Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
File: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft (raw, json)
Hash identifier: ljajgv2E8OjvKroTvKc6k5TmT+n4Z8SQng85BxDpIPo=
Subject key identifier: EE:7F:84:8C:EF:FE:CE:AC:1B:4A:2A:5F:2B:1A:A2:CD:5B:DE:EE:1B
Authority key identifier: FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
Certificate issuer: /CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Certificate serial: 0197B70E658214DCA78B15DC4A249B742CE3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
Manifest number: 1134
Signing time: Sat 28 Jun 2025 15:01:03 +0000
Manifest this update: Sat 28 Jun 2025 15:01:03 +0000
Manifest next update: Sun 29 Jun 2025 15:01:03 +0000
Files and hashes: 1: _CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl (hash: Az9h+W9Fkf3nutSLm3JrlYpcriccPiSwF2UJGdKV2Xo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl
rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:65:82:14:dc:a7:8b:15:dc:4a:24:9b:74:2c:e3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc2a090445fa39cd6ffe0fcf44a1440792498976
Validity
Not Before: Jun 28 15:01:03 2025 GMT
Not After : Jun 29 15:01:03 2025 GMT
Subject: CN=ee7f848ceffeceac1b4a2a5f2b1aa2cd5bdeee1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f5:58:08:b9:97:37:b7:5b:b6:09:79:de:27:44:
50:76:73:cb:f6:f3:c6:92:06:fb:e1:72:29:1d:2a:
8b:59:f6:5a:15:d6:71:51:30:a2:5a:e8:a8:24:cc:
f8:fb:ba:d7:e9:51:e1:33:3a:a4:d1:10:94:b0:5a:
c7:47:32:a0:ff:92:8e:09:c1:4e:6d:90:45:b2:12:
4b:6d:4f:96:98:f0:42:88:88:f4:a2:c2:b0:9f:ad:
8c:a7:3e:18:02:fb:a5:2d:a6:09:6e:ef:29:e6:41:
8a:ea:7a:30:ce:70:54:20:39:8a:c3:d9:eb:2a:12:
31:f5:2d:ec:2e:d6:27:9c:32:fd:a6:0d:a0:3f:2b:
3b:d8:7a:21:6c:56:f9:bc:18:af:b1:5b:b3:c4:c2:
04:7c:5d:a0:c6:1a:99:49:7b:e9:e6:c8:b6:cc:2e:
6b:66:5d:3a:4f:63:ef:c9:2e:70:1e:5b:7e:fc:e2:
12:b3:fe:92:96:c2:8b:ee:44:42:af:55:80:87:dc:
d7:49:dc:4b:6e:c4:52:a9:91:9f:31:ec:6f:69:1e:
0d:9a:60:c1:de:61:bb:e4:97:b7:f1:fd:56:0e:57:
98:90:5b:f2:ab:14:94:fa:4c:02:92:ea:c9:5e:6b:
86:42:c2:f2:54:ed:5a:66:70:99:2e:4a:2e:89:e4:
ef:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:7F:84:8C:EF:FE:CE:AC:1B:4A:2A:5F:2B:1A:A2:CD:5B:DE:EE:1B
X509v3 Authority Key Identifier:
keyid:FC:2A:09:04:45:FA:39:CD:6F:FE:0F:CF:44:A1:44:07:92:49:89:76
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/16/7bf8a9-7096-4fc3-921b-3588d790ba07/1/_CoJBEX6Oc1v_g_PRKFEB5JJiXY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:ec:f0:c1:47:93:bd:31:0d:d2:05:1f:03:4e:8d:d1:e3:47:
21:fc:c7:1a:37:7a:da:80:26:70:54:a6:3b:35:93:6f:7c:29:
80:1a:f8:9d:11:02:50:94:83:84:fa:f1:9e:b3:1b:08:91:89:
83:25:a1:5f:29:66:0b:87:f1:2e:f9:b3:78:17:8b:46:dd:79:
a7:40:65:30:c5:51:41:9f:51:70:53:6f:a6:20:37:43:b6:04:
4a:1b:36:bc:4d:ae:62:67:31:c0:1c:19:98:cb:d1:07:a9:56:
1c:ca:3c:3a:21:62:c6:b7:55:27:69:87:57:db:0a:71:d6:f0:
ca:fc:69:30:99:57:f8:5a:19:40:a8:19:1d:f8:e4:d3:8c:d8:
69:0a:83:39:25:b3:8d:f6:57:e1:7e:32:11:a4:3f:89:5e:3a:
23:87:c2:6b:04:34:dc:af:76:83:97:63:f0:f6:99:fb:3f:00:
d3:2c:f3:ff:60:d2:5d:58:41:05:88:df:aa:56:d9:39:32:b7:
98:c2:e0:b9:30:00:e7:61:75:c8:49:e5:ab:27:57:07:aa:13:
24:99:d4:41:cc:f6:86:d1:bb:b1:92:27:01:61:0b:19:64:39:
a3:6b:88:b1:4d:88:97:ca:f7:63:26:ba:51:83:c4:4c:7d:ea:
20:b5:d2:4c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DmWCFNynixXcSiSbdCzjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMmEwOTA0NDVmYTM5Y2Q2ZmZlMGZjZjQ0YTE0NDA3OTI0
OTg5NzYwHhcNMjUwNjI4MTUwMTAzWhcNMjUwNjI5MTUwMTAzWjAzMTEwLwYDVQQD
EyhlZTdmODQ4Y2VmZmVjZWFjMWI0YTJhNWYyYjFhYTJjZDViZGVlZTFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9VgIuZc3t1u2CXneJ0RQdnPL9vPG
kgb74XIpHSqLWfZaFdZxUTCiWuioJMz4+7rX6VHhMzqk0RCUsFrHRzKg/5KOCcFO
bZBFshJLbU+WmPBCiIj0osKwn62Mpz4YAvulLaYJbu8p5kGK6nowznBUIDmKw9nr
KhIx9S3sLtYnnDL9pg2gPys72HohbFb5vBivsVuzxMIEfF2gxhqZSXvp5si2zC5r
Zl06T2PvyS5wHlt+/OISs/6SlsKL7kRCr1WAh9zXSdxLbsRSqZGfMexvaR4NmmDB
3mG75Je38f1WDleYkFvyqxSU+kwCkurJXmuGQsLyVO1aZnCZLkouieTvpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO5/hIzv/s6sG0oqXysaos1b3u4bMB8GA1UdIwQY
MBaAFPwqCQRF+jnNb/4Pz0ShRAeSSYl2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0NvSkJFWDZPYzF2X2dfUFJLRkVCNUpKaVhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNi83YmY4YTktNzA5Ni00ZmMzLTkyMWIt
MzU4OGQ3OTBiYTA3LzEvX0NvSkJFWDZPYzF2X2dfUFJLRkVCNUpKaVhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNi83YmY4YTktNzA5Ni00ZmMzLTkyMWItMzU4OGQ3OTBiYTA3
LzEvX0NvSkJFWDZPYzF2X2dfUFJLRkVCNUpKaVhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIezwwUeT
vTEN0gUfA06N0eNHIfzHGjd62oAmcFSmOzWTb3wpgBr4nRECUJSDhPrxnrMbCJGJ
gyWhXylmC4fxLvmzeBeLRt15p0BlMMVRQZ9RcFNvpiA3Q7YEShs2vE2uYmcxwBwZ
mMvRB6lWHMo8OiFixrdVJ2mHV9sKcdbwyvxpMJlX+FoZQKgZHfjk04zYaQqDOSWz
jfZX4X4yEaQ/iV46I4fCawQ03K92g5dj8PaZ+z8A0yzz/2DSXVhBBYjfqlbZOTK3
mMLguTAA52F1yEnlqydXB6oTJJnUQcz2htG7sZInAWELGWQ5o2uIsU2Il8r3Yya6
UYPETH3qILXSTA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:14 2025 by rpki-client