Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
File: _izVtrb_hGG7l5eGHJuBZ2oHU6o.mft (raw, json)
Hash identifier: pjR5cNCUX/7Bl5lB9PKwZ4GKlq2YDcaC/GusEF7tI+s=
Subject key identifier: 67:FC:28:AC:1D:9D:C0:74:4B:9A:BC:05:72:04:91:01:77:DA:3A:FF
Authority key identifier: FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA
Certificate issuer: /CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
Certificate serial: 0197B6D73ACDF3CE98D133932DEC30EB0C88
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
Manifest number: 0571
Signing time: Sat 28 Jun 2025 14:00:48 +0000
Manifest this update: Sat 28 Jun 2025 14:00:48 +0000
Manifest next update: Sun 29 Jun 2025 14:00:48 +0000
Files and hashes: 1: _izVtrb_hGG7l5eGHJuBZ2oHU6o.crl (hash: eqKjpVgJ9UGTHIWgaWmxPfhe/LtGygX6+XvP0ub+xb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:3a:cd:f3:ce:98:d1:33:93:2d:ec:30:eb:0c:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe2cd5b6b6ff8461bb9797861c9b81676a0753aa
Validity
Not Before: Jun 28 14:00:48 2025 GMT
Not After : Jun 29 14:00:48 2025 GMT
Subject: CN=67fc28ac1d9dc0744b9abc057204910177da3aff
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:05:51:a7:fd:bf:d3:b7:e2:3d:ec:06:f6:ab:
c4:5f:3c:55:24:eb:33:d7:46:40:db:2b:50:d7:87:
b7:ec:a1:8f:90:4b:9d:1f:93:af:ff:84:41:4c:d0:
99:32:f3:84:a2:70:75:17:9f:e2:1d:a0:a8:19:2f:
a9:8d:55:ed:e8:fb:61:91:87:16:fe:4f:55:b4:c5:
d6:2f:6e:46:be:52:9b:92:9d:97:a2:aa:1f:6d:d7:
d6:89:b3:22:19:a7:ca:29:86:70:d7:8a:10:23:44:
72:ed:65:3b:49:d4:a4:bd:48:62:7c:b4:5a:db:57:
1c:22:ed:de:0a:af:e3:73:5d:73:1c:61:eb:6e:2a:
9c:8c:7b:3e:8b:13:20:ef:32:7a:4f:6c:e4:4a:6a:
37:eb:80:ab:7a:66:a5:a4:f9:24:52:cd:f4:28:e4:
ba:14:67:b8:38:7a:1f:06:df:24:f9:5d:7a:5f:96:
f9:7f:b1:bb:7c:d1:c3:4c:f3:38:ab:58:49:38:fd:
ea:05:e0:bb:9d:1a:0b:09:38:b9:89:67:0c:44:9f:
07:14:8c:5b:a1:b1:e9:e4:bb:08:8e:24:ce:d6:5d:
5b:37:9b:ef:84:3f:db:6b:a8:7d:07:0f:15:20:75:
af:79:ed:55:26:ba:77:41:14:ab:57:cf:92:00:ec:
e6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
67:FC:28:AC:1D:9D:C0:74:4B:9A:BC:05:72:04:91:01:77:DA:3A:FF
X509v3 Authority Key Identifier:
keyid:FE:2C:D5:B6:B6:FF:84:61:BB:97:97:86:1C:9B:81:67:6A:07:53:AA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_izVtrb_hGG7l5eGHJuBZ2oHU6o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d1f16c-5d15-4f7b-ba5e-6be0bfe1cbdb/1/_izVtrb_hGG7l5eGHJuBZ2oHU6o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:ac:cd:7d:be:83:b1:53:b3:75:c7:61:7d:9b:2a:3a:fd:29:
4a:64:8a:e6:d3:15:98:d9:d7:3a:f4:b0:c1:d2:ed:d1:95:a3:
42:e1:52:75:c6:88:66:d4:cc:a1:8f:d5:db:26:38:5d:d4:d6:
82:12:b7:04:fc:f2:24:b8:4d:92:1e:55:1e:71:8b:f6:c3:5e:
3a:2a:62:99:bb:58:58:be:5c:b9:98:77:d4:02:28:40:a6:9d:
64:87:c0:13:56:75:bd:05:db:a4:c3:7a:bd:a4:14:26:0d:86:
69:1c:01:e8:15:40:48:1e:34:5f:a5:43:ba:47:6c:98:e0:49:
89:0e:83:d2:1f:01:3f:f1:ee:43:08:1b:c5:8a:d6:3e:08:3e:
95:9d:11:6a:68:06:6b:2f:55:e3:ef:76:22:59:c0:d2:99:3c:
98:96:00:13:4d:9d:09:52:51:0b:4b:0f:1e:06:54:e7:a8:ad:
db:99:ba:04:8f:6a:c7:67:40:d9:12:31:e3:94:e6:f4:be:41:
e0:45:78:a5:17:85:c0:07:c9:ef:b7:31:fc:3c:d2:d8:c1:07:
4c:ef:b9:d0:c9:4c:f2:2d:7b:c9:51:17:94:08:87:d1:8c:0e:
73:3a:d2:72:fc:fd:ec:f2:08:60:1a:d9:1d:62:07:b4:81:31:
cc:59:f9:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe21zrN886Y0TOTLeww6wyIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMmNkNWI2YjZmZjg0NjFiYjk3OTc4NjFjOWI4MTY3NmEw
NzUzYWEwHhcNMjUwNjI4MTQwMDQ4WhcNMjUwNjI5MTQwMDQ4WjAzMTEwLwYDVQQD
Eyg2N2ZjMjhhYzFkOWRjMDc0NGI5YWJjMDU3MjA0OTEwMTc3ZGEzYWZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3wVRp/2/07fiPewG9qvEXzxVJOsz
10ZA2ytQ14e37KGPkEudH5Ov/4RBTNCZMvOEonB1F5/iHaCoGS+pjVXt6PthkYcW
/k9VtMXWL25GvlKbkp2XoqofbdfWibMiGafKKYZw14oQI0Ry7WU7SdSkvUhifLRa
21ccIu3eCq/jc11zHGHrbiqcjHs+ixMg7zJ6T2zkSmo364CremalpPkkUs30KOS6
FGe4OHofBt8k+V16X5b5f7G7fNHDTPM4q1hJOP3qBeC7nRoLCTi5iWcMRJ8HFIxb
obHp5LsIjiTO1l1bN5vvhD/ba6h9Bw8VIHWvee1VJrp3QRSrV8+SAOzm0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGf8KKwdncB0S5q8BXIEkQF32jr/MB8GA1UdIwQY
MBaAFP4s1ba2/4Rhu5eXhhybgWdqB1OqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2l6VnRyYl9oR0c3bDVlR0hKdUJaMm9IVTZvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kMWYxNmMtNWQxNS00ZjdiLWJhNWUt
NmJlMGJmZTFjYmRiLzEvX2l6VnRyYl9oR0c3bDVlR0hKdUJaMm9IVTZvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kMWYxNmMtNWQxNS00ZjdiLWJhNWUtNmJlMGJmZTFjYmRi
LzEvX2l6VnRyYl9oR0c3bDVlR0hKdUJaMm9IVTZvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVKzNfb6D
sVOzdcdhfZsqOv0pSmSK5tMVmNnXOvSwwdLt0ZWjQuFSdcaIZtTMoY/V2yY4XdTW
ghK3BPzyJLhNkh5VHnGL9sNeOipimbtYWL5cuZh31AIoQKadZIfAE1Z1vQXbpMN6
vaQUJg2GaRwB6BVASB40X6VDukdsmOBJiQ6D0h8BP/HuQwgbxYrWPgg+lZ0RamgG
ay9V4+92IlnA0pk8mJYAE02dCVJRC0sPHgZU56it25m6BI9qx2dA2RIx45Tm9L5B
4EV4pReFwAfJ77cx/DzS2MEHTO+50MlM8i17yVEXlAiH0YwOczrScvz97PIIYBrZ
HWIHtIExzFn5+Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:03:10 2025 by rpki-client