Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
File: rKbqw5z6mj664iKLy9RXaD5Swgo.mft (raw, json)
Hash identifier: ADOBraErQMQ8wj9zy+3umFJO0VwhYVuRGMMJjD+C/PM=
Subject key identifier: 22:7D:A7:CE:B9:60:E1:9B:F5:EC:73:20:B5:30:0A:94:BD:A3:3B:6F
Authority key identifier: AC:A6:EA:C3:9C:FA:9A:3E:BA:E2:22:8B:CB:D4:57:68:3E:52:C2:0A
Certificate issuer: /CN=aca6eac39cfa9a3ebae2228bcbd457683e52c20a
Certificate serial: 0197B6A0A96E6CA898DFF17E20919383E0BA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 13:01:11 +0000
Manifest this update: Sat 28 Jun 2025 13:01:11 +0000
Manifest next update: Sun 29 Jun 2025 13:01:11 +0000
Files and hashes: 1: rKbqw5z6mj664iKLy9RXaD5Swgo.crl (hash: IwnXCdU3I5cG+JIs0yFDhZ/EhB3TckpwVJF4LVlIqHI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a9:6e:6c:a8:98:df:f1:7e:20:91:93:83:e0:ba
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aca6eac39cfa9a3ebae2228bcbd457683e52c20a
Validity
Not Before: Jun 28 13:01:11 2025 GMT
Not After : Jun 29 13:01:11 2025 GMT
Subject: CN=227da7ceb960e19bf5ec7320b5300a94bda33b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:d8:41:e6:cc:9f:69:f0:5f:96:f7:de:a2:17:
9b:aa:78:77:36:9b:9b:ed:13:67:69:9b:24:18:78:
cd:95:ea:b6:70:a9:a6:a5:46:fd:e5:d2:3e:ec:8b:
e7:17:35:27:ae:7c:24:5e:9a:54:28:50:26:c1:12:
de:84:00:b0:02:ce:9c:a2:b5:39:e5:a1:7a:74:5f:
5a:18:bb:4b:71:76:b3:82:85:e7:ee:ef:d5:76:a9:
14:a5:b2:69:fa:cb:9c:22:9a:d3:c7:be:34:6d:f2:
6a:e1:1b:84:5d:a1:b9:b6:bc:42:7e:e7:b0:88:af:
79:8b:f2:58:2c:53:6a:a8:90:0a:e2:70:81:19:d8:
31:a1:40:85:21:35:07:9f:1d:99:e9:20:b5:bb:37:
a6:80:e2:d1:da:57:b8:09:49:91:80:9e:fc:10:21:
5f:d8:42:8d:f0:14:7e:81:82:33:4c:65:bd:e7:2c:
0a:e2:6c:8e:fa:52:35:39:04:4f:6f:f1:1e:d6:26:
89:09:de:46:ea:4e:88:66:ba:8d:2c:24:1c:76:1f:
dc:c0:27:8c:7d:a5:76:d6:2e:39:e2:9c:ba:23:d5:
8c:12:72:3f:7f:d7:87:9f:fc:9c:35:89:f7:ff:6b:
9f:b0:b3:7b:f7:85:a9:a6:2e:a3:16:78:dd:4b:55:
3c:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
22:7D:A7:CE:B9:60:E1:9B:F5:EC:73:20:B5:30:0A:94:BD:A3:3B:6F
X509v3 Authority Key Identifier:
keyid:AC:A6:EA:C3:9C:FA:9A:3E:BA:E2:22:8B:CB:D4:57:68:3E:52:C2:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rKbqw5z6mj664iKLy9RXaD5Swgo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/1c8dd5-1296-4c4c-9258-bf405d46f8f8/1/rKbqw5z6mj664iKLy9RXaD5Swgo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:74:9f:ae:2d:8e:06:5b:10:87:4c:d9:61:61:18:7d:80:0a:
0f:0b:89:28:c0:33:06:d0:55:b0:60:10:7c:b3:55:f4:bf:77:
ad:62:db:a6:06:3a:33:ee:0a:7e:e2:62:78:b6:df:a1:47:56:
0b:14:20:f4:2c:cf:1f:18:dd:eb:1e:51:6d:d6:1e:3c:d6:cc:
1d:ce:e3:c1:96:e1:cf:82:ad:85:fb:b2:5b:08:3a:3f:fe:2c:
68:87:0c:ec:c9:5f:65:09:65:3a:44:8c:72:f8:11:eb:49:ad:
66:e0:3b:86:c4:b6:56:40:a1:57:59:32:a1:f6:ab:ba:b6:8c:
0f:11:06:b9:98:fb:95:28:a8:8d:7b:99:81:c8:b1:b3:ad:07:
c0:97:17:44:91:9e:5c:d5:bd:6f:67:b5:73:6d:9f:87:7b:41:
dc:11:94:b8:ee:48:14:eb:ce:8d:ef:62:a3:26:cb:8c:64:f3:
aa:fa:ea:6a:42:af:49:e5:53:60:11:26:09:24:92:59:bd:10:
ba:62:b7:82:91:e2:52:7e:b0:0d:4d:b4:4c:ce:55:57:94:dd:
6a:d0:59:66:71:f7:f3:e7:be:7e:fd:c9:64:7e:83:b4:41:00:
38:0d:29:4b:fb:3e:ca:b6:fd:da:a5:58:3d:ab:81:73:70:8f:
f1:55:ad:b0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oKlubKiY3/F+IJGTg+C6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjYTZlYWMzOWNmYTlhM2ViYWUyMjI4YmNiZDQ1NzY4M2U1
MmMyMGEwHhcNMjUwNjI4MTMwMTExWhcNMjUwNjI5MTMwMTExWjAzMTEwLwYDVQQD
EygyMjdkYTdjZWI5NjBlMTliZjVlYzczMjBiNTMwMGE5NGJkYTMzYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn9hB5syfafBflvfeohebqnh3Npub
7RNnaZskGHjNleq2cKmmpUb95dI+7IvnFzUnrnwkXppUKFAmwRLehACwAs6corU5
5aF6dF9aGLtLcXazgoXn7u/VdqkUpbJp+sucIprTx740bfJq4RuEXaG5trxCfuew
iK95i/JYLFNqqJAK4nCBGdgxoUCFITUHnx2Z6SC1uzemgOLR2le4CUmRgJ78ECFf
2EKN8BR+gYIzTGW95ywK4myO+lI1OQRPb/Ee1iaJCd5G6k6IZrqNLCQcdh/cwCeM
faV21i454py6I9WMEnI/f9eHn/ycNYn3/2ufsLN794Wppi6jFnjdS1U8lQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCJ9p865YOGb9exzILUwCpS9oztvMB8GA1UdIwQY
MBaAFKym6sOc+po+uuIii8vUV2g+UsIKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckticXc1ejZtajY2NGlLTHk5UlhhRDVTd2dvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8xYzhkZDUtMTI5Ni00YzRjLTkyNTgt
YmY0MDVkNDZmOGY4LzEvckticXc1ejZtajY2NGlLTHk5UlhhRDVTd2dvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8xYzhkZDUtMTI5Ni00YzRjLTkyNTgtYmY0MDVkNDZmOGY4
LzEvckticXc1ejZtajY2NGlLTHk5UlhhRDVTd2dvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm3Sfri2O
BlsQh0zZYWEYfYAKDwuJKMAzBtBVsGAQfLNV9L93rWLbpgY6M+4KfuJieLbfoUdW
CxQg9CzPHxjd6x5RbdYePNbMHc7jwZbhz4KthfuyWwg6P/4saIcM7MlfZQllOkSM
cvgR60mtZuA7hsS2VkChV1kyofaruraMDxEGuZj7lSiojXuZgcixs60HwJcXRJGe
XNW9b2e1c22fh3tB3BGUuO5IFOvOje9ioybLjGTzqvrqakKvSeVTYBEmCSSSWb0Q
umK3gpHiUn6wDU20TM5VV5TdatBZZnH38+e+fv3JZH6DtEEAOA0pS/s+yrb92qVY
PauBc3CP8VWtsA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:31:07 2025 by rpki-client