Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
File: u9Qr14Mqar4W4VIqLX5OQNProKI.mft (raw, json)
Hash identifier: GLRFl8Ld5JqX9boxOeCTrT1sH0HJ3gSBsbW4xbLMxvU=
Subject key identifier: D7:9B:EB:71:BC:E6:CE:CB:B9:3C:37:1F:A9:4C:48:8D:81:AF:3D:FB
Authority key identifier: BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
Certificate issuer: /CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Certificate serial: 0197B745268D09FB97659B04C739DB747388
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
Manifest number: 15B1
Signing time: Sat 28 Jun 2025 16:00:51 +0000
Manifest this update: Sat 28 Jun 2025 16:00:51 +0000
Manifest next update: Sun 29 Jun 2025 16:00:51 +0000
Files and hashes: 1: u9Qr14Mqar4W4VIqLX5OQNProKI.crl (hash: PPSAadbZv6UOiM/+kRmPFLMnhJzsOw/vbkVbvyjjTL8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:26:8d:09:fb:97:65:9b:04:c7:39:db:74:73:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Validity
Not Before: Jun 28 16:00:51 2025 GMT
Not After : Jun 29 16:00:51 2025 GMT
Subject: CN=d79beb71bce6cecbb93c371fa94c488d81af3dfb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:7d:27:26:60:3b:dc:64:76:b8:2f:77:32:6f:
29:6c:0c:80:e4:63:dc:df:e0:46:bf:f1:85:d4:8f:
3a:73:d6:6e:9a:11:d7:1a:6e:40:da:89:d2:79:c3:
1b:83:75:fa:0a:db:27:cc:f8:f8:a1:95:d5:5d:1c:
2d:3b:d1:3f:b5:93:c9:47:f2:78:f5:81:7c:30:3d:
07:aa:c2:da:c0:1c:11:fe:9a:f6:2f:2c:b0:33:fe:
11:c4:9e:e0:e4:aa:ea:19:16:53:2b:f4:f3:cd:27:
68:e6:e4:4d:3d:a5:c8:83:91:31:60:86:93:db:dd:
6a:a4:9d:6c:4d:41:0d:59:7e:89:39:8e:4c:dc:b7:
07:3c:f5:64:f1:33:e0:1e:b9:9b:8d:69:3f:ba:d6:
5d:40:9c:22:62:22:11:ec:57:64:2f:9d:20:92:91:
ba:93:50:fa:25:f4:6f:ee:fa:6e:e1:fb:0d:40:1b:
91:e9:1a:92:8d:ee:d1:ea:7e:f2:96:41:0e:1f:db:
f0:20:b4:a2:46:36:32:74:97:17:93:aa:6a:42:e9:
27:4f:94:35:48:6a:6f:82:ce:67:d8:7c:fc:af:96:
73:89:13:c9:8e:da:df:df:da:35:d0:42:bc:3f:49:
c8:c2:e5:4e:98:5c:7b:15:d0:5d:7a:4f:d4:a3:c1:
00:c7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:9B:EB:71:BC:E6:CE:CB:B9:3C:37:1F:A9:4C:48:8D:81:AF:3D:FB
X509v3 Authority Key Identifier:
keyid:BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c6:e8:7f:ff:a5:df:3c:f9:a3:a7:b5:5a:fb:e7:bb:42:ef:14:
ed:6c:11:fe:f8:7e:20:aa:e5:ba:7c:c2:b8:fc:4c:d5:de:49:
17:14:2b:ab:6f:52:e9:46:23:06:f1:e1:f8:57:15:99:d2:d5:
aa:69:d9:05:a1:75:20:9b:d3:2a:fa:69:60:db:11:01:20:da:
f1:ef:6b:83:a8:17:d9:1d:1c:c2:3e:36:43:85:6c:59:01:95:
09:16:8e:05:3b:b8:bc:42:8a:db:54:34:b3:21:c4:e8:fd:b1:
61:ca:88:b7:f6:e4:66:66:c6:7f:ea:82:39:ec:63:4d:66:ca:
94:25:6f:46:e3:4a:63:16:a3:b6:88:7f:49:41:93:c4:99:8e:
e1:00:2e:d2:96:1a:dd:0b:de:8a:e5:99:45:cb:f2:f9:53:7a:
f5:17:ac:e8:08:88:7c:9f:28:46:0a:08:0e:2b:4c:b5:63:72:
bf:a4:f9:13:90:de:f1:79:96:5c:13:83:f3:d7:96:57:22:33:
54:f1:4c:41:32:d6:d3:7f:d3:b8:de:dc:1e:e1:c4:cd:28:49:
ea:ce:2a:37:66:d1:44:22:ac:bf:f8:b9:77:47:9f:3d:8f:99:
cb:6b:a0:52:a3:fa:c8:28:eb:f8:7f:39:57:da:5f:7e:50:56:
16:d8:27:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RSaNCfuXZZsExznbdHOIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDQyYmQ3ODMyYTZhYmUxNmUxNTIyYTJkN2U0ZTQwZDNl
YmEwYTIwHhcNMjUwNjI4MTYwMDUxWhcNMjUwNjI5MTYwMDUxWjAzMTEwLwYDVQQD
EyhkNzliZWI3MWJjZTZjZWNiYjkzYzM3MWZhOTRjNDg4ZDgxYWYzZGZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu30nJmA73GR2uC93Mm8pbAyA5GPc
3+BGv/GF1I86c9ZumhHXGm5A2onSecMbg3X6CtsnzPj4oZXVXRwtO9E/tZPJR/J4
9YF8MD0HqsLawBwR/pr2LyywM/4RxJ7g5KrqGRZTK/TzzSdo5uRNPaXIg5ExYIaT
291qpJ1sTUENWX6JOY5M3LcHPPVk8TPgHrmbjWk/utZdQJwiYiIR7FdkL50gkpG6
k1D6JfRv7vpu4fsNQBuR6RqSje7R6n7ylkEOH9vwILSiRjYydJcXk6pqQuknT5Q1
SGpvgs5n2Hz8r5ZziRPJjtrf39o10EK8P0nIwuVOmFx7FdBdek/Uo8EAxwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNeb63G85s7LuTw3H6lMSI2Brz37MB8GA1UdIwQY
MBaAFLvUK9eDKmq+FuFSKi1+TkDT66CiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kM2ZmNjMtZTA5OC00ZTc1LWEzNDYt
ODBjOGE4NjdkNzcxLzEvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kM2ZmNjMtZTA5OC00ZTc1LWEzNDYtODBjOGE4NjdkNzcx
LzEvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxuh//6Xf
PPmjp7Va++e7Qu8U7WwR/vh+IKrlunzCuPxM1d5JFxQrq29S6UYjBvHh+FcVmdLV
qmnZBaF1IJvTKvppYNsRASDa8e9rg6gX2R0cwj42Q4VsWQGVCRaOBTu4vEKK21Q0
syHE6P2xYcqIt/bkZmbGf+qCOexjTWbKlCVvRuNKYxajtoh/SUGTxJmO4QAu0pYa
3QveiuWZRcvy+VN69Res6AiIfJ8oRgoIDitMtWNyv6T5E5De8XmWXBOD89eWVyIz
VPFMQTLW03/TuN7cHuHEzShJ6s4qN2bRRCKsv/i5d0efPY+Zy2ugUqP6yCjr+H85
V9pfflBWFtgnaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:59:16 2025 by rpki-client