Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
File: u_D5EC2y6-GvHQdRaEQ4anlj71w.mft (raw, json)
Hash identifier: PD2JJVLYJcTsiv9IIBs6KtFcSt94SJ7humlvCvqfA8o=
Subject key identifier: 58:59:A5:29:BA:CE:F5:D1:22:80:14:A8:A1:94:55:A4:47:B3:F9:EF
Authority key identifier: BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
Certificate issuer: /CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Certificate serial: 0197B9A1B392F0FA59FDB741EBDCA5869D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
Manifest number: 04B7
Signing time: Sun 29 Jun 2025 03:01:11 +0000
Manifest this update: Sun 29 Jun 2025 03:01:11 +0000
Manifest next update: Mon 30 Jun 2025 03:01:11 +0000
Files and hashes: 1: u_D5EC2y6-GvHQdRaEQ4anlj71w.crl (hash: n+UrlquGHucg4Z9GByHK23h4nrrCPJMuWUykiM84Yew=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:b3:92:f0:fa:59:fd:b7:41:eb:dc:a5:86:9d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf0f9102db2ebe1af1d07516844386a7963ef5c
Validity
Not Before: Jun 29 03:01:11 2025 GMT
Not After : Jun 30 03:01:11 2025 GMT
Subject: CN=5859a529bacef5d1228014a8a19455a447b3f9ef
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:70:b1:d5:fb:16:ea:94:63:21:94:fc:f9:d1:
c9:95:e8:d7:e2:c1:69:e2:1f:c1:2f:ba:a4:d8:97:
f0:55:47:ff:8f:37:93:31:d4:1c:43:4b:10:fd:b5:
2c:31:74:92:78:d3:9e:f0:fc:cf:8d:f0:3a:5d:c5:
36:b6:f6:73:c0:57:3f:82:79:32:4b:11:da:4c:c2:
c6:8c:1c:d4:f3:01:97:9d:34:24:91:5b:ba:e6:62:
3b:94:1b:ff:7b:94:f4:8d:54:57:f4:8b:70:48:5f:
9e:1a:42:af:65:d3:f1:91:38:43:10:47:b2:39:5d:
6e:2b:c0:e7:fd:0d:db:cb:40:14:0c:1f:64:41:92:
9b:c6:48:04:cf:70:b9:d9:44:b2:18:9e:c7:ea:07:
4a:c7:31:48:78:34:f4:61:e0:47:64:4b:59:74:60:
d1:ff:36:42:da:05:86:47:34:9d:84:d0:53:7d:d8:
2b:a0:90:67:ef:43:72:5a:aa:18:d5:7d:07:9c:aa:
b8:fa:1b:3c:f6:18:77:18:88:b3:3d:8f:4e:b0:7f:
96:06:12:af:e7:4d:59:4b:3f:e8:3d:22:a3:e7:53:
a8:fb:18:98:0d:55:94:77:10:f7:fe:b2:df:0c:f7:
1d:ef:73:4d:29:59:ca:4d:7e:dd:4b:f0:83:68:62:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:59:A5:29:BA:CE:F5:D1:22:80:14:A8:A1:94:55:A4:47:B3:F9:EF
X509v3 Authority Key Identifier:
keyid:BB:F0:F9:10:2D:B2:EB:E1:AF:1D:07:51:68:44:38:6A:79:63:EF:5C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_D5EC2y6-GvHQdRaEQ4anlj71w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d0da4d-957c-42b3-b71c-072739683346/1/u_D5EC2y6-GvHQdRaEQ4anlj71w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:77:d7:f7:ce:07:ac:24:79:52:1f:95:9a:26:f1:83:60:83:
6d:c9:87:cb:18:6d:4f:3e:91:b7:63:fc:d6:6e:6a:34:54:c5:
e6:62:d4:6e:59:bd:a2:ed:09:b7:94:e8:92:65:45:e8:36:aa:
9d:f9:33:12:2e:45:07:af:aa:e9:e1:0a:ec:68:65:e5:9c:0c:
bf:17:34:53:0b:df:7a:c6:94:9c:db:43:53:0b:cc:da:9a:52:
88:a8:8e:fa:39:86:71:68:ee:2b:47:eb:56:65:bf:92:b2:20:
df:a6:58:f6:31:43:54:14:a9:cd:40:a6:1c:a4:30:b7:e2:96:
fc:95:dc:17:e6:f6:d1:08:eb:be:e2:0e:f9:9c:5b:e5:46:b8:
b2:e2:36:a1:58:0e:04:bd:93:cd:69:4a:1f:80:10:ca:fd:4d:
94:38:81:02:03:58:7f:15:25:dc:91:46:6f:e7:27:f4:6d:31:
1b:4a:41:23:4a:23:82:f4:12:25:7a:c0:f8:3d:b8:e3:7b:66:
ed:3f:db:fb:c1:3b:89:0f:38:b6:8d:85:aa:fb:f4:54:3d:41:
99:67:59:83:81:83:ed:72:0c:b9:84:66:7f:19:4e:61:39:3b:
b0:7e:3b:73:0f:68:8c:53:d7:79:01:4f:a6:e8:3f:f4:96:8f:
59:82:5c:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5obOS8PpZ/bdB69ylhp08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjBmOTEwMmRiMmViZTFhZjFkMDc1MTY4NDQzODZhNzk2
M2VmNWMwHhcNMjUwNjI5MDMwMTExWhcNMjUwNjMwMDMwMTExWjAzMTEwLwYDVQQD
Eyg1ODU5YTUyOWJhY2VmNWQxMjI4MDE0YThhMTk0NTVhNDQ3YjNmOWVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlHCx1fsW6pRjIZT8+dHJlejX4sFp
4h/BL7qk2JfwVUf/jzeTMdQcQ0sQ/bUsMXSSeNOe8PzPjfA6XcU2tvZzwFc/gnky
SxHaTMLGjBzU8wGXnTQkkVu65mI7lBv/e5T0jVRX9ItwSF+eGkKvZdPxkThDEEey
OV1uK8Dn/Q3by0AUDB9kQZKbxkgEz3C52USyGJ7H6gdKxzFIeDT0YeBHZEtZdGDR
/zZC2gWGRzSdhNBTfdgroJBn70NyWqoY1X0HnKq4+hs89hh3GIizPY9OsH+WBhKv
501ZSz/oPSKj51Oo+xiYDVWUdxD3/rLfDPcd73NNKVnKTX7dS/CDaGK9twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFhZpSm6zvXRIoAUqKGUVaRHs/nvMB8GA1UdIwQY
MBaAFLvw+RAtsuvhrx0HUWhEOGp5Y+9cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kMGRhNGQtOTU3Yy00MmIzLWI3MWMt
MDcyNzM5NjgzMzQ2LzEvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kMGRhNGQtOTU3Yy00MmIzLWI3MWMtMDcyNzM5NjgzMzQ2
LzEvdV9ENUVDMnk2LUd2SFFkUmFFUTRhbmxqNzF3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHfX984H
rCR5Uh+Vmibxg2CDbcmHyxhtTz6Rt2P81m5qNFTF5mLUblm9ou0Jt5TokmVF6Daq
nfkzEi5FB6+q6eEK7Ghl5ZwMvxc0UwvfesaUnNtDUwvM2ppSiKiO+jmGcWjuK0fr
VmW/krIg36ZY9jFDVBSpzUCmHKQwt+KW/JXcF+b20QjrvuIO+Zxb5Ua4suI2oVgO
BL2TzWlKH4AQyv1NlDiBAgNYfxUl3JFGb+cn9G0xG0pBI0ojgvQSJXrA+D2443tm
7T/b+8E7iQ84to2Fqvv0VD1BmWdZg4GD7XIMuYRmfxlOYTk7sH47cw9ojFPXeQFP
pug/9JaPWYJcYQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:11:53 2025 by rpki-client