Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
File: tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft (raw, json)
Hash identifier: MpHirdu7WF9X06ctbhL8WT5tINzw4fRO1ND76a+HXXo=
Subject key identifier: B7:BC:4F:CB:5F:4B:FD:C9:09:8A:B2:DA:61:9B:23:5E:05:A1:90:AE
Authority key identifier: B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
Certificate issuer: /CN=b57c8ac055c574d8cf13522b964b92314d211eae
Certificate serial: 0197B96A7046B46676BBCE50CE0DAB2B44E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
Manifest number: 1303
Signing time: Sun 29 Jun 2025 02:00:49 +0000
Manifest this update: Sun 29 Jun 2025 02:00:49 +0000
Manifest next update: Mon 30 Jun 2025 02:00:49 +0000
Files and hashes: 1: tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl (hash: Srp0nvq4Ymc+fH1nvRuN24qa0jmfoMchUU52uZtdfds=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:6a:70:46:b4:66:76:bb:ce:50:ce:0d:ab:2b:44:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b57c8ac055c574d8cf13522b964b92314d211eae
Validity
Not Before: Jun 29 02:00:49 2025 GMT
Not After : Jun 30 02:00:49 2025 GMT
Subject: CN=b7bc4fcb5f4bfdc9098ab2da619b235e05a190ae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:e3:b7:c9:3b:4b:19:82:b6:ac:6c:08:f2:93:
b8:23:0d:89:0b:aa:72:01:af:68:c8:ca:d0:57:f8:
0d:fe:2f:ee:5f:a5:37:8f:fa:79:1e:95:c9:d6:27:
d8:cf:ec:d9:60:a7:e1:fb:0b:bb:55:74:e6:bd:dc:
73:4f:21:de:70:7e:9b:b9:ac:55:ba:8c:f5:59:a7:
b0:be:08:0d:0d:52:37:7f:a1:dc:f9:85:ae:98:88:
f9:af:c3:46:29:a9:57:e5:be:d1:00:8c:d1:a4:2f:
34:77:f0:aa:e5:35:bc:7b:11:c2:10:f8:9a:36:0e:
d5:51:7f:e6:0b:bc:6a:73:e9:01:28:99:3b:a0:b9:
24:c6:a7:4e:36:c6:55:67:c1:3c:2a:0c:b6:a6:68:
fd:59:3f:4e:65:4b:ee:a1:94:0f:21:85:fc:41:68:
83:82:02:16:29:ed:9e:82:35:e3:4d:12:e9:17:df:
13:af:1c:d6:fd:c6:d0:ba:00:8e:66:0a:7a:9c:89:
50:27:c3:b0:72:32:cc:ea:50:61:e3:4e:3d:e5:cd:
0d:54:8e:28:a0:c6:ab:e9:09:60:00:ff:8f:0d:65:
0b:f2:b3:97:55:0b:18:d0:58:6f:e2:b9:2a:83:17:
30:5b:3c:10:26:7b:da:15:25:0f:27:02:14:7d:00:
60:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:BC:4F:CB:5F:4B:FD:C9:09:8A:B2:DA:61:9B:23:5E:05:A1:90:AE
X509v3 Authority Key Identifier:
keyid:B5:7C:8A:C0:55:C5:74:D8:CF:13:52:2B:96:4B:92:31:4D:21:1E:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tXyKwFXFdNjPE1IrlkuSMU0hHq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/289f40-a233-4c63-b93e-8e4c7c7b6504/1/tXyKwFXFdNjPE1IrlkuSMU0hHq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:e2:07:a2:b4:99:bd:b8:c6:36:c9:d9:57:e1:ee:9a:7e:48:
96:c0:ae:8c:98:a4:10:23:ae:b0:50:89:83:b0:77:77:a5:3e:
4a:23:40:25:ae:80:f9:38:17:5f:b6:f7:34:f9:7f:29:a7:5a:
37:63:b7:14:5b:a7:b4:10:de:d6:68:64:9e:0f:af:93:84:58:
64:d6:f6:27:a3:dc:e4:3f:ba:c2:78:9b:fc:de:67:66:70:72:
9e:0e:87:e9:b3:98:09:a6:bc:a2:d3:32:12:00:ff:4e:47:30:
7b:14:3c:04:2a:2e:8c:79:4a:78:d3:00:ca:b9:0c:f2:f5:54:
71:a1:87:da:65:34:79:9e:e4:9b:da:74:d1:e6:c2:28:0f:4d:
ba:b8:6c:fe:75:6b:d8:79:81:ee:e7:fa:b0:03:c1:73:bc:61:
d9:71:33:e8:13:83:ce:e9:e9:51:ca:b7:0f:26:f6:41:e0:da:
62:eb:50:e7:67:05:64:6e:83:5a:b9:e7:dd:30:77:b5:7a:1f:
77:8c:db:20:e5:df:85:69:2f:b6:d7:32:80:bf:21:b1:6e:27:
f2:d1:1e:aa:a0:6c:a7:89:f8:c6:5f:1b:43:34:78:6d:c2:ab:
a8:4b:af:64:cc:c3:04:7a:fb:e1:9b:33:a6:c4:94:a5:66:25:
d6:9a:87:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5anBGtGZ2u85Qzg2rK0TiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1N2M4YWMwNTVjNTc0ZDhjZjEzNTIyYjk2NGI5MjMxNGQy
MTFlYWUwHhcNMjUwNjI5MDIwMDQ5WhcNMjUwNjMwMDIwMDQ5WjAzMTEwLwYDVQQD
EyhiN2JjNGZjYjVmNGJmZGM5MDk4YWIyZGE2MTliMjM1ZTA1YTE5MGFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7+O3yTtLGYK2rGwI8pO4Iw2JC6py
Aa9oyMrQV/gN/i/uX6U3j/p5HpXJ1ifYz+zZYKfh+wu7VXTmvdxzTyHecH6buaxV
uoz1WaewvggNDVI3f6Hc+YWumIj5r8NGKalX5b7RAIzRpC80d/Cq5TW8exHCEPia
Ng7VUX/mC7xqc+kBKJk7oLkkxqdONsZVZ8E8Kgy2pmj9WT9OZUvuoZQPIYX8QWiD
ggIWKe2egjXjTRLpF98TrxzW/cbQugCOZgp6nIlQJ8OwcjLM6lBh40495c0NVI4o
oMar6QlgAP+PDWUL8rOXVQsY0Fhv4rkqgxcwWzwQJnvaFSUPJwIUfQBguwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLe8T8tfS/3JCYqy2mGbI14FoZCuMB8GA1UdIwQY
MBaAFLV8isBVxXTYzxNSK5ZLkjFNIR6uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi8yODlmNDAtYTIzMy00YzYzLWI5M2Ut
OGU0YzdjN2I2NTA0LzEvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi8yODlmNDAtYTIzMy00YzYzLWI5M2UtOGU0YzdjN2I2NTA0
LzEvdFh5S3dGWEZkTmpQRTFJcmxrdVNNVTBoSHE0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUOIHorSZ
vbjGNsnZV+Humn5IlsCujJikECOusFCJg7B3d6U+SiNAJa6A+TgXX7b3NPl/Kada
N2O3FFuntBDe1mhkng+vk4RYZNb2J6Pc5D+6wnib/N5nZnByng6H6bOYCaa8otMy
EgD/TkcwexQ8BCoujHlKeNMAyrkM8vVUcaGH2mU0eZ7km9p00ebCKA9Nurhs/nVr
2HmB7uf6sAPBc7xh2XEz6BODzunpUcq3Dyb2QeDaYutQ52cFZG6DWrnn3TB3tXof
d4zbIOXfhWkvttcygL8hsW4n8tEeqqBsp4n4xl8bQzR4bcKrqEuvZMzDBHr74Zsz
psSUpWYl1pqHGA==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:33:30 2025 by rpki-client