Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json)
Hash identifier: O66pPbBEUiFpe3Z0xrbR2sAlwMxAMYUyf904LnrrdU8=
Subject key identifier: 87:29:D2:1A:BD:5F:09:00:23:2C:66:65:6C:41:3A:CF:5D:E7:B0:84
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial: 0197B6A1A527CE2E54A3375BED8683E24036
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 13:02:16 +0000
Manifest this update: Sat 28 Jun 2025 13:02:16 +0000
Manifest next update: Sun 29 Jun 2025 13:02:16 +0000
Files and hashes: 1: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: 4p/U2HWmNEbAVNAswfFyTuuZ3H+5ht5GQ19b/Oq/4ew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a5:27:ce:2e:54:a3:37:5b:ed:86:83:e2:40:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Validity
Not Before: Jun 28 13:02:16 2025 GMT
Not After : Jun 29 13:02:16 2025 GMT
Subject: CN=8729d21abd5f0900232c66656c413acf5de7b084
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ff:be:7f:dc:6a:5c:82:ab:84:eb:d8:00:5f:
bb:ad:7b:86:8c:77:43:12:e8:09:f5:08:31:32:4d:
b8:a8:af:5e:6b:13:20:d4:aa:fc:df:64:bc:37:3e:
d2:96:1c:85:de:41:18:92:6a:ac:c8:d9:4e:f5:87:
c2:24:42:73:df:18:bc:05:74:ff:ea:44:8b:ef:76:
1c:07:52:df:9e:dc:5b:c8:96:a0:ca:7a:d2:fb:c4:
c5:d2:c2:59:38:46:e3:23:a1:a1:b2:c1:38:5c:df:
e4:23:34:53:28:9a:5e:4c:d8:8f:3c:3a:ce:32:40:
ca:60:68:13:5f:28:ab:d0:5a:5d:f2:17:0a:b8:79:
95:9f:97:45:8e:ed:83:5d:d9:02:89:38:af:cd:7a:
27:98:1a:0b:07:c9:65:65:a3:be:e2:93:e5:36:9c:
c3:65:d3:a7:4d:53:16:87:ad:71:8b:cd:56:e7:ec:
58:18:e0:5d:f2:ba:0a:bf:0f:6c:77:a1:33:72:31:
ab:35:a7:48:9f:58:48:b1:ee:9f:25:7c:69:c0:85:
20:c8:00:74:b7:5d:0f:4c:8f:58:d5:46:a7:77:ef:
85:dd:1f:b1:04:86:6a:40:bb:00:45:a9:dd:aa:7e:
50:a6:fb:f4:cb:12:90:01:bc:51:cb:5f:0a:a7:57:
0a:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:29:D2:1A:BD:5F:09:00:23:2C:66:65:6C:41:3A:CF:5D:E7:B0:84
X509v3 Authority Key Identifier:
keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:88:dd:08:2d:de:77:10:3e:c1:33:28:50:2a:36:e9:ee:d6:
94:00:7f:ab:b2:98:77:3d:8e:82:d7:56:1a:46:40:6e:dc:70:
4c:85:29:5a:6e:2d:6c:d3:0c:3d:c6:8e:28:10:e2:4a:4c:65:
c1:5a:e2:f1:58:a3:a4:3e:1d:ca:8d:36:fe:bd:a0:5b:ee:04:
05:b6:0f:a0:a4:c6:e7:59:b5:b6:b5:7c:c4:41:87:6a:db:0f:
5f:7f:24:58:84:de:06:15:68:04:2b:43:be:f4:c1:bb:e3:92:
18:18:6a:dc:07:6b:c9:be:39:e8:ce:3b:0d:27:df:ae:01:da:
5b:c4:4e:7e:29:99:c2:b8:34:af:d7:b8:36:81:23:d7:ed:f6:
27:a9:a8:1c:4a:30:f0:e4:10:d5:3e:c5:36:63:40:cb:a6:4c:
5f:d3:15:66:f5:3c:4f:de:80:a2:1e:04:ef:39:65:bb:91:a7:
4d:cd:40:1b:08:8d:a0:6e:1f:35:fe:17:13:31:cf:ad:4b:26:
23:a6:a0:22:6b:7f:fe:83:1d:ee:a2:92:82:ee:99:1a:74:a2:
4e:cd:c3:7d:e2:ee:80:92:5c:6b:cc:b8:e1:24:d9:5e:6e:0e:
ad:85:8c:28:cb:d8:12:1b:c4:d0:43:a8:0e:6c:1b:1f:02:75:
44:90:ec:2c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oaUnzi5Uozdb7YaD4kA2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzBjYjBhNWUzYTRlNTMwODliNTFkZTlhMzcwYTVmMjMz
ODc0YzYwHhcNMjUwNjI4MTMwMjE2WhcNMjUwNjI5MTMwMjE2WjAzMTEwLwYDVQQD
Eyg4NzI5ZDIxYWJkNWYwOTAwMjMyYzY2NjU2YzQxM2FjZjVkZTdiMDg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxf++f9xqXIKrhOvYAF+7rXuGjHdD
EugJ9QgxMk24qK9eaxMg1Kr832S8Nz7SlhyF3kEYkmqsyNlO9YfCJEJz3xi8BXT/
6kSL73YcB1LfntxbyJagynrS+8TF0sJZOEbjI6GhssE4XN/kIzRTKJpeTNiPPDrO
MkDKYGgTXyir0Fpd8hcKuHmVn5dFju2DXdkCiTivzXonmBoLB8llZaO+4pPlNpzD
ZdOnTVMWh61xi81W5+xYGOBd8roKvw9sd6EzcjGrNadIn1hIse6fJXxpwIUgyAB0
t10PTI9Y1Uand++F3R+xBIZqQLsARandqn5Qpvv0yxKQAbxRy18Kp1cKpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIcp0hq9XwkAIyxmZWxBOs9d57CEMB8GA1UdIwQY
MBaAFEtwywpeOk5TCJtR3po3Cl8jOHTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2Yt
Y2U1OTUyMmVmNjZmLzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2YtY2U1OTUyMmVmNjZm
LzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjIjdCC3e
dxA+wTMoUCo26e7WlAB/q7KYdz2OgtdWGkZAbtxwTIUpWm4tbNMMPcaOKBDiSkxl
wVri8VijpD4dyo02/r2gW+4EBbYPoKTG51m1trV8xEGHatsPX38kWITeBhVoBCtD
vvTBu+OSGBhq3Adryb456M47DSffrgHaW8ROfimZwrg0r9e4NoEj1+32J6moHEow
8OQQ1T7FNmNAy6ZMX9MVZvU8T96Aoh4E7zllu5GnTc1AGwiNoG4fNf4XEzHPrUsm
I6agImt//oMd7qKSgu6ZGnSiTs3DfeLugJJca8y44STZXm4OrYWMKMvYEhvE0EOo
DmwbHwJ1RJDsLA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:22:37 2025 by rpki-client