Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
File: 9xPX34BXC8z7JzeT8ApdRshT5Jo.mft (raw, json)
Hash identifier: jA9lm5FHHHvRMGSFieh9ixxVKpoRJGezCnW/frCkPxo=
Subject key identifier: 53:F8:94:BD:78:99:7E:F0:B9:D0:C3:8B:05:00:1D:4E:59:D0:BE:18
Authority key identifier: F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A
Certificate issuer: /CN=f713d7df80570bccfb273793f00a5d46c853e49a
Certificate serial: 0197B77CBFA383B96B7E2F557534230C0153
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
Manifest number: 04D8
Signing time: Sat 28 Jun 2025 17:01:35 +0000
Manifest this update: Sat 28 Jun 2025 17:01:35 +0000
Manifest next update: Sun 29 Jun 2025 17:01:35 +0000
Files and hashes: 1: 9xPX34BXC8z7JzeT8ApdRshT5Jo.crl (hash: 0tapWrLh95PrCh2rI4SyldtHTDZvm/EhE0DYeEaX96c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.crl
rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:bf:a3:83:b9:6b:7e:2f:55:75:34:23:0c:01:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f713d7df80570bccfb273793f00a5d46c853e49a
Validity
Not Before: Jun 28 17:01:35 2025 GMT
Not After : Jun 29 17:01:35 2025 GMT
Subject: CN=53f894bd78997ef0b9d0c38b05001d4e59d0be18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:16:c4:05:10:51:0e:2c:ed:0c:58:71:74:e2:
e2:bc:93:6e:ee:05:e9:90:be:b2:f1:c9:44:42:c3:
89:64:18:62:90:91:ac:6f:52:71:3e:f6:2d:9a:0c:
8a:cc:95:ed:52:32:8f:a8:77:27:ea:84:47:b7:d5:
cf:9a:7c:20:d3:03:21:ef:e1:88:1b:5e:f5:e7:8c:
c0:44:21:b7:45:6a:db:98:93:75:66:ad:cd:4d:19:
c1:a3:8f:c7:7c:75:46:80:af:62:41:a2:d3:0a:1b:
66:10:e9:c7:36:68:df:f4:28:cc:95:4d:f1:fe:c7:
09:15:21:6e:e8:10:69:70:a5:78:5f:71:46:21:c0:
43:f0:96:4e:66:35:08:5f:70:7d:7c:aa:56:e7:de:
eb:c8:60:3d:45:c5:27:30:96:fc:cc:87:db:f5:13:
6d:68:4e:45:2c:dc:19:f2:e7:e2:38:c5:90:f1:5f:
58:84:76:a6:8a:56:95:a6:16:9c:c6:dd:b5:2b:41:
90:73:b9:38:16:82:f1:aa:c8:fd:9c:6b:f8:2d:69:
fd:34:94:df:d7:bb:a5:cf:06:f5:ef:e8:d0:f5:d0:
4b:ff:c0:14:ad:fa:04:0a:a9:5f:b7:c6:84:b4:cf:
d4:c0:20:83:20:e8:56:16:18:e7:e9:64:23:68:79:
88:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:F8:94:BD:78:99:7E:F0:B9:D0:C3:8B:05:00:1D:4E:59:D0:BE:18
X509v3 Authority Key Identifier:
keyid:F7:13:D7:DF:80:57:0B:CC:FB:27:37:93:F0:0A:5D:46:C8:53:E4:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9xPX34BXC8z7JzeT8ApdRshT5Jo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1a/23a19a-30db-4872-ab73-5287afc10e68/1/9xPX34BXC8z7JzeT8ApdRshT5Jo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:93:7e:08:35:26:f3:69:ea:fc:a9:39:d2:61:4d:1d:74:9c:
bd:26:9c:7b:6f:00:64:68:91:51:46:d2:fd:d1:d0:e5:24:a3:
69:ad:0b:ff:74:21:e9:09:fd:46:56:94:c2:56:70:63:25:2e:
b2:16:46:bc:ca:5d:04:a4:af:94:1d:4b:d3:6b:ad:0c:9f:18:
a7:44:fe:e2:0c:2d:2c:ec:35:e2:b8:76:de:f5:f1:67:bc:42:
b9:0b:64:64:6e:ca:8f:78:f8:d7:5f:f0:3d:33:53:64:b5:2d:
38:f8:e0:0b:88:29:b6:bb:3e:76:e4:88:f3:6c:6a:25:36:9b:
62:44:5d:dc:a7:66:6c:a1:bb:aa:28:87:6d:65:ad:8c:52:ac:
47:17:46:02:82:f1:25:66:34:f8:04:a5:89:48:97:14:e4:f4:
f4:32:1b:02:04:65:c2:38:f3:75:6a:25:e3:73:7f:de:8c:f8:
5d:ec:2c:a7:0a:db:48:50:3e:ac:4a:35:42:20:ca:e8:52:f9:
80:10:63:59:d7:1e:8e:f5:fa:b9:e6:3e:a5:5a:cb:30:5e:df:
f9:f6:a6:9c:6c:d6:9f:8d:46:7a:fe:b7:42:22:8b:c5:54:a3:
da:25:7c:57:55:8f:35:0a:dd:20:d0:fa:82:ea:84:2a:5f:39:
79:01:3d:a1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fL+jg7lrfi9VdTQjDAFTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3MTNkN2RmODA1NzBiY2NmYjI3Mzc5M2YwMGE1ZDQ2Yzg1
M2U0OWEwHhcNMjUwNjI4MTcwMTM1WhcNMjUwNjI5MTcwMTM1WjAzMTEwLwYDVQQD
Eyg1M2Y4OTRiZDc4OTk3ZWYwYjlkMGMzOGIwNTAwMWQ0ZTU5ZDBiZTE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvxbEBRBRDiztDFhxdOLivJNu7gXp
kL6y8clEQsOJZBhikJGsb1JxPvYtmgyKzJXtUjKPqHcn6oRHt9XPmnwg0wMh7+GI
G17154zARCG3RWrbmJN1Zq3NTRnBo4/HfHVGgK9iQaLTChtmEOnHNmjf9CjMlU3x
/scJFSFu6BBpcKV4X3FGIcBD8JZOZjUIX3B9fKpW597ryGA9RcUnMJb8zIfb9RNt
aE5FLNwZ8ufiOMWQ8V9YhHamilaVphacxt21K0GQc7k4FoLxqsj9nGv4LWn9NJTf
17ulzwb17+jQ9dBL/8AUrfoECqlft8aEtM/UwCCDIOhWFhjn6WQjaHmIpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFP4lL14mX7wudDDiwUAHU5Z0L4YMB8GA1UdIwQY
MBaAFPcT19+AVwvM+yc3k/AKXUbIU+SaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOXhQWDM0QlhDOHo3SnplVDhBcGRSc2hUNUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYS8yM2ExOWEtMzBkYi00ODcyLWFiNzMt
NTI4N2FmYzEwZTY4LzEvOXhQWDM0QlhDOHo3SnplVDhBcGRSc2hUNUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYS8yM2ExOWEtMzBkYi00ODcyLWFiNzMtNTI4N2FmYzEwZTY4
LzEvOXhQWDM0QlhDOHo3SnplVDhBcGRSc2hUNUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN5N+CDUm
82nq/Kk50mFNHXScvSace28AZGiRUUbS/dHQ5SSjaa0L/3Qh6Qn9RlaUwlZwYyUu
shZGvMpdBKSvlB1L02utDJ8Yp0T+4gwtLOw14rh23vXxZ7xCuQtkZG7Kj3j411/w
PTNTZLUtOPjgC4gptrs+duSI82xqJTabYkRd3KdmbKG7qiiHbWWtjFKsRxdGAoLx
JWY0+ASliUiXFOT09DIbAgRlwjjzdWol43N/3oz4XewspwrbSFA+rEo1QiDK6FL5
gBBjWdcejvX6ueY+pVrLMF7f+famnGzWn41Gev63QiKLxVSj2iV8V1WPNQrdIND6
guqEKl85eQE9oQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:32:25 2025 by rpki-client