Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
File: r_HNv5fWyiB-XciFq8_2ccwVyRA.mft (raw, json)
Hash identifier: qPn7OTzoySa+xhiAGSXzm6f+DiMsMrX6zPu4hE5NHJY=
Subject key identifier: EA:02:29:1E:4B:0F:DF:AB:45:E3:93:B9:83:46:C0:D2:9E:60:D6:B6
Authority key identifier: AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
Certificate issuer: /CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Certificate serial: 0197B6A173D81C3C877040334E9BB200E31B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
Manifest number: 0AAA
Signing time: Sat 28 Jun 2025 13:02:03 +0000
Manifest this update: Sat 28 Jun 2025 13:02:03 +0000
Manifest next update: Sun 29 Jun 2025 13:02:03 +0000
Files and hashes: 1: r_HNv5fWyiB-XciFq8_2ccwVyRA.crl (hash: dKW1Jw5TdlGZHWNs8l6AOSRnGySPDUZ3fewSs9HYFOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:73:d8:1c:3c:87:70:40:33:4e:9b:b2:00:e3:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aff1cdbf97d6ca207e5dc885abcff671cc15c910
Validity
Not Before: Jun 28 13:02:03 2025 GMT
Not After : Jun 29 13:02:03 2025 GMT
Subject: CN=ea02291e4b0fdfab45e393b98346c0d29e60d6b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:98:f1:dd:64:11:4b:db:bd:fa:5c:67:e1:8f:
14:bd:b2:b8:ce:bb:2b:72:c4:dc:04:4c:86:4c:65:
14:73:1c:cd:ef:cb:1f:b6:36:d9:8a:1e:15:e4:0f:
5a:2a:4e:5f:d4:c6:69:82:6f:95:25:0a:f3:d1:b9:
27:b8:58:c8:be:e7:05:3c:e0:46:97:0e:f6:c2:76:
25:98:f3:4c:98:f3:42:8b:5f:4a:08:c1:bb:e2:71:
5f:11:88:09:03:96:6c:50:47:6a:c3:3a:39:0d:e4:
81:7d:96:67:12:8f:f2:7a:e9:be:b6:3e:8d:20:aa:
9d:f1:5d:e8:0a:22:1d:00:27:49:2a:39:1c:6b:e6:
10:f7:75:78:9e:d8:a3:5b:2d:00:f9:a4:5c:ec:c0:
46:4b:98:8f:8b:bf:28:f2:26:fb:87:5c:92:9d:15:
83:04:9a:5b:78:c7:46:0c:4a:e3:a3:99:dc:dd:f0:
46:85:a1:6f:44:b8:02:b3:be:a8:64:9d:a8:d1:e1:
0c:0b:ce:00:8e:1a:0d:7f:cf:4b:67:ab:fa:09:7c:
40:b6:dd:fa:b6:0b:81:e5:b0:87:2b:39:07:fe:72:
51:6f:5b:67:bd:93:b3:6d:e6:a3:ea:c0:54:95:44:
d2:f1:be:2f:ab:1c:6e:f0:72:18:58:74:6e:29:66:
36:1f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EA:02:29:1E:4B:0F:DF:AB:45:E3:93:B9:83:46:C0:D2:9E:60:D6:B6
X509v3 Authority Key Identifier:
keyid:AF:F1:CD:BF:97:D6:CA:20:7E:5D:C8:85:AB:CF:F6:71:CC:15:C9:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r_HNv5fWyiB-XciFq8_2ccwVyRA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/627987-235d-4194-96b1-af8c75a93cd1/1/r_HNv5fWyiB-XciFq8_2ccwVyRA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9d:f0:31:66:c5:b6:6a:bd:38:bf:ab:1d:7b:be:ca:f7:36:7c:
65:da:15:b6:b6:a6:39:e9:cb:62:05:5a:92:93:dd:36:c0:56:
93:e0:f5:3c:99:57:2c:59:70:a0:7f:bb:b8:5a:68:24:2c:4a:
0d:06:fc:5d:8f:71:3c:c5:a9:c2:72:99:09:a5:3b:ec:1c:95:
bb:1d:73:75:cd:68:72:be:9d:a7:84:09:98:e6:44:4b:29:25:
fe:2a:a0:18:d9:18:f1:6f:2c:1a:d3:17:c9:cd:7e:c8:4b:54:
52:f0:a3:47:75:ed:8c:3a:ae:32:d4:0c:91:cc:29:de:e8:37:
c0:8b:e6:2b:12:05:8e:a1:70:8e:17:40:e6:23:e0:80:98:f2:
2f:55:0a:d8:d9:9c:bf:be:16:6e:30:3f:66:48:86:0d:cf:df:
53:e2:cb:1c:44:fa:39:9a:4d:0e:cf:de:88:e7:10:06:c1:7b:
4f:3d:c8:aa:89:5c:85:2c:88:c0:0f:c2:b6:66:a4:4f:09:62:
73:21:58:e7:2e:ca:37:a5:30:1c:bc:15:11:cc:2a:15:5f:64:
e4:f8:60:4f:0c:32:09:73:01:54:26:57:ab:93:81:7e:d4:6f:
8b:75:78:94:9b:73:5d:65:a6:ba:4c:45:a9:0c:16:c3:04:cc:
c7:76:b3:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oXPYHDyHcEAzTpuyAOMbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZjFjZGJmOTdkNmNhMjA3ZTVkYzg4NWFiY2ZmNjcxY2Mx
NWM5MTAwHhcNMjUwNjI4MTMwMjAzWhcNMjUwNjI5MTMwMjAzWjAzMTEwLwYDVQQD
EyhlYTAyMjkxZTRiMGZkZmFiNDVlMzkzYjk4MzQ2YzBkMjllNjBkNmI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA15jx3WQRS9u9+lxn4Y8UvbK4zrsr
csTcBEyGTGUUcxzN78sftjbZih4V5A9aKk5f1MZpgm+VJQrz0bknuFjIvucFPOBG
lw72wnYlmPNMmPNCi19KCMG74nFfEYgJA5ZsUEdqwzo5DeSBfZZnEo/yeum+tj6N
IKqd8V3oCiIdACdJKjkca+YQ93V4ntijWy0A+aRc7MBGS5iPi78o8ib7h1ySnRWD
BJpbeMdGDErjo5nc3fBGhaFvRLgCs76oZJ2o0eEMC84AjhoNf89LZ6v6CXxAtt36
tguB5bCHKzkH/nJRb1tnvZOzbeaj6sBUlUTS8b4vqxxu8HIYWHRuKWY2HwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOoCKR5LD9+rReOTuYNGwNKeYNa2MB8GA1UdIwQY
MBaAFK/xzb+X1sogfl3IhavP9nHMFckQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS82Mjc5ODctMjM1ZC00MTk0LTk2YjEt
YWY4Yzc1YTkzY2QxLzEvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS82Mjc5ODctMjM1ZC00MTk0LTk2YjEtYWY4Yzc1YTkzY2Qx
LzEvcl9ITnY1Zld5aUItWGNpRnE4XzJjY3dWeVJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnfAxZsW2
ar04v6sde77K9zZ8ZdoVtramOenLYgVakpPdNsBWk+D1PJlXLFlwoH+7uFpoJCxK
DQb8XY9xPMWpwnKZCaU77ByVux1zdc1ocr6dp4QJmOZESykl/iqgGNkY8W8sGtMX
yc1+yEtUUvCjR3XtjDquMtQMkcwp3ug3wIvmKxIFjqFwjhdA5iPggJjyL1UK2Nmc
v74WbjA/ZkiGDc/fU+LLHET6OZpNDs/eiOcQBsF7Tz3IqolchSyIwA/CtmakTwli
cyFY5y7KN6UwHLwVEcwqFV9k5PhgTwwyCXMBVCZXq5OBftRvi3V4lJtzXWWmukxF
qQwWwwTMx3azig==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:09:16 2025 by rpki-client