Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
File: AdIyzG-yu_d4bZLGxq66oO2aceQ.mft (raw, json)
Hash identifier: PayOf5WWGQ4asTlA+n62z/s0e0mneDMz3drp3A44q5I=
Subject key identifier: C6:5D:17:E0:CE:FB:DD:07:61:7B:81:6E:C6:4F:E5:D7:72:7F:7C:33
Authority key identifier: 01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
Certificate issuer: /CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Certificate serial: 0197B6A11E2B2B3C16188BE459EFF395343D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
Manifest number: 15AF
Signing time: Sat 28 Jun 2025 13:01:41 +0000
Manifest this update: Sat 28 Jun 2025 13:01:41 +0000
Manifest next update: Sun 29 Jun 2025 13:01:41 +0000
Files and hashes: 1: AdIyzG-yu_d4bZLGxq66oO2aceQ.crl (hash: R0zVaGDMZ/KoU4Zlk5l+BQbYuG3OE/Y4kYoU0uU3CkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:1e:2b:2b:3c:16:18:8b:e4:59:ef:f3:95:34:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01d232cc6fb2bbf7786d92c6c6aebaa0ed9a71e4
Validity
Not Before: Jun 28 13:01:41 2025 GMT
Not After : Jun 29 13:01:41 2025 GMT
Subject: CN=c65d17e0cefbdd07617b816ec64fe5d7727f7c33
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8c:dd:ec:e9:77:ea:b2:eb:58:f6:7f:04:57:fa:
a9:d0:ec:85:f9:ad:ad:f9:f8:b9:83:07:15:09:f9:
f7:58:ee:84:e6:fd:86:1a:7b:c2:a5:2a:81:7f:70:
75:48:f9:12:3e:43:fc:69:fe:e7:1c:d2:ba:11:b4:
cc:b5:ab:2e:5f:c3:59:71:8c:9a:a1:f0:0d:99:91:
48:15:34:5a:4f:6e:f2:82:3c:67:5e:34:04:e5:45:
a0:bf:c0:a8:5a:bb:b1:26:05:ba:3c:cc:55:41:a2:
cf:f7:37:c0:f6:ed:61:4a:aa:ff:44:01:89:7b:bc:
b6:41:01:8c:5b:19:d9:17:7f:4d:10:b1:b6:c2:6a:
51:a6:df:bb:31:08:c4:76:17:58:78:13:37:82:bd:
4f:9f:7f:cc:43:1d:f1:29:e2:fc:ce:d8:3b:e1:64:
da:05:d9:2f:a5:5c:2e:fa:7e:6d:18:1a:f5:84:d1:
16:30:63:1a:94:c5:42:48:ad:a5:97:d2:9e:9c:48:
c9:91:68:8a:7e:33:80:f2:8d:e2:af:30:6f:9b:f1:
cc:1d:38:a5:72:9d:13:3a:35:93:94:fb:2a:c5:bb:
0b:8e:22:54:61:d5:90:1d:a5:6e:4d:86:1f:7c:18:
61:fc:92:45:c3:e5:91:84:82:47:63:fd:a6:94:f4:
61:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:5D:17:E0:CE:FB:DD:07:61:7B:81:6E:C6:4F:E5:D7:72:7F:7C:33
X509v3 Authority Key Identifier:
keyid:01:D2:32:CC:6F:B2:BB:F7:78:6D:92:C6:C6:AE:BA:A0:ED:9A:71:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AdIyzG-yu_d4bZLGxq66oO2aceQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/53/ea6fed-194b-4331-81da-d10a9771d79b/1/AdIyzG-yu_d4bZLGxq66oO2aceQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:f0:fd:ee:7e:60:b2:f4:cb:1d:43:d2:75:11:2e:da:8b:a2:
1b:07:25:95:50:71:95:53:46:d3:e4:e2:79:70:b6:7b:ba:fd:
aa:53:de:88:06:cf:15:53:1c:f8:a7:0e:fc:90:50:d6:b5:5c:
90:a8:e1:54:aa:63:c2:c9:39:08:c4:82:3a:67:03:8a:d7:43:
f5:94:b2:66:06:b0:af:df:4d:47:78:df:a3:00:ba:39:1e:0c:
fa:a6:f3:98:63:52:72:63:c7:aa:2d:55:f2:cd:2e:7a:70:0a:
73:ba:04:1e:1b:45:af:97:9c:f4:51:c6:a5:64:25:be:99:54:
5c:a7:10:58:a5:a9:4a:51:c2:4d:9f:21:88:11:10:fa:7c:55:
2e:37:72:71:7e:ee:96:7c:9f:69:b4:ea:98:7f:31:e2:8f:e8:
69:fa:ee:f0:04:14:b0:6e:af:35:3e:e2:3e:ac:a4:85:0a:ba:
2a:2c:64:81:01:98:19:62:27:b0:3d:94:c4:b0:80:9a:70:e0:
15:83:bb:dc:48:1f:91:0b:dc:63:6e:ea:6d:5a:73:3a:73:19:
5d:0f:d3:cd:77:d7:2b:b9:9d:36:ac:4d:f6:aa:d3:49:c6:95:
9a:cc:48:b1:da:b5:51:a8:b7:f6:89:05:7b:c8:d9:bb:99:33:
80:15:49:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oR4rKzwWGIvkWe/zlTQ9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZDIzMmNjNmZiMmJiZjc3ODZkOTJjNmM2YWViYWEwZWQ5
YTcxZTQwHhcNMjUwNjI4MTMwMTQxWhcNMjUwNjI5MTMwMTQxWjAzMTEwLwYDVQQD
EyhjNjVkMTdlMGNlZmJkZDA3NjE3YjgxNmVjNjRmZTVkNzcyN2Y3YzMzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjN3s6XfqsutY9n8EV/qp0OyF+a2t
+fi5gwcVCfn3WO6E5v2GGnvCpSqBf3B1SPkSPkP8af7nHNK6EbTMtasuX8NZcYya
ofANmZFIFTRaT27ygjxnXjQE5UWgv8CoWruxJgW6PMxVQaLP9zfA9u1hSqr/RAGJ
e7y2QQGMWxnZF39NELG2wmpRpt+7MQjEdhdYeBM3gr1Pn3/MQx3xKeL8ztg74WTa
BdkvpVwu+n5tGBr1hNEWMGMalMVCSK2ll9KenEjJkWiKfjOA8o3irzBvm/HMHTil
cp0TOjWTlPsqxbsLjiJUYdWQHaVuTYYffBhh/JJFw+WRhIJHY/2mlPRhCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZdF+DO+90HYXuBbsZP5ddyf3wzMB8GA1UdIwQY
MBaAFAHSMsxvsrv3eG2SxsauuqDtmnHkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWRJeXpHLXl1X2Q0YlpMR3hxNjZvTzJhY2VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81My9lYTZmZWQtMTk0Yi00MzMxLTgxZGEt
ZDEwYTk3NzFkNzliLzEvQWRJeXpHLXl1X2Q0YlpMR3hxNjZvTzJhY2VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81My9lYTZmZWQtMTk0Yi00MzMxLTgxZGEtZDEwYTk3NzFkNzli
LzEvQWRJeXpHLXl1X2Q0YlpMR3hxNjZvTzJhY2VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkPD97n5g
svTLHUPSdREu2ouiGwcllVBxlVNG0+TieXC2e7r9qlPeiAbPFVMc+KcO/JBQ1rVc
kKjhVKpjwsk5CMSCOmcDitdD9ZSyZgawr99NR3jfowC6OR4M+qbzmGNScmPHqi1V
8s0uenAKc7oEHhtFr5ec9FHGpWQlvplUXKcQWKWpSlHCTZ8hiBEQ+nxVLjdycX7u
lnyfabTqmH8x4o/oafru8AQUsG6vNT7iPqykhQq6KixkgQGYGWInsD2UxLCAmnDg
FYO73EgfkQvcY27qbVpzOnMZXQ/TzXfXK7mdNqxN9qrTScaVmsxIsdq1Uai39okF
e8jZu5kzgBVJ3w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:42:12 2025 by rpki-client