Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
File: xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft (raw, json)
Hash identifier: SdNiWfBBP3FO8KsAMkYOBrPb/cT3nA7KhtE5jCGzI1k=
Subject key identifier: 34:0A:35:CA:57:BC:0E:84:4A:67:2A:AD:05:A7:3C:C6:A6:B3:12:2D
Authority key identifier: C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
Certificate issuer: /CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Certificate serial: 0197B70ED6E2AB52B9B175523BE5A8D73B83
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 15:01:32 +0000
Manifest this update: Sat 28 Jun 2025 15:01:32 +0000
Manifest next update: Sun 29 Jun 2025 15:01:32 +0000
Files and hashes: 1: xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl (hash: HY1hYbVJaYSuYofCyhdUYccENMEgJXUyP1binqxJOaw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:d6:e2:ab:52:b9:b1:75:52:3b:e5:a8:d7:3b:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c715cd3acf3b6b2d57bc348567582753c9cc0933
Validity
Not Before: Jun 28 15:01:32 2025 GMT
Not After : Jun 29 15:01:32 2025 GMT
Subject: CN=340a35ca57bc0e844a672aad05a73cc6a6b3122d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:08:4a:ac:a5:d1:39:6d:16:c7:22:a7:f2:c4:
a4:e6:16:69:f4:e4:e2:20:34:7d:5e:cf:7c:db:36:
c8:a1:ff:bd:4a:8d:70:95:55:cc:12:07:79:10:2a:
6c:cc:ab:2d:ac:db:c6:34:97:a8:e2:4a:6a:cb:d4:
7d:a3:b0:bd:d3:88:43:77:71:51:83:b0:35:3c:5c:
15:a7:ed:16:fd:8a:a2:f9:82:fb:67:7f:ad:04:49:
b5:ea:b2:68:84:bc:42:5d:01:f8:d8:f3:68:d0:80:
f8:6f:c8:8b:e7:02:e8:1e:05:0e:ae:f1:e2:e2:7a:
1e:fc:10:75:f8:65:93:3e:04:2a:c3:8c:e7:e3:2e:
13:c4:d0:8c:b9:00:06:79:e0:63:22:54:d5:d3:49:
67:c4:e6:59:c0:e3:92:09:44:71:73:08:5d:54:64:
f9:4b:7f:c0:1d:bb:88:43:42:2b:06:a5:c9:de:7a:
82:51:f1:f9:1c:d3:a9:47:7d:a9:a5:8e:e4:0c:a0:
e3:1f:a3:3a:90:82:4b:93:23:1d:16:63:84:09:40:
ac:90:9a:86:fd:04:1a:56:6e:14:5a:72:ef:1c:30:
e9:f0:b9:d0:6b:7c:88:79:db:f1:b2:e5:43:ae:df:
ac:7b:7f:76:72:8e:9a:fa:a4:38:d3:59:c7:bc:d0:
ec:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:0A:35:CA:57:BC:0E:84:4A:67:2A:AD:05:A7:3C:C6:A6:B3:12:2D
X509v3 Authority Key Identifier:
keyid:C7:15:CD:3A:CF:3B:6B:2D:57:BC:34:85:67:58:27:53:C9:CC:09:33
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xxXNOs87ay1XvDSFZ1gnU8nMCTM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/98/24dd54-e910-4e4b-a921-ae8d84003ff1/1/xxXNOs87ay1XvDSFZ1gnU8nMCTM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
75:bc:bb:0d:ab:55:cb:dd:52:18:c6:e0:7f:bb:e4:8e:34:36:
0c:e4:d7:0f:c2:53:b4:cf:a1:a1:a6:4f:eb:f4:f1:8c:3d:b3:
f8:72:8a:b5:f4:26:9b:d4:9c:14:58:15:80:d6:4c:7a:3e:21:
ff:74:60:37:30:ea:c5:02:26:c6:e9:5c:bb:6c:79:8c:c1:9a:
e7:73:6d:fa:b8:53:eb:4d:13:9a:95:e7:c2:7f:43:78:e3:33:
c3:aa:ea:2a:05:68:a1:e4:1c:82:d5:c5:37:4b:78:c1:d6:9e:
b1:65:f7:6f:83:c3:65:56:4d:c5:cb:7a:05:a6:4e:3a:5a:d9:
5b:79:0f:44:04:df:dd:01:07:1f:b7:4d:71:8a:a8:6b:30:a3:
fd:fb:85:25:1a:a6:8a:b4:74:ce:ae:94:8c:da:b8:81:a2:57:
ff:0d:9b:7b:d0:df:5a:64:db:17:0d:33:2a:7b:65:9e:dd:39:
70:f2:f1:e0:61:cf:20:40:47:ef:e7:0a:8d:4e:9f:2f:49:93:
0b:0a:85:a6:05:a4:da:49:36:63:d0:39:08:c4:ca:ec:40:07:
4f:45:7a:a8:ae:df:de:05:c4:eb:ef:94:cf:1b:f4:eb:b2:e5:
2b:56:50:ef:c3:cc:d7:16:8b:8d:aa:90:97:70:7d:7e:a7:b5:
e0:72:09:38
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dtbiq1K5sXVSO+Wo1zuDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3MTVjZDNhY2YzYjZiMmQ1N2JjMzQ4NTY3NTgyNzUzYzlj
YzA5MzMwHhcNMjUwNjI4MTUwMTMyWhcNMjUwNjI5MTUwMTMyWjAzMTEwLwYDVQQD
EygzNDBhMzVjYTU3YmMwZTg0NGE2NzJhYWQwNWE3M2NjNmE2YjMxMjJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvAhKrKXROW0WxyKn8sSk5hZp9OTi
IDR9Xs982zbIof+9So1wlVXMEgd5ECpszKstrNvGNJeo4kpqy9R9o7C904hDd3FR
g7A1PFwVp+0W/Yqi+YL7Z3+tBEm16rJohLxCXQH42PNo0ID4b8iL5wLoHgUOrvHi
4noe/BB1+GWTPgQqw4zn4y4TxNCMuQAGeeBjIlTV00lnxOZZwOOSCURxcwhdVGT5
S3/AHbuIQ0IrBqXJ3nqCUfH5HNOpR32ppY7kDKDjH6M6kIJLkyMdFmOECUCskJqG
/QQaVm4UWnLvHDDp8LnQa3yIedvxsuVDrt+se392co6a+qQ401nHvNDsOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDQKNcpXvA6ESmcqrQWnPMamsxItMB8GA1UdIwQY
MBaAFMcVzTrPO2stV7w0hWdYJ1PJzAkzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OC8yNGRkNTQtZTkxMC00ZTRiLWE5MjEt
YWU4ZDg0MDAzZmYxLzEveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OC8yNGRkNTQtZTkxMC00ZTRiLWE5MjEtYWU4ZDg0MDAzZmYx
LzEveHhYTk9zODdheTFYdkRTRloxZ25VOG5NQ1RNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdby7DatV
y91SGMbgf7vkjjQ2DOTXD8JTtM+hoaZP6/TxjD2z+HKKtfQmm9ScFFgVgNZMej4h
/3RgNzDqxQImxulcu2x5jMGa53Nt+rhT600TmpXnwn9DeOMzw6rqKgVooeQcgtXF
N0t4wdaesWX3b4PDZVZNxct6BaZOOlrZW3kPRATf3QEHH7dNcYqoazCj/fuFJRqm
irR0zq6UjNq4gaJX/w2be9DfWmTbFw0zKntlnt05cPLx4GHPIEBH7+cKjU6fL0mT
CwqFpgWk2kk2Y9A5CMTK7EAHT0V6qK7f3gXE6++Uzxv067LlK1ZQ78PM1xaLjaqQ
l3B9fqe14HIJOA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:28 2025 by rpki-client