Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
File: k6Ip4mayVYiZ81R-5j2E7WWUdos.mft (raw, json)
Hash identifier: ZnuWEAcxJgPkXIzGnKNKUQMDIL8DyB8NVl2hEYpy244=
Subject key identifier: DD:78:E0:E1:F4:AA:63:8A:49:3C:C6:7E:4A:0D:B1:14:BE:BF:94:48
Authority key identifier: 93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
Certificate issuer: /CN=93a229e266b2558899f3547ee63d84ed6594768b
Certificate serial: 0197C500F5D008A84AB521A5FBF086484944
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
Manifest number: 15CE
Signing time: Tue 01 Jul 2025 08:01:03 +0000
Manifest this update: Tue 01 Jul 2025 08:01:03 +0000
Manifest next update: Wed 02 Jul 2025 08:01:03 +0000
Files and hashes: 1: k6Ip4mayVYiZ81R-5j2E7WWUdos.crl (hash: EXwVvrptV+RZAzjJ6CWFFHDTC9XWlvgdn1P/5NYPw/w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 02 Jul 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c5:00:f5:d0:08:a8:4a:b5:21:a5:fb:f0:86:48:49:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=93a229e266b2558899f3547ee63d84ed6594768b
Validity
Not Before: Jul 1 08:01:03 2025 GMT
Not After : Jul 2 08:01:03 2025 GMT
Subject: CN=dd78e0e1f4aa638a493cc67e4a0db114bebf9448
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:89:be:7a:dc:16:6c:45:cd:c1:9e:06:b3:cd:
ff:28:38:90:34:a7:d0:e6:e6:5a:76:75:59:51:37:
39:6a:38:9e:d1:57:f6:71:f2:89:58:b6:e1:7a:dd:
0f:ec:48:ed:71:6f:d0:94:a8:60:bf:13:07:c8:6d:
c4:14:37:ab:21:0a:e9:02:bc:26:ed:0d:81:b3:eb:
9f:ee:bf:39:cc:d3:35:08:e9:e7:f8:50:90:20:04:
44:5b:9c:bb:b6:2c:11:ff:6c:2e:b6:da:a7:8e:8d:
7e:5e:cf:40:31:da:f1:4a:86:bc:88:70:e4:5c:bf:
15:a8:e5:35:73:21:b9:da:04:b6:39:0f:d5:ff:5f:
cf:e7:c0:a7:c7:cc:f5:58:c4:e9:c2:27:f4:07:1a:
1e:62:5c:fd:fb:e5:a9:d6:83:2f:0c:f5:0d:ea:10:
a3:fd:7e:8d:8b:8b:11:04:b8:5d:db:53:ce:b4:63:
8f:0c:17:0e:2e:28:5c:43:ed:20:a1:e4:28:b1:94:
8e:b9:ff:46:a8:51:53:e1:d4:0c:a1:fa:8c:b2:ed:
9f:cf:f5:e5:0c:36:9f:a2:17:5e:f0:2a:d0:23:88:
37:fa:ac:6e:ea:ed:e9:2b:55:5c:ce:2f:9b:4f:af:
cb:f7:42:fa:29:53:08:75:9e:39:80:38:a8:9d:8c:
50:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:78:E0:E1:F4:AA:63:8A:49:3C:C6:7E:4A:0D:B1:14:BE:BF:94:48
X509v3 Authority Key Identifier:
keyid:93:A2:29:E2:66:B2:55:88:99:F3:54:7E:E6:3D:84:ED:65:94:76:8B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k6Ip4mayVYiZ81R-5j2E7WWUdos.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a4/c4073a-923b-4ecf-9566-4d777cacd9a4/1/k6Ip4mayVYiZ81R-5j2E7WWUdos.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:ff:ad:aa:af:95:32:07:8f:8b:fc:97:b8:d7:e1:97:95:bf:
4b:84:ad:7d:15:05:ef:b8:e7:7f:d0:d5:d8:af:b3:65:8e:cb:
c8:ac:49:3c:89:4d:76:0d:e9:97:fb:bc:f2:47:a9:f9:c0:15:
66:76:07:4c:8d:34:ce:e0:e5:ca:8d:9a:3d:30:6e:7c:c1:8f:
73:81:af:99:50:3c:52:97:40:42:02:ef:72:8a:5c:1f:f0:21:
81:f5:28:2f:dd:5e:1a:91:fd:a2:1a:64:50:01:68:f8:76:20:
34:df:58:2d:7f:8b:8f:ad:20:18:fe:fa:fa:76:9e:49:fb:43:
22:19:31:88:3d:b7:b4:d0:8b:c8:df:06:e1:e9:76:48:e1:bd:
94:93:d1:7d:06:e1:40:3f:00:29:58:fe:ad:57:c1:05:ac:ae:
e2:8e:dc:7e:83:c5:f8:e7:e1:0b:df:3e:8f:f5:68:53:bd:d8:
10:27:21:41:c2:2a:01:f8:f6:22:48:c1:90:ea:01:c5:6f:51:
2d:74:58:63:82:3f:4d:87:2f:9b:56:ee:ef:2e:55:0a:77:8a:
71:28:83:3e:2f:2d:0f:87:8d:6c:fd:02:49:bd:ee:1a:96:46:
8f:c6:47:01:01:84:28:62:3d:f3:d5:51:af:fa:4a:77:82:d3:
43:1b:b3:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfFAPXQCKhKtSGl+/CGSElEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzYTIyOWUyNjZiMjU1ODg5OWYzNTQ3ZWU2M2Q4NGVkNjU5
NDc2OGIwHhcNMjUwNzAxMDgwMTAzWhcNMjUwNzAyMDgwMTAzWjAzMTEwLwYDVQQD
EyhkZDc4ZTBlMWY0YWE2MzhhNDkzY2M2N2U0YTBkYjExNGJlYmY5NDQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArIm+etwWbEXNwZ4Gs83/KDiQNKfQ
5uZadnVZUTc5ajie0Vf2cfKJWLbhet0P7EjtcW/QlKhgvxMHyG3EFDerIQrpArwm
7Q2Bs+uf7r85zNM1COnn+FCQIAREW5y7tiwR/2wuttqnjo1+Xs9AMdrxSoa8iHDk
XL8VqOU1cyG52gS2OQ/V/1/P58Cnx8z1WMTpwif0BxoeYlz9++Wp1oMvDPUN6hCj
/X6Ni4sRBLhd21POtGOPDBcOLihcQ+0goeQosZSOuf9GqFFT4dQMofqMsu2fz/Xl
DDafohde8CrQI4g3+qxu6u3pK1Vczi+bT6/L90L6KVMIdZ45gDionYxQJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN144OH0qmOKSTzGfkoNsRS+v5RIMB8GA1UdIwQY
MBaAFJOiKeJmslWImfNUfuY9hO1llHaLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazZJcDRtYXlWWWlaODFSLTVqMkU3V1dVZG9zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNC9jNDA3M2EtOTIzYi00ZWNmLTk1NjYt
NGQ3NzdjYWNkOWE0LzEvazZJcDRtYXlWWWlaODFSLTVqMkU3V1dVZG9zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNC9jNDA3M2EtOTIzYi00ZWNmLTk1NjYtNGQ3NzdjYWNkOWE0
LzEvazZJcDRtYXlWWWlaODFSLTVqMkU3V1dVZG9zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeP+tqq+V
MgePi/yXuNfhl5W/S4StfRUF77jnf9DV2K+zZY7LyKxJPIlNdg3pl/u88kep+cAV
ZnYHTI00zuDlyo2aPTBufMGPc4GvmVA8UpdAQgLvcopcH/AhgfUoL91eGpH9ohpk
UAFo+HYgNN9YLX+Lj60gGP76+naeSftDIhkxiD23tNCLyN8G4el2SOG9lJPRfQbh
QD8AKVj+rVfBBayu4o7cfoPF+OfhC98+j/VoU73YECchQcIqAfj2IkjBkOoBxW9R
LXRYY4I/TYcvm1bu7y5VCneKcSiDPi8tD4eNbP0CSb3uGpZGj8ZHAQGEKGI989VR
r/pKd4LTQxuzTg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 17:05:59 2025 by rpki-client