Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
File: RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft (raw, json)
Hash identifier: vaALS3qTvWYnyFWZsekPVDBWGaC6s4gjcmcAK4H9dFY=
Subject key identifier: 63:72:1D:70:4C:C4:DD:6E:66:5F:E1:3A:95:9A:B3:FA:F7:41:A1:26
Authority key identifier: 45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15
Certificate issuer: /CN=45981ce71942d45729f8706e2bb1b0149a52b415
Certificate serial: 0197B88F9CA1758615F46B8C2DDA045FE036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 22:01:48 +0000
Manifest this update: Sat 28 Jun 2025 22:01:48 +0000
Manifest next update: Sun 29 Jun 2025 22:01:48 +0000
Files and hashes: 1: RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl (hash: wMDfIy74ippkwdfpckcBT5G+z9/wPsDTRDZl+raQ5Zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:9c:a1:75:86:15:f4:6b:8c:2d:da:04:5f:e0:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45981ce71942d45729f8706e2bb1b0149a52b415
Validity
Not Before: Jun 28 22:01:48 2025 GMT
Not After : Jun 29 22:01:48 2025 GMT
Subject: CN=63721d704cc4dd6e665fe13a959ab3faf741a126
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:03:54:ec:40:28:3f:78:e6:da:ee:2b:c3:73:
ca:36:8b:d3:7d:9e:04:86:1f:2c:b2:53:b3:d5:bf:
ba:c8:bc:aa:87:ec:28:c7:a5:72:7b:75:07:77:5c:
53:1d:48:fb:0a:ef:71:c5:61:42:c6:e1:2c:4f:06:
55:ff:f3:8e:c1:67:67:ce:f5:fb:8f:d4:b7:dd:bf:
09:93:ff:44:8d:3e:21:b3:7c:f3:7f:70:c3:b1:ef:
50:6c:50:8d:cb:bd:73:db:ab:ae:b8:c5:2d:d5:c2:
c8:a3:a9:e2:58:7a:07:af:c1:6d:58:72:42:70:f8:
05:f7:63:cc:bf:c1:98:5b:f2:35:d6:38:5e:8e:c3:
ec:2d:03:0d:f3:ec:de:8d:32:9c:e3:62:bc:9b:a4:
55:b1:6d:2d:62:9b:8d:e3:93:1f:f3:25:ad:b9:2f:
8b:ac:ba:d0:81:1f:7d:5f:5c:af:ba:49:55:0a:7b:
0a:2c:55:bd:a1:af:12:67:8c:d4:76:ea:f7:65:0b:
9c:63:ab:43:75:28:27:2e:e1:90:ce:40:45:81:ad:
2c:df:b7:80:d5:c8:61:78:eb:b9:77:82:c9:08:f0:
c0:1e:ef:b8:fe:d9:0b:7d:01:df:bb:a7:c5:8c:88:
e8:eb:6e:f9:3b:8b:e4:49:18:54:03:91:23:f1:48:
ec:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
63:72:1D:70:4C:C4:DD:6E:66:5F:E1:3A:95:9A:B3:FA:F7:41:A1:26
X509v3 Authority Key Identifier:
keyid:45:98:1C:E7:19:42:D4:57:29:F8:70:6E:2B:B1:B0:14:9A:52:B4:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RZgc5xlC1Fcp-HBuK7GwFJpStBU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f201f3-6863-4ac7-9dc5-6212802ae16e/1/RZgc5xlC1Fcp-HBuK7GwFJpStBU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:fb:36:25:b2:f4:69:e2:0f:cc:5b:18:2d:01:86:19:47:19:
20:0a:36:90:9f:5a:e6:96:1b:34:50:73:c4:b1:64:99:d7:20:
11:28:08:55:1f:42:57:18:1c:01:0c:e0:01:2f:a4:5d:b3:37:
39:5d:b9:e3:fa:d0:7c:e3:a1:cf:5a:33:aa:18:87:7c:bf:35:
f5:98:15:bd:0e:e1:6c:eb:e2:79:b3:05:07:99:b9:15:95:b0:
c7:9c:cb:8e:f4:bc:d1:42:6b:f0:b7:15:ef:71:75:e3:7b:b1:
41:6b:91:13:0f:fd:af:26:10:98:5b:90:f3:45:a7:ba:7f:b2:
f8:ec:dd:b8:2f:bd:68:d8:90:86:4c:20:f9:a9:d8:03:8b:d5:
6f:93:11:98:20:3c:de:0e:98:b1:83:14:87:0d:ba:e5:71:68:
f1:35:4f:53:6e:43:64:f6:f3:b5:62:33:e9:9e:45:51:3f:2b:
9f:e3:bf:fd:17:a7:ce:46:49:7d:25:1c:3a:d1:28:83:84:4b:
08:9c:6f:4a:a2:47:a2:80:ce:22:5f:8f:d7:ce:87:55:7c:6f:
1f:4f:31:3e:48:bc:8c:da:08:59:ad:34:87:b5:6b:03:88:f1:
79:18:19:03:e9:85:b5:a4:80:56:4c:a3:7e:47:65:44:bc:0f:
84:a7:54:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j5yhdYYV9GuMLdoEX+A2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1OTgxY2U3MTk0MmQ0NTcyOWY4NzA2ZTJiYjFiMDE0OWE1
MmI0MTUwHhcNMjUwNjI4MjIwMTQ4WhcNMjUwNjI5MjIwMTQ4WjAzMTEwLwYDVQQD
Eyg2MzcyMWQ3MDRjYzRkZDZlNjY1ZmUxM2E5NTlhYjNmYWY3NDFhMTI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnwNU7EAoP3jm2u4rw3PKNovTfZ4E
hh8sslOz1b+6yLyqh+wox6Vye3UHd1xTHUj7Cu9xxWFCxuEsTwZV//OOwWdnzvX7
j9S33b8Jk/9EjT4hs3zzf3DDse9QbFCNy71z26uuuMUt1cLIo6niWHoHr8FtWHJC
cPgF92PMv8GYW/I11jhejsPsLQMN8+zejTKc42K8m6RVsW0tYpuN45Mf8yWtuS+L
rLrQgR99X1yvuklVCnsKLFW9oa8SZ4zUdur3ZQucY6tDdSgnLuGQzkBFga0s37eA
1chheOu5d4LJCPDAHu+4/tkLfQHfu6fFjIjo6275O4vkSRhUA5Ej8Ujs/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGNyHXBMxN1uZl/hOpWas/r3QaEmMB8GA1UdIwQY
MBaAFEWYHOcZQtRXKfhwbiuxsBSaUrQVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlpnYzV4bEMxRmNwLUhCdUs3R3dGSnBTdEJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mMjAxZjMtNjg2My00YWM3LTlkYzUt
NjIxMjgwMmFlMTZlLzEvUlpnYzV4bEMxRmNwLUhCdUs3R3dGSnBTdEJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mMjAxZjMtNjg2My00YWM3LTlkYzUtNjIxMjgwMmFlMTZl
LzEvUlpnYzV4bEMxRmNwLUhCdUs3R3dGSnBTdEJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAefs2JbL0
aeIPzFsYLQGGGUcZIAo2kJ9a5pYbNFBzxLFkmdcgESgIVR9CVxgcAQzgAS+kXbM3
OV254/rQfOOhz1ozqhiHfL819ZgVvQ7hbOviebMFB5m5FZWwx5zLjvS80UJr8LcV
73F143uxQWuREw/9ryYQmFuQ80Wnun+y+OzduC+9aNiQhkwg+anYA4vVb5MRmCA8
3g6YsYMUhw265XFo8TVPU25DZPbztWIz6Z5FUT8rn+O//RenzkZJfSUcOtEog4RL
CJxvSqJHooDOIl+P186HVXxvH08xPki8jNoIWa00h7VrA4jxeRgZA+mFtaSAVkyj
fkdlRLwPhKdUpQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:24:38 2025 by rpki-client