Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
File: mfseX91w4MDmCIWjBYH-DAJBDX0.mft (raw, json)
Hash identifier: emCS6p5L9DfB3Cy+Kv4caWrkxN8aEvNhRQuj1hNqrQo=
Subject key identifier: 47:76:DB:DB:91:AF:41:DC:1E:0B:93:10:E3:F0:40:58:71:C8:E8:D2
Authority key identifier: 99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
Certificate issuer: /CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Certificate serial: 0197B6A0790404C77CB3A3507A8BFB63E9BE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:00:59 +0000
Manifest this update: Sat 28 Jun 2025 13:00:59 +0000
Manifest next update: Sun 29 Jun 2025 13:00:59 +0000
Files and hashes: 1: mfseX91w4MDmCIWjBYH-DAJBDX0.crl (hash: DNBFhcQC7PtrlVF+2V+73/kEolEtut/JxmoYgDzKXOY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:79:04:04:c7:7c:b3:a3:50:7a:8b:fb:63:e9:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99fb1e5fdd70e0c0e60885a30581fe0c02410d7d
Validity
Not Before: Jun 28 13:00:59 2025 GMT
Not After : Jun 29 13:00:59 2025 GMT
Subject: CN=4776dbdb91af41dc1e0b9310e3f0405871c8e8d2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:69:bc:bb:62:0e:7f:8e:68:31:d8:04:ae:d2:
6a:9c:c1:48:b5:de:00:10:f8:ee:39:04:73:e1:5d:
13:fd:8b:ca:f5:2f:80:89:b3:b8:e0:3c:3f:bd:d3:
28:27:61:a0:bb:a2:39:16:fe:b9:38:2e:22:58:0d:
31:3e:18:cf:e1:ed:4a:ab:7e:a1:03:ab:dc:c4:c0:
f5:1a:20:3f:af:95:d2:4b:de:1a:0c:15:f5:b5:62:
37:78:91:2f:0c:7b:5b:15:24:9b:9d:06:7a:a0:5c:
cf:43:ce:47:18:ba:89:15:f8:9c:62:e4:85:6f:7b:
d1:4e:12:d1:38:54:c3:7a:d8:6a:97:7e:75:92:86:
66:ab:84:11:6e:c8:fd:db:b7:26:92:17:2f:bd:73:
82:ca:3b:8a:60:07:6b:cb:ed:a7:02:ca:34:8e:53:
4b:88:ff:63:0b:11:76:94:54:5e:18:d0:8f:79:49:
3f:47:88:f3:26:4d:a8:33:d1:34:01:d4:7f:66:7c:
40:3a:4a:42:84:07:02:ec:38:c3:f6:55:26:ec:74:
47:12:c4:7a:31:02:40:c7:fe:f0:65:e6:bd:d2:d3:
dd:59:b0:d7:1b:91:4e:36:17:ca:cb:fa:23:74:30:
4c:32:29:19:64:4c:5f:4d:d1:70:fb:86:21:d9:ee:
c9:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:76:DB:DB:91:AF:41:DC:1E:0B:93:10:E3:F0:40:58:71:C8:E8:D2
X509v3 Authority Key Identifier:
keyid:99:FB:1E:5F:DD:70:E0:C0:E6:08:85:A3:05:81:FE:0C:02:41:0D:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfseX91w4MDmCIWjBYH-DAJBDX0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/d2a3b5-97de-4d47-b1db-45ee5840682c/1/mfseX91w4MDmCIWjBYH-DAJBDX0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:b0:9d:bf:86:70:2f:46:84:30:b2:34:1f:e4:f2:f8:c8:49:
27:81:eb:90:00:fc:9c:7c:65:53:9a:bc:69:19:35:ed:59:d0:
93:7a:ba:96:de:0e:b6:86:ac:d8:c7:e9:a2:3c:6e:f6:30:df:
08:b3:c1:7a:a7:cd:fa:eb:2f:9f:26:2f:99:e7:3a:f0:98:b3:
74:92:be:65:29:53:c1:aa:62:87:f9:e3:30:7f:ef:d7:13:68:
d0:b7:fa:70:60:75:de:14:46:52:26:53:33:61:27:80:c4:92:
48:6f:fd:dd:36:42:34:be:ef:a0:77:50:eb:04:7a:73:e0:35:
f4:3f:93:be:6c:3a:83:a3:64:75:07:74:0f:7e:f6:3c:da:05:
fc:96:b0:07:c4:da:fe:74:17:39:b8:79:ec:4c:f2:64:b9:6d:
44:d3:b1:36:29:0f:06:6c:2f:da:d2:7f:95:3e:fa:56:bd:e2:
a7:f4:cf:92:21:77:71:6a:00:26:06:12:83:93:16:90:64:45:
3d:bd:07:ab:3f:8e:18:10:71:2b:61:4c:0f:39:c1:13:31:39:
44:4c:66:fe:d1:23:12:37:f4:18:cf:8a:04:35:72:e6:38:d5:
e2:1d:08:c7:58:bd:30:97:a1:e1:5f:cb:eb:97:c4:4c:46:1a:
ca:2e:47:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oHkEBMd8s6NQeov7Y+m+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZmIxZTVmZGQ3MGUwYzBlNjA4ODVhMzA1ODFmZTBjMDI0
MTBkN2QwHhcNMjUwNjI4MTMwMDU5WhcNMjUwNjI5MTMwMDU5WjAzMTEwLwYDVQQD
Eyg0Nzc2ZGJkYjkxYWY0MWRjMWUwYjkzMTBlM2YwNDA1ODcxYzhlOGQyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz2m8u2IOf45oMdgErtJqnMFItd4A
EPjuOQRz4V0T/YvK9S+AibO44Dw/vdMoJ2Ggu6I5Fv65OC4iWA0xPhjP4e1Kq36h
A6vcxMD1GiA/r5XSS94aDBX1tWI3eJEvDHtbFSSbnQZ6oFzPQ85HGLqJFficYuSF
b3vRThLROFTDethql351koZmq4QRbsj927cmkhcvvXOCyjuKYAdry+2nAso0jlNL
iP9jCxF2lFReGNCPeUk/R4jzJk2oM9E0AdR/ZnxAOkpChAcC7DjD9lUm7HRHEsR6
MQJAx/7wZea90tPdWbDXG5FONhfKy/ojdDBMMikZZExfTdFw+4Yh2e7JdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEd229uRr0HcHguTEOPwQFhxyOjSMB8GA1UdIwQY
MBaAFJn7Hl/dcODA5giFowWB/gwCQQ19MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZzZVg5MXc0TURtQ0lXakJZSC1EQUpCRFgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS9kMmEzYjUtOTdkZS00ZDQ3LWIxZGIt
NDVlZTU4NDA2ODJjLzEvbWZzZVg5MXc0TURtQ0lXakJZSC1EQUpCRFgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS9kMmEzYjUtOTdkZS00ZDQ3LWIxZGItNDVlZTU4NDA2ODJj
LzEvbWZzZVg5MXc0TURtQ0lXakJZSC1EQUpCRFgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdLCdv4Zw
L0aEMLI0H+Ty+MhJJ4HrkAD8nHxlU5q8aRk17VnQk3q6lt4Otoas2Mfpojxu9jDf
CLPBeqfN+usvnyYvmec68JizdJK+ZSlTwapih/njMH/v1xNo0Lf6cGB13hRGUiZT
M2EngMSSSG/93TZCNL7voHdQ6wR6c+A19D+Tvmw6g6NkdQd0D372PNoF/JawB8Ta
/nQXObh57EzyZLltRNOxNikPBmwv2tJ/lT76Vr3ip/TPkiF3cWoAJgYSg5MWkGRF
Pb0Hqz+OGBBxK2FMDznBEzE5RExm/tEjEjf0GM+KBDVy5jjV4h0Ix1i9MJeh4V/L
65fETEYayi5H5Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:35:29 2025 by rpki-client