Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier: JQ2zNlVc9D6OdXODi43fDMufRO8DLQodHsbj697DJTU=
Subject key identifier: 47:44:9B:8D:5A:90:75:85:70:0D:EC:7E:C3:75:60:2C:09:15:68:3C
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial: 0197B6D73D377F9022BDDCFD8EE04C98310E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number: 12D4
Signing time: Sat 28 Jun 2025 14:00:48 +0000
Manifest this update: Sat 28 Jun 2025 14:00:48 +0000
Manifest next update: Sun 29 Jun 2025 14:00:48 +0000
Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: 3vXSYRa4vZpUZXcqYNNZ7pvvhbWMQf5PDZafpfjrj20=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:3d:37:7f:90:22:bd:dc:fd:8e:e0:4c:98:31:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Validity
Not Before: Jun 28 14:00:48 2025 GMT
Not After : Jun 29 14:00:48 2025 GMT
Subject: CN=47449b8d5a907585700dec7ec375602c0915683c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:67:02:65:14:26:22:a4:8f:35:55:8a:b2:48:
5e:24:e6:e8:d5:8b:4e:52:e5:32:a8:3d:d1:e2:cf:
14:1a:d7:1b:f4:09:68:40:a6:28:dc:f7:51:bb:f7:
64:9e:df:d5:1d:af:cb:d5:3a:cc:3c:b3:c2:31:35:
4e:42:92:fd:91:56:19:17:52:b1:d8:92:71:bf:4f:
73:6f:10:8e:53:70:c5:57:67:d4:4f:7c:18:56:22:
92:30:fc:a6:31:16:7c:c3:0f:bb:ab:84:68:04:de:
f4:34:a6:46:ca:84:cd:d0:9f:09:28:e0:2a:7c:69:
7b:ee:b5:c6:4b:91:17:07:e4:17:3a:59:4f:9f:bb:
fc:73:fc:f6:b2:4b:5b:e9:b4:cd:f7:71:e3:14:44:
6c:ff:e5:14:6f:0e:a2:1e:ed:00:e6:ac:49:bc:58:
e0:2b:af:15:4a:53:e6:d5:81:3d:14:c5:11:22:e8:
74:6e:5c:9d:d2:e7:1e:da:ec:48:d3:05:ea:89:bd:
bf:56:aa:ce:ec:45:a2:78:ad:6d:b4:63:b3:f1:07:
0d:6e:d2:c0:af:e0:be:ca:42:09:52:ba:47:d9:33:
32:bb:a3:de:b1:7d:e7:a7:5a:aa:af:63:23:b3:48:
26:e4:ec:62:e1:33:e7:b5:e8:e0:16:e7:fb:2b:54:
8e:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:44:9B:8D:5A:90:75:85:70:0D:EC:7E:C3:75:60:2C:09:15:68:3C
X509v3 Authority Key Identifier:
keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:19:7c:d2:12:ac:7b:29:ac:37:9b:e4:31:af:25:72:f5:cd:
b9:00:d4:41:80:34:99:d1:de:29:ca:41:b5:00:dd:cd:f4:d3:
e3:67:43:c5:01:54:a4:5b:56:47:94:00:73:61:df:27:97:30:
5f:40:5e:2c:9b:98:04:75:76:3d:4e:98:72:68:3f:1c:73:60:
b9:06:15:92:14:38:ca:2c:b1:15:09:30:b9:57:0a:a5:ce:aa:
f5:60:a6:c3:e3:ab:a2:2f:3e:97:30:97:ec:cd:5d:ab:46:13:
92:f2:4d:93:f4:48:d8:57:ff:73:87:cd:18:c2:57:d6:04:02:
9f:45:f8:bb:35:1d:e8:fd:a3:01:9b:9f:98:00:4e:77:f4:a2:
9c:38:60:7e:48:97:fd:cb:0c:cb:63:01:7b:c7:d9:f1:52:51:
97:ee:b9:3e:fb:08:e0:35:c1:11:de:20:4e:00:23:77:2d:48:
e6:79:2d:fc:48:88:88:40:21:56:eb:2f:9e:83:82:b0:9a:d5:
f3:e0:ec:6c:29:dc:c2:73:fc:5a:84:eb:ae:70:7d:d8:7b:31:
ea:61:1d:c7:84:b0:d3:0a:07:b3:46:ae:b4:1a:99:ed:03:1d:
31:bc:c3:06:92:d9:11:66:5c:50:28:a2:a1:7a:98:db:dd:d2:
ad:a2:5f:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21z03f5Aivdz9juBMmDEOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNTFjNTJkMjM3M2Y1YTViNzJkYzZkZDEyYTc1ZDEzYjI2
NWI5MDQwHhcNMjUwNjI4MTQwMDQ4WhcNMjUwNjI5MTQwMDQ4WjAzMTEwLwYDVQQD
Eyg0NzQ0OWI4ZDVhOTA3NTg1NzAwZGVjN2VjMzc1NjAyYzA5MTU2ODNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4mcCZRQmIqSPNVWKskheJObo1YtO
UuUyqD3R4s8UGtcb9AloQKYo3PdRu/dknt/VHa/L1TrMPLPCMTVOQpL9kVYZF1Kx
2JJxv09zbxCOU3DFV2fUT3wYViKSMPymMRZ8ww+7q4RoBN70NKZGyoTN0J8JKOAq
fGl77rXGS5EXB+QXOllPn7v8c/z2sktb6bTN93HjFERs/+UUbw6iHu0A5qxJvFjg
K68VSlPm1YE9FMURIuh0blyd0uce2uxI0wXqib2/VqrO7EWieK1ttGOz8QcNbtLA
r+C+ykIJUrpH2TMyu6PesX3np1qqr2Mjs0gm5Oxi4TPntejgFuf7K1SOnQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEdEm41akHWFcA3sfsN1YCwJFWg8MB8GA1UdIwQY
MBaAFCNRxS0jc/Wlty3G3RKnXROyZbkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTFIRkxTTno5YVczTGNiZEVxZGRFN0psdVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lZmVjZTMtZTUzMC00NmM4LWIzODgt
OTg3M2FmYTczZTdlLzEvSTFIRkxTTno5YVczTGNiZEVxZGRFN0psdVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9lZmVjZTMtZTUzMC00NmM4LWIzODgtOTg3M2FmYTczZTdl
LzEvSTFIRkxTTno5YVczTGNiZEVxZGRFN0psdVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVxl80hKs
eymsN5vkMa8lcvXNuQDUQYA0mdHeKcpBtQDdzfTT42dDxQFUpFtWR5QAc2HfJ5cw
X0BeLJuYBHV2PU6Ycmg/HHNguQYVkhQ4yiyxFQkwuVcKpc6q9WCmw+Oroi8+lzCX
7M1dq0YTkvJNk/RI2Ff/c4fNGMJX1gQCn0X4uzUd6P2jAZufmABOd/SinDhgfkiX
/csMy2MBe8fZ8VJRl+65PvsI4DXBEd4gTgAjdy1I5nkt/EiIiEAhVusvnoOCsJrV
8+DsbCncwnP8WoTrrnB92Hsx6mEdx4Sw0woHs0autBqZ7QMdMbzDBpLZEWZcUCii
oXqY293SraJfAA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:53 2025 by rpki-client