Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
File: cD94XhQ0CsaoQEhj1796-U5aubU.mft (raw, json)
Hash identifier: s5psdJMHYyXteraSNnLOwaET5+Gtaig94idcWvOs6ts=
Subject key identifier: 26:BD:99:14:67:FF:ED:E1:58:E8:83:02:AE:03:FE:92:A8:D1:99:6F
Authority key identifier: 70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
Certificate issuer: /CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Certificate serial: 0197B890903E71400693ACE39FC283131F48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
Manifest number: 0F31
Signing time: Sat 28 Jun 2025 22:02:51 +0000
Manifest this update: Sat 28 Jun 2025 22:02:51 +0000
Manifest next update: Sun 29 Jun 2025 22:02:51 +0000
Files and hashes: 1: cD94XhQ0CsaoQEhj1796-U5aubU.crl (hash: ziR2AEpevvFRSwwB7ZCoOQq8I/G3MO5IxLNVlxTYjjI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 22:02:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:90:90:3e:71:40:06:93:ac:e3:9f:c2:83:13:1f:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=703f785e14340ac6a8404863d7bf7af94e5ab9b5
Validity
Not Before: Jun 28 22:02:51 2025 GMT
Not After : Jun 29 22:02:51 2025 GMT
Subject: CN=26bd991467ffede158e88302ae03fe92a8d1996f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:fe:fc:84:e3:af:c9:f1:4b:dc:1c:7e:d3:65:
6a:88:05:ac:8d:a8:0f:92:9b:9d:00:42:53:63:64:
c1:04:8b:10:10:17:07:38:bc:20:24:5c:66:b0:cc:
d6:6d:49:23:13:33:2c:07:93:d0:e4:74:86:f1:50:
56:26:9e:ba:2f:4a:ab:9c:9e:53:ec:2c:81:9b:ed:
74:e3:0d:46:ef:1e:c5:12:3a:88:e1:a2:f3:80:08:
2c:72:78:d9:7d:60:1f:a7:34:ed:8e:86:82:b7:1d:
9e:de:50:eb:71:61:5e:ef:71:0e:10:32:31:8f:06:
c6:d5:f6:12:30:b9:37:0a:e4:17:d6:cf:e9:65:86:
b8:be:4d:83:49:44:b8:16:f6:b1:99:be:d6:f4:bb:
ab:3e:51:8b:f8:36:c5:75:f3:56:ed:dc:8a:a4:32:
39:92:f9:90:76:a1:68:61:e0:3f:3d:d4:42:bc:18:
13:71:31:5f:f3:76:3f:33:e1:f1:0e:88:6d:7d:b3:
52:32:ee:48:81:a6:5f:5a:b1:fd:25:fc:d9:04:1e:
fb:da:59:87:e5:51:6d:8e:5c:b4:94:f9:15:c6:30:
84:a0:d7:05:a7:f8:51:59:2a:ff:21:c1:a6:0f:cc:
5d:6b:4b:79:f0:57:9f:2f:7a:76:39:ad:76:d2:c2:
21:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
26:BD:99:14:67:FF:ED:E1:58:E8:83:02:AE:03:FE:92:A8:D1:99:6F
X509v3 Authority Key Identifier:
keyid:70:3F:78:5E:14:34:0A:C6:A8:40:48:63:D7:BF:7A:F9:4E:5A:B9:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cD94XhQ0CsaoQEhj1796-U5aubU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/2e509a-922c-4eb8-9c73-476bcc44154d/1/cD94XhQ0CsaoQEhj1796-U5aubU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:f5:1e:dd:35:40:21:ce:17:2e:74:49:ab:91:29:fc:96:5b:
fa:44:c9:02:fd:de:d7:13:7a:16:73:3d:41:5b:f6:97:84:7c:
c4:35:f5:9b:75:ed:d1:0c:64:a0:2b:dc:a4:ac:d8:fc:45:6d:
a2:94:c5:52:63:b8:da:c6:ba:1c:f6:25:24:1c:f7:53:a9:4d:
0c:45:d1:85:66:33:35:09:6c:da:be:a1:06:83:e1:97:ec:fd:
ae:90:4b:88:64:d6:3d:22:17:6d:33:e5:86:db:a1:63:00:1f:
15:b1:e0:96:81:bf:8d:43:83:df:7b:1b:e8:28:e7:46:22:0c:
0f:3d:7f:f6:41:25:e7:7c:e5:44:4b:b4:94:d0:a3:a3:98:cf:
b6:ca:0f:9e:db:77:8b:43:80:2d:1b:1f:b4:e4:ef:d0:b4:f3:
a9:40:1e:87:d4:c5:71:26:12:0b:12:26:f5:de:e7:19:58:11:
aa:9e:6d:43:96:2a:73:95:1a:71:2f:74:4d:57:a7:8d:4a:15:
97:cb:ea:e6:40:3d:05:b2:53:f3:cc:10:83:01:0a:a0:41:d5:
90:49:e5:4c:eb:5f:bf:79:7e:cc:66:f9:4f:d8:ec:78:8f:c9:
a8:2e:53:3c:81:dc:a5:a3:0a:46:7e:26:c7:b1:f7:3a:8c:99:
04:7c:44:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4kJA+cUAGk6zjn8KDEx9IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwM2Y3ODVlMTQzNDBhYzZhODQwNDg2M2Q3YmY3YWY5NGU1
YWI5YjUwHhcNMjUwNjI4MjIwMjUxWhcNMjUwNjI5MjIwMjUxWjAzMTEwLwYDVQQD
EygyNmJkOTkxNDY3ZmZlZGUxNThlODgzMDJhZTAzZmU5MmE4ZDE5OTZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1/78hOOvyfFL3Bx+02VqiAWsjagP
kpudAEJTY2TBBIsQEBcHOLwgJFxmsMzWbUkjEzMsB5PQ5HSG8VBWJp66L0qrnJ5T
7CyBm+104w1G7x7FEjqI4aLzgAgscnjZfWAfpzTtjoaCtx2e3lDrcWFe73EOEDIx
jwbG1fYSMLk3CuQX1s/pZYa4vk2DSUS4Fvaxmb7W9LurPlGL+DbFdfNW7dyKpDI5
kvmQdqFoYeA/PdRCvBgTcTFf83Y/M+HxDohtfbNSMu5IgaZfWrH9JfzZBB772lmH
5VFtjly0lPkVxjCEoNcFp/hRWSr/IcGmD8xda0t58FefL3p2Oa120sIh0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCa9mRRn/+3hWOiDAq4D/pKo0ZlvMB8GA1UdIwQY
MBaAFHA/eF4UNArGqEBIY9e/evlOWrm1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8yZTUwOWEtOTIyYy00ZWI4LTljNzMt
NDc2YmNjNDQxNTRkLzEvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8yZTUwOWEtOTIyYy00ZWI4LTljNzMtNDc2YmNjNDQxNTRk
LzEvY0Q5NFhoUTBDc2FvUUVoajE3OTYtVTVhdWJVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf/Ue3TVA
Ic4XLnRJq5Ep/JZb+kTJAv3e1xN6FnM9QVv2l4R8xDX1m3Xt0QxkoCvcpKzY/EVt
opTFUmO42sa6HPYlJBz3U6lNDEXRhWYzNQls2r6hBoPhl+z9rpBLiGTWPSIXbTPl
htuhYwAfFbHgloG/jUOD33sb6CjnRiIMDz1/9kEl53zlREu0lNCjo5jPtsoPntt3
i0OALRsftOTv0LTzqUAeh9TFcSYSCxIm9d7nGVgRqp5tQ5Yqc5UacS90TVenjUoV
l8vq5kA9BbJT88wQgwEKoEHVkEnlTOtfv3l+zGb5T9jseI/JqC5TPIHcpaMKRn4m
x7H3OoyZBHxE7Q==
-----END CERTIFICATE-----
Generated at Sun Jun 29 06:01:40 2025 by rpki-client