Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
File: _oN5mWfs0ExTYUie5M-gmM5DaHE.mft (raw, json)
Hash identifier: HiKwrylh9qnG1CWkoszh1zz7eoxo25ynhpa6Ox/XjEg=
Subject key identifier: 01:D9:B8:7E:F2:B7:3C:62:05:97:0A:74:DA:9B:59:E0:22:38:40:E1
Authority key identifier: FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71
Certificate issuer: /CN=fe83799967ecd04c5361489ee4cfa098ce436871
Certificate serial: 0197B6A09B7EDEE5A3CB5CF14AFBB6BB49F9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:08 +0000
Manifest this update: Sat 28 Jun 2025 13:01:08 +0000
Manifest next update: Sun 29 Jun 2025 13:01:08 +0000
Files and hashes: 1: _oN5mWfs0ExTYUie5M-gmM5DaHE.crl (hash: L1GKyazCgcS1HJftf3T3JHHjaC2jBQKuHwdWlMzKWhQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.crl
rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:9b:7e:de:e5:a3:cb:5c:f1:4a:fb:b6:bb:49:f9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe83799967ecd04c5361489ee4cfa098ce436871
Validity
Not Before: Jun 28 13:01:08 2025 GMT
Not After : Jun 29 13:01:08 2025 GMT
Subject: CN=01d9b87ef2b73c6205970a74da9b59e0223840e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:1d:2b:86:74:e3:34:ba:f0:a3:78:73:9e:4d:
c6:d4:40:d7:69:cd:74:0d:2d:05:91:08:61:c3:86:
de:34:80:82:38:16:93:25:30:15:31:37:0e:6a:b8:
b3:11:e1:e7:96:f9:e8:dc:dd:0d:5f:5c:dc:03:4b:
29:d5:cd:22:2b:0b:9f:ec:4d:9c:2e:89:21:ca:08:
9b:53:16:ca:e6:10:cf:4f:00:6e:f8:ce:1e:88:b2:
1c:b6:38:d2:0f:f1:49:7a:3f:da:f0:bf:02:9c:43:
a2:1e:d3:2e:3c:79:48:2e:c9:20:ff:39:f9:11:10:
ff:53:ca:ab:59:ed:5a:90:d2:cb:f6:04:3d:a4:68:
97:0a:22:46:ad:e7:a3:85:90:62:3f:a9:3b:1b:b2:
d1:70:92:f0:fb:b9:20:e9:d5:ed:73:92:c4:b5:c2:
31:9d:83:74:21:f9:ff:35:57:eb:ee:86:a9:ec:e8:
99:ad:da:7a:1a:67:6b:a3:d3:01:b9:70:f9:8a:f7:
fc:99:83:47:99:8e:5e:77:15:f4:cc:f3:da:32:99:
99:79:74:1a:41:32:9e:17:a8:95:74:7f:1f:5e:57:
79:c9:38:ae:ca:90:a1:7a:f3:04:ce:2e:8e:0e:d8:
5c:c3:be:d6:5a:d3:ec:44:e1:09:48:1e:f2:68:4e:
eb:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D9:B8:7E:F2:B7:3C:62:05:97:0A:74:DA:9B:59:E0:22:38:40:E1
X509v3 Authority Key Identifier:
keyid:FE:83:79:99:67:EC:D0:4C:53:61:48:9E:E4:CF:A0:98:CE:43:68:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_oN5mWfs0ExTYUie5M-gmM5DaHE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/34/9af033-234d-4404-8096-c73bedcdca6d/1/_oN5mWfs0ExTYUie5M-gmM5DaHE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:7c:b1:c4:64:12:a9:a1:8c:56:38:86:36:d8:10:1f:73:0c:
83:a5:3c:da:1d:0b:67:1c:95:38:df:2c:a3:b4:48:f3:7f:04:
3c:66:a0:f5:1f:1a:4a:20:4b:af:94:c6:a4:b6:5f:f5:53:8f:
11:ef:fe:2b:8f:c7:ec:05:da:20:71:c2:24:c7:0b:76:b7:4d:
40:86:d2:d3:1b:1a:8d:b7:d1:63:5c:f8:da:95:69:6f:5d:e4:
f8:a0:24:b1:08:2d:af:48:60:ab:15:13:be:2c:c5:43:d2:60:
98:fd:72:c3:7d:80:a9:25:e3:08:cb:76:70:a3:f0:fc:38:7e:
65:dd:67:ad:a1:c1:07:9b:87:70:53:6b:ee:68:ef:0e:84:19:
87:88:1e:04:d2:f8:73:40:86:9e:6d:bb:5e:c5:8c:66:e2:d6:
c8:d4:ea:bd:2f:26:30:ea:58:38:78:af:c7:59:25:9d:a2:9a:
97:1d:d2:25:fa:15:6b:6a:45:28:d5:e0:81:4e:ef:06:85:c7:
8f:19:7c:60:6c:32:5a:6b:52:47:f7:36:4f:4f:e9:06:cd:71:
f0:43:ac:45:33:8a:49:d0:31:38:44:44:3b:dd:45:0a:6e:86:
d2:36:9e:ed:52:4c:a4:e8:5e:ae:21:ab:16:22:34:48:d2:1b:
c6:31:53:b7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oJt+3uWjy1zxSvu2u0n5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlODM3OTk5NjdlY2QwNGM1MzYxNDg5ZWU0Y2ZhMDk4Y2U0
MzY4NzEwHhcNMjUwNjI4MTMwMTA4WhcNMjUwNjI5MTMwMTA4WjAzMTEwLwYDVQQD
EygwMWQ5Yjg3ZWYyYjczYzYyMDU5NzBhNzRkYTliNTllMDIyMzg0MGUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtB0rhnTjNLrwo3hznk3G1EDXac10
DS0FkQhhw4beNICCOBaTJTAVMTcOarizEeHnlvno3N0NX1zcA0sp1c0iKwuf7E2c
LokhygibUxbK5hDPTwBu+M4eiLIctjjSD/FJej/a8L8CnEOiHtMuPHlILskg/zn5
ERD/U8qrWe1akNLL9gQ9pGiXCiJGreejhZBiP6k7G7LRcJLw+7kg6dXtc5LEtcIx
nYN0Ifn/NVfr7oap7OiZrdp6Gmdro9MBuXD5ivf8mYNHmY5edxX0zPPaMpmZeXQa
QTKeF6iVdH8fXld5yTiuypChevMEzi6ODthcw77WWtPsROEJSB7yaE7rpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHZuH7ytzxiBZcKdNqbWeAiOEDhMB8GA1UdIwQY
MBaAFP6DeZln7NBMU2FInuTPoJjOQ2hxMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX29ONW1XZnMwRXhUWVVpZTVNLWdtTTVEYUhFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNC85YWYwMzMtMjM0ZC00NDA0LTgwOTYt
YzczYmVkY2RjYTZkLzEvX29ONW1XZnMwRXhUWVVpZTVNLWdtTTVEYUhFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNC85YWYwMzMtMjM0ZC00NDA0LTgwOTYtYzczYmVkY2RjYTZk
LzEvX29ONW1XZnMwRXhUWVVpZTVNLWdtTTVEYUhFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASXyxxGQS
qaGMVjiGNtgQH3MMg6U82h0LZxyVON8so7RI838EPGag9R8aSiBLr5TGpLZf9VOP
Ee/+K4/H7AXaIHHCJMcLdrdNQIbS0xsajbfRY1z42pVpb13k+KAksQgtr0hgqxUT
vizFQ9JgmP1yw32AqSXjCMt2cKPw/Dh+Zd1nraHBB5uHcFNr7mjvDoQZh4geBNL4
c0CGnm27XsWMZuLWyNTqvS8mMOpYOHivx1klnaKalx3SJfoVa2pFKNXggU7vBoXH
jxl8YGwyWmtSR/c2T0/pBs1x8EOsRTOKSdAxOEREO91FCm6G0jae7VJMpOheriGr
FiI0SNIbxjFTtw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:44:43 2025 by rpki-client