Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.mft
File: 36U2RiiDKd9mVeJT5WsihIG-lZY.mft (raw, json)
Hash identifier: zjZSuahEb1gZa7GgH/Pm7DM+E9dtKngej7eDQBI3z6I=
Subject key identifier: EB:35:02:44:0F:77:03:4B:13:82:2B:88:17:04:7B:07:16:84:25:BB
Authority key identifier: DF:A5:36:46:28:83:29:DF:66:55:E2:53:E5:6B:22:84:81:BE:95:96
Certificate issuer: /CN=dfa53646288329df6655e253e56b228481be9596
Certificate serial: 0197B8909093777312C1609F955E62B92066
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/36U2RiiDKd9mVeJT5WsihIG-lZY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.mft
Manifest number: 0258
Signing time: Sat 28 Jun 2025 22:02:51 +0000
Manifest this update: Sat 28 Jun 2025 22:02:51 +0000
Manifest next update: Sun 29 Jun 2025 22:02:51 +0000
Files and hashes: 1: 36U2RiiDKd9mVeJT5WsihIG-lZY.crl (hash: cxKbnwCU/S14MNREJYU3KYx8yawtWBM4TQkTcqekKlU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.mft
rsync://rpki.ripe.net/repository/DEFAULT/36U2RiiDKd9mVeJT5WsihIG-lZY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:90:93:77:73:12:c1:60:9f:95:5e:62:b9:20:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dfa53646288329df6655e253e56b228481be9596
Validity
Not Before: Jun 28 22:02:51 2025 GMT
Not After : Jun 29 22:02:51 2025 GMT
Subject: CN=eb3502440f77034b13822b8817047b07168425bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a7:96:2d:d1:90:13:73:f3:48:0b:17:7e:a7:
b1:33:46:d9:96:3a:ee:d2:d9:5b:9d:f0:6c:b8:2d:
5f:2f:e0:ef:6d:33:76:23:40:53:1e:ff:76:07:d3:
57:57:20:2c:c7:b2:a3:e7:df:8e:37:cc:9e:4e:3d:
00:15:f8:4e:a1:6f:fe:ec:87:09:8a:c6:a8:58:cd:
dc:28:d3:8a:fc:c2:7e:07:6f:04:3a:e1:da:a9:98:
96:96:ec:2e:d0:3d:12:a9:8d:a0:0b:dc:be:92:52:
3b:8a:c1:1c:31:69:e4:3e:5d:28:27:23:9a:f7:61:
32:b6:2d:ad:9f:4a:b6:ee:37:51:b7:c5:e1:35:68:
6a:a0:e9:a4:98:a1:77:9f:16:9b:e1:25:6b:af:53:
0b:95:4e:5c:ab:1b:77:66:28:87:c1:63:05:32:32:
98:3b:eb:7b:69:39:a7:25:b9:a4:60:9b:93:29:04:
4e:eb:b9:39:b6:97:18:76:b8:fc:23:0d:50:95:42:
12:eb:ed:b2:c1:ba:71:1e:77:cd:7d:6b:18:ec:82:
f0:ae:d8:7e:32:e0:9a:b7:ee:78:aa:5e:cf:fd:93:
1b:e3:60:cf:fc:e6:2e:fa:34:cf:d8:d8:3b:5f:2e:
bd:03:2a:10:5c:73:3b:29:7e:8d:88:8a:78:34:04:
1c:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:35:02:44:0F:77:03:4B:13:82:2B:88:17:04:7B:07:16:84:25:BB
X509v3 Authority Key Identifier:
keyid:DF:A5:36:46:28:83:29:DF:66:55:E2:53:E5:6B:22:84:81:BE:95:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/36U2RiiDKd9mVeJT5WsihIG-lZY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/49fe06-36f1-411c-85c3-79afd1188d37/1/36U2RiiDKd9mVeJT5WsihIG-lZY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:07:e0:d3:f5:6c:05:6a:0a:02:26:0a:49:86:58:0a:a3:cd:
61:1e:e5:ca:0d:46:f4:a0:d2:f1:b9:eb:e3:72:12:cc:94:d7:
0e:8f:91:c2:de:10:32:5d:aa:7e:e0:e8:8c:1c:62:93:a5:0e:
49:b9:53:c4:86:71:92:31:98:2b:f1:96:be:1b:04:11:fa:95:
25:2a:50:cd:02:e4:f9:ed:e8:ed:ee:5f:65:eb:49:67:67:b0:
1e:a2:51:24:34:3f:84:3d:0c:0b:18:ab:62:60:d0:ff:65:9a:
57:c5:03:e5:f1:9d:79:c9:aa:ad:43:57:57:fb:6f:18:6f:42:
15:7c:6c:70:0b:bd:44:77:5d:db:c7:3d:36:52:d2:53:1a:e6:
11:0b:f4:e8:37:0a:e5:39:75:f9:b4:d5:16:72:c7:c8:5d:b1:
88:27:cd:63:95:9f:bc:14:82:71:00:2e:9a:7d:0f:29:f6:76:
15:19:b0:6c:09:11:ce:3e:29:86:b1:84:69:ab:40:57:d9:3e:
f5:01:a6:8e:23:9b:8d:49:92:8b:e1:a2:b9:cd:88:47:8b:38:
eb:c8:fc:df:1c:3d:99:09:ca:6e:2c:18:38:a5:d3:8d:cd:f8:
00:25:93:2e:46:e8:63:35:94:c3:bd:dd:a8:68:28:9c:9f:f6:
69:2a:d5:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kJCTd3MSwWCflV5iuSBmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmYTUzNjQ2Mjg4MzI5ZGY2NjU1ZTI1M2U1NmIyMjg0ODFi
ZTk1OTYwHhcNMjUwNjI4MjIwMjUxWhcNMjUwNjI5MjIwMjUxWjAzMTEwLwYDVQQD
EyhlYjM1MDI0NDBmNzcwMzRiMTM4MjJiODgxNzA0N2IwNzE2ODQyNWJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaeWLdGQE3PzSAsXfqexM0bZljru
0tlbnfBsuC1fL+DvbTN2I0BTHv92B9NXVyAsx7Kj59+ON8yeTj0AFfhOoW/+7IcJ
isaoWM3cKNOK/MJ+B28EOuHaqZiWluwu0D0SqY2gC9y+klI7isEcMWnkPl0oJyOa
92Eyti2tn0q27jdRt8XhNWhqoOmkmKF3nxab4SVrr1MLlU5cqxt3ZiiHwWMFMjKY
O+t7aTmnJbmkYJuTKQRO67k5tpcYdrj8Iw1QlUIS6+2ywbpxHnfNfWsY7ILwrth+
MuCat+54ql7P/ZMb42DP/OYu+jTP2Ng7Xy69AyoQXHM7KX6NiIp4NAQcUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOs1AkQPdwNLE4IriBcEewcWhCW7MB8GA1UdIwQY
MBaAFN+lNkYogynfZlXiU+VrIoSBvpWWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzZVMlJpaURLZDltVmVKVDVXc2loSUctbFpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi80OWZlMDYtMzZmMS00MTFjLTg1YzMt
NzlhZmQxMTg4ZDM3LzEvMzZVMlJpaURLZDltVmVKVDVXc2loSUctbFpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi80OWZlMDYtMzZmMS00MTFjLTg1YzMtNzlhZmQxMTg4ZDM3
LzEvMzZVMlJpaURLZDltVmVKVDVXc2loSUctbFpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGAfg0/Vs
BWoKAiYKSYZYCqPNYR7lyg1G9KDS8bnr43ISzJTXDo+Rwt4QMl2qfuDojBxik6UO
SblTxIZxkjGYK/GWvhsEEfqVJSpQzQLk+e3o7e5fZetJZ2ewHqJRJDQ/hD0MCxir
YmDQ/2WaV8UD5fGdecmqrUNXV/tvGG9CFXxscAu9RHdd28c9NlLSUxrmEQv06DcK
5Tl1+bTVFnLHyF2xiCfNY5WfvBSCcQAumn0PKfZ2FRmwbAkRzj4phrGEaatAV9k+
9QGmjiObjUmSi+Giuc2IR4s468j83xw9mQnKbiwYOKXTjc34ACWTLkboYzWUw73d
qGgonJ/2aSrVWQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:52 2025 by rpki-client