Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
File: Rg7_G6LS91kqRNITPSB7KT4kGsI.mft (raw, json)
Hash identifier: YBEEbqt+aOnrsb0o1Z4l9/mPzRk8BwnZpltwBy0WLPs=
Subject key identifier: F2:BC:81:FC:98:C0:7E:8C:3D:CE:C2:8A:FC:AE:66:63:71:BC:A0:5A
Authority key identifier: 46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2
Certificate issuer: /CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
Certificate serial: 0197B77CACC9C33D52B08C8829AD90175F11
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
Manifest number: 0ABC
Signing time: Sat 28 Jun 2025 17:01:30 +0000
Manifest this update: Sat 28 Jun 2025 17:01:30 +0000
Manifest next update: Sun 29 Jun 2025 17:01:30 +0000
Files and hashes: 1: Rg7_G6LS91kqRNITPSB7KT4kGsI.crl (hash: ST1/Pp/dmJAQrFpRckvqNTrWfWo1taujwe60ObE7iRI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:ac:c9:c3:3d:52:b0:8c:88:29:ad:90:17:5f:11
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=460eff1ba2d2f7592a44d2133d207b293e241ac2
Validity
Not Before: Jun 28 17:01:30 2025 GMT
Not After : Jun 29 17:01:30 2025 GMT
Subject: CN=f2bc81fc98c07e8c3dcec28afcae666371bca05a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:17:66:89:7e:36:e1:6d:cf:b5:b4:af:20:63:
fc:86:f2:40:bb:56:3a:53:9a:52:77:f4:06:41:2b:
15:85:df:57:cf:2a:82:a7:72:98:01:30:c8:48:63:
8b:7a:73:c3:f1:e5:64:59:5b:18:28:34:5d:08:f9:
29:13:98:7d:59:28:53:db:77:29:42:8e:11:d3:75:
a4:7e:bc:a1:98:5e:de:ac:a5:b6:db:51:b0:9c:ea:
bc:93:2a:d7:71:b9:cd:e8:76:82:5a:b4:bd:e6:42:
43:48:c6:46:89:18:af:73:a9:3d:b9:52:47:f5:63:
9f:56:0a:19:e4:8f:f5:b0:f2:16:69:e5:4c:23:22:
5e:92:e0:f0:ad:12:b7:dc:2c:be:fb:15:98:a5:f6:
96:56:54:6f:03:50:66:9b:b7:80:3d:cc:32:be:59:
01:50:4f:c3:18:6d:1c:f4:b3:6c:83:1a:68:6f:d8:
32:18:43:9b:b9:66:50:8d:c2:df:ca:e8:dc:a6:42:
be:84:eb:c5:a2:46:e5:89:3c:a7:8c:57:ce:83:9a:
96:f1:06:30:32:6b:7d:18:3b:62:c8:5b:d9:de:2e:
f5:e6:bc:8c:6c:c6:85:d7:bf:8b:5b:4c:d0:04:d2:
69:b3:f8:5b:8c:98:ae:aa:ba:59:9e:cb:d2:b9:b8:
9f:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:BC:81:FC:98:C0:7E:8C:3D:CE:C2:8A:FC:AE:66:63:71:BC:A0:5A
X509v3 Authority Key Identifier:
keyid:46:0E:FF:1B:A2:D2:F7:59:2A:44:D2:13:3D:20:7B:29:3E:24:1A:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rg7_G6LS91kqRNITPSB7KT4kGsI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/2ef77e-919f-486c-8124-a3b1798e4131/1/Rg7_G6LS91kqRNITPSB7KT4kGsI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:41:c4:c8:3f:79:50:c6:03:92:aa:e5:09:5e:a9:02:a0:53:
3a:67:d9:28:d9:07:96:74:c6:5c:fc:8a:8d:82:b3:25:19:c5:
ba:84:cd:5f:e9:65:ca:43:b3:26:50:3b:d1:31:86:2c:9c:ab:
28:1f:33:66:b0:20:1d:7c:fc:ce:55:04:c3:24:04:6e:5c:46:
44:e9:57:53:b4:ac:2a:48:e0:11:a1:38:87:ca:74:0d:76:48:
95:75:11:b1:8c:66:a3:07:12:16:20:11:27:18:ea:c6:a2:d8:
18:2e:9d:b4:9f:5b:a6:12:31:c1:94:3d:4b:c7:da:f2:35:7d:
f3:e4:fd:bb:f8:c4:e2:d9:ff:e8:b6:78:5f:46:ee:66:0a:45:
64:4c:68:26:27:c6:7b:58:25:5d:52:c0:a5:32:c4:db:60:01:
eb:91:15:15:1c:fe:50:ce:14:d4:c8:e4:99:08:e0:5f:16:c1:
40:6e:77:8c:52:83:05:0d:c9:c5:8e:d5:ad:8c:93:a7:43:da:
2b:14:b4:20:f6:2a:b1:0b:06:1f:03:18:58:8d:9f:69:cc:87:
2a:94:f3:cd:85:04:bb:f1:2b:50:d2:56:c6:e1:4e:ca:7a:b8:
89:46:f2:e7:bb:2b:98:44:5c:c8:19:32:24:99:15:ea:52:d4:
20:0e:bc:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fKzJwz1SsIyIKa2QF18RMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MGVmZjFiYTJkMmY3NTkyYTQ0ZDIxMzNkMjA3YjI5M2Uy
NDFhYzIwHhcNMjUwNjI4MTcwMTMwWhcNMjUwNjI5MTcwMTMwWjAzMTEwLwYDVQQD
EyhmMmJjODFmYzk4YzA3ZThjM2RjZWMyOGFmY2FlNjY2MzcxYmNhMDVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnhdmiX424W3PtbSvIGP8hvJAu1Y6
U5pSd/QGQSsVhd9XzyqCp3KYATDISGOLenPD8eVkWVsYKDRdCPkpE5h9WShT23cp
Qo4R03WkfryhmF7erKW221GwnOq8kyrXcbnN6HaCWrS95kJDSMZGiRivc6k9uVJH
9WOfVgoZ5I/1sPIWaeVMIyJekuDwrRK33Cy++xWYpfaWVlRvA1Bmm7eAPcwyvlkB
UE/DGG0c9LNsgxpob9gyGEObuWZQjcLfyujcpkK+hOvFokbliTynjFfOg5qW8QYw
Mmt9GDtiyFvZ3i715ryMbMaF17+LW0zQBNJps/hbjJiuqrpZnsvSubifUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPK8gfyYwH6MPc7CivyuZmNxvKBaMB8GA1UdIwQY
MBaAFEYO/xui0vdZKkTSEz0geyk+JBrCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmc3X0c2TFM5MWtxUk5JVFBTQjdLVDRrR3NJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy8yZWY3N2UtOTE5Zi00ODZjLTgxMjQt
YTNiMTc5OGU0MTMxLzEvUmc3X0c2TFM5MWtxUk5JVFBTQjdLVDRrR3NJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy8yZWY3N2UtOTE5Zi00ODZjLTgxMjQtYTNiMTc5OGU0MTMx
LzEvUmc3X0c2TFM5MWtxUk5JVFBTQjdLVDRrR3NJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAY0HEyD95
UMYDkqrlCV6pAqBTOmfZKNkHlnTGXPyKjYKzJRnFuoTNX+llykOzJlA70TGGLJyr
KB8zZrAgHXz8zlUEwyQEblxGROlXU7SsKkjgEaE4h8p0DXZIlXURsYxmowcSFiAR
JxjqxqLYGC6dtJ9bphIxwZQ9S8fa8jV98+T9u/jE4tn/6LZ4X0buZgpFZExoJifG
e1glXVLApTLE22AB65EVFRz+UM4U1MjkmQjgXxbBQG53jFKDBQ3JxY7VrYyTp0Pa
KxS0IPYqsQsGHwMYWI2facyHKpTzzYUEu/ErUNJWxuFOynq4iUby57srmERcyBky
JJkV6lLUIA68/Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:30:13 2025 by rpki-client