Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
File: o9KLNY1BezfsyLKRv5nBUVvOj3I.mft (raw, json)
Hash identifier: 5n9TACE9oSMpS5W4/Dge+YRGHdhwe2GQ8LBZ/7xZ/cA=
Subject key identifier: 3C:6D:6C:C2:FB:DB:27:B4:1D:03:A1:31:EF:D4:CD:66:72:B1:2C:8A
Authority key identifier: A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
Certificate issuer: /CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Certificate serial: 0197C614EAD6533F01A72B5E08720FC077DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
Manifest number: 113B
Signing time: Tue 01 Jul 2025 13:02:29 +0000
Manifest this update: Tue 01 Jul 2025 13:02:29 +0000
Manifest next update: Wed 02 Jul 2025 13:02:29 +0000
Files and hashes: 1: o9KLNY1BezfsyLKRv5nBUVvOj3I.crl (hash: Wfm9ARsPKVjax4fgo3f8JMwi6tlJrbkHT0f0vsDhovI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c6:14:ea:d6:53:3f:01:a7:2b:5e:08:72:0f:c0:77:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a3d28b358d417b37ecc8b291bf99c1515bce8f72
Validity
Not Before: Jul 1 13:02:29 2025 GMT
Not After : Jul 2 13:02:29 2025 GMT
Subject: CN=3c6d6cc2fbdb27b41d03a131efd4cd6672b12c8a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:89:4b:31:ac:e7:de:c1:67:00:cb:45:3d:55:ee:
59:ec:05:45:7d:95:80:93:68:75:a5:05:b1:61:fd:
ec:03:ff:b8:f6:c9:e6:fe:66:44:1a:50:93:8e:78:
7d:8e:85:ed:51:23:a9:92:23:57:48:21:74:37:5a:
d5:89:93:8d:c2:15:c1:c2:42:73:41:31:04:14:b2:
78:e1:e2:df:a9:f7:70:35:61:67:87:29:ce:41:8e:
fe:6d:07:d0:10:91:7f:02:96:84:09:07:06:72:56:
6a:67:33:89:fc:e7:d1:3b:51:ff:8e:f4:5a:d3:11:
6b:18:07:9d:3f:b2:80:84:47:00:2a:82:04:45:1a:
db:20:89:d5:15:28:f0:10:b7:77:29:da:f6:81:a9:
e4:9f:c4:37:5c:87:e1:2d:9a:f1:51:1d:2c:07:e2:
8c:2d:d9:93:51:c2:56:9b:9b:b2:a0:91:c6:6b:85:
95:88:28:bb:7c:92:8b:15:a7:e8:ee:61:ea:93:d6:
3e:0b:95:27:25:61:50:46:8c:28:24:3e:f2:b2:59:
64:74:6e:42:95:50:a7:90:43:fc:cb:6b:0e:d5:17:
ae:a9:47:f5:30:db:9d:55:1a:d0:f6:d0:a5:44:f1:
ef:0a:8a:1b:76:df:b4:df:55:b2:81:13:ad:4e:e8:
d9:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:6D:6C:C2:FB:DB:27:B4:1D:03:A1:31:EF:D4:CD:66:72:B1:2C:8A
X509v3 Authority Key Identifier:
keyid:A3:D2:8B:35:8D:41:7B:37:EC:C8:B2:91:BF:99:C1:51:5B:CE:8F:72
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/o9KLNY1BezfsyLKRv5nBUVvOj3I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/c3b68d-bc5e-4a42-b1b6-dfe41088cc03/1/o9KLNY1BezfsyLKRv5nBUVvOj3I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:63:30:c6:d3:dd:67:5a:94:8c:76:80:10:a6:8a:86:24:b8:
a0:25:37:e7:be:b3:b4:a9:0e:5c:03:8e:74:c8:21:fd:13:57:
e6:6e:9d:eb:ac:b2:3b:fe:69:5d:11:02:57:51:d9:64:89:7d:
b6:89:4c:4f:fd:00:b1:a0:6e:19:46:9a:a8:52:df:ef:31:d8:
41:d2:56:ed:f5:99:7d:39:60:3c:5f:5e:e9:2e:c2:eb:50:02:
9d:82:a6:85:2d:d3:d8:db:6e:2e:9c:f7:20:a8:3b:0d:97:68:
8d:78:96:73:b5:22:8f:87:77:ae:3d:1d:c2:e1:4c:d9:cd:c4:
83:1d:0c:59:81:91:46:44:9f:1c:cc:6b:a4:72:7a:55:f2:32:
a1:f9:9d:9c:3d:ac:78:9a:0e:45:9d:65:59:59:16:01:43:46:
8c:84:14:58:13:8a:79:22:0e:26:22:8a:6d:21:88:80:35:92:
b6:32:ca:5d:5c:e5:a5:b4:13:ca:f2:c2:e2:e5:95:e8:06:6b:
e4:9c:c1:ac:4f:c3:83:d4:c4:a5:45:57:c4:ab:48:c3:f0:76:
6e:3f:51:29:d6:2e:fa:d5:85:8c:47:3b:ce:87:0a:09:88:62:
0e:7b:35:43:6d:61:d3:9f:fb:f1:df:e9:38:6c:0d:b4:2d:9d:
49:ed:29:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfGFOrWUz8BpyteCHIPwHfeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGEzZDI4YjM1OGQ0MTdiMzdlY2M4YjI5MWJmOTljMTUxNWJj
ZThmNzIwHhcNMjUwNzAxMTMwMjI5WhcNMjUwNzAyMTMwMjI5WjAzMTEwLwYDVQQD
EygzYzZkNmNjMmZiZGIyN2I0MWQwM2ExMzFlZmQ0Y2Q2NjcyYjEyYzhhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiUsxrOfewWcAy0U9Ve5Z7AVFfZWA
k2h1pQWxYf3sA/+49snm/mZEGlCTjnh9joXtUSOpkiNXSCF0N1rViZONwhXBwkJz
QTEEFLJ44eLfqfdwNWFnhynOQY7+bQfQEJF/ApaECQcGclZqZzOJ/OfRO1H/jvRa
0xFrGAedP7KAhEcAKoIERRrbIInVFSjwELd3Kdr2gankn8Q3XIfhLZrxUR0sB+KM
LdmTUcJWm5uyoJHGa4WViCi7fJKLFafo7mHqk9Y+C5UnJWFQRowoJD7ysllkdG5C
lVCnkEP8y2sO1ReuqUf1MNudVRrQ9tClRPHvCoobdt+031WygROtTujZxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDxtbML72ye0HQOhMe/UzWZysSyKMB8GA1UdIwQY
MBaAFKPSizWNQXs37Miykb+ZwVFbzo9yMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbzlLTE5ZMUJlemZzeUxLUnY1bkJVVnZPajNJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9jM2I2OGQtYmM1ZS00YTQyLWIxYjYt
ZGZlNDEwODhjYzAzLzEvbzlLTE5ZMUJlemZzeUxLUnY1bkJVVnZPajNJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9jM2I2OGQtYmM1ZS00YTQyLWIxYjYtZGZlNDEwODhjYzAz
LzEvbzlLTE5ZMUJlemZzeUxLUnY1bkJVVnZPajNJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATmMwxtPd
Z1qUjHaAEKaKhiS4oCU3576ztKkOXAOOdMgh/RNX5m6d66yyO/5pXRECV1HZZIl9
tolMT/0AsaBuGUaaqFLf7zHYQdJW7fWZfTlgPF9e6S7C61ACnYKmhS3T2NtuLpz3
IKg7DZdojXiWc7Uij4d3rj0dwuFM2c3Egx0MWYGRRkSfHMxrpHJ6VfIyofmdnD2s
eJoORZ1lWVkWAUNGjIQUWBOKeSIOJiKKbSGIgDWStjLKXVzlpbQTyvLC4uWV6AZr
5JzBrE/Dg9TEpUVXxKtIw/B2bj9RKdYu+tWFjEc7zocKCYhiDns1Q21h05/78d/p
OGwNtC2dSe0pfw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 18:20:53 2025 by rpki-client