Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
File: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft (raw, json)
Hash identifier: yvd6fRWkgIE/qlqSit4IITI+duNKfA5iPHTAMXsWswo=
Subject key identifier: 01:88:79:87:AC:46:2E:51:15:58:32:C1:32:7B:5E:AC:68:EA:F4:F9
Authority key identifier: 71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2
Certificate issuer: /CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
Certificate serial: 0197C492E8DA6B3BE4772B528CD115D2B0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
Manifest number: 0630
Signing time: Tue 01 Jul 2025 06:00:51 +0000
Manifest this update: Tue 01 Jul 2025 06:00:51 +0000
Manifest next update: Wed 02 Jul 2025 06:00:51 +0000
Files and hashes: 1: cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl (hash: e8VtmaBnGHUVOrdGr22+LZPuMHfy4lBx50t3Qj/mkIE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 06:00:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c4:92:e8:da:6b:3b:e4:77:2b:52:8c:d1:15:d2:b0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7112b7288c559e1ed4a39057e0ae0c2bec42daa2
Validity
Not Before: Jul 1 06:00:51 2025 GMT
Not After : Jul 2 06:00:51 2025 GMT
Subject: CN=01887987ac462e51155832c1327b5eac68eaf4f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:bb:8c:55:47:1a:bd:81:ad:d3:a6:6f:66:c2:
65:72:ac:f4:a8:29:bc:7e:c5:c5:48:8c:9d:40:61:
c8:70:82:5a:52:a2:dc:4f:91:76:d8:37:bf:a6:4f:
11:86:3b:13:59:de:7f:a6:74:ea:2a:2f:13:87:25:
16:30:c4:da:cf:4a:99:b6:3f:b8:0a:4b:aa:0d:43:
4c:88:0d:e2:ec:a4:28:b5:57:bb:13:21:0d:da:f9:
55:f9:88:77:de:bd:ec:e4:d6:13:73:bd:67:ff:c3:
bb:42:90:52:e2:06:90:31:91:e6:8e:e5:8b:58:ef:
fe:d7:f9:0e:77:5c:10:0d:6a:81:a0:eb:af:7c:58:
3f:c9:a6:95:69:49:ab:53:3a:ed:b3:88:61:f7:d6:
d8:89:0e:1e:39:a7:85:db:10:92:c8:30:fc:f7:f7:
3e:64:82:b6:c5:ed:5c:2e:15:d3:65:33:b8:12:ab:
94:0e:6b:e8:fc:74:2a:eb:ce:bd:09:e7:b0:23:21:
14:ac:0e:d4:af:f9:3f:bc:87:b6:ba:34:60:ed:f4:
cf:79:b1:a6:3e:69:7c:c1:27:39:a2:2a:ff:8c:d5:
12:f5:ff:2e:86:44:37:2e:4f:48:79:04:9a:c5:ee:
57:cc:50:82:af:fd:46:50:3d:38:b8:0c:23:84:d8:
48:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:88:79:87:AC:46:2E:51:15:58:32:C1:32:7B:5E:AC:68:EA:F4:F9
X509v3 Authority Key Identifier:
keyid:71:12:B7:28:8C:55:9E:1E:D4:A3:90:57:E0:AE:0C:2B:EC:42:DA:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/a630cf-b257-401f-b3fb-156f3cfbc161/1/cRK3KIxVnh7Uo5BX4K4MK-xC2qI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:c0:ce:5d:a7:94:be:8d:d0:05:3f:43:f1:6f:de:39:fd:b2:
80:a3:9c:a2:7d:be:72:e7:22:ca:e3:57:1b:78:5b:3a:62:8a:
a0:b5:19:78:54:43:0b:5d:b5:5f:27:70:b7:ad:58:be:ab:ef:
61:b3:b4:cc:8e:7f:fe:3a:a0:7d:13:8b:b0:8e:22:e8:58:12:
0b:27:79:6b:b9:95:af:ee:1d:e4:9c:ed:14:28:91:a9:cf:f2:
3d:8f:f1:c7:98:27:67:d7:59:d7:ea:72:09:07:ed:02:fe:4b:
6c:fd:a9:c3:6f:8a:5d:aa:10:dd:9a:84:a8:16:36:68:c2:80:
f8:79:76:45:e0:24:b2:30:aa:c1:c4:8b:82:66:d7:6a:be:37:
7c:f7:1b:85:a5:ed:0f:ad:61:5f:6b:24:dc:80:b8:90:a2:82:
5a:ca:bf:aa:56:0b:be:6d:cd:da:2f:f2:72:00:8f:d9:67:22:
f4:d0:48:47:88:7c:48:d2:65:ad:d0:63:d0:76:89:65:0a:ed:
bd:f6:43:44:c9:02:49:22:ce:07:b1:45:4b:25:ba:f0:28:b4:
7e:81:4c:05:b6:01:a1:5d:97:0b:9b:a1:ad:80:97:f3:48:a2:
b1:67:03:66:68:f5:33:41:b5:9a:0d:13:f7:63:b7:01:07:74:
df:a5:c8:07
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfEkujaazvkdytSjNEV0rCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTJiNzI4OGM1NTllMWVkNGEzOTA1N2UwYWUwYzJiZWM0
MmRhYTIwHhcNMjUwNzAxMDYwMDUxWhcNMjUwNzAyMDYwMDUxWjAzMTEwLwYDVQQD
EygwMTg4Nzk4N2FjNDYyZTUxMTU1ODMyYzEzMjdiNWVhYzY4ZWFmNGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAybuMVUcavYGt06ZvZsJlcqz0qCm8
fsXFSIydQGHIcIJaUqLcT5F22De/pk8RhjsTWd5/pnTqKi8ThyUWMMTaz0qZtj+4
CkuqDUNMiA3i7KQotVe7EyEN2vlV+Yh33r3s5NYTc71n/8O7QpBS4gaQMZHmjuWL
WO/+1/kOd1wQDWqBoOuvfFg/yaaVaUmrUzrts4hh99bYiQ4eOaeF2xCSyDD89/c+
ZIK2xe1cLhXTZTO4EquUDmvo/HQq6869CeewIyEUrA7Ur/k/vIe2ujRg7fTPebGm
Pml8wSc5oir/jNUS9f8uhkQ3Lk9IeQSaxe5XzFCCr/1GUD04uAwjhNhIYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAGIeYesRi5RFVgywTJ7Xqxo6vT5MB8GA1UdIwQY
MBaAFHEStyiMVZ4e1KOQV+CuDCvsQtqiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS9hNjMwY2YtYjI1Ny00MDFmLWIzZmIt
MTU2ZjNjZmJjMTYxLzEvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS9hNjMwY2YtYjI1Ny00MDFmLWIzZmItMTU2ZjNjZmJjMTYx
LzEvY1JLM0tJeFZuaDdVbzVCWDRLNE1LLXhDMnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACsDOXaeU
vo3QBT9D8W/eOf2ygKOcon2+cuciyuNXG3hbOmKKoLUZeFRDC121Xydwt61Yvqvv
YbO0zI5//jqgfROLsI4i6FgSCyd5a7mVr+4d5JztFCiRqc/yPY/xx5gnZ9dZ1+py
CQftAv5LbP2pw2+KXaoQ3ZqEqBY2aMKA+Hl2ReAksjCqwcSLgmbXar43fPcbhaXt
D61hX2sk3IC4kKKCWsq/qlYLvm3N2i/ycgCP2Wci9NBIR4h8SNJlrdBj0HaJZQrt
vfZDRMkCSSLOB7FFSyW68Ci0foFMBbYBoV2XC5uhrYCX80iisWcDZmj1M0G1mg0T
92O3AQd036XIBw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 10:32:11 2025 by rpki-client