Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
File: tDtWqlNz6PXng0dnQkDv98KCctw.mft (raw, json)
Hash identifier: V1InxskqgWZKsNfCq9Ft2pfqwrnYyxTdxpEpILVJCWE=
Subject key identifier: 1E:F0:28:DB:8A:7F:D2:64:92:CB:95:06:C9:DE:A3:DC:4D:C7:BD:51
Authority key identifier: B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
Certificate issuer: /CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Certificate serial: 0197B6A0FF2517D6B6BB1724E915EE74A781
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
Manifest number: 0EED
Signing time: Sat 28 Jun 2025 13:01:33 +0000
Manifest this update: Sat 28 Jun 2025 13:01:33 +0000
Manifest next update: Sun 29 Jun 2025 13:01:33 +0000
Files and hashes: 1: tDtWqlNz6PXng0dnQkDv98KCctw.crl (hash: bsa4Hfh5i+ic0dIA9FyJwVme+hGDD9ICgT1CcIl9tv0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:ff:25:17:d6:b6:bb:17:24:e9:15:ee:74:a7:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b43b56aa5373e8f5e78347674240eff7c28272dc
Validity
Not Before: Jun 28 13:01:33 2025 GMT
Not After : Jun 29 13:01:33 2025 GMT
Subject: CN=1ef028db8a7fd26492cb9506c9dea3dc4dc7bd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:84:7c:3a:37:4a:9a:a1:c2:4e:56:46:46:18:
70:72:fd:89:ec:05:90:b5:ad:7c:fe:29:a5:a1:0d:
05:aa:8c:63:f1:58:66:8d:c1:c7:e7:4f:ee:5d:e1:
ac:bb:c9:8b:a2:f4:1a:14:18:c1:00:23:b9:3e:84:
4a:73:1b:4c:d4:c0:5c:60:7e:61:6b:09:f4:d3:9b:
f4:6b:03:14:44:78:7f:b4:b9:cb:31:9d:a5:72:c3:
7a:b1:7b:f6:10:5f:97:04:3e:31:71:9e:87:79:e4:
6a:46:a1:3a:b9:00:de:87:52:0e:97:18:9f:a7:74:
2f:5d:5e:e2:fe:9c:c2:44:90:90:9b:48:2e:bc:60:
91:3e:51:b7:cc:ed:49:75:86:34:45:97:1f:92:54:
bf:3c:69:80:4b:d6:72:fd:a8:21:63:53:b5:fc:ef:
a5:f9:10:c8:1a:3b:6c:34:9b:bb:02:4d:36:bc:36:
9b:4b:d9:84:74:2e:5e:e0:a3:e3:a5:96:29:77:f2:
d6:90:b7:7f:32:23:2f:a8:ca:1f:85:35:b3:b6:34:
22:b2:30:a1:b6:29:2c:21:7d:1d:83:0b:dc:a2:b8:
04:04:41:a9:a9:53:bb:61:e3:c1:91:c8:05:ad:03:
3f:81:ae:01:92:54:d5:47:9f:55:75:21:a0:60:bf:
0d:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:F0:28:DB:8A:7F:D2:64:92:CB:95:06:C9:DE:A3:DC:4D:C7:BD:51
X509v3 Authority Key Identifier:
keyid:B4:3B:56:AA:53:73:E8:F5:E7:83:47:67:42:40:EF:F7:C2:82:72:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tDtWqlNz6PXng0dnQkDv98KCctw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a4aedf-cab5-4199-a207-5cf6748d8784/1/tDtWqlNz6PXng0dnQkDv98KCctw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:32:80:58:19:6a:2f:e1:4b:de:a3:97:3c:d6:04:02:23:2a:
17:cf:ea:8a:28:c5:42:8a:2f:b0:e5:68:03:3d:ad:e3:6f:6a:
26:e4:29:bd:33:0e:b2:c1:b9:9d:9e:fd:b5:a6:5e:6f:1f:20:
3c:e0:0d:ac:34:75:6b:07:c9:9f:79:7f:69:d6:b9:bf:d9:3a:
d0:bc:11:88:26:eb:81:21:b3:c5:fe:13:18:ae:b6:22:78:47:
a5:e5:14:d0:b6:8a:32:4a:84:1b:f8:72:7d:8a:7a:86:6d:14:
0c:be:36:2d:cb:d2:ec:9f:a5:89:a5:08:a2:1d:3f:d0:9d:21:
62:53:72:ef:6a:e9:1e:63:47:65:bf:28:b4:31:87:0c:35:b9:
ef:54:2c:d3:6b:28:bf:e6:f4:17:0b:67:20:68:e4:eb:2c:0d:
13:ab:5e:81:47:c3:c8:41:57:7a:45:58:ea:f5:62:10:88:75:
41:d0:b3:a4:81:db:93:4a:a7:c5:32:ef:95:21:15:fe:57:5f:
2a:b4:23:2c:a5:69:ae:35:52:e5:94:6d:91:fd:ec:28:b7:1a:
8f:54:ac:1f:c6:41:36:04:0c:e8:74:10:bb:60:f3:96:30:f8:
e1:d1:88:24:a0:58:cb:24:13:26:ab:29:0b:45:b1:c8:b8:63:
57:86:52:db
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oP8lF9a2uxck6RXudKeBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0M2I1NmFhNTM3M2U4ZjVlNzgzNDc2NzQyNDBlZmY3YzI4
MjcyZGMwHhcNMjUwNjI4MTMwMTMzWhcNMjUwNjI5MTMwMTMzWjAzMTEwLwYDVQQD
EygxZWYwMjhkYjhhN2ZkMjY0OTJjYjk1MDZjOWRlYTNkYzRkYzdiZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3oR8OjdKmqHCTlZGRhhwcv2J7AWQ
ta18/imloQ0Fqoxj8VhmjcHH50/uXeGsu8mLovQaFBjBACO5PoRKcxtM1MBcYH5h
awn005v0awMURHh/tLnLMZ2lcsN6sXv2EF+XBD4xcZ6HeeRqRqE6uQDeh1IOlxif
p3QvXV7i/pzCRJCQm0guvGCRPlG3zO1JdYY0RZcfklS/PGmAS9Zy/aghY1O1/O+l
+RDIGjtsNJu7Ak02vDabS9mEdC5e4KPjpZYpd/LWkLd/MiMvqMofhTWztjQisjCh
tiksIX0dgwvcorgEBEGpqVO7YePBkcgFrQM/ga4BklTVR59VdSGgYL8N9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7wKNuKf9JkksuVBsneo9xNx71RMB8GA1UdIwQY
MBaAFLQ7VqpTc+j154NHZ0JA7/fCgnLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdER0V3FsTno2UFhuZzBkblFrRHY5OEtDY3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNGFlZGYtY2FiNS00MTk5LWEyMDct
NWNmNjc0OGQ4Nzg0LzEvdER0V3FsTno2UFhuZzBkblFrRHY5OEtDY3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNGFlZGYtY2FiNS00MTk5LWEyMDctNWNmNjc0OGQ4Nzg0
LzEvdER0V3FsTno2UFhuZzBkblFrRHY5OEtDY3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWzKAWBlq
L+FL3qOXPNYEAiMqF8/qiijFQoovsOVoAz2t429qJuQpvTMOssG5nZ79taZebx8g
POANrDR1awfJn3l/ada5v9k60LwRiCbrgSGzxf4TGK62InhHpeUU0LaKMkqEG/hy
fYp6hm0UDL42LcvS7J+liaUIoh0/0J0hYlNy72rpHmNHZb8otDGHDDW571Qs02so
v+b0FwtnIGjk6ywNE6tegUfDyEFXekVY6vViEIh1QdCzpIHbk0qnxTLvlSEV/ldf
KrQjLKVprjVS5ZRtkf3sKLcaj1SsH8ZBNgQM6HQQu2DzljD44dGIJKBYyyQTJqsp
C0WxyLhjV4ZS2w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:35:12 2025 by rpki-client