Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
File: B_xIFsg7wTWHjxB93N9DOB3JPPA.mft (raw, json)
Hash identifier: atthkIr65I9Q4es27Te5Pv/UU6dGo7wANwyjIacV270=
Subject key identifier: EB:4C:A4:B9:9A:90:6D:F2:5C:A2:A3:4D:CE:1D:C1:ED:69:44:E7:45
Authority key identifier: 07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
Certificate issuer: /CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Certificate serial: 0197B6A0E74DBAE10FAF50752811D8FAD76F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 13:01:27 +0000
Manifest this update: Sat 28 Jun 2025 13:01:27 +0000
Manifest next update: Sun 29 Jun 2025 13:01:27 +0000
Files and hashes: 1: B_xIFsg7wTWHjxB93N9DOB3JPPA.crl (hash: Y+BIptQgINDs2CI/09izrygrZcJ4h4Xtd4fwBGFoUiE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e7:4d:ba:e1:0f:af:50:75:28:11:d8:fa:d7:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=07fc4816c83bc135878f107ddcdf43381dc93cf0
Validity
Not Before: Jun 28 13:01:27 2025 GMT
Not After : Jun 29 13:01:27 2025 GMT
Subject: CN=eb4ca4b99a906df25ca2a34dce1dc1ed6944e745
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:c0:8e:3c:25:f7:dd:41:c4:bf:27:b3:a8:ac:
11:d8:39:d1:1a:13:c2:14:7f:8a:50:55:af:24:ef:
fe:94:44:22:5c:10:0a:d1:01:c7:fb:b4:0d:d2:32:
10:59:85:6c:ab:21:21:ae:8b:06:d8:3e:58:0f:ce:
f5:be:79:aa:a9:85:cd:36:9d:62:e9:69:df:4d:f0:
a9:5c:d9:1a:4c:3f:cc:84:05:71:f8:a2:df:b8:66:
95:16:dd:55:10:3a:58:61:f4:d8:5b:ff:51:5e:6e:
72:b6:38:14:9b:fd:b4:cb:99:e1:3a:bd:ba:92:de:
ae:38:65:e9:f1:ad:0f:b3:0e:60:7e:3e:b8:7d:4d:
20:da:1d:37:35:86:8d:bb:43:c9:9b:e7:ab:35:7f:
62:1c:30:9e:30:40:4b:21:14:72:3b:0c:29:de:0d:
cf:67:26:9a:27:c7:9e:a2:7f:50:eb:e9:66:53:7d:
a0:98:75:ad:0c:a0:00:a5:e2:4e:f9:37:1a:b5:94:
c1:89:50:ab:0b:a3:34:32:53:2d:f1:22:84:9f:34:
a0:ed:b4:b6:6c:73:46:2c:49:4e:ab:72:ce:f5:dc:
80:57:a8:dd:9f:47:7f:4c:de:a3:c8:94:b3:1b:d1:
f9:7f:ae:39:aa:71:77:ed:ea:84:b9:04:e7:f9:7a:
d0:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:4C:A4:B9:9A:90:6D:F2:5C:A2:A3:4D:CE:1D:C1:ED:69:44:E7:45
X509v3 Authority Key Identifier:
keyid:07:FC:48:16:C8:3B:C1:35:87:8F:10:7D:DC:DF:43:38:1D:C9:3C:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/B_xIFsg7wTWHjxB93N9DOB3JPPA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/cd47c6-7d23-4c55-8eb1-ea7210b6c575/1/B_xIFsg7wTWHjxB93N9DOB3JPPA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:be:1b:4f:a1:95:f3:5d:85:e1:a2:67:77:4b:f5:a2:8a:ac:
06:1b:3d:c9:56:e7:bf:5e:00:cb:9b:f4:d2:03:dd:87:8b:01:
72:54:c2:a7:2c:45:b3:93:2b:24:24:93:c2:70:83:30:c6:90:
48:06:5b:b3:5a:e7:50:18:af:7e:e3:9a:76:85:7c:f1:6c:ff:
20:90:bf:5c:c2:95:dd:15:67:54:9f:b2:d1:4b:7b:5d:17:08:
90:55:87:1a:a6:69:12:c7:97:2f:e0:83:8d:9c:cf:78:d7:fa:
c6:b9:79:9e:aa:b2:0e:9b:c1:f9:f2:f7:7a:86:39:f5:33:e9:
d6:1d:1f:da:65:c8:74:e1:c1:f8:b9:83:76:28:29:db:3d:90:
c9:04:81:ac:ca:9e:90:90:3f:40:e3:63:6a:d6:89:c4:ef:1c:
55:0f:b2:0c:66:53:77:18:38:68:15:9d:f8:ab:fe:7f:38:e4:
e3:06:1d:c2:2c:43:46:a8:6c:b1:a1:03:5f:2a:fb:7e:73:30:
cd:79:3a:d1:a3:48:de:c5:01:18:ea:5a:79:2a:d9:58:f2:58:
64:5e:1f:08:7b:ec:5e:46:74:0d:fe:9d:78:5f:f4:06:9c:07:
5d:0e:13:57:4f:f6:04:0b:33:fe:4d:87:1c:20:58:50:0e:87:
65:8c:1f:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oOdNuuEPr1B1KBHY+tdvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3ZmM0ODE2YzgzYmMxMzU4NzhmMTA3ZGRjZGY0MzM4MWRj
OTNjZjAwHhcNMjUwNjI4MTMwMTI3WhcNMjUwNjI5MTMwMTI3WjAzMTEwLwYDVQQD
EyhlYjRjYTRiOTlhOTA2ZGYyNWNhMmEzNGRjZTFkYzFlZDY5NDRlNzQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp8COPCX33UHEvyezqKwR2DnRGhPC
FH+KUFWvJO/+lEQiXBAK0QHH+7QN0jIQWYVsqyEhrosG2D5YD871vnmqqYXNNp1i
6WnfTfCpXNkaTD/MhAVx+KLfuGaVFt1VEDpYYfTYW/9RXm5ytjgUm/20y5nhOr26
kt6uOGXp8a0Psw5gfj64fU0g2h03NYaNu0PJm+erNX9iHDCeMEBLIRRyOwwp3g3P
ZyaaJ8eeon9Q6+lmU32gmHWtDKAApeJO+TcatZTBiVCrC6M0MlMt8SKEnzSg7bS2
bHNGLElOq3LO9dyAV6jdn0d/TN6jyJSzG9H5f645qnF37eqEuQTn+XrQlwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOtMpLmakG3yXKKjTc4dwe1pROdFMB8GA1UdIwQY
MBaAFAf8SBbIO8E1h48QfdzfQzgdyTzwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQl94SUZzZzd3VFdIanhCOTNOOURPQjNKUFBBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9jZDQ3YzYtN2QyMy00YzU1LThlYjEt
ZWE3MjEwYjZjNTc1LzEvQl94SUZzZzd3VFdIanhCOTNOOURPQjNKUFBBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9jZDQ3YzYtN2QyMy00YzU1LThlYjEtZWE3MjEwYjZjNTc1
LzEvQl94SUZzZzd3VFdIanhCOTNOOURPQjNKUFBBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS74bT6GV
812F4aJnd0v1ooqsBhs9yVbnv14Ay5v00gPdh4sBclTCpyxFs5MrJCSTwnCDMMaQ
SAZbs1rnUBivfuOadoV88Wz/IJC/XMKV3RVnVJ+y0Ut7XRcIkFWHGqZpEseXL+CD
jZzPeNf6xrl5nqqyDpvB+fL3eoY59TPp1h0f2mXIdOHB+LmDdigp2z2QyQSBrMqe
kJA/QONjataJxO8cVQ+yDGZTdxg4aBWd+Kv+fzjk4wYdwixDRqhssaEDXyr7fnMw
zXk60aNI3sUBGOpaeSrZWPJYZF4fCHvsXkZ0Df6deF/0BpwHXQ4TV0/2BAsz/k2H
HCBYUA6HZYwfUg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:45 2025 by rpki-client