Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
File: X0cesf72NSCKxw5v4sVrAEd_C4w.mft (raw, json)
Hash identifier: yKVo3vexnvPwP0Qbsu6OzvkiBlnHyJzCrz4KmZ9tn8M=
Subject key identifier: 15:AE:CE:90:36:15:1E:05:4D:D2:26:01:65:5C:18:9E:85:FE:69:7E
Authority key identifier: 5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
Certificate issuer: /CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Certificate serial: 0197BAEC073149E5D4070D7C655A76D921AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
Manifest number: 14F1
Signing time: Sun 29 Jun 2025 09:01:59 +0000
Manifest this update: Sun 29 Jun 2025 09:01:59 +0000
Manifest next update: Mon 30 Jun 2025 09:01:59 +0000
Files and hashes: 1: X0cesf72NSCKxw5v4sVrAEd_C4w.crl (hash: IoLFQk90aSLjhEB5xpOnvKKZfAlvx+cwBnoZcCFO1ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:ec:07:31:49:e5:d4:07:0d:7c:65:5a:76:d9:21:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f471eb1fef635208ac70e6fe2c56b00477f0b8c
Validity
Not Before: Jun 29 09:01:59 2025 GMT
Not After : Jun 30 09:01:59 2025 GMT
Subject: CN=15aece9036151e054dd22601655c189e85fe697e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:54:da:60:ae:b2:05:29:30:24:69:d9:3d:b8:
33:9c:f4:56:43:d0:82:61:5e:a1:48:e0:28:5a:1f:
4c:b7:97:14:25:e8:8c:92:dc:20:a3:8a:06:49:53:
af:c0:3b:d6:36:c4:64:07:df:38:1d:2e:2a:81:a7:
ee:aa:c7:84:94:de:45:db:d7:7b:f6:e2:da:2d:a5:
a1:15:f2:79:cc:eb:ac:7c:dc:6b:26:5e:34:1a:b6:
f6:e7:73:86:54:c6:28:16:07:b6:db:27:81:88:18:
af:03:0b:91:fc:6a:54:cd:67:99:1f:06:2c:a0:49:
90:bd:f3:fa:65:8a:d1:26:7d:16:1f:89:4e:13:4b:
a0:98:69:6d:b9:41:01:f8:7b:85:2d:81:9a:7f:5d:
67:06:71:54:91:9f:9b:26:6a:a1:91:d1:a0:0e:2d:
07:8c:23:6e:40:8a:71:06:f3:b3:af:b5:0b:fd:08:
dc:1e:ce:7b:a1:a2:6f:b5:96:ab:80:c2:6c:00:bb:
0f:32:4f:bf:a0:40:b9:e7:3f:79:13:a4:fe:8b:1a:
78:4d:03:f5:9c:1d:8a:84:1f:e7:b6:2b:1f:d0:74:
4b:c5:4d:fb:dd:59:1e:e9:69:1a:3b:76:ac:2a:09:
1a:68:08:1d:b2:21:02:89:69:46:36:6c:59:f6:0a:
df:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
15:AE:CE:90:36:15:1E:05:4D:D2:26:01:65:5C:18:9E:85:FE:69:7E
X509v3 Authority Key Identifier:
keyid:5F:47:1E:B1:FE:F6:35:20:8A:C7:0E:6F:E2:C5:6B:00:47:7F:0B:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0cesf72NSCKxw5v4sVrAEd_C4w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/abb20f-8d66-4e2b-b1df-96c7cb8333c8/1/X0cesf72NSCKxw5v4sVrAEd_C4w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:3f:75:4f:df:85:89:78:ff:2e:2a:bc:5a:16:cb:be:33:00:
ad:42:36:29:86:c9:6c:1f:f1:5d:25:8e:84:e8:bf:44:8f:9d:
fc:1c:e9:24:2f:05:d5:59:c5:ab:b3:51:19:f5:39:00:d6:f6:
7e:bf:f7:68:30:d1:ba:d7:10:15:fd:bf:02:c2:91:3f:82:70:
6b:0a:38:66:eb:0b:b6:d0:76:f7:07:67:1e:5d:d6:50:e7:51:
50:c1:4a:e2:69:4f:a3:f1:6c:d2:a5:c8:92:c4:59:ac:33:a0:
72:f6:ad:39:fa:55:7a:2b:de:ce:45:e4:f9:5e:98:71:95:e0:
70:cf:94:22:75:f0:1e:93:58:b2:10:4e:46:aa:a4:30:99:c2:
e4:7d:60:4e:36:b3:b8:a6:c8:a4:2b:0e:a4:e8:c5:62:db:9d:
1d:d2:cc:15:4f:6a:b6:c5:0a:28:ee:64:85:e2:69:8a:6c:72:
af:64:3f:5a:f5:8b:63:c2:db:b4:fe:0f:4a:60:22:75:b1:b4:
a7:0e:ba:51:fb:9e:c3:4f:94:ac:a9:56:b8:e6:ba:79:8c:38:
1f:00:74:e6:73:83:61:2d:dc:8c:e2:61:ac:78:7a:93:7a:45:
a9:a2:71:00:9a:68:5f:d3:02:a1:8a:2d:3b:9a:ac:10:db:7c:
36:d7:96:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe67AcxSeXUBw18ZVp22SGrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNDcxZWIxZmVmNjM1MjA4YWM3MGU2ZmUyYzU2YjAwNDc3
ZjBiOGMwHhcNMjUwNjI5MDkwMTU5WhcNMjUwNjMwMDkwMTU5WjAzMTEwLwYDVQQD
EygxNWFlY2U5MDM2MTUxZTA1NGRkMjI2MDE2NTVjMTg5ZTg1ZmU2OTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt1TaYK6yBSkwJGnZPbgznPRWQ9CC
YV6hSOAoWh9Mt5cUJeiMktwgo4oGSVOvwDvWNsRkB984HS4qgafuqseElN5F29d7
9uLaLaWhFfJ5zOusfNxrJl40Grb253OGVMYoFge22yeBiBivAwuR/GpUzWeZHwYs
oEmQvfP6ZYrRJn0WH4lOE0ugmGltuUEB+HuFLYGaf11nBnFUkZ+bJmqhkdGgDi0H
jCNuQIpxBvOzr7UL/QjcHs57oaJvtZargMJsALsPMk+/oEC55z95E6T+ixp4TQP1
nB2KhB/ntisf0HRLxU373Vke6WkaO3asKgkaaAgdsiECiWlGNmxZ9grfRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBWuzpA2FR4FTdImAWVcGJ6F/ml+MB8GA1UdIwQY
MBaAFF9HHrH+9jUgiscOb+LFawBHfwuMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDBjZXNmNzJOU0NLeHc1djRzVnJBRWRfQzR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi9hYmIyMGYtOGQ2Ni00ZTJiLWIxZGYt
OTZjN2NiODMzM2M4LzEvWDBjZXNmNzJOU0NLeHc1djRzVnJBRWRfQzR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi9hYmIyMGYtOGQ2Ni00ZTJiLWIxZGYtOTZjN2NiODMzM2M4
LzEvWDBjZXNmNzJOU0NLeHc1djRzVnJBRWRfQzR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASD91T9+F
iXj/Liq8WhbLvjMArUI2KYbJbB/xXSWOhOi/RI+d/BzpJC8F1VnFq7NRGfU5ANb2
fr/3aDDRutcQFf2/AsKRP4Jwawo4ZusLttB29wdnHl3WUOdRUMFK4mlPo/Fs0qXI
ksRZrDOgcvatOfpVeivezkXk+V6YcZXgcM+UInXwHpNYshBORqqkMJnC5H1gTjaz
uKbIpCsOpOjFYtudHdLMFU9qtsUKKO5kheJpimxyr2Q/WvWLY8LbtP4PSmAidbG0
pw66Ufuew0+UrKlWuOa6eYw4HwB05nODYS3cjOJhrHh6k3pFqaJxAJpoX9MCoYot
O5qsENt8NteWQg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:25:30 2025 by rpki-client