Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
File: cRcdWnbTurk3KszJJz66ffHFnPI.mft (raw, json)
Hash identifier: RWW26tEye40VJtL6AW6DCbxL8bugy7tejDEe3s1TM18=
Subject key identifier: 6F:61:A4:2D:35:A2:5A:CC:91:ED:41:E0:E0:01:F4:6B:37:59:8E:E6
Authority key identifier: 71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
Certificate issuer: /CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Certificate serial: 0197B6A1909E4500AD31CC0D615A74C04F7F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:10 +0000
Manifest this update: Sat 28 Jun 2025 13:02:10 +0000
Manifest next update: Sun 29 Jun 2025 13:02:10 +0000
Files and hashes: 1: cRcdWnbTurk3KszJJz66ffHFnPI.crl (hash: OQot9a2u1OC3JFuoJEpSCVAZfrbc7O2OP1cgBZwEi+M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:90:9e:45:00:ad:31:cc:0d:61:5a:74:c0:4f:7f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71171d5a76d3bab9372accc9273eba7df1c59cf2
Validity
Not Before: Jun 28 13:02:10 2025 GMT
Not After : Jun 29 13:02:10 2025 GMT
Subject: CN=6f61a42d35a25acc91ed41e0e001f46b37598ee6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:94:5d:93:10:ed:6b:fd:18:74:f7:ad:9e:2f:
27:8c:eb:e3:01:22:a3:1c:52:18:ff:81:5f:09:a3:
39:9e:aa:2b:3d:97:74:73:40:f7:6e:e7:e0:8d:47:
4b:7e:cd:7f:6f:78:da:64:14:65:11:2a:96:d6:48:
04:0b:f2:55:2d:78:dc:ef:aa:76:00:e5:4b:83:1f:
67:b2:16:b8:ae:3e:e7:ba:c2:4b:6f:bd:75:e2:fc:
e6:b2:39:37:36:63:20:31:30:00:bc:29:92:4f:25:
d3:86:15:f1:44:f4:9b:66:ce:4b:f7:6e:c9:e7:8f:
7c:a8:be:ae:ef:d0:50:75:41:60:c8:f2:b8:15:ae:
65:b6:ce:04:af:81:32:2f:35:d3:ee:57:8b:d4:56:
49:3c:0e:d7:dc:d9:a7:43:04:ec:fb:26:57:6d:04:
8f:98:fd:81:df:68:1a:69:ba:3a:2f:d1:55:ad:46:
80:92:3b:5c:d8:9c:2a:7f:14:07:d2:0d:37:c2:a3:
23:e7:fb:11:9c:a8:66:4b:f6:da:de:e9:9c:69:bb:
91:b3:ba:cf:5a:11:65:e0:5b:f9:00:78:d7:e0:33:
9d:58:46:79:be:42:68:70:70:53:45:07:36:d8:eb:
d2:b5:e6:88:e5:3e:3f:44:a4:71:ac:a4:ca:1b:5c:
19:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:61:A4:2D:35:A2:5A:CC:91:ED:41:E0:E0:01:F4:6B:37:59:8E:E6
X509v3 Authority Key Identifier:
keyid:71:17:1D:5A:76:D3:BA:B9:37:2A:CC:C9:27:3E:BA:7D:F1:C5:9C:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRcdWnbTurk3KszJJz66ffHFnPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/dee8b9-c300-45eb-89e1-80699529cceb/1/cRcdWnbTurk3KszJJz66ffHFnPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:43:0d:f0:9a:7d:90:4e:c5:05:c7:72:a7:93:6d:2b:cb:f0:
8b:54:16:e9:4a:a4:4b:c9:82:7d:0a:24:ed:dd:c1:fa:b5:3a:
6c:d4:11:28:10:80:b2:4e:1f:47:0b:87:8c:8b:c1:07:21:5a:
b4:45:19:25:cf:04:29:b7:a8:1c:ca:0f:e5:73:69:77:3d:35:
1a:b9:2b:b1:6b:a1:21:ef:3c:3a:d9:68:19:14:01:0b:01:63:
d7:14:0a:88:4a:a0:a2:38:80:9f:37:9c:67:e9:7e:51:cb:cd:
75:ed:bd:7d:6d:b8:01:fe:fb:82:cd:d2:9f:2c:a2:60:e3:c1:
f1:3b:91:16:05:e3:de:d1:f7:6c:7a:c5:3a:e7:a6:32:40:94:
53:69:16:88:8a:bf:da:00:39:81:29:89:bd:c8:7e:e1:ce:bd:
dd:9d:45:a7:b0:a0:5f:f6:cb:8c:92:35:a2:3c:57:0f:69:0f:
f3:2c:47:bf:e8:ee:f1:b7:59:f9:78:82:74:ee:7b:a1:ae:dd:
88:0f:4f:9e:54:8c:99:92:91:75:34:72:85:a4:4a:64:2f:6e:
55:ea:6b:07:4d:db:be:e9:fe:92:ae:ae:da:01:ed:2c:3c:df:
53:1f:c6:b0:b8:8c:92:70:29:b0:c6:e8:3b:02:b2:d4:51:e4:
29:ac:09:aa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oZCeRQCtMcwNYVp0wE9/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTcxZDVhNzZkM2JhYjkzNzJhY2NjOTI3M2ViYTdkZjFj
NTljZjIwHhcNMjUwNjI4MTMwMjEwWhcNMjUwNjI5MTMwMjEwWjAzMTEwLwYDVQQD
Eyg2ZjYxYTQyZDM1YTI1YWNjOTFlZDQxZTBlMDAxZjQ2YjM3NTk4ZWU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmJRdkxDta/0YdPetni8njOvjASKj
HFIY/4FfCaM5nqorPZd0c0D3bufgjUdLfs1/b3jaZBRlESqW1kgEC/JVLXjc76p2
AOVLgx9nsha4rj7nusJLb7114vzmsjk3NmMgMTAAvCmSTyXThhXxRPSbZs5L927J
5498qL6u79BQdUFgyPK4Fa5lts4Er4EyLzXT7leL1FZJPA7X3NmnQwTs+yZXbQSP
mP2B32gaabo6L9FVrUaAkjtc2JwqfxQH0g03wqMj5/sRnKhmS/ba3umcabuRs7rP
WhFl4Fv5AHjX4DOdWEZ5vkJocHBTRQc22OvSteaI5T4/RKRxrKTKG1wZSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG9hpC01olrMke1B4OAB9Gs3WY7mMB8GA1UdIwQY
MBaAFHEXHVp207q5NyrMySc+un3xxZzyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9kZWU4YjktYzMwMC00NWViLTg5ZTEt
ODA2OTk1MjljY2ViLzEvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9kZWU4YjktYzMwMC00NWViLTg5ZTEtODA2OTk1MjljY2Vi
LzEvY1JjZFduYlR1cmszS3N6Skp6NjZmZkhGblBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ0MN8Jp9
kE7FBcdyp5NtK8vwi1QW6UqkS8mCfQok7d3B+rU6bNQRKBCAsk4fRwuHjIvBByFa
tEUZJc8EKbeoHMoP5XNpdz01GrkrsWuhIe88OtloGRQBCwFj1xQKiEqgojiAnzec
Z+l+UcvNde29fW24Af77gs3SnyyiYOPB8TuRFgXj3tH3bHrFOuemMkCUU2kWiIq/
2gA5gSmJvch+4c693Z1Fp7CgX/bLjJI1ojxXD2kP8yxHv+ju8bdZ+XiCdO57oa7d
iA9PnlSMmZKRdTRyhaRKZC9uVeprB03bvun+kq6u2gHtLDzfUx/GsLiMknApsMbo
OwKy1FHkKawJqg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:06 2025 by rpki-client