Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
File: mO4cQpzn8y4xDctEE9iv6MdkWmE.mft (raw, json)
Hash identifier: mrQO9cbKV4hCWVNRa6XkMXQMjTDqvzA1Uz/P0d1l5zQ=
Subject key identifier: F7:FC:B5:50:F2:1A:D1:D4:47:B9:EB:1F:4C:32:66:57:EF:3D:F9:F0
Authority key identifier: 98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
Certificate issuer: /CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Certificate serial: 0197B6A1B5E3BD7541109651809EB252002C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
Manifest number: 09F0
Signing time: Sat 28 Jun 2025 13:02:20 +0000
Manifest this update: Sat 28 Jun 2025 13:02:20 +0000
Manifest next update: Sun 29 Jun 2025 13:02:20 +0000
Files and hashes: 1: mO4cQpzn8y4xDctEE9iv6MdkWmE.crl (hash: RELBK2CZO4Pulj1VfJD3vIvITLBS5KEuIUibJKmKJx8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b5:e3:bd:75:41:10:96:51:80:9e:b2:52:00:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98ee1c429ce7f32e310dcb4413d8afe8c7645a61
Validity
Not Before: Jun 28 13:02:20 2025 GMT
Not After : Jun 29 13:02:20 2025 GMT
Subject: CN=f7fcb550f21ad1d447b9eb1f4c326657ef3df9f0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:7c:83:b9:ed:c9:07:f8:32:29:f9:4b:6c:02:
2a:45:1b:73:d1:bf:3a:4e:28:de:85:e7:07:73:fa:
9d:68:d1:c4:af:be:1d:4b:e0:c6:24:88:eb:e9:38:
44:af:85:c7:9a:74:39:a6:33:95:40:9f:4b:01:1d:
41:4a:04:5c:6c:90:8c:0d:09:02:2e:54:d7:08:5b:
a0:68:ad:9f:35:fa:3b:26:21:30:47:d1:3c:c1:18:
d0:8a:b6:c1:03:50:68:03:cd:26:2b:ee:e4:2e:a1:
97:c1:2a:30:1b:52:4a:f7:06:bc:8f:c0:25:88:6f:
a4:3d:05:2b:36:96:54:fe:f9:8b:e5:cd:82:88:ac:
06:2e:da:aa:5f:46:04:32:e4:ae:e6:9c:b6:8f:86:
8c:8f:54:b7:b2:60:82:63:e8:03:1a:6a:43:7d:9d:
6d:22:a5:01:fa:2e:e1:4f:bd:02:47:ef:85:d1:d1:
45:c2:b6:fc:b4:65:e8:af:ff:c9:c4:9a:d4:8d:85:
67:b3:a3:45:d1:15:eb:55:76:a5:9f:09:90:73:a0:
20:8a:5f:02:2c:8e:d1:0c:43:6c:af:8b:6e:4c:0f:
12:da:18:6e:11:8f:9b:c8:5d:5b:ca:ec:09:21:0c:
5a:2c:e0:a3:12:14:23:a3:c8:48:24:a9:1e:1d:ac:
d2:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:FC:B5:50:F2:1A:D1:D4:47:B9:EB:1F:4C:32:66:57:EF:3D:F9:F0
X509v3 Authority Key Identifier:
keyid:98:EE:1C:42:9C:E7:F3:2E:31:0D:CB:44:13:D8:AF:E8:C7:64:5A:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mO4cQpzn8y4xDctEE9iv6MdkWmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/e3a381-77e3-4290-91ec-fda58edee5e6/1/mO4cQpzn8y4xDctEE9iv6MdkWmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:ec:7b:c0:42:66:8a:eb:74:68:22:8c:4f:21:3e:0b:bf:7a:
17:b8:24:9e:06:65:46:7f:5e:5f:01:fd:ff:59:18:a0:04:d1:
98:3c:55:84:fc:66:bd:f4:e5:1b:94:4f:5c:26:ab:8f:bb:1b:
6d:13:20:a5:53:4e:de:30:63:96:fc:ad:42:b4:64:5e:35:11:
8b:b6:de:fd:28:ef:0e:0e:38:c7:38:c0:97:09:1e:b9:e0:2d:
74:bf:02:22:00:4f:da:86:cf:78:93:ee:6f:1b:12:9c:03:83:
de:25:f5:26:4f:c7:10:60:6e:d5:65:2a:7a:b5:8c:ad:7d:9d:
fe:8e:7e:3e:10:a4:7c:d8:2a:e4:df:fe:ec:d9:dc:0e:88:86:
0c:66:27:d8:62:72:51:af:8e:d0:cc:20:57:a1:65:bc:de:74:
45:26:67:71:9d:c3:eb:d4:90:99:23:61:e1:10:03:8d:93:19:
03:3c:76:20:99:95:07:93:19:fd:30:19:4e:fa:12:5d:25:c1:
9a:8d:0f:6e:48:73:bd:41:ce:02:97:36:3d:14:bc:4c:fc:13:
25:02:46:e2:91:e5:f3:50:66:19:36:14:4c:93:c0:56:0f:ed:
ca:3c:ee:e0:49:bd:c1:f9:b5:c2:12:67:20:5e:62:d5:b7:e4:
25:08:fb:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2obXjvXVBEJZRgJ6yUgAsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZWUxYzQyOWNlN2YzMmUzMTBkY2I0NDEzZDhhZmU4Yzc2
NDVhNjEwHhcNMjUwNjI4MTMwMjIwWhcNMjUwNjI5MTMwMjIwWjAzMTEwLwYDVQQD
EyhmN2ZjYjU1MGYyMWFkMWQ0NDdiOWViMWY0YzMyNjY1N2VmM2RmOWYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvXyDue3JB/gyKflLbAIqRRtz0b86
TijehecHc/qdaNHEr74dS+DGJIjr6ThEr4XHmnQ5pjOVQJ9LAR1BSgRcbJCMDQkC
LlTXCFugaK2fNfo7JiEwR9E8wRjQirbBA1BoA80mK+7kLqGXwSowG1JK9wa8j8Al
iG+kPQUrNpZU/vmL5c2CiKwGLtqqX0YEMuSu5py2j4aMj1S3smCCY+gDGmpDfZ1t
IqUB+i7hT70CR++F0dFFwrb8tGXor//JxJrUjYVns6NF0RXrVXalnwmQc6Agil8C
LI7RDENsr4tuTA8S2hhuEY+byF1byuwJIQxaLOCjEhQjo8hIJKkeHazS3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPf8tVDyGtHUR7nrH0wyZlfvPfnwMB8GA1UdIwQY
MBaAFJjuHEKc5/MuMQ3LRBPYr+jHZFphMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbU80Y1Fwem44eTR4RGN0RUU5aXY2TWRrV21FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9lM2EzODEtNzdlMy00MjkwLTkxZWMt
ZmRhNThlZGVlNWU2LzEvbU80Y1Fwem44eTR4RGN0RUU5aXY2TWRrV21FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9lM2EzODEtNzdlMy00MjkwLTkxZWMtZmRhNThlZGVlNWU2
LzEvbU80Y1Fwem44eTR4RGN0RUU5aXY2TWRrV21FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmex7wEJm
iut0aCKMTyE+C796F7gkngZlRn9eXwH9/1kYoATRmDxVhPxmvfTlG5RPXCarj7sb
bRMgpVNO3jBjlvytQrRkXjURi7be/SjvDg44xzjAlwkeueAtdL8CIgBP2obPeJPu
bxsSnAOD3iX1Jk/HEGBu1WUqerWMrX2d/o5+PhCkfNgq5N/+7NncDoiGDGYn2GJy
Ua+O0MwgV6FlvN50RSZncZ3D69SQmSNh4RADjZMZAzx2IJmVB5MZ/TAZTvoSXSXB
mo0PbkhzvUHOApc2PRS8TPwTJQJG4pHl81BmGTYUTJPAVg/tyjzu4Em9wfm1whJn
IF5i1bfkJQj70w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:09:34 2025 by rpki-client