Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
File: i7AWzMBcV2V0az92QtBD6BEgNwU.mft (raw, json)
Hash identifier: /T8uZaSzeuH/TUxd/c+l1ceYs8ccKZ1bPvlu0Wr80to=
Subject key identifier: 00:00:C8:47:F9:EF:B1:89:B0:E6:61:5B:E0:54:17:F0:56:18:B5:29
Authority key identifier: 8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
Certificate issuer: /CN=8bb016ccc05c5765746b3f7642d043e811203705
Certificate serial: 0197B6D74E5D890C27C5CFDB8D62B5EFF62B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
Manifest number: 9F
Signing time: Sat 28 Jun 2025 14:00:53 +0000
Manifest this update: Sat 28 Jun 2025 14:00:53 +0000
Manifest next update: Sun 29 Jun 2025 14:00:53 +0000
Files and hashes: 1: i7AWzMBcV2V0az92QtBD6BEgNwU.crl (hash: 9i0YkrwwQxo4djIhvkTEaPWQj23pljOaBB8F67dKSjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:4e:5d:89:0c:27:c5:cf:db:8d:62:b5:ef:f6:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8bb016ccc05c5765746b3f7642d043e811203705
Validity
Not Before: Jun 28 14:00:53 2025 GMT
Not After : Jun 29 14:00:53 2025 GMT
Subject: CN=0000c847f9efb189b0e6615be05417f05618b529
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:5c:e7:14:59:2a:ed:e8:a8:b1:82:36:f8:2f:
fd:6c:8b:bf:cb:0c:a6:e3:6f:9c:93:b7:15:59:02:
3e:9e:3c:d8:3b:2a:0f:96:5c:3e:44:23:f1:76:83:
34:47:51:e5:1b:97:23:fb:5f:37:7e:69:91:95:97:
41:a4:12:e8:24:62:43:61:54:b7:ba:bf:36:d8:17:
c0:25:30:9a:9b:85:f5:78:74:89:27:36:45:3d:40:
07:fc:f4:d6:02:04:89:3f:2b:e4:10:5d:15:5f:00:
c6:5d:7f:56:5f:4a:de:48:71:6b:e6:9b:23:ba:98:
33:bc:96:11:f2:84:dd:ce:ba:e9:3f:ed:f5:b2:fc:
f5:96:80:fe:c0:ca:4d:32:75:e6:0a:75:ae:9b:43:
60:9b:0a:42:5a:0b:b3:24:40:36:2a:e0:c7:68:c2:
f8:43:d1:e9:b2:c8:96:6d:2d:8c:60:85:f4:1c:62:
12:ac:ff:93:4a:7b:5f:22:9f:b0:59:52:f1:33:ce:
13:bd:51:72:5b:c8:fd:ef:3a:aa:ff:fb:ad:45:f4:
d6:f5:05:6e:76:9b:be:37:d1:22:ab:45:32:1e:93:
ab:12:c3:00:d6:ae:ac:4d:3f:3e:e0:8a:bb:a9:a1:
25:f6:ea:9a:40:e0:51:a1:37:26:eb:51:88:1b:4d:
6f:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
00:00:C8:47:F9:EF:B1:89:B0:E6:61:5B:E0:54:17:F0:56:18:B5:29
X509v3 Authority Key Identifier:
keyid:8B:B0:16:CC:C0:5C:57:65:74:6B:3F:76:42:D0:43:E8:11:20:37:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i7AWzMBcV2V0az92QtBD6BEgNwU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bc/018fe7-e86a-466c-b710-fed55e6e52ef/1/i7AWzMBcV2V0az92QtBD6BEgNwU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:2d:8d:f2:94:eb:28:c7:6c:9c:ae:32:50:49:24:f7:7b:a3:
0b:d5:a6:45:21:cd:02:c0:96:7d:4f:ff:ed:7e:1e:7b:d6:95:
4f:5b:30:17:85:22:b4:23:26:fa:72:25:99:f2:0e:ce:a3:eb:
a2:3d:3a:54:b7:17:52:8c:64:21:64:25:d5:78:63:95:f6:67:
b8:40:b7:ec:84:3d:da:bf:b1:74:7a:bb:9d:67:0f:b0:8e:b3:
a2:33:56:9a:da:dd:3a:e7:df:66:aa:3f:54:ff:40:28:d2:f9:
8b:4a:a1:b5:19:0e:50:cc:f4:4e:6e:3d:d2:83:42:f1:c4:04:
34:a8:3a:3e:0c:95:a0:3e:a2:75:bd:54:70:25:7b:49:f2:4b:
46:05:a4:e1:9f:c0:b7:59:bd:40:a5:3a:d8:0e:10:24:0d:ea:
00:de:cc:a7:c7:dd:57:11:c7:c7:f7:7a:12:c7:18:fb:73:7c:
02:ba:18:12:96:21:74:d0:22:1a:83:73:db:e9:43:a4:e5:3d:
26:82:a2:b9:bb:f9:70:db:a9:83:82:1d:0a:4d:b7:f1:1c:88:
55:df:a3:92:ea:76:07:af:66:c5:b2:e1:91:23:b7:75:70:69:
aa:96:16:5d:c5:95:57:a7:aa:74:77:bc:cf:ec:0e:7b:24:62:
3c:5e:5e:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2105diQwnxc/bjWK17/YrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiYjAxNmNjYzA1YzU3NjU3NDZiM2Y3NjQyZDA0M2U4MTEy
MDM3MDUwHhcNMjUwNjI4MTQwMDUzWhcNMjUwNjI5MTQwMDUzWjAzMTEwLwYDVQQD
EygwMDAwYzg0N2Y5ZWZiMTg5YjBlNjYxNWJlMDU0MTdmMDU2MThiNTI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArlznFFkq7eiosYI2+C/9bIu/ywym
42+ck7cVWQI+njzYOyoPllw+RCPxdoM0R1HlG5cj+183fmmRlZdBpBLoJGJDYVS3
ur822BfAJTCam4X1eHSJJzZFPUAH/PTWAgSJPyvkEF0VXwDGXX9WX0reSHFr5psj
upgzvJYR8oTdzrrpP+31svz1loD+wMpNMnXmCnWum0NgmwpCWguzJEA2KuDHaML4
Q9HpssiWbS2MYIX0HGISrP+TSntfIp+wWVLxM84TvVFyW8j97zqq//utRfTW9QVu
dpu+N9Eiq0UyHpOrEsMA1q6sTT8+4Iq7qaEl9uqaQOBRoTcm61GIG01vFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAAAyEf577GJsOZhW+BUF/BWGLUpMB8GA1UdIwQY
MBaAFIuwFszAXFdldGs/dkLQQ+gRIDcFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTdBV3pNQmNWMlYwYXo5MlF0QkQ2QkVnTndVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYy8wMThmZTctZTg2YS00NjZjLWI3MTAt
ZmVkNTVlNmU1MmVmLzEvaTdBV3pNQmNWMlYwYXo5MlF0QkQ2QkVnTndVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYy8wMThmZTctZTg2YS00NjZjLWI3MTAtZmVkNTVlNmU1MmVm
LzEvaTdBV3pNQmNWMlYwYXo5MlF0QkQ2QkVnTndVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcC2N8pTr
KMdsnK4yUEkk93ujC9WmRSHNAsCWfU//7X4ee9aVT1swF4UitCMm+nIlmfIOzqPr
oj06VLcXUoxkIWQl1XhjlfZnuEC37IQ92r+xdHq7nWcPsI6zojNWmtrdOuffZqo/
VP9AKNL5i0qhtRkOUMz0Tm490oNC8cQENKg6PgyVoD6idb1UcCV7SfJLRgWk4Z/A
t1m9QKU62A4QJA3qAN7Mp8fdVxHHx/d6EscY+3N8AroYEpYhdNAiGoNz2+lDpOU9
JoKiubv5cNupg4IdCk238RyIVd+jkup2B69mxbLhkSO3dXBpqpYWXcWVV6eqdHe8
z+wOeyRiPF5eDA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:53:27 2025 by rpki-client