Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft
File: 6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft (raw, json)
Hash identifier: 4CCYijVIKXXaPYs4J+dggdZ/9obQ/aaavd17CTCSy6A=
Subject key identifier: 33:BF:54:38:CA:D5:5C:0E:20:27:49:84:D7:25:3A:51:7F:79:21:F5
Authority key identifier: E8:76:CB:43:FA:5D:73:18:07:05:3C:6B:F6:0F:4F:44:46:FF:91:6E
Certificate issuer: /CN=e876cb43fa5d731807053c6bf60f4f4446ff916e
Certificate serial: 0197B5FBCE3A5FCE890C1808502D552E0532
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6HbLQ_pdcxgHBTxr9g9PREb_kW4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft
Manifest number: 0515
Signing time: Sat 28 Jun 2025 10:01:07 +0000
Manifest this update: Sat 28 Jun 2025 10:01:07 +0000
Manifest next update: Sun 29 Jun 2025 10:01:07 +0000
Files and hashes: 1: 6HbLQ_pdcxgHBTxr9g9PREb_kW4.crl (hash: cVatRqowOhqlsbQqJcTXuDUoOdzu95AqYHYdoGaEzOQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft
rsync://rpki.ripe.net/repository/DEFAULT/6HbLQ_pdcxgHBTxr9g9PREb_kW4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:ce:3a:5f:ce:89:0c:18:08:50:2d:55:2e:05:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e876cb43fa5d731807053c6bf60f4f4446ff916e
Validity
Not Before: Jun 28 10:01:07 2025 GMT
Not After : Jun 29 10:01:07 2025 GMT
Subject: CN=33bf5438cad55c0e20274984d7253a517f7921f5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:57:a4:fd:01:53:23:8b:b7:0d:19:01:bb:67:
19:bd:5f:07:d2:74:39:d4:0d:57:2f:d1:c4:e2:83:
6a:23:e8:9b:64:9d:ea:91:d8:33:db:f4:85:d2:41:
df:f9:87:50:02:bb:c1:cf:62:f6:9c:af:71:cc:54:
47:cd:cc:0a:9b:07:4b:46:f1:01:38:30:d2:e2:4f:
67:3f:29:fe:1c:26:60:db:84:a8:f5:c9:00:0f:fc:
c3:2d:f8:27:ef:fe:54:81:df:b2:f0:2b:ea:5b:31:
f5:aa:8d:5b:9e:43:11:92:98:11:61:b5:71:44:88:
be:60:88:db:7d:91:df:bf:8d:fe:3c:f3:3e:de:59:
cf:3a:e1:96:a1:39:fa:06:b9:c5:92:59:c7:9f:3b:
76:a6:ac:2c:5d:9f:2d:1b:21:98:8d:0d:ae:a4:c6:
40:3a:86:b6:bf:f9:03:80:98:cd:9f:0e:7f:eb:1e:
cf:92:b8:88:91:f1:dc:0f:41:7d:31:3a:c3:f8:a6:
6f:6f:18:99:ba:14:c7:28:c4:c6:9d:d0:84:c1:ce:
1d:a8:1d:fd:b4:07:1d:02:34:8a:d3:fb:d2:9f:4b:
b2:fe:c9:b0:3a:2a:5d:8d:f5:b3:01:1e:66:82:c2:
10:71:ca:a2:29:40:f5:e6:7d:7a:74:77:24:19:01:
9b:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
33:BF:54:38:CA:D5:5C:0E:20:27:49:84:D7:25:3A:51:7F:79:21:F5
X509v3 Authority Key Identifier:
keyid:E8:76:CB:43:FA:5D:73:18:07:05:3C:6B:F6:0F:4F:44:46:FF:91:6E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6HbLQ_pdcxgHBTxr9g9PREb_kW4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/cd340b-7bf2-4356-865f-428c6ca32116/1/6HbLQ_pdcxgHBTxr9g9PREb_kW4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:83:2e:77:26:8e:f3:2e:61:71:41:6b:1d:35:b9:77:90:6c:
40:10:6d:bc:92:e7:80:0f:67:d7:c1:62:63:7a:5b:24:d5:4c:
80:35:a8:6d:1d:72:0a:68:74:b1:0e:02:fa:41:a6:2b:95:70:
e4:b1:39:6e:bd:10:3d:65:fa:da:e5:61:f0:d4:e2:a2:a1:03:
37:e0:bf:1d:dc:f6:d8:88:a3:10:81:cb:39:d4:23:22:95:fe:
e1:d9:01:4f:2a:d4:e7:d3:26:59:30:b6:08:01:d6:90:57:1c:
d8:8d:ea:0d:fc:99:73:a1:17:4e:fa:1b:77:bd:e7:5f:50:76:
a9:60:2c:0a:7a:c5:fe:dd:c8:90:3d:30:4f:c9:f3:92:b5:eb:
48:5d:6b:e9:28:ce:b6:25:14:4d:36:cf:6a:d0:7b:04:4f:b5:
78:25:5c:9e:72:72:41:ca:b1:f9:5d:6f:93:73:43:e4:57:7b:
37:57:22:af:2d:a7:77:df:d5:37:ba:40:5d:88:36:1a:a9:00:
fc:55:0a:d8:19:5c:ba:91:e3:26:32:78:10:68:40:76:f0:9a:
ca:d6:3c:11:61:82:dd:62:fe:60:a5:14:5d:6a:81:5f:93:8f:
3a:ed:7f:f1:8a:98:db:c4:e9:e0:13:8e:52:3d:89:46:8e:93:
e5:6e:d0:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1+846X86JDBgIUC1VLgUyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU4NzZjYjQzZmE1ZDczMTgwNzA1M2M2YmY2MGY0ZjQ0NDZm
ZjkxNmUwHhcNMjUwNjI4MTAwMTA3WhcNMjUwNjI5MTAwMTA3WjAzMTEwLwYDVQQD
EygzM2JmNTQzOGNhZDU1YzBlMjAyNzQ5ODRkNzI1M2E1MTdmNzkyMWY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA11ek/QFTI4u3DRkBu2cZvV8H0nQ5
1A1XL9HE4oNqI+ibZJ3qkdgz2/SF0kHf+YdQArvBz2L2nK9xzFRHzcwKmwdLRvEB
ODDS4k9nPyn+HCZg24So9ckAD/zDLfgn7/5Ugd+y8CvqWzH1qo1bnkMRkpgRYbVx
RIi+YIjbfZHfv43+PPM+3lnPOuGWoTn6BrnFklnHnzt2pqwsXZ8tGyGYjQ2upMZA
Ooa2v/kDgJjNnw5/6x7PkriIkfHcD0F9MTrD+KZvbxiZuhTHKMTGndCEwc4dqB39
tAcdAjSK0/vSn0uy/smwOipdjfWzAR5mgsIQccqiKUD15n16dHckGQGbTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDO/VDjK1VwOICdJhNclOlF/eSH1MB8GA1UdIwQY
MBaAFOh2y0P6XXMYBwU8a/YPT0RG/5FuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNkhiTFFfcGRjeGdIQlR4cjlnOVBSRWJfa1c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYi9jZDM0MGItN2JmMi00MzU2LTg2NWYt
NDI4YzZjYTMyMTE2LzEvNkhiTFFfcGRjeGdIQlR4cjlnOVBSRWJfa1c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYi9jZDM0MGItN2JmMi00MzU2LTg2NWYtNDI4YzZjYTMyMTE2
LzEvNkhiTFFfcGRjeGdIQlR4cjlnOVBSRWJfa1c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXIMudyaO
8y5hcUFrHTW5d5BsQBBtvJLngA9n18FiY3pbJNVMgDWobR1yCmh0sQ4C+kGmK5Vw
5LE5br0QPWX62uVh8NTioqEDN+C/Hdz22IijEIHLOdQjIpX+4dkBTyrU59MmWTC2
CAHWkFcc2I3qDfyZc6EXTvobd73nX1B2qWAsCnrF/t3IkD0wT8nzkrXrSF1r6SjO
tiUUTTbPatB7BE+1eCVcnnJyQcqx+V1vk3ND5Fd7N1ciry2nd9/VN7pAXYg2GqkA
/FUK2BlcupHjJjJ4EGhAdvCaytY8EWGC3WL+YKUUXWqBX5OPOu1/8YqY28Tp4BOO
Uj2JRo6T5W7QeQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:05:29 2025 by rpki-client