Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
File: prEMlxD_hEDaQeVJvif-h38Uuwc.mft (raw, json)
Hash identifier: QKKZz99RknF/LNi8n+4VABStilpsplf8DBqjrASdA48=
Subject key identifier: 51:40:9F:C3:2C:D7:6D:27:56:1E:63:F1:A0:06:36:AA:D9:89:43:29
Authority key identifier: A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
Certificate issuer: /CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Certificate serial: 0197B6A206E8DC09BF02AA3115330B4900F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
Manifest number: 0911
Signing time: Sat 28 Jun 2025 13:02:41 +0000
Manifest this update: Sat 28 Jun 2025 13:02:41 +0000
Manifest next update: Sun 29 Jun 2025 13:02:41 +0000
Files and hashes: 1: prEMlxD_hEDaQeVJvif-h38Uuwc.crl (hash: DVXvtRe+nSYQdjrASoOwEn0eS8x3R49CETQiBsoBALg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:06:e8:dc:09:bf:02:aa:31:15:33:0b:49:00:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Validity
Not Before: Jun 28 13:02:41 2025 GMT
Not After : Jun 29 13:02:41 2025 GMT
Subject: CN=51409fc32cd76d27561e63f1a00636aad9894329
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:d5:0a:a6:47:79:f0:45:53:71:6b:71:32:46:
a9:f7:6a:36:9b:33:f1:d6:7f:4f:23:7b:21:68:1c:
92:41:14:88:bb:d9:06:14:2a:1b:7e:53:9a:01:06:
72:9c:c6:61:39:83:d0:75:7b:6b:74:4e:7f:79:22:
e3:4c:b1:bb:26:2d:c4:5e:69:3b:e1:94:cb:a4:04:
2c:d1:ef:fd:e7:3a:dc:34:ef:fc:d2:0e:9c:9b:25:
99:8e:d2:c8:c8:bb:30:ad:f7:54:3c:5e:53:55:8c:
14:0e:c0:95:cd:36:0b:09:5b:75:df:de:23:dc:fc:
45:09:5a:ea:d2:fd:ea:16:68:22:10:a2:53:f0:02:
6b:52:8c:b6:bd:2d:e4:e9:91:fd:6f:a1:bd:e5:58:
ba:64:a3:1c:54:94:0c:82:c3:c7:e9:9c:f2:e5:54:
7b:bd:fe:97:15:0e:88:e5:a1:83:84:e0:e0:71:5c:
94:da:cb:78:cc:2a:0d:aa:7f:fa:04:95:84:0f:9d:
b5:f0:05:83:1b:71:25:aa:95:d6:12:f2:c8:a2:2b:
6d:0b:f3:30:fe:27:3c:7c:1d:9f:22:5f:4b:52:c1:
17:98:71:5d:7f:05:e2:e8:71:e8:42:15:c5:7a:c9:
2c:3d:a1:8e:bc:04:ad:0b:2c:17:35:58:01:0f:4d:
b4:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
51:40:9F:C3:2C:D7:6D:27:56:1E:63:F1:A0:06:36:AA:D9:89:43:29
X509v3 Authority Key Identifier:
keyid:A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:4d:65:e4:cf:80:f7:83:76:ea:a0:f6:63:2e:55:c6:0b:0b:
a2:f5:48:c2:71:9d:1f:41:0f:73:a8:8f:5c:14:ae:c6:35:1b:
bc:2a:bd:e1:74:4b:ec:63:8c:14:0c:35:57:8b:53:9a:87:ed:
e1:84:c0:ee:f8:d9:d7:6b:46:07:de:e5:72:cf:e6:7a:e0:6b:
7b:92:13:67:06:1b:95:4f:7e:97:0c:53:78:5e:06:10:40:66:
d0:51:cf:73:84:bd:07:f9:f5:22:6d:41:ab:73:2d:7e:e8:6a:
b5:df:55:c8:ef:77:3f:41:e1:bb:0c:68:73:f2:35:12:00:d7:
2e:2b:6e:8e:15:54:56:c4:d4:e2:52:b1:4c:38:a8:86:d0:19:
bc:cf:57:49:6c:bf:0c:91:94:b4:fa:81:f6:8d:1c:ef:03:5f:
2d:19:cd:b9:0b:b2:05:fe:9a:3c:a6:4e:a4:63:4b:aa:f4:37:
a9:59:f7:af:a0:a4:a5:f6:0f:c5:5a:e8:30:b0:7e:ce:e7:92:
75:92:a8:e3:43:d0:c7:3c:67:9b:6d:75:30:5b:c3:2e:e1:41:
b6:a5:aa:5c:cc:c8:45:51:9c:79:48:db:23:62:11:a0:c6:b3:
97:d5:59:7a:ba:7d:1e:3e:1e:88:b9:5d:38:d4:d1:29:af:d6:
ac:27:66:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ogbo3Am/AqoxFTMLSQD4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YjEwYzk3MTBmZjg0NDBkYTQxZTU0OWJlMjdmZTg3N2Yx
NGJiMDcwHhcNMjUwNjI4MTMwMjQxWhcNMjUwNjI5MTMwMjQxWjAzMTEwLwYDVQQD
Eyg1MTQwOWZjMzJjZDc2ZDI3NTYxZTYzZjFhMDA2MzZhYWQ5ODk0MzI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9dUKpkd58EVTcWtxMkap92o2mzPx
1n9PI3shaBySQRSIu9kGFCobflOaAQZynMZhOYPQdXtrdE5/eSLjTLG7Ji3EXmk7
4ZTLpAQs0e/95zrcNO/80g6cmyWZjtLIyLswrfdUPF5TVYwUDsCVzTYLCVt1394j
3PxFCVrq0v3qFmgiEKJT8AJrUoy2vS3k6ZH9b6G95Vi6ZKMcVJQMgsPH6Zzy5VR7
vf6XFQ6I5aGDhODgcVyU2st4zCoNqn/6BJWED5218AWDG3ElqpXWEvLIoittC/Mw
/ic8fB2fIl9LUsEXmHFdfwXi6HHoQhXFesksPaGOvAStCywXNVgBD020kQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFFAn8Ms120nVh5j8aAGNqrZiUMpMB8GA1UdIwQY
MBaAFKaxDJcQ/4RA2kHlSb4n/od/FLsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iMjFjZjMtZTU3Ni00MjdiLTkxYzkt
Y2U3Zjk1OGQ4MTM1LzEvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iMjFjZjMtZTU3Ni00MjdiLTkxYzktY2U3Zjk1OGQ4MTM1
LzEvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb01l5M+A
94N26qD2Yy5VxgsLovVIwnGdH0EPc6iPXBSuxjUbvCq94XRL7GOMFAw1V4tTmoft
4YTA7vjZ12tGB97lcs/meuBre5ITZwYblU9+lwxTeF4GEEBm0FHPc4S9B/n1Im1B
q3Mtfuhqtd9VyO93P0Hhuwxoc/I1EgDXLitujhVUVsTU4lKxTDiohtAZvM9XSWy/
DJGUtPqB9o0c7wNfLRnNuQuyBf6aPKZOpGNLqvQ3qVn3r6CkpfYPxVroMLB+zueS
dZKo40PQxzxnm211MFvDLuFBtqWqXMzIRVGceUjbI2IRoMazl9VZerp9Hj4eiLld
ONTRKa/WrCdmwg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:52 2025 by rpki-client