Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
File: rb65YXJeTVu08lSJhtlvzG00nmQ.mft (raw, json)
Hash identifier: xXjeDzqHccV6HaYCTthuQXPY+tug6hvfep7ikV1ejUA=
Subject key identifier: D3:4A:A0:CC:34:E5:38:B8:21:83:65:80:A5:2F:E3:91:4D:CF:BB:FC
Authority key identifier: AD:BE:B9:61:72:5E:4D:5B:B4:F2:54:89:86:D9:6F:CC:6D:34:9E:64
Certificate issuer: /CN=adbeb961725e4d5bb4f2548986d96fcc6d349e64
Certificate serial: 0197CA951EF0FB5A8E9DF6B41ED804F3CB4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
Manifest number: 01F7
Signing time: Wed 02 Jul 2025 10:00:59 +0000
Manifest this update: Wed 02 Jul 2025 10:00:59 +0000
Manifest next update: Thu 03 Jul 2025 10:00:59 +0000
Files and hashes: 1: rb65YXJeTVu08lSJhtlvzG00nmQ.crl (hash: oncZjaMAXCynoZBNqrwig5om5St37bbjL05sffLVOcI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 10:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ca:95:1e:f0:fb:5a:8e:9d:f6:b4:1e:d8:04:f3:cb:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adbeb961725e4d5bb4f2548986d96fcc6d349e64
Validity
Not Before: Jul 2 10:00:59 2025 GMT
Not After : Jul 3 10:00:59 2025 GMT
Subject: CN=d34aa0cc34e538b821836580a52fe3914dcfbbfc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:72:5a:58:f8:fa:49:79:d3:00:b3:83:93:8e:
cd:e3:93:35:48:ac:79:8f:a6:10:77:41:6c:f9:17:
2d:06:e8:f7:07:7c:94:ad:52:3a:79:15:c7:f1:f3:
5a:a6:a1:90:ee:53:0c:8f:c2:e3:db:5f:d7:ec:6e:
2f:d9:a9:bf:38:e3:c1:9b:2d:d8:4f:fc:2d:00:b9:
5a:9c:01:99:af:b0:31:5c:a6:bf:69:a8:0f:97:a3:
72:0b:ad:d0:f9:e7:4d:01:c0:14:65:cc:63:c8:5c:
86:1e:f4:3f:b7:29:85:30:27:04:fe:b0:62:15:60:
e6:82:29:ef:75:da:94:8b:fb:15:c1:d2:34:0f:aa:
72:de:60:b1:a7:42:c7:9e:d0:4b:ec:34:a6:4f:00:
fb:c5:c7:48:38:cb:1b:b9:bb:90:2e:a2:4a:28:2a:
0a:6f:c2:d5:66:5e:75:b3:16:8b:88:5b:a2:32:2f:
c1:27:b2:f6:4a:19:f9:70:32:41:68:18:f4:d1:0b:
e9:e6:cf:b7:7b:43:18:c2:96:95:25:2f:50:68:78:
73:10:15:91:31:cf:96:3f:64:04:27:1d:bb:d5:69:
71:e9:cd:b0:59:38:6c:7d:0b:f0:1c:46:2f:fe:57:
ba:fe:07:15:d8:e3:d3:8b:4f:86:11:bf:27:9b:de:
df:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:4A:A0:CC:34:E5:38:B8:21:83:65:80:A5:2F:E3:91:4D:CF:BB:FC
X509v3 Authority Key Identifier:
keyid:AD:BE:B9:61:72:5E:4D:5B:B4:F2:54:89:86:D9:6F:CC:6D:34:9E:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rb65YXJeTVu08lSJhtlvzG00nmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/926861-d9d7-4b55-9024-83d625bf1bf1/1/rb65YXJeTVu08lSJhtlvzG00nmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:e2:20:3c:ac:d3:0f:fe:a3:f9:8d:bf:72:b0:f7:f0:b3:e1:
39:1f:88:3b:49:eb:ab:c9:a2:13:51:6e:2b:e3:93:bd:04:60:
2f:83:be:b7:0a:90:e2:dd:ec:00:63:1d:df:03:c8:2b:21:75:
d7:c3:29:1d:c8:5f:60:b8:fd:7d:df:6d:39:c8:4e:e2:20:15:
b9:d9:30:f4:9d:a7:ff:17:1a:f9:44:68:78:53:42:24:01:c9:
d1:25:1b:97:1f:9d:2c:15:81:fd:02:49:ab:10:f3:9e:42:2b:
58:64:f3:4b:a1:c9:b4:2a:b9:e6:0c:7b:ab:3c:4d:b0:d0:20:
ab:f8:c7:55:54:8b:46:8e:af:c8:74:2d:d6:58:9c:61:cf:10:
a4:5d:8b:e3:a3:53:25:32:3b:9b:be:91:3b:3e:58:9e:6d:aa:
58:c6:b4:81:ef:99:84:fb:d6:40:59:a6:98:88:58:0c:56:e6:
cb:8c:f6:56:0c:cb:23:87:ab:f0:1c:4c:3d:1e:78:e7:36:a3:
ca:bd:23:96:6f:48:0c:83:08:af:85:f0:4d:c0:9b:71:db:5e:
8d:09:51:e7:f9:9a:67:da:f9:ea:54:a9:d1:7b:15:a0:13:74:
2f:b9:4e:d4:3d:18:a5:22:11:eb:e0:20:84:fa:04:79:6b:b0:
d3:ff:84:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfKlR7w+1qOnfa0HtgE88tOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYmViOTYxNzI1ZTRkNWJiNGYyNTQ4OTg2ZDk2ZmNjNmQz
NDllNjQwHhcNMjUwNzAyMTAwMDU5WhcNMjUwNzAzMTAwMDU5WjAzMTEwLwYDVQQD
EyhkMzRhYTBjYzM0ZTUzOGI4MjE4MzY1ODBhNTJmZTM5MTRkY2ZiYmZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHJaWPj6SXnTALODk47N45M1SKx5
j6YQd0Fs+RctBuj3B3yUrVI6eRXH8fNapqGQ7lMMj8Lj21/X7G4v2am/OOPBmy3Y
T/wtALlanAGZr7AxXKa/aagPl6NyC63Q+edNAcAUZcxjyFyGHvQ/tymFMCcE/rBi
FWDmginvddqUi/sVwdI0D6py3mCxp0LHntBL7DSmTwD7xcdIOMsbubuQLqJKKCoK
b8LVZl51sxaLiFuiMi/BJ7L2Shn5cDJBaBj00Qvp5s+3e0MYwpaVJS9QaHhzEBWR
Mc+WP2QEJx271Wlx6c2wWThsfQvwHEYv/le6/gcV2OPTi0+GEb8nm97fJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNKoMw05Ti4IYNlgKUv45FNz7v8MB8GA1UdIwQY
MBaAFK2+uWFyXk1btPJUiYbZb8xtNJ5kMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmI2NVlYSmVUVnUwOGxTSmh0bHZ6RzAwbm1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni85MjY4NjEtZDlkNy00YjU1LTkwMjQt
ODNkNjI1YmYxYmYxLzEvcmI2NVlYSmVUVnUwOGxTSmh0bHZ6RzAwbm1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni85MjY4NjEtZDlkNy00YjU1LTkwMjQtODNkNjI1YmYxYmYx
LzEvcmI2NVlYSmVUVnUwOGxTSmh0bHZ6RzAwbm1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYuIgPKzT
D/6j+Y2/crD38LPhOR+IO0nrq8miE1FuK+OTvQRgL4O+twqQ4t3sAGMd3wPIKyF1
18MpHchfYLj9fd9tOchO4iAVudkw9J2n/xca+URoeFNCJAHJ0SUblx+dLBWB/QJJ
qxDznkIrWGTzS6HJtCq55gx7qzxNsNAgq/jHVVSLRo6vyHQt1licYc8QpF2L46NT
JTI7m76ROz5Ynm2qWMa0ge+ZhPvWQFmmmIhYDFbmy4z2VgzLI4er8BxMPR545zaj
yr0jlm9IDIMIr4XwTcCbcdtejQlR5/maZ9r56lSp0XsVoBN0L7lO1D0YpSIR6+Ag
hPoEeWuw0/+E8g==
-----END CERTIFICATE-----
Generated at Wed Jul 2 20:09:46 2025 by rpki-client