Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
File: VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft (raw, json)
Hash identifier: B8mll5h0Ub6Cg+SRtIegbQUs3EG7eOh0SL26oyjaaUg=
Subject key identifier: F2:53:A9:B6:C0:BD:C5:95:38:2F:63:FF:02:F6:65:49:DB:D3:ED:CB
Authority key identifier: 54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
Certificate issuer: /CN=54ba45608c008224ff23268abe03e04cd318009c
Certificate serial: 019747B0C20B27A3B86D7207DAC10C158B68
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
Manifest number: 03D7
Signing time: Sat 07 Jun 2025 00:00:55 +0000
Manifest this update: Sat 07 Jun 2025 00:00:55 +0000
Manifest next update: Sun 08 Jun 2025 00:00:55 +0000
Files and hashes: 1: VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl (hash: UM+ezuvHAQJn4GNsbCc7WUUQ64wireICbV0rGdTcHZY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:b0:c2:0b:27:a3:b8:6d:72:07:da:c1:0c:15:8b:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=54ba45608c008224ff23268abe03e04cd318009c
Validity
Not Before: Jun 7 00:00:55 2025 GMT
Not After : Jun 8 00:00:55 2025 GMT
Subject: CN=f253a9b6c0bdc595382f63ff02f66549dbd3edcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:1e:19:94:c2:be:39:25:e8:3f:70:04:bb:8e:
19:79:9f:55:02:0e:84:7c:e5:bc:ad:aa:31:1e:c8:
49:0f:1f:3c:02:a9:ee:6d:d3:27:a8:eb:c6:ea:66:
36:4e:e7:1e:a6:ea:78:df:b4:57:c0:92:dc:26:0e:
ad:09:66:91:88:23:4c:16:f5:01:06:57:f3:f0:a2:
a6:93:4c:5e:d4:eb:f1:9d:f9:82:2b:d0:7b:e6:de:
e1:06:11:1c:24:28:c7:d9:d6:c3:79:2d:dc:00:4c:
f5:1d:b5:9b:26:81:1b:ab:cc:34:22:52:7a:cc:54:
c8:e5:fc:e2:a9:f5:74:3d:29:4c:36:e6:89:c5:36:
3b:38:cb:a8:b1:a1:00:f5:1c:ca:16:ed:02:7f:11:
46:13:f0:58:71:3a:0b:d8:25:85:65:b1:f7:76:fb:
9c:4b:83:bb:d5:a8:7d:29:e3:b6:d2:b3:46:fe:34:
72:2f:cf:cf:51:3b:f9:a6:2a:7c:5a:b5:0b:6b:66:
66:93:2b:5f:41:0b:9e:e0:c1:d3:f1:b3:e5:d8:1f:
a4:f1:b6:63:ae:90:9d:be:78:a6:cd:38:d5:64:95:
05:74:f1:03:a7:91:d2:0f:0c:e4:ac:b4:42:0b:c5:
24:75:35:cf:84:c7:10:f9:99:83:34:65:d4:7c:67:
b6:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:53:A9:B6:C0:BD:C5:95:38:2F:63:FF:02:F6:65:49:DB:D3:ED:CB
X509v3 Authority Key Identifier:
keyid:54:BA:45:60:8C:00:82:24:FF:23:26:8A:BE:03:E0:4C:D3:18:00:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VLpFYIwAgiT_IyaKvgPgTNMYAJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fa/db6efc-388a-499b-afc3-60846df88945/1/VLpFYIwAgiT_IyaKvgPgTNMYAJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:84:52:3c:64:22:9c:d4:b9:15:9f:f0:50:42:b4:0f:39:38:
ab:6b:bf:01:40:42:b0:c8:e6:44:c2:d7:0d:54:95:7e:2e:48:
bd:32:06:3b:cb:87:7c:36:9e:37:c2:e4:00:bb:0b:c7:bf:8a:
97:06:fa:3c:48:9c:e3:7e:23:dc:a0:ab:72:d4:a8:7d:8f:c8:
9e:0b:84:11:a0:a7:dd:4e:1f:ae:08:77:d6:f5:ae:28:cd:aa:
c2:68:12:79:b9:20:80:31:56:b2:5f:bb:09:cb:e1:91:87:95:
30:02:95:5b:37:10:f6:b5:a6:24:b3:df:bc:12:15:48:11:14:
aa:90:13:0a:55:55:e1:cb:84:f3:6e:ab:3d:b7:8b:54:99:e2:
a1:a6:86:6e:47:03:d3:cb:05:8c:09:4e:46:aa:b4:51:b7:f0:
83:81:a3:6e:bf:5e:05:ba:97:a4:be:3d:ff:62:1a:ce:84:f1:
5c:40:65:ca:47:89:30:6f:a2:c5:7b:84:48:b6:e4:e8:3a:3d:
83:5f:57:48:e2:ae:b8:6f:e6:27:69:34:04:bd:85:18:e7:57:
5d:60:c5:fd:17:57:d3:2e:5c:dc:0c:1e:47:65:54:4f:a7:da:
9c:3a:f0:3d:f2:f0:05:7e:2a:3e:8f:b8:67:67:90:af:81:14:
10:3d:ff:47
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHsMILJ6O4bXIH2sEMFYtoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU0YmE0NTYwOGMwMDgyMjRmZjIzMjY4YWJlMDNlMDRjZDMx
ODAwOWMwHhcNMjUwNjA3MDAwMDU1WhcNMjUwNjA4MDAwMDU1WjAzMTEwLwYDVQQD
EyhmMjUzYTliNmMwYmRjNTk1MzgyZjYzZmYwMmY2NjU0OWRiZDNlZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuB4ZlMK+OSXoP3AEu44ZeZ9VAg6E
fOW8raoxHshJDx88AqnubdMnqOvG6mY2Tucepup437RXwJLcJg6tCWaRiCNMFvUB
Blfz8KKmk0xe1OvxnfmCK9B75t7hBhEcJCjH2dbDeS3cAEz1HbWbJoEbq8w0IlJ6
zFTI5fziqfV0PSlMNuaJxTY7OMuosaEA9RzKFu0CfxFGE/BYcToL2CWFZbH3dvuc
S4O71ah9KeO20rNG/jRyL8/PUTv5pip8WrULa2ZmkytfQQue4MHT8bPl2B+k8bZj
rpCdvnimzTjVZJUFdPEDp5HSDwzkrLRCC8UkdTXPhMcQ+ZmDNGXUfGe2mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPJTqbbAvcWVOC9j/wL2ZUnb0+3LMB8GA1UdIwQY
MBaAFFS6RWCMAIIk/yMmir4D4EzTGACcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVkxwRllJd0FnaVRfSXlhS3ZnUGdUTk1ZQUp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYS9kYjZlZmMtMzg4YS00OTliLWFmYzMt
NjA4NDZkZjg4OTQ1LzEvVkxwRllJd0FnaVRfSXlhS3ZnUGdUTk1ZQUp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYS9kYjZlZmMtMzg4YS00OTliLWFmYzMtNjA4NDZkZjg4OTQ1
LzEvVkxwRllJd0FnaVRfSXlhS3ZnUGdUTk1ZQUp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQoRSPGQi
nNS5FZ/wUEK0Dzk4q2u/AUBCsMjmRMLXDVSVfi5IvTIGO8uHfDaeN8LkALsLx7+K
lwb6PEic434j3KCrctSofY/InguEEaCn3U4frgh31vWuKM2qwmgSebkggDFWsl+7
CcvhkYeVMAKVWzcQ9rWmJLPfvBIVSBEUqpATClVV4cuE826rPbeLVJnioaaGbkcD
08sFjAlORqq0Ubfwg4Gjbr9eBbqXpL49/2IazoTxXEBlykeJMG+ixXuESLbk6Do9
g19XSOKuuG/mJ2k0BL2FGOdXXWDF/RdX0y5c3AweR2VUT6fanDrwPfLwBX4qPo+4
Z2eQr4EUED3/Rw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:36:59 2025 by rpki-client