
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
File: vfSGpExRBdeBNXKUVhzMPROk1nE.mft (raw, json)
Hash identifier: 8km4PYEH1aLgUHvFfyPVdAQQ/PTM7xWmlgAmhUP/D1c=
Subject key identifier: 23:42:DD:24:E4:6E:AC:52:00:1C:24:BD:04:1B:70:E5:C4:DB:8E:30
Authority key identifier: BD:F4:86:A4:4C:51:05:D7:81:35:72:94:56:1C:CC:3D:13:A4:D6:71
Certificate issuer: /CN=bdf486a44c5105d781357294561ccc3d13a4d671
Certificate serial: 019750B43530D46F0D5663580BCAA4FDBE4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
Manifest number: 07F0
Signing time: Sun 08 Jun 2025 18:01:16 +0000
Manifest this update: Sun 08 Jun 2025 18:01:16 +0000
Manifest next update: Mon 09 Jun 2025 18:01:16 +0000
Files and hashes: 1: vfSGpExRBdeBNXKUVhzMPROk1nE.crl (hash: +Li1mpqHre0lDlKSXmevF+LnBl0N+GYzaXlwBoZkoHw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:35:30:d4:6f:0d:56:63:58:0b:ca:a4:fd:be:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bdf486a44c5105d781357294561ccc3d13a4d671
Validity
Not Before: Jun 8 18:01:16 2025 GMT
Not After : Jun 9 18:01:16 2025 GMT
Subject: CN=2342dd24e46eac52001c24bd041b70e5c4db8e30
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:7b:1d:25:68:6c:34:99:bd:60:f7:2a:e4:72:
ac:f1:fc:43:2f:4b:84:47:b6:3c:f9:1d:88:f7:73:
01:e1:41:94:97:04:4e:ab:18:b3:bb:53:ab:d1:ba:
8d:81:5f:92:1e:2b:14:12:73:9c:7c:63:f4:62:9a:
90:d2:4a:f2:d7:92:7a:fa:e3:1f:31:90:eb:06:d2:
7b:73:ea:75:49:3e:6e:a6:ac:c7:59:92:0e:37:be:
85:9e:21:eb:92:63:3f:23:05:c1:59:76:54:6f:2e:
e4:1d:03:c2:01:bc:39:5d:df:0c:6d:b0:fc:61:75:
ad:3c:99:c2:fb:e6:56:a6:0e:7d:ec:bf:4b:55:7e:
18:f1:86:d1:1d:7c:f9:53:c0:f1:51:62:4a:32:f8:
99:d8:75:41:fe:0d:81:9b:ff:61:33:08:14:3e:07:
4b:83:a9:fa:71:96:d4:86:a8:5f:43:85:86:41:b6:
b8:d4:15:ff:57:ec:1b:56:a2:e1:71:2c:d7:b8:d5:
99:ca:bb:fe:3f:c0:63:c9:32:e7:45:23:24:3a:b2:
c6:0e:65:31:71:b0:7a:10:13:5a:eb:1f:2e:9e:3a:
d0:93:3a:18:f5:41:f8:87:0a:39:d8:b3:41:64:7a:
5a:df:ba:9c:6c:11:10:d6:e5:78:62:f3:37:1d:81:
81:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:42:DD:24:E4:6E:AC:52:00:1C:24:BD:04:1B:70:E5:C4:DB:8E:30
X509v3 Authority Key Identifier:
keyid:BD:F4:86:A4:4C:51:05:D7:81:35:72:94:56:1C:CC:3D:13:A4:D6:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vfSGpExRBdeBNXKUVhzMPROk1nE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/b8b278-f9bd-40e1-803a-f691f64758ac/1/vfSGpExRBdeBNXKUVhzMPROk1nE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7c:eb:82:5c:2e:48:63:e1:a2:51:51:6d:e6:d7:58:c1:53:01:
c1:6f:29:62:bd:62:c2:cc:9d:ec:df:e2:ce:23:04:3f:8a:db:
55:cc:a6:79:28:6d:43:93:e5:ba:13:ba:65:b8:78:17:f0:60:
29:3e:fc:06:a8:87:c2:45:4c:c5:d4:8a:24:97:93:96:2f:8d:
4e:b4:28:88:ff:0e:71:eb:78:eb:70:61:e3:16:67:93:81:5a:
7d:63:60:f4:d3:7d:d0:55:d4:31:e3:c8:27:ec:ee:1f:1d:94:
fa:76:dd:dd:17:94:7d:0d:1a:05:c2:09:3b:95:08:94:c2:6e:
23:91:86:9a:ce:18:85:68:31:28:7f:09:60:04:de:b2:03:79:
9f:3f:25:c7:cf:da:a7:92:5c:66:e9:4b:f7:89:b9:df:d2:1f:
5c:ef:e9:97:ed:5f:64:23:57:38:f6:be:06:7a:66:6b:1b:43:
1b:18:ff:b0:9b:f9:2b:82:70:63:8a:93:c1:ef:d8:64:92:f4:
35:5d:e0:d7:87:d7:e7:ac:54:7f:59:91:35:9e:78:38:ba:8c:
db:a2:e3:6c:ed:92:c4:f5:7f:5a:ba:94:60:cf:ab:b4:83:fa:
1e:05:77:ca:94:15:67:db:52:d8:54:97:d3:6a:94:1c:59:e4:
72:5a:d2:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQtDUw1G8NVmNYC8qk/b5KMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkZjQ4NmE0NGM1MTA1ZDc4MTM1NzI5NDU2MWNjYzNkMTNh
NGQ2NzEwHhcNMjUwNjA4MTgwMTE2WhcNMjUwNjA5MTgwMTE2WjAzMTEwLwYDVQQD
EygyMzQyZGQyNGU0NmVhYzUyMDAxYzI0YmQwNDFiNzBlNWM0ZGI4ZTMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHsdJWhsNJm9YPcq5HKs8fxDL0uE
R7Y8+R2I93MB4UGUlwROqxizu1Or0bqNgV+SHisUEnOcfGP0YpqQ0kry15J6+uMf
MZDrBtJ7c+p1ST5upqzHWZION76FniHrkmM/IwXBWXZUby7kHQPCAbw5Xd8MbbD8
YXWtPJnC++ZWpg597L9LVX4Y8YbRHXz5U8DxUWJKMviZ2HVB/g2Bm/9hMwgUPgdL
g6n6cZbUhqhfQ4WGQba41BX/V+wbVqLhcSzXuNWZyrv+P8BjyTLnRSMkOrLGDmUx
cbB6EBNa6x8unjrQkzoY9UH4hwo52LNBZHpa37qcbBEQ1uV4YvM3HYGBmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCNC3STkbqxSABwkvQQbcOXE244wMB8GA1UdIwQY
MBaAFL30hqRMUQXXgTVylFYczD0TpNZxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmZTR3BFeFJCZGVCTlhLVVZoek1QUk9rMW5FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi9iOGIyNzgtZjliZC00MGUxLTgwM2Et
ZjY5MWY2NDc1OGFjLzEvdmZTR3BFeFJCZGVCTlhLVVZoek1QUk9rMW5FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi9iOGIyNzgtZjliZC00MGUxLTgwM2EtZjY5MWY2NDc1OGFj
LzEvdmZTR3BFeFJCZGVCTlhLVVZoek1QUk9rMW5FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfOuCXC5I
Y+GiUVFt5tdYwVMBwW8pYr1iwsyd7N/iziMEP4rbVcymeShtQ5PluhO6Zbh4F/Bg
KT78BqiHwkVMxdSKJJeTli+NTrQoiP8Ocet463Bh4xZnk4FafWNg9NN90FXUMePI
J+zuHx2U+nbd3ReUfQ0aBcIJO5UIlMJuI5GGms4YhWgxKH8JYATesgN5nz8lx8/a
p5JcZulL94m539IfXO/pl+1fZCNXOPa+BnpmaxtDGxj/sJv5K4JwY4qTwe/YZJL0
NV3g14fX56xUf1mRNZ54OLqM26LjbO2SxPV/WrqUYM+rtIP6HgV3ypQVZ9tS2FSX
02qUHFnkclrS+w==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:40:54 2025 by rpki-client