Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
File: dy9i9-iZgXRBGAk19CuCo5mAotw.mft (raw, json)
Hash identifier: Xh1afZZFeNlZToBfnOPFOzRSd+KFZTM8z4nh6Zvkw6Q=
Subject key identifier: 41:D0:C5:87:AB:04:F9:80:11:5D:84:33:8D:29:25:45:CB:44:62:FA
Authority key identifier: 77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
Certificate issuer: /CN=772f62f7e899817441180935f42b82a39980a2dc
Certificate serial: 0197BAB4809D2B515752682D63F7A8F463C8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
Manifest number: 0461
Signing time: Sun 29 Jun 2025 08:01:20 +0000
Manifest this update: Sun 29 Jun 2025 08:01:20 +0000
Manifest next update: Mon 30 Jun 2025 08:01:20 +0000
Files and hashes: 1: dy9i9-iZgXRBGAk19CuCo5mAotw.crl (hash: 3GR2XMqrL1QkuOtIwvcVt6bw/4wRShckuLe/XCvn4Cg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:b4:80:9d:2b:51:57:52:68:2d:63:f7:a8:f4:63:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=772f62f7e899817441180935f42b82a39980a2dc
Validity
Not Before: Jun 29 08:01:20 2025 GMT
Not After : Jun 30 08:01:20 2025 GMT
Subject: CN=41d0c587ab04f980115d84338d292545cb4462fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:dd:b6:f4:17:a9:fd:db:07:56:e8:35:2a:86:
37:9f:63:e0:68:da:81:1b:bd:58:74:93:08:85:54:
cf:d1:ef:e4:f2:33:32:02:c8:13:e0:51:94:7f:b6:
55:8e:67:5b:61:f5:9f:d4:75:1e:73:54:ee:e6:8a:
12:6a:99:ad:80:4a:f4:7d:1c:cd:68:46:c0:eb:77:
7d:4a:ab:3b:47:82:b4:27:62:d8:67:c7:97:54:90:
b6:97:e4:16:8a:e3:c6:3f:cb:5d:0d:4a:44:8c:4e:
63:2f:07:81:54:20:38:d6:ba:72:f3:ae:76:cd:8b:
ec:e5:00:06:06:b8:20:19:ec:a2:4b:d0:4c:c0:44:
46:98:b9:46:fc:9b:bd:6c:43:5e:de:db:ef:23:f0:
e0:9c:f6:fa:dd:b5:ca:90:d6:d7:ef:8f:63:9f:ea:
5f:3d:c4:bc:12:4e:3f:ef:86:80:c9:6a:6c:3f:b4:
e0:0d:f4:e0:03:0c:74:cc:b3:5c:be:7a:61:76:97:
97:5c:63:bc:80:cc:4b:80:a8:84:95:8c:f7:0a:97:
15:46:5f:e2:87:fc:8d:0a:a4:3d:fa:c6:99:b4:41:
a4:d9:e4:36:dc:3d:3f:4f:f1:50:49:28:41:58:b3:
6b:2f:34:a4:a7:ab:83:ca:f7:81:88:a9:f3:be:e2:
60:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:D0:C5:87:AB:04:F9:80:11:5D:84:33:8D:29:25:45:CB:44:62:FA
X509v3 Authority Key Identifier:
keyid:77:2F:62:F7:E8:99:81:74:41:18:09:35:F4:2B:82:A3:99:80:A2:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dy9i9-iZgXRBGAk19CuCo5mAotw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/150d2b-a088-401d-b559-a061a8c77f16/1/dy9i9-iZgXRBGAk19CuCo5mAotw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e8:21:87:be:e3:a3:a2:ef:58:44:15:ed:df:f0:cf:07:ce:
0e:3f:99:10:f5:6e:2b:34:de:cf:af:12:9d:03:28:30:62:61:
d0:7d:4c:2c:dc:57:83:b1:b9:39:f4:dd:c1:cb:d2:78:dd:23:
8e:52:dc:33:62:24:bd:29:e7:1e:fa:00:f8:8c:b3:52:43:dc:
21:4e:ac:71:cf:bb:a2:bc:ee:3b:d0:a8:8c:a8:d9:d7:6c:f9:
4c:4a:3a:6d:84:27:5c:88:0f:17:5d:34:7f:98:ce:7b:c5:5c:
16:5f:35:31:2c:f8:2b:16:ee:6a:15:3b:22:41:d8:f6:19:3a:
fd:6a:a6:ee:d4:70:9d:00:2c:95:69:b0:ac:55:01:4b:fc:c0:
a2:14:f7:61:f5:b3:13:3e:1b:4d:99:d5:9e:96:31:64:90:73:
c1:f1:09:e2:67:da:1e:1b:2e:7e:f2:7e:c6:29:0c:5b:84:89:
4c:c3:4c:1e:02:de:49:4d:4d:cd:21:43:56:53:86:45:6f:7d:
c4:63:02:f7:a8:c1:3f:bd:b5:69:6d:97:6d:f4:dc:cf:67:4e:
1b:15:87:d6:92:10:96:e5:99:f3:0a:d1:b5:d3:36:d4:84:cb:
b3:94:cb:bf:ca:41:cf:9e:3b:99:e8:c1:af:2c:40:fd:95:af:
68:30:36:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6tICdK1FXUmgtY/eo9GPIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3MmY2MmY3ZTg5OTgxNzQ0MTE4MDkzNWY0MmI4MmEzOTk4
MGEyZGMwHhcNMjUwNjI5MDgwMTIwWhcNMjUwNjMwMDgwMTIwWjAzMTEwLwYDVQQD
Eyg0MWQwYzU4N2FiMDRmOTgwMTE1ZDg0MzM4ZDI5MjU0NWNiNDQ2MmZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA29229Bep/dsHVug1KoY3n2PgaNqB
G71YdJMIhVTP0e/k8jMyAsgT4FGUf7ZVjmdbYfWf1HUec1Tu5ooSapmtgEr0fRzN
aEbA63d9Sqs7R4K0J2LYZ8eXVJC2l+QWiuPGP8tdDUpEjE5jLweBVCA41rpy8652
zYvs5QAGBrggGeyiS9BMwERGmLlG/Ju9bENe3tvvI/DgnPb63bXKkNbX749jn+pf
PcS8Ek4/74aAyWpsP7TgDfTgAwx0zLNcvnphdpeXXGO8gMxLgKiElYz3CpcVRl/i
h/yNCqQ9+saZtEGk2eQ23D0/T/FQSShBWLNrLzSkp6uDyveBiKnzvuJg9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEHQxYerBPmAEV2EM40pJUXLRGL6MB8GA1UdIwQY
MBaAFHcvYvfomYF0QRgJNfQrgqOZgKLcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHk5aTktaVpnWFJCR0FrMTlDdUNvNW1Bb3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8xNTBkMmItYTA4OC00MDFkLWI1NTkt
YTA2MWE4Yzc3ZjE2LzEvZHk5aTktaVpnWFJCR0FrMTlDdUNvNW1Bb3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8xNTBkMmItYTA4OC00MDFkLWI1NTktYTA2MWE4Yzc3ZjE2
LzEvZHk5aTktaVpnWFJCR0FrMTlDdUNvNW1Bb3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+ghh77j
o6LvWEQV7d/wzwfODj+ZEPVuKzTez68SnQMoMGJh0H1MLNxXg7G5OfTdwcvSeN0j
jlLcM2IkvSnnHvoA+IyzUkPcIU6scc+7orzuO9CojKjZ12z5TEo6bYQnXIgPF100
f5jOe8VcFl81MSz4KxbuahU7IkHY9hk6/Wqm7tRwnQAslWmwrFUBS/zAohT3YfWz
Ez4bTZnVnpYxZJBzwfEJ4mfaHhsufvJ+xikMW4SJTMNMHgLeSU1NzSFDVlOGRW99
xGMC96jBP721aW2XbfTcz2dOGxWH1pIQluWZ8wrRtdM21ITLs5TLv8pBz547mejB
ryxA/ZWvaDA2zQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:26:12 2025 by rpki-client