Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
File: RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft (raw, json)
Hash identifier: L1Tt47tpe8T/4hTPIaEzAxR/+MWVA9FmjfI+yCSZcXo=
Subject key identifier: 2C:11:90:AA:DB:D9:7C:55:3C:09:7E:A2:3D:DD:40:0A:16:9F:1B:AD
Authority key identifier: 44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC
Certificate issuer: /CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac
Certificate serial: 0197B5C4F15346DC19B70C9F852DC40D5E3A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
Manifest number: 0F
Signing time: Sat 28 Jun 2025 09:01:12 +0000
Manifest this update: Sat 28 Jun 2025 09:01:12 +0000
Manifest next update: Sun 29 Jun 2025 09:01:12 +0000
Files and hashes: 1: RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl (hash: Dty2XlUY4kkAVfgdevQETRAVSyWBOcn12m8rmDoozxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:f1:53:46:dc:19:b7:0c:9f:85:2d:c4:0d:5e:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=44b5510da14a930ad71e1de3a529c7cc1bf4c5ac
Validity
Not Before: Jun 28 09:01:12 2025 GMT
Not After : Jun 29 09:01:12 2025 GMT
Subject: CN=2c1190aadbd97c553c097ea23ddd400a169f1bad
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:1a:8d:a0:ca:3f:58:0e:16:38:2f:21:15:21:
31:11:5b:22:4e:d2:51:88:1b:70:b9:7b:63:9e:e3:
0d:87:0a:4c:1e:11:73:22:5a:24:82:9f:84:46:a7:
36:0c:0a:cd:8a:11:35:79:42:dc:22:c9:05:18:3f:
b0:21:9f:70:dd:df:64:e0:02:92:53:cc:56:69:db:
c9:6c:71:7f:79:97:35:be:be:3b:33:72:b1:29:44:
e8:94:d4:9c:6a:4c:59:13:4b:68:03:f2:19:08:f0:
5a:0a:e1:9a:6e:93:49:b7:bc:7f:58:2a:75:3d:27:
f6:d5:3a:09:3c:39:7b:1d:39:be:f7:6b:97:40:1a:
17:35:9a:6c:ed:21:e0:eb:71:d1:ec:34:ae:43:cb:
f1:f8:c5:10:58:7e:75:3d:f1:ef:4f:af:e4:45:67:
3b:c9:62:49:3c:f4:52:75:62:58:80:76:6f:2e:77:
dc:6f:54:6d:32:2d:53:5b:db:93:77:c7:a7:20:72:
87:dc:d6:c0:dc:7f:82:d2:c1:40:da:d9:93:62:96:
f6:d5:e1:4e:52:63:dd:bd:e9:9d:e5:d2:27:35:3d:
33:1e:f0:cb:c8:6c:f5:fb:e2:8c:c5:f2:5d:01:6e:
74:d3:5d:fd:02:d1:1e:2a:cb:26:ca:8f:94:69:81:
54:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2C:11:90:AA:DB:D9:7C:55:3C:09:7E:A2:3D:DD:40:0A:16:9F:1B:AD
X509v3 Authority Key Identifier:
keyid:44:B5:51:0D:A1:4A:93:0A:D7:1E:1D:E3:A5:29:C7:CC:1B:F4:C5:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RLVRDaFKkwrXHh3jpSnHzBv0xaw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/cdf661-7c02-42c9-99ee-86c3b31a2f8c/1/RLVRDaFKkwrXHh3jpSnHzBv0xaw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:a0:f2:14:09:79:15:95:73:50:71:bd:f1:8a:03:b0:26:de:
69:96:a6:84:6d:a9:b4:d9:f7:65:ce:a3:2e:21:6a:6b:a7:b3:
11:f8:e6:d0:f9:6f:45:16:d6:7d:d2:31:5a:d7:b0:1e:7a:b9:
1e:b8:68:e6:be:fb:fc:5b:7e:38:ac:cb:89:f9:18:46:60:e4:
67:3e:22:d9:d9:a8:a1:47:fc:1f:4c:7c:32:c1:90:0c:71:8a:
d7:54:07:1e:28:7e:26:13:39:13:cd:1d:5c:db:05:4f:78:b8:
82:4d:ff:d5:ae:8e:05:f1:c3:06:b8:b3:b8:88:ab:24:c0:c4:
d0:19:dd:b3:84:49:84:5f:10:17:35:1c:b0:71:59:af:94:2b:
c9:cb:5e:70:49:89:a3:56:55:0b:30:3d:2c:bf:6b:35:03:50:
a0:fc:0c:34:ab:13:c9:e7:54:c9:5a:48:a7:5a:f7:15:62:94:
ed:d8:35:1d:72:16:62:c0:f7:99:03:bb:47:3d:f0:e0:2f:2f:
e2:f5:4a:82:d0:b0:f0:ce:1d:45:ae:55:08:ee:e3:5d:3a:fc:
d2:4a:75:d9:2e:30:7f:d1:50:81:f9:32:43:78:07:13:10:ff:
0e:0e:f5:ef:59:20:c9:27:cc:24:be:a5:cc:e1:38:9d:c6:8f:
4b:bf:ef:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xPFTRtwZtwyfhS3EDV46MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0YjU1MTBkYTE0YTkzMGFkNzFlMWRlM2E1MjljN2NjMWJm
NGM1YWMwHhcNMjUwNjI4MDkwMTEyWhcNMjUwNjI5MDkwMTEyWjAzMTEwLwYDVQQD
EygyYzExOTBhYWRiZDk3YzU1M2MwOTdlYTIzZGRkNDAwYTE2OWYxYmFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvhqNoMo/WA4WOC8hFSExEVsiTtJR
iBtwuXtjnuMNhwpMHhFzIlokgp+ERqc2DArNihE1eULcIskFGD+wIZ9w3d9k4AKS
U8xWadvJbHF/eZc1vr47M3KxKUTolNScakxZE0toA/IZCPBaCuGabpNJt7x/WCp1
PSf21ToJPDl7HTm+92uXQBoXNZps7SHg63HR7DSuQ8vx+MUQWH51PfHvT6/kRWc7
yWJJPPRSdWJYgHZvLnfcb1RtMi1TW9uTd8enIHKH3NbA3H+C0sFA2tmTYpb21eFO
UmPdvemd5dInNT0zHvDLyGz1++KMxfJdAW500139AtEeKssmyo+UaYFUwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCwRkKrb2XxVPAl+oj3dQAoWnxutMB8GA1UdIwQY
MBaAFES1UQ2hSpMK1x4d46Upx8wb9MWsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkxWUkRhRktrd3JYSGgzanBTbkh6QnYweGF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi9jZGY2NjEtN2MwMi00MmM5LTk5ZWUt
ODZjM2IzMWEyZjhjLzEvUkxWUkRhRktrd3JYSGgzanBTbkh6QnYweGF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi9jZGY2NjEtN2MwMi00MmM5LTk5ZWUtODZjM2IzMWEyZjhj
LzEvUkxWUkRhRktrd3JYSGgzanBTbkh6QnYweGF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVqDyFAl5
FZVzUHG98YoDsCbeaZamhG2ptNn3Zc6jLiFqa6ezEfjm0PlvRRbWfdIxWtewHnq5
Hrho5r77/Ft+OKzLifkYRmDkZz4i2dmooUf8H0x8MsGQDHGK11QHHih+JhM5E80d
XNsFT3i4gk3/1a6OBfHDBrizuIirJMDE0Bnds4RJhF8QFzUcsHFZr5QryctecEmJ
o1ZVCzA9LL9rNQNQoPwMNKsTyedUyVpIp1r3FWKU7dg1HXIWYsD3mQO7Rz3w4C8v
4vVKgtCw8M4dRa5VCO7jXTr80kp12S4wf9FQgfkyQ3gHExD/Dg7171kgySfMJL6l
zOE4ncaPS7/vJA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:12 2025 by rpki-client