:37:08:ca:71:
7c:23:f1:01:f0:c7:32:86:d4:b2:f8:1a:f8:24:24:
57:64:66:6f:64:d2:0e:80:a4:c7:ea:db:29:5d:66:
eb:52:83:df:25:c6:43:ed:78:5d:82:ee:d1:7d:3b:
d6:73:70:8f:93:c2:07:c1:91:77:44:3e:1c:cb:1d:
73:83:4d:40:ac:6d:69:77:be:cf:b2:48:38:46:30:
96:12:12:99:68:bf:a4:3e:15:dd:b7:b1:93:52:15:
d7:37
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DC:F4:E3:67:A4:C6:12:5D:C2:9E:CE:D6:35:67:9C:AB:80:E0:DB:97
X509v3 Authority Key Identifier:
keyid:56:25:6C:6C:0E:9D:49:57:65:AE:E3:A2:C6:A7:4F:58:0A:B3:66:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ViVsbA6dSVdlruOixqdPWAqzZqo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/0292d2-84c6-4b4b-b32b-e45f13883439/1/ViVsbA6dSVdlruOixqdPWAqzZqo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:ad:6f:74:c2:a4:d0:14:21:d4:33:db:29:34:b1:61:86:0e:
48:96:c1:cc:4b:ea:36:e6:80:fa:a7:68:a1:f4:0e:6b:b5:8f:
36:71:98:7e:89:86:e2:d3:3c:8e:c8:e4:d3:63:19:d4:64:8e:
0c:89:40:e5:23:e5:c7:6d:61:44:34:75:18:80:ea:c7:55:9e:
4d:37:4a:42:74:6e:c6:f2:cd:d7:55:7c:43:a9:53:bf:aa:91:
45:25:f6:f8:4f:1b:91:84:26:3d:37:ba:ec:01:09:f3:84:e7:
d3:1c:24:77:19:89:15:ee:eb:1d:32:59:e2:e1:e2:ae:5e:ae:
a2:c7:5e:2a:21:03:99:ed:9c:3f:a4:5a:b8:98:55:79:5f:c0:
3b:a8:59:27:48:bd:06:83:30:a9:dd:e6:97:33:57:f3:5d:b2:
56:b4:7c:09:7b:95:db:a9:c5:3b:7e:7e:35:4c:b9:a2:5b:90:
3c:4c:28:0f:53:1d:b8:ed:fe:44:54:33:c8:69:19:ac:a0:1d:
f8:b2:ac:9a:ca:4b:5a:2f:cb:f3:64:15:c0:fb:0f:12:aa:fb:
34:eb:7f:b4:5f:fd:c3:9e:8a:a7:d8:80:12:da:5a:b0:51:0d:
5c:9f:f8:d2:d4:25:88:c6:46:c1:f1:08:e1:a1:e3:f8:bb:16:
ed:c3:93:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijLGudg9JrYU3aa8tSANWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2MjU2YzZjMGU5ZDQ5NTc2NWFlZTNhMmM2YTc0ZjU4MGFi
MzY2YWEwHhcNMjUwOTA3MDUwMTA5WhcNMjUwOTA4MDUwMTA5WjAzMTEwLwYDVQQD
EyhkY2Y0ZTM2N2E0YzYxMjVkYzI5ZWNlZDYzNTY3OWNhYjgwZTBkYjk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzqout/ocY7Aq507NaNOUOvCHiJhi
0dmT1iyBd0r45/X7I93cNW2zbP8U6MFBfVFcPk4Ac5HYzUd2Tkoci9pQo9k2x1kh
MQWldmWsi1Wlqf2a+emnIhME6q+zfOSxi+AhseYcau1RRPMnLCPttwze6IuiypOZ
I7Obq2oIxHB5MWrtb99u5M9veo2utZ2TZYtWTE2KzyEny0E2BjItM2XMsDcIynF8
I/EB8McyhtSy+Br4JCRXZGZvZNIOgKTH6tspXWbrUoPfJcZD7Xhdgu7RfTvWc3CP
k8IHwZF3RD4cyx1zg01ArG1pd77Pskg4RjCWEhKZaL+kPhXdt7GTUhXXNwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNz042ekxhJdwp7O1jVnnKuA4NuXMB8GA1UdIwQY
MBaAFFYlbGwOnUlXZa7josanT1gKs2aqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVmlWc2JBNmRTVmRscnVPaXhxZFBXQXF6WnFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8wMjkyZDItODRjNi00YjRiLWIzMmIt
ZTQ1ZjEzODgzNDM5LzEvVmlWc2JBNmRTVmRscnVPaXhxZFBXQXF6WnFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8wMjkyZDItODRjNi00YjRiLWIzMmItZTQ1ZjEzODgzNDM5
LzEvVmlWc2JBNmRTVmRscnVPaXhxZFBXQXF6WnFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ61vdMKk
0BQh1DPbKTSxYYYOSJbBzEvqNuaA+qdoofQOa7WPNnGYfomG4tM8jsjk02MZ1GSO
DIlA5SPlx21hRDR1GIDqx1WeTTdKQnRuxvLN11V8Q6lTv6qRRSX2+E8bkYQmPTe6
7AEJ84Tn0xwkdxmJFe7rHTJZ4uHirl6uosdeKiEDme2cP6RauJhVeV/AO6hZJ0i9
BoMwqd3mlzNX812yVrR8CXuV26nFO35+NUy5oluQPEwoD1MduO3+RFQzyGkZrKAd
+LKsmspLWi/L82QVwPsPEqr7NOt/tF/9w56Kp9iAEtpasFENXJ/40tQliMZGwfEI
4aHj+LsW7cOT2A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 10:15:01 2025 by rpki-client