Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
File: rkIjS6xhcScD45im1b8EjFyfQDI.mft (raw, json)
Hash identifier: cgT2nJvzKpHbQD8l7YZuSOZS05zeSGvpLRhqM4g7fEU=
Subject key identifier: A7:66:FB:13:DA:BD:59:52:1D:F2:06:78:D3:37:32:0A:F3:8A:95:40
Authority key identifier: AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
Certificate issuer: /CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Certificate serial: 0197B9A1826195E5F07D55B51D620059FEF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
Manifest number: 06E8
Signing time: Sun 29 Jun 2025 03:00:58 +0000
Manifest this update: Sun 29 Jun 2025 03:00:58 +0000
Manifest next update: Mon 30 Jun 2025 03:00:58 +0000
Files and hashes: 1: rkIjS6xhcScD45im1b8EjFyfQDI.crl (hash: HJGlImHK8oE/+SfqLe2YMM88hF2kRBvQX4IpBKj5LxQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:82:61:95:e5:f0:7d:55:b5:1d:62:00:59:fe:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae42234bac61712703e398a6d5bf048c5c9f4032
Validity
Not Before: Jun 29 03:00:58 2025 GMT
Not After : Jun 30 03:00:58 2025 GMT
Subject: CN=a766fb13dabd59521df20678d337320af38a9540
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d9:9e:3e:b8:ea:0f:89:f1:1d:87:17:d2:09:7e:
13:08:36:9e:5a:7f:14:a2:d8:c8:42:e1:03:6c:3b:
7f:74:7e:5b:3d:03:48:ab:f1:b9:6f:06:f6:de:4e:
a1:38:4d:84:3f:87:75:04:8c:c4:75:f8:97:3c:84:
e5:7b:86:fe:95:78:83:fd:6b:29:eb:4f:62:6a:e8:
ba:53:be:6e:31:8c:0f:42:a2:db:84:dc:ff:db:15:
bc:ad:4c:7b:b3:00:43:59:21:5e:0e:5d:2d:0e:a6:
8e:b8:9d:43:ba:ff:f5:b2:1f:8a:d9:fd:5b:08:2b:
da:30:30:7a:ed:91:a4:13:bc:4d:f7:42:c1:3f:f4:
f2:1c:99:a7:73:12:d9:e9:a2:ac:ad:f6:c4:ff:5b:
58:c8:0b:cb:8c:45:ff:cb:36:3a:1b:65:68:7e:79:
86:8b:ae:2b:45:5f:42:b3:06:68:1b:3a:92:3d:03:
80:b6:c5:e0:02:95:c6:25:e1:c8:94:3d:32:39:14:
2e:49:94:a0:f6:4a:99:7e:4a:f4:25:9d:69:7a:25:
79:2f:c2:98:c9:75:6d:a2:ec:2a:9a:a9:7c:3d:be:
4e:7c:82:f2:22:51:98:39:6a:9f:e8:2e:77:43:10:
b2:01:0e:0d:f2:41:07:eb:11:1b:59:51:43:f8:b1:
e6:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A7:66:FB:13:DA:BD:59:52:1D:F2:06:78:D3:37:32:0A:F3:8A:95:40
X509v3 Authority Key Identifier:
keyid:AE:42:23:4B:AC:61:71:27:03:E3:98:A6:D5:BF:04:8C:5C:9F:40:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rkIjS6xhcScD45im1b8EjFyfQDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/0893d0-d1a1-4276-a5b7-ee2bcf186f24/1/rkIjS6xhcScD45im1b8EjFyfQDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:0d:7d:bf:72:2a:37:f1:f0:fd:7e:04:92:83:12:cb:96:5c:
aa:87:5e:a9:20:e6:eb:b4:10:60:a5:c6:4c:dc:cb:33:5d:00:
ba:dc:96:a3:e4:1d:76:4a:91:07:6c:de:e7:ef:c7:cf:b1:15:
30:e5:51:fb:8c:8e:cf:12:60:56:78:e4:f1:fc:27:ef:25:77:
7a:f2:ea:32:d2:d0:58:0d:fa:19:12:12:6c:bf:e5:40:ad:30:
a2:f7:83:9b:40:73:2c:81:59:65:a1:da:aa:69:e2:80:ed:05:
19:82:77:7b:ed:2f:2c:79:69:b2:20:6a:9c:62:60:2b:50:26:
e3:58:f1:6a:80:61:5b:23:63:fb:ad:ef:3d:28:43:ea:76:81:
21:77:36:8d:a0:dc:37:a7:02:bc:7e:88:d5:54:b4:98:79:e7:
72:96:52:d4:b1:84:d2:4c:be:42:ad:cc:f1:5c:e5:4b:5a:db:
5b:9c:f8:4d:40:1d:e1:e8:bd:1f:fd:cf:6a:06:0a:77:21:5f:
00:ee:f7:1a:d3:b0:1d:61:9e:7f:e7:51:96:76:5b:33:e5:26:
b1:d4:4a:91:39:fe:2a:a0:7d:81:36:3f:75:6f:63:0e:a4:35:
b2:3c:26:4e:a3:8b:86:ec:30:9f:82:c2:60:a7:b8:5d:33:95:
35:1a:9e:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oYJhleXwfVW1HWIAWf7wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNDIyMzRiYWM2MTcxMjcwM2UzOThhNmQ1YmYwNDhjNWM5
ZjQwMzIwHhcNMjUwNjI5MDMwMDU4WhcNMjUwNjMwMDMwMDU4WjAzMTEwLwYDVQQD
EyhhNzY2ZmIxM2RhYmQ1OTUyMWRmMjA2NzhkMzM3MzIwYWYzOGE5NTQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2Z4+uOoPifEdhxfSCX4TCDaeWn8U
otjIQuEDbDt/dH5bPQNIq/G5bwb23k6hOE2EP4d1BIzEdfiXPITle4b+lXiD/Wsp
609iaui6U75uMYwPQqLbhNz/2xW8rUx7swBDWSFeDl0tDqaOuJ1Duv/1sh+K2f1b
CCvaMDB67ZGkE7xN90LBP/TyHJmncxLZ6aKsrfbE/1tYyAvLjEX/yzY6G2VofnmG
i64rRV9CswZoGzqSPQOAtsXgApXGJeHIlD0yORQuSZSg9kqZfkr0JZ1peiV5L8KY
yXVtouwqmql8Pb5OfILyIlGYOWqf6C53QxCyAQ4N8kEH6xEbWVFD+LHmYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKdm+xPavVlSHfIGeNM3MgrzipVAMB8GA1UdIwQY
MBaAFK5CI0usYXEnA+OYptW/BIxcn0AyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmtJalM2eGhjU2NENDVpbTFiOEVqRnlmUURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi8wODkzZDAtZDFhMS00Mjc2LWE1Yjct
ZWUyYmNmMTg2ZjI0LzEvcmtJalM2eGhjU2NENDVpbTFiOEVqRnlmUURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi8wODkzZDAtZDFhMS00Mjc2LWE1YjctZWUyYmNmMTg2ZjI0
LzEvcmtJalM2eGhjU2NENDVpbTFiOEVqRnlmUURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKw19v3Iq
N/Hw/X4EkoMSy5ZcqodeqSDm67QQYKXGTNzLM10AutyWo+QddkqRB2ze5+/Hz7EV
MOVR+4yOzxJgVnjk8fwn7yV3evLqMtLQWA36GRISbL/lQK0woveDm0BzLIFZZaHa
qmnigO0FGYJ3e+0vLHlpsiBqnGJgK1Am41jxaoBhWyNj+63vPShD6naBIXc2jaDc
N6cCvH6I1VS0mHnncpZS1LGE0ky+Qq3M8VzlS1rbW5z4TUAd4ei9H/3PagYKdyFf
AO73GtOwHWGef+dRlnZbM+UmsdRKkTn+KqB9gTY/dW9jDqQ1sjwmTqOLhuwwn4LC
YKe4XTOVNRqeKw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:30:49 2025 by rpki-client