Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
File: u_E0smpfP3zNjK9dLGvnDKwPoks.mft (raw, json)
Hash identifier: wKBHxZGkAldupnusTBf/elHTByd6MIsaHUFY/pJ8vT8=
Subject key identifier: 95:9C:ED:FC:53:F7:6E:4C:0F:55:E3:D6:10:67:4F:D7:AC:3F:22:13
Authority key identifier: BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
Certificate issuer: /CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Certificate serial: 0197B6D7767F4A43F37A8B6A02059FA84FA4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
Manifest number: 04D9
Signing time: Sat 28 Jun 2025 14:01:03 +0000
Manifest this update: Sat 28 Jun 2025 14:01:03 +0000
Manifest next update: Sun 29 Jun 2025 14:01:03 +0000
Files and hashes: 1: u_E0smpfP3zNjK9dLGvnDKwPoks.crl (hash: Vyi4x/3ccSC9swxqsae/AVDb20UW4AvxbRDxqsHyUg8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:76:7f:4a:43:f3:7a:8b:6a:02:05:9f:a8:4f:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbf134b26a5f3f7ccd8caf5d2c6be70cac0fa24b
Validity
Not Before: Jun 28 14:01:03 2025 GMT
Not After : Jun 29 14:01:03 2025 GMT
Subject: CN=959cedfc53f76e4c0f55e3d610674fd7ac3f2213
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:db:3b:59:95:94:b5:a4:39:5e:5c:74:5f:f3:
64:38:c9:50:74:73:30:05:6a:97:17:2f:39:14:7f:
b0:5d:c9:ff:2a:01:8c:1d:71:c0:fe:b2:8c:80:15:
4a:34:ff:f0:88:cf:14:3d:5d:ce:a0:c1:86:7d:64:
9d:bf:5c:0f:68:2b:06:7a:1c:25:79:d0:2f:ec:ea:
de:85:28:fd:e4:15:89:45:e6:14:11:8e:28:8c:cc:
e6:cf:3c:7a:e4:06:cd:d6:fc:02:7e:40:32:48:20:
d5:7a:a8:41:da:dd:5f:46:4c:a3:7c:99:03:19:b1:
b5:f8:a1:25:b1:b9:20:e5:d1:6d:14:b2:32:70:11:
97:06:97:3a:a6:8d:a2:98:f5:d8:c8:b2:96:9a:9b:
97:ff:89:17:c6:66:e8:27:56:e4:6e:b9:e5:c9:c8:
f0:4d:48:45:f7:70:78:c6:45:91:f1:39:e9:d7:b1:
e8:3f:75:01:16:a6:42:57:cf:3b:93:ab:c2:e4:d5:
27:af:af:ad:35:c5:a9:98:26:98:c9:2a:40:c8:2b:
82:6e:04:1c:2f:79:55:65:a9:69:da:4e:c9:51:86:
16:e3:71:a2:86:37:96:6b:87:6e:83:25:78:0c:1c:
d3:a6:32:3b:4e:7b:80:74:1f:ce:15:1d:f8:de:90:
a8:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:9C:ED:FC:53:F7:6E:4C:0F:55:E3:D6:10:67:4F:D7:AC:3F:22:13
X509v3 Authority Key Identifier:
keyid:BB:F1:34:B2:6A:5F:3F:7C:CD:8C:AF:5D:2C:6B:E7:0C:AC:0F:A2:4B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u_E0smpfP3zNjK9dLGvnDKwPoks.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d6/8e4deb-317d-4977-8aa4-95bc640e3c56/1/u_E0smpfP3zNjK9dLGvnDKwPoks.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
06:64:53:cc:31:9b:33:7b:72:cb:33:38:a9:41:0c:74:d3:71:
94:75:cd:9e:e5:71:92:54:5c:5b:7e:75:21:32:8a:7b:f7:cb:
62:26:7c:0d:da:6a:31:61:65:11:36:d0:5a:e8:68:85:e6:54:
f0:9c:5a:a1:4c:c1:e8:63:88:91:cc:8a:55:a8:33:ea:d4:a7:
3b:7a:d3:eb:8b:49:36:11:0a:7e:48:c5:94:31:72:99:53:17:
f4:93:1e:45:41:cb:6b:b0:e1:86:87:0f:53:06:72:c1:4f:f4:
89:2e:ab:e9:79:e7:fa:e9:24:ce:9a:1a:45:ff:5f:f8:fd:66:
23:b5:98:d3:ab:e2:9b:57:96:fc:7e:52:ff:10:38:64:09:44:
05:82:17:b7:e8:63:70:8f:85:da:ef:2b:ec:bd:52:b6:78:31:
29:e9:d9:9c:40:cb:9b:3b:6e:84:5f:6d:a4:65:e1:77:3b:24:
a1:d7:89:41:c3:1a:f0:ab:50:9b:ac:54:43:ca:38:1a:c7:1a:
1e:29:93:99:72:fa:93:eb:6f:dd:d8:09:cd:3e:05:74:65:ce:
70:6d:1a:12:d5:fc:ab:44:b5:21:76:43:4d:ab:73:7a:95:4e:
03:35:58:3e:1b:fc:c1:87:3e:94:c0:9d:a7:f3:44:3d:06:92:
a5:28:39:27
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe213Z/SkPzeotqAgWfqE+kMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZjEzNGIyNmE1ZjNmN2NjZDhjYWY1ZDJjNmJlNzBjYWMw
ZmEyNGIwHhcNMjUwNjI4MTQwMTAzWhcNMjUwNjI5MTQwMTAzWjAzMTEwLwYDVQQD
Eyg5NTljZWRmYzUzZjc2ZTRjMGY1NWUzZDYxMDY3NGZkN2FjM2YyMjEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnNs7WZWUtaQ5Xlx0X/NkOMlQdHMw
BWqXFy85FH+wXcn/KgGMHXHA/rKMgBVKNP/wiM8UPV3OoMGGfWSdv1wPaCsGehwl
edAv7OrehSj95BWJReYUEY4ojMzmzzx65AbN1vwCfkAySCDVeqhB2t1fRkyjfJkD
GbG1+KElsbkg5dFtFLIycBGXBpc6po2imPXYyLKWmpuX/4kXxmboJ1bkbrnlycjw
TUhF93B4xkWR8Tnp17HoP3UBFqZCV887k6vC5NUnr6+tNcWpmCaYySpAyCuCbgQc
L3lVZalp2k7JUYYW43GihjeWa4dugyV4DBzTpjI7TnuAdB/OFR343pCoVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJWc7fxT925MD1Xj1hBnT9esPyITMB8GA1UdIwQY
MBaAFLvxNLJqXz98zYyvXSxr5wysD6JLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNi84ZTRkZWItMzE3ZC00OTc3LThhYTQt
OTViYzY0MGUzYzU2LzEvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNi84ZTRkZWItMzE3ZC00OTc3LThhYTQtOTViYzY0MGUzYzU2
LzEvdV9FMHNtcGZQM3pOaks5ZExHdm5ES3dQb2tzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABmRTzDGb
M3tyyzM4qUEMdNNxlHXNnuVxklRcW351ITKKe/fLYiZ8DdpqMWFlETbQWuhoheZU
8JxaoUzB6GOIkcyKVagz6tSnO3rT64tJNhEKfkjFlDFymVMX9JMeRUHLa7DhhocP
UwZywU/0iS6r6Xnn+ukkzpoaRf9f+P1mI7WY06vim1eW/H5S/xA4ZAlEBYIXt+hj
cI+F2u8r7L1StngxKenZnEDLmztuhF9tpGXhdzskodeJQcMa8KtQm6xUQ8o4Gsca
HimTmXL6k+tv3dgJzT4FdGXOcG0aEtX8q0S1IXZDTatzepVOAzVYPhv8wYc+lMCd
p/NEPQaSpSg5Jw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:16:35 2025 by rpki-client