Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
File: q7zPUQ4allMK2M8UI_0lmLgv46Y.mft (raw, json)
Hash identifier: mtFqRf+Z03VGUmPheu6YDADjBMYAnxbDRPWXKnA7w1Q=
Subject key identifier: 6C:71:AE:4E:89:FD:37:88:E1:AD:D5:B9:EC:37:75:69:54:18:1A:41
Authority key identifier: AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
Certificate issuer: /CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Certificate serial: 0197B70E5A8C60B980643515C28C8342DEA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:00 +0000
Manifest this update: Sat 28 Jun 2025 15:01:00 +0000
Manifest next update: Sun 29 Jun 2025 15:01:00 +0000
Files and hashes: 1: q7zPUQ4allMK2M8UI_0lmLgv46Y.crl (hash: PAl3bPNpDh7GkQ/BCguj2I9AVXCFxeYxoX2mJvxb9nk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:5a:8c:60:b9:80:64:35:15:c2:8c:83:42:de:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=abbccf510e1a96530ad8cf1423fd2598b82fe3a6
Validity
Not Before: Jun 28 15:01:00 2025 GMT
Not After : Jun 29 15:01:00 2025 GMT
Subject: CN=6c71ae4e89fd3788e1add5b9ec37756954181a41
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:48:90:25:b1:53:e4:5a:f2:4e:e8:92:5b:20:
b2:09:e5:b2:df:b9:e2:b6:5c:62:87:4f:70:08:74:
02:5d:d9:0b:7d:25:f2:74:dc:a2:3d:63:01:b1:69:
8d:78:0f:91:6a:b1:c8:cb:1e:bb:7a:2c:46:57:a7:
a4:e9:ae:7c:66:28:00:ec:0c:ff:61:ae:a7:64:c3:
e6:f2:86:4b:51:f9:fc:d3:7b:50:d1:06:22:66:e0:
49:ed:2d:86:88:c3:33:c3:34:ab:0b:0b:50:59:ed:
16:48:e1:a2:2f:1b:27:f8:1b:ce:5b:bf:52:77:54:
84:c7:89:6b:b0:35:ac:b4:e5:6c:be:aa:68:f2:a1:
ef:9b:dd:ac:44:50:38:3f:95:a7:23:90:ac:76:0d:
5e:5c:99:09:73:63:83:5f:25:70:ab:7a:19:83:68:
45:5d:d9:8a:d3:97:aa:36:98:82:25:72:be:67:e5:
cf:7d:19:75:c2:ff:9f:1c:58:b3:bc:f2:8b:c4:b3:
71:40:ba:f8:52:54:29:29:1b:03:82:80:da:cf:73:
84:12:dc:93:eb:93:c1:69:46:9e:92:49:2d:1e:91:
cc:23:8b:29:91:2f:83:be:9d:93:76:d3:f6:e1:c3:
e6:3f:28:29:0f:62:59:7a:ed:db:2e:63:28:c7:c2:
00:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6C:71:AE:4E:89:FD:37:88:E1:AD:D5:B9:EC:37:75:69:54:18:1A:41
X509v3 Authority Key Identifier:
keyid:AB:BC:CF:51:0E:1A:96:53:0A:D8:CF:14:23:FD:25:98:B8:2F:E3:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/q7zPUQ4allMK2M8UI_0lmLgv46Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/feddfe-b2b7-444a-bf42-3cffce989442/1/q7zPUQ4allMK2M8UI_0lmLgv46Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
76:cf:32:ea:8d:de:e5:3e:f7:22:4c:59:a3:60:25:92:de:3a:
72:96:7b:3a:9c:82:d0:16:c9:c1:08:99:c6:ce:68:4a:47:41:
27:60:8f:4e:f1:22:45:b2:df:79:4e:60:00:bf:8d:5c:58:7c:
b6:d6:30:dc:ee:45:7d:58:44:3b:10:67:07:99:ec:80:de:78:
76:0a:51:69:f5:26:16:16:a2:b0:48:1c:9f:d5:4a:9a:6f:a8:
78:1c:70:86:8a:c4:0c:05:31:46:75:59:33:35:8c:57:86:29:
de:f8:ab:a5:59:d1:fb:c2:25:eb:2e:35:9e:35:ec:1e:15:7f:
86:dc:dc:e4:9c:72:f4:0c:71:76:f4:ec:39:d7:65:57:e3:d6:
5f:d7:08:9a:e8:be:79:5b:49:91:4c:e8:e6:6b:93:a9:df:74:
fb:5e:ec:4d:68:2d:e4:aa:c5:5f:dc:8c:a3:6e:f2:aa:37:0f:
aa:88:68:b6:ea:50:a3:d3:61:03:05:e3:a6:7f:29:ab:9f:67:
1f:db:8f:da:b9:f3:1b:a2:dd:f1:a9:2a:3f:26:7d:0d:28:2a:
cb:a5:80:44:8f:0a:e1:3e:dc:5c:0b:30:b0:aa:41:64:62:e8:
ea:df:32:c2:6c:7b:6d:a0:d1:84:06:28:c4:02:7d:4c:69:2e:
37:0e:a4:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DlqMYLmAZDUVwoyDQt6mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFiYmNjZjUxMGUxYTk2NTMwYWQ4Y2YxNDIzZmQyNTk4Yjgy
ZmUzYTYwHhcNMjUwNjI4MTUwMTAwWhcNMjUwNjI5MTUwMTAwWjAzMTEwLwYDVQQD
Eyg2YzcxYWU0ZTg5ZmQzNzg4ZTFhZGQ1YjllYzM3NzU2OTU0MTgxYTQxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmUiQJbFT5FryTuiSWyCyCeWy37ni
tlxih09wCHQCXdkLfSXydNyiPWMBsWmNeA+RarHIyx67eixGV6ek6a58ZigA7Az/
Ya6nZMPm8oZLUfn803tQ0QYiZuBJ7S2GiMMzwzSrCwtQWe0WSOGiLxsn+BvOW79S
d1SEx4lrsDWstOVsvqpo8qHvm92sRFA4P5WnI5Csdg1eXJkJc2ODXyVwq3oZg2hF
XdmK05eqNpiCJXK+Z+XPfRl1wv+fHFizvPKLxLNxQLr4UlQpKRsDgoDaz3OEEtyT
65PBaUaekkktHpHMI4spkS+Dvp2TdtP24cPmPygpD2JZeu3bLmMox8IAXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGxxrk6J/TeI4a3Vuew3dWlUGBpBMB8GA1UdIwQY
MBaAFKu8z1EOGpZTCtjPFCP9JZi4L+OmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mZWRkZmUtYjJiNy00NDRhLWJmNDIt
M2NmZmNlOTg5NDQyLzEvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mZWRkZmUtYjJiNy00NDRhLWJmNDItM2NmZmNlOTg5NDQy
LzEvcTd6UFVRNGFsbE1LMk04VUlfMGxtTGd2NDZZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAds8y6o3e
5T73IkxZo2Alkt46cpZ7OpyC0BbJwQiZxs5oSkdBJ2CPTvEiRbLfeU5gAL+NXFh8
ttYw3O5FfVhEOxBnB5nsgN54dgpRafUmFhaisEgcn9VKmm+oeBxwhorEDAUxRnVZ
MzWMV4Yp3virpVnR+8Il6y41njXsHhV/htzc5Jxy9AxxdvTsOddlV+PWX9cImui+
eVtJkUzo5muTqd90+17sTWgt5KrFX9yMo27yqjcPqohotupQo9NhAwXjpn8pq59n
H9uP2rnzG6Ld8akqPyZ9DSgqy6WARI8K4T7cXAswsKpBZGLo6t8ywmx7baDRhAYo
xAJ9TGkuNw6k8g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:21 2025 by rpki-client