Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
File: crsdyZa54KP6ZjLPgHp8IFCUnEY.mft (raw, json)
Hash identifier: Wno4G27Y4Op7aTJKLGortMmSentL2kmh1QuLh9jT2d4=
Subject key identifier: 36:8B:C5:06:DC:EF:B2:51:BC:B0:04:E1:2A:95:18:17:3C:5F:C9:1E
Authority key identifier: 72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
Certificate issuer: /CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Certificate serial: 0197B7EAE7118D07D7109FD4724CA305C2C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
Manifest number: 08A4
Signing time: Sat 28 Jun 2025 19:01:54 +0000
Manifest this update: Sat 28 Jun 2025 19:01:54 +0000
Manifest next update: Sun 29 Jun 2025 19:01:54 +0000
Files and hashes: 1: crsdyZa54KP6ZjLPgHp8IFCUnEY.crl (hash: cm5FWw2jtQEmJGHrUxzR2xGsvuMXgIOMOOewq0N5iSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:e7:11:8d:07:d7:10:9f:d4:72:4c:a3:05:c2:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=72bb1dc996b9e0a3fa6632cf807a7c2050949c46
Validity
Not Before: Jun 28 19:01:54 2025 GMT
Not After : Jun 29 19:01:54 2025 GMT
Subject: CN=368bc506dcefb251bcb004e12a9518173c5fc91e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:ab:87:c3:22:15:6a:a4:11:96:46:ea:99:42:
89:26:2f:ea:6c:f5:cb:28:b9:3c:d3:35:af:8f:26:
a4:e8:93:7d:63:4e:77:02:8f:7b:87:29:01:d1:99:
4c:c4:08:40:09:83:04:c9:04:31:5e:00:b3:0e:81:
fe:22:c0:ae:7f:15:5e:17:07:79:4e:90:ab:16:fd:
73:21:7a:5c:20:4b:4c:50:03:9e:fc:1f:e4:c7:6c:
ba:79:e8:fd:04:fd:6a:be:42:1a:35:6d:c6:3f:54:
58:ac:33:7f:8b:e4:d6:b7:3f:3f:5e:2d:c0:94:4c:
a2:a4:7c:63:80:96:ad:bd:c8:0e:6f:1c:91:70:e1:
a8:a9:35:ad:e0:71:bf:ef:bd:14:d3:13:a7:20:b6:
b6:40:14:92:a3:d7:b7:b5:b5:f2:ce:15:4a:f0:18:
34:6f:25:78:34:55:54:e3:fb:a1:b5:fc:43:e6:0c:
24:fb:9c:ac:cc:e7:16:5a:1a:21:4f:16:09:a0:77:
fc:9b:33:20:50:28:f9:54:67:5a:f4:09:8d:81:7f:
76:b2:e7:2d:c9:34:45:22:f0:11:fe:af:93:15:0c:
9a:a7:d6:7a:29:ef:3a:a2:6d:79:80:97:20:8c:78:
2e:c6:32:08:98:08:a1:c6:9e:8d:b9:5e:e7:02:14:
46:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
36:8B:C5:06:DC:EF:B2:51:BC:B0:04:E1:2A:95:18:17:3C:5F:C9:1E
X509v3 Authority Key Identifier:
keyid:72:BB:1D:C9:96:B9:E0:A3:FA:66:32:CF:80:7A:7C:20:50:94:9C:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/crsdyZa54KP6ZjLPgHp8IFCUnEY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/d7a5eb-d188-4aa2-bca5-fa59dc2a463b/1/crsdyZa54KP6ZjLPgHp8IFCUnEY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:3e:c2:76:12:78:70:92:14:db:97:80:fc:66:f6:fa:01:a8:
b8:e7:48:59:29:76:21:8a:99:03:9d:15:3c:a6:4e:d6:25:5f:
01:b9:78:9c:1a:c3:4d:84:aa:8d:97:5a:7d:fb:a3:8f:47:9e:
88:41:93:fe:96:8c:3b:a9:77:30:3f:80:0c:26:30:1c:ff:f6:
61:45:8e:29:e8:22:39:3f:22:d2:e7:b3:16:a6:f6:0b:71:d2:
f6:b8:3c:2d:15:51:c4:2e:99:11:c4:85:c3:0c:a7:d5:7a:b2:
b9:9f:73:48:25:16:b1:8b:d1:05:1b:0e:5e:a2:88:18:62:17:
35:51:22:4e:ab:63:96:e8:b0:ba:f7:7b:01:48:64:88:f4:9f:
eb:26:19:ac:a2:d9:d2:04:7d:74:cd:1b:07:04:a1:65:d4:db:
1c:a3:2c:b9:9c:c6:32:f0:a5:55:91:08:be:84:a3:f2:a1:a4:
33:17:56:10:87:cd:8b:86:21:ba:bf:19:38:f5:c8:4c:e0:48:
47:ea:a3:f4:63:8b:e5:fa:4e:c9:e3:2f:72:a8:ee:d8:d1:10:
0f:8b:11:42:7b:e3:01:1d:31:99:b6:6f:46:04:11:8c:64:2b:
5b:00:ae:f6:c7:aa:8b:df:04:e5:f1:6c:bf:c6:99:dc:fc:19:
aa:b2:64:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36ucRjQfXEJ/UckyjBcLEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcyYmIxZGM5OTZiOWUwYTNmYTY2MzJjZjgwN2E3YzIwNTA5
NDljNDYwHhcNMjUwNjI4MTkwMTU0WhcNMjUwNjI5MTkwMTU0WjAzMTEwLwYDVQQD
EygzNjhiYzUwNmRjZWZiMjUxYmNiMDA0ZTEyYTk1MTgxNzNjNWZjOTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm6uHwyIVaqQRlkbqmUKJJi/qbPXL
KLk80zWvjyak6JN9Y053Ao97hykB0ZlMxAhACYMEyQQxXgCzDoH+IsCufxVeFwd5
TpCrFv1zIXpcIEtMUAOe/B/kx2y6eej9BP1qvkIaNW3GP1RYrDN/i+TWtz8/Xi3A
lEyipHxjgJatvcgObxyRcOGoqTWt4HG/770U0xOnILa2QBSSo9e3tbXyzhVK8Bg0
byV4NFVU4/uhtfxD5gwk+5yszOcWWhohTxYJoHf8mzMgUCj5VGda9AmNgX92suct
yTRFIvAR/q+TFQyap9Z6Ke86om15gJcgjHguxjIImAihxp6NuV7nAhRGDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDaLxQbc77JRvLAE4SqVGBc8X8keMB8GA1UdIwQY
MBaAFHK7HcmWueCj+mYyz4B6fCBQlJxGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9kN2E1ZWItZDE4OC00YWEyLWJjYTUt
ZmE1OWRjMmE0NjNiLzEvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9kN2E1ZWItZDE4OC00YWEyLWJjYTUtZmE1OWRjMmE0NjNi
LzEvY3JzZHlaYTU0S1A2WmpMUGdIcDhJRkNVbkVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdz7CdhJ4
cJIU25eA/Gb2+gGouOdIWSl2IYqZA50VPKZO1iVfAbl4nBrDTYSqjZdaffujj0ee
iEGT/paMO6l3MD+ADCYwHP/2YUWOKegiOT8i0uezFqb2C3HS9rg8LRVRxC6ZEcSF
wwyn1XqyuZ9zSCUWsYvRBRsOXqKIGGIXNVEiTqtjluiwuvd7AUhkiPSf6yYZrKLZ
0gR9dM0bBwShZdTbHKMsuZzGMvClVZEIvoSj8qGkMxdWEIfNi4Yhur8ZOPXITOBI
R+qj9GOL5fpOyeMvcqju2NEQD4sRQnvjAR0xmbZvRgQRjGQrWwCu9seqi98E5fFs
v8aZ3PwZqrJk1A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:56:48 2025 by rpki-client