
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
File: vgXqx8OvU1UcnmI2U906198VVLs.mft (raw, json)
Hash identifier: BuUi+ydaaKDkZQkKsWvgV+FbkhYIYvsWX/PO7+YwQA0=
Subject key identifier: 73:D5:49:DC:6C:5C:B3:96:85:75:8B:67:2A:49:90:F6:86:B2:12:72
Authority key identifier: BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
Certificate issuer: /CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Certificate serial: 0199228D015BF6B9A44477BF26263B113C0B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
Manifest number: 0753
Signing time: Sun 07 Sep 2025 05:01:30 +0000
Manifest this update: Sun 07 Sep 2025 05:01:30 +0000
Manifest next update: Mon 08 Sep 2025 05:01:30 +0000
Files and hashes: 1: vgXqx8OvU1UcnmI2U906198VVLs.crl (hash: 6aLq1ySwSob9ZmcozZc6R6gktoh+bgzlhzzO7pQ8KPc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 08 Sep 2025 05:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:22:8d:01:5b:f6:b9:a4:44:77:bf:26:26:3b:11:3c:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=be05eac7c3af53551c9e623653dd3ad7df1554bb
Validity
Not Before: Sep 7 05:01:30 2025 GMT
Not After : Sep 8 05:01:30 2025 GMT
Subject: CN=73d549dc6c5cb39685758b672a4990f686b21272
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:9b:8e:e6:be:b1:cf:ce:87:8a:69:0c:d6:c0:
38:64:58:be:63:1a:eb:65:5c:34:88:51:9e:c7:08:
ba:6c:02:74:55:77:cc:ed:25:64:c0:dd:cf:7e:f1:
9c:86:8d:53:01:70:73:e7:a7:97:a7:99:56:0d:79:
b9:3f:88:92:2b:58:2c:7a:6b:f8:3c:15:fa:f7:fb:
c3:5c:3d:bf:c1:62:04:16:b0:ee:b1:79:02:fb:8f:
79:bd:e0:fd:e8:c7:c5:2b:ef:45:2c:11:54:f1:02:
a9:80:62:79:71:a7:e9:8e:81:c7:55:1c:30:16:c2:
e2:f2:b8:8b:ba:9a:4c:42:c6:79:a5:5a:0c:61:44:
92:63:6f:59:50:89:65:78:0a:34:b6:1c:88:27:31:
ae:8b:f9:b3:6e:ea:07:83:88:a0:e3:5a:ca:dd:e3:
52:dd:99:c0:38:8d:ac:a5:d2:40:2c:d7:64:ac:9e:
a6:2a:38:2d:23:06:0f:2a:52:65:36:7a:f7:a7:37:
6a:fe:cd:21:56:ff:ad:9b:4b:b8:78:99:ab:84:13:
af:02:2c:99:89:81:7c:3f:b6:ca:3d:f4:21:7a:69:
80:0a:c2:33:f4:f1:23:ef:17:bc:f2:61:53:57:43:
91:1f:d6:a4:ea:a9:9f:46:05:5f:68:e7:da:12:22:
d8:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:D5:49:DC:6C:5C:B3:96:85:75:8B:67:2A:49:90:F6:86:B2:12:72
X509v3 Authority Key Identifier:
keyid:BE:05:EA:C7:C3:AF:53:55:1C:9E:62:36:53:DD:3A:D7:DF:15:54:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vgXqx8OvU1UcnmI2U906198VVLs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/b1901b-5de8-44e5-9f99-cfdaac0a62db/1/vgXqx8OvU1UcnmI2U906198VVLs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:83:a9:43:f7:12:34:52:f7:d4:f2:51:ca:ea:0a:bd:53:2f:
46:2d:80:ae:32:01:e3:d5:aa:01:6e:bb:23:f3:38:a0:12:b5:
ce:84:f6:69:c7:20:bf:63:c3:ee:1c:e6:01:e3:81:74:52:21:
7b:65:49:11:34:42:c6:44:c6:06:34:1f:ae:d0:9d:0f:a8:ea:
1f:6c:27:6b:d7:7c:a8:c0:ef:8a:aa:ec:fe:3b:84:f8:ac:25:
40:73:51:98:f2:bc:e7:2e:52:29:cc:f9:5f:92:cb:66:1b:fa:
e0:4c:23:3e:31:e5:ca:10:f6:20:4b:b1:30:d5:2e:b7:42:57:
8d:9e:ca:88:1c:4f:d7:8d:fb:d3:97:6f:f7:56:9d:a8:6e:39:
0d:ff:66:f5:cc:b2:14:cd:83:98:7f:51:81:1b:ba:f2:0d:d9:
c9:23:dc:e9:dc:c3:72:fe:0a:be:c5:91:2b:1e:6d:9a:d7:83:
8e:53:7a:dd:da:6a:34:cc:78:27:ef:32:47:dc:01:a6:78:bd:
66:da:40:b7:26:8d:9e:8d:2a:5f:b9:37:c8:48:c1:df:d3:95:
98:df:1a:d5:64:53:e4:72:9b:e8:c9:11:8e:56:5e:69:43:a7:
42:0b:53:f4:8f:2d:80:7d:63:e5:2b:6e:00:68:cd:c8:69:1c:
05:d0:f9:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZkijQFb9rmkRHe/JiY7ETwLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJlMDVlYWM3YzNhZjUzNTUxYzllNjIzNjUzZGQzYWQ3ZGYx
NTU0YmIwHhcNMjUwOTA3MDUwMTMwWhcNMjUwOTA4MDUwMTMwWjAzMTEwLwYDVQQD
Eyg3M2Q1NDlkYzZjNWNiMzk2ODU3NThiNjcyYTQ5OTBmNjg2YjIxMjcyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsZuO5r6xz86HimkM1sA4ZFi+Yxrr
ZVw0iFGexwi6bAJ0VXfM7SVkwN3PfvGcho1TAXBz56eXp5lWDXm5P4iSK1gsemv4
PBX69/vDXD2/wWIEFrDusXkC+495veD96MfFK+9FLBFU8QKpgGJ5cafpjoHHVRww
FsLi8riLuppMQsZ5pVoMYUSSY29ZUIlleAo0thyIJzGui/mzbuoHg4ig41rK3eNS
3ZnAOI2spdJALNdkrJ6mKjgtIwYPKlJlNnr3pzdq/s0hVv+tm0u4eJmrhBOvAiyZ
iYF8P7bKPfQhemmACsIz9PEj7xe88mFTV0ORH9ak6qmfRgVfaOfaEiLYowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHPVSdxsXLOWhXWLZypJkPaGshJyMB8GA1UdIwQY
MBaAFL4F6sfDr1NVHJ5iNlPdOtffFVS7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdmdYcXg4T3ZVMVVjbm1JMlU5MDYxOThWVkxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy9iMTkwMWItNWRlOC00NGU1LTlmOTkt
Y2ZkYWFjMGE2MmRiLzEvdmdYcXg4T3ZVMVVjbm1JMlU5MDYxOThWVkxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy9iMTkwMWItNWRlOC00NGU1LTlmOTktY2ZkYWFjMGE2MmRi
LzEvdmdYcXg4T3ZVMVVjbm1JMlU5MDYxOThWVkxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGYOpQ/cS
NFL31PJRyuoKvVMvRi2ArjIB49WqAW67I/M4oBK1zoT2accgv2PD7hzmAeOBdFIh
e2VJETRCxkTGBjQfrtCdD6jqH2wna9d8qMDviqrs/juE+KwlQHNRmPK85y5SKcz5
X5LLZhv64EwjPjHlyhD2IEuxMNUut0JXjZ7KiBxP143705dv91adqG45Df9m9cyy
FM2DmH9RgRu68g3ZySPc6dzDcv4KvsWRKx5tmteDjlN63dpqNMx4J+8yR9wBpni9
ZtpAtyaNno0qX7k3yEjB39OVmN8a1WRT5HKb6MkRjlZeaUOnQgtT9I8tgH1j5Stu
AGjNyGkcBdD5+A==
-----END CERTIFICATE-----
Generated at Sun Sep 7 12:20:26 2025 by rpki-client