Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
File: a-5EwhI0JTYYsNeza5Djy1xA3tE.mft (raw, json)
Hash identifier: HIbvJNeCvl06mW8yBHYZJDuK+lW5ZFApUZSukv+pbHA=
Subject key identifier: B8:AC:FD:AB:21:68:CA:B4:2E:7E:19:DF:3A:F8:A7:99:76:6B:DD:9C
Authority key identifier: 6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
Certificate issuer: /CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Certificate serial: 0197B6D7847B4CABA6803ACBAFFC8F24B63D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
Manifest number: 15B2
Signing time: Sat 28 Jun 2025 14:01:06 +0000
Manifest this update: Sat 28 Jun 2025 14:01:06 +0000
Manifest next update: Sun 29 Jun 2025 14:01:06 +0000
Files and hashes: 1: a-5EwhI0JTYYsNeza5Djy1xA3tE.crl (hash: dMOkE9ctApGax3btGV11zHJqf/kRILdl4vLoYtD04EM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:06 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:84:7b:4c:ab:a6:80:3a:cb:af:fc:8f:24:b6:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bee44c21234253618b0d7b36b90e3cb5c40ded1
Validity
Not Before: Jun 28 14:01:06 2025 GMT
Not After : Jun 29 14:01:06 2025 GMT
Subject: CN=b8acfdab2168cab42e7e19df3af8a799766bdd9c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:b0:dd:d9:35:d4:21:17:93:be:1d:7f:e4:53:
5e:c8:4b:d3:a8:49:f8:67:8d:2b:f5:39:d9:0b:32:
d1:c2:17:1b:9e:4d:62:e3:66:8d:dc:60:9a:fe:54:
0a:c3:c2:ef:d6:5c:5d:5b:5e:b7:14:b9:93:f9:9b:
6f:ea:0c:68:75:33:a7:a4:10:02:f8:2c:5a:82:93:
e3:c1:d4:1e:c8:47:73:36:8c:1b:07:5d:41:e9:00:
2e:5e:4b:d7:db:79:df:5f:ce:77:da:6e:ee:55:90:
f7:99:dc:6c:0b:1b:d3:84:54:b8:2e:42:52:4e:f3:
d3:3f:7d:13:de:62:82:08:e1:23:1d:aa:bf:9e:e7:
60:22:04:55:fc:43:59:7f:53:6c:c5:41:c5:1a:c2:
f8:89:09:36:54:93:f4:7b:96:58:f1:78:55:7b:90:
8f:85:f5:bd:e5:9a:33:7c:74:6d:6c:a3:97:7b:30:
d0:a5:c5:17:1d:34:b6:7d:ab:d3:88:19:fe:00:7e:
79:3e:53:2f:5f:5b:bc:2e:0c:b2:a6:aa:a6:c5:94:
ba:22:57:f2:3c:42:a6:18:c7:7d:69:bd:e3:11:79:
8c:8d:8b:3a:51:fa:4e:7e:7d:a7:7a:19:84:d2:55:
46:29:5a:4a:5a:58:14:7b:11:41:cb:6f:a0:bb:67:
ef:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:AC:FD:AB:21:68:CA:B4:2E:7E:19:DF:3A:F8:A7:99:76:6B:DD:9C
X509v3 Authority Key Identifier:
keyid:6B:EE:44:C2:12:34:25:36:18:B0:D7:B3:6B:90:E3:CB:5C:40:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a-5EwhI0JTYYsNeza5Djy1xA3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/0a710a-c800-4eae-a35b-769b3fc2664b/1/a-5EwhI0JTYYsNeza5Djy1xA3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:a1:d8:fe:b2:76:23:76:15:28:c3:0e:67:ef:20:17:86:a6:
55:3c:e1:cb:d7:3b:8a:76:e4:8b:4b:e2:7e:9d:73:98:42:21:
bc:ae:bb:f4:e5:6c:9f:89:92:48:c5:ef:a9:23:c4:55:2d:75:
d2:b8:1d:f9:6d:1a:6a:24:e5:0d:46:69:df:7a:bb:21:1e:be:
cb:77:61:ca:04:f5:51:1d:a3:12:c2:7d:37:7b:2e:65:b6:da:
7c:de:be:37:14:cd:bb:e0:0d:9f:8b:a8:bb:53:88:d6:3e:31:
82:90:55:06:34:f8:64:6d:aa:e0:5e:59:2e:92:c2:2f:b3:25:
7c:85:01:dc:5a:7d:6d:2e:da:3c:cc:5b:f7:cb:53:e1:88:34:
f8:fe:71:0d:61:5e:17:41:74:fe:00:58:11:ef:ce:62:41:b2:
ab:e8:9c:e0:56:6e:64:b9:6b:6e:d8:6e:c6:a8:01:a5:75:d4:
36:23:9a:97:ba:75:ff:05:ec:58:d9:84:c9:7a:49:f5:49:47:
74:57:65:e9:44:fe:41:47:3f:3a:f8:9f:af:da:ae:7b:8f:2d:
2d:91:83:fb:15:a6:07:ca:69:17:69:92:62:73:03:e3:9e:b5:
18:90:d8:e6:b7:8b:49:32:88:6e:6a:3d:e8:e9:e1:8c:0c:f6:
fb:e2:5f:f8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe214R7TKumgDrLr/yPJLY9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiZWU0NGMyMTIzNDI1MzYxOGIwZDdiMzZiOTBlM2NiNWM0
MGRlZDEwHhcNMjUwNjI4MTQwMTA2WhcNMjUwNjI5MTQwMTA2WjAzMTEwLwYDVQQD
EyhiOGFjZmRhYjIxNjhjYWI0MmU3ZTE5ZGYzYWY4YTc5OTc2NmJkZDljMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt7Dd2TXUIReTvh1/5FNeyEvTqEn4
Z40r9TnZCzLRwhcbnk1i42aN3GCa/lQKw8Lv1lxdW163FLmT+Ztv6gxodTOnpBAC
+CxagpPjwdQeyEdzNowbB11B6QAuXkvX23nfX8532m7uVZD3mdxsCxvThFS4LkJS
TvPTP30T3mKCCOEjHaq/nudgIgRV/ENZf1NsxUHFGsL4iQk2VJP0e5ZY8XhVe5CP
hfW95ZozfHRtbKOXezDQpcUXHTS2favTiBn+AH55PlMvX1u8LgyypqqmxZS6Ilfy
PEKmGMd9ab3jEXmMjYs6UfpOfn2nehmE0lVGKVpKWlgUexFBy2+gu2fvDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLis/ashaMq0Ln4Z3zr4p5l2a92cMB8GA1UdIwQY
MBaAFGvuRMISNCU2GLDXs2uQ48tcQN7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi8wYTcxMGEtYzgwMC00ZWFlLWEzNWIt
NzY5YjNmYzI2NjRiLzEvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi8wYTcxMGEtYzgwMC00ZWFlLWEzNWItNzY5YjNmYzI2NjRi
LzEvYS01RXdoSTBKVFlZc05lemE1RGp5MXhBM3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiqHY/rJ2
I3YVKMMOZ+8gF4amVTzhy9c7inbki0vifp1zmEIhvK679OVsn4mSSMXvqSPEVS11
0rgd+W0aaiTlDUZp33q7IR6+y3dhygT1UR2jEsJ9N3suZbbafN6+NxTNu+ANn4uo
u1OI1j4xgpBVBjT4ZG2q4F5ZLpLCL7MlfIUB3Fp9bS7aPMxb98tT4Yg0+P5xDWFe
F0F0/gBYEe/OYkGyq+ic4FZuZLlrbthuxqgBpXXUNiOal7p1/wXsWNmEyXpJ9UlH
dFdl6UT+QUc/Ovifr9que48tLZGD+xWmB8ppF2mSYnMD4561GJDY5reLSTKIbmo9
6OnhjAz2++Jf+A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:18:00 2025 by rpki-client