Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
File: pN15cHEksgZy5pw44Xtma3-ufB0.mft (raw, json)
Hash identifier: qGx79a2suWolFxkadZmhgBR5Mc5bQvPhVnrlZpTK86o=
Subject key identifier: BD:9E:91:EC:90:DD:08:BA:23:B6:F4:CA:EA:AF:DC:FE:4C:54:D7:09
Authority key identifier: A4:DD:79:70:71:24:B2:06:72:E6:9C:38:E1:7B:66:6B:7F:AE:7C:1D
Certificate issuer: /CN=a4dd79707124b20672e69c38e17b666b7fae7c1d
Certificate serial: 0197B77C8471C6A72DD68F2B55BCD34D957A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
Manifest number: 048C
Signing time: Sat 28 Jun 2025 17:01:20 +0000
Manifest this update: Sat 28 Jun 2025 17:01:20 +0000
Manifest next update: Sun 29 Jun 2025 17:01:20 +0000
Files and hashes: 1: pN15cHEksgZy5pw44Xtma3-ufB0.crl (hash: iIIxMlSJAk2BG+Kzncu1B5Z/zpr0qKDp6PpnO59MNuo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:84:71:c6:a7:2d:d6:8f:2b:55:bc:d3:4d:95:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4dd79707124b20672e69c38e17b666b7fae7c1d
Validity
Not Before: Jun 28 17:01:20 2025 GMT
Not After : Jun 29 17:01:20 2025 GMT
Subject: CN=bd9e91ec90dd08ba23b6f4caeaafdcfe4c54d709
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e5:ee:27:ba:62:29:94:63:aa:1b:bf:5d:c0:85:
f6:17:48:e9:ea:1b:1d:0e:bd:fa:f6:f2:7a:31:e9:
9b:30:e3:4c:68:69:78:38:ce:d6:e5:3d:82:e9:86:
1e:d2:a6:3e:01:c0:98:3a:28:29:29:38:6a:d9:bf:
d1:35:fe:5e:11:48:25:3a:28:a0:aa:7a:dc:c6:68:
a7:7d:e6:30:a7:92:82:49:f3:c7:6c:b5:04:f5:d4:
7b:38:85:06:82:30:52:13:73:dd:f1:ed:d6:b5:04:
41:ec:6d:5d:81:ea:d3:91:4e:88:17:49:03:c3:d5:
75:ed:5e:e9:18:cf:4a:20:5d:28:6f:79:d0:01:3b:
8c:95:7f:b1:f7:8b:70:8c:5e:a0:b9:0f:ab:dd:0e:
d7:58:86:48:fe:9c:a5:1a:b3:6d:35:68:87:58:72:
3d:14:a4:bb:c3:9f:23:b9:6e:06:38:b0:ab:eb:53:
6a:2f:4e:ec:10:25:6b:8f:34:7a:bd:2b:eb:4a:b9:
5d:74:d6:93:0e:a0:dd:ad:15:af:41:9a:79:ac:35:
00:f3:85:d3:2e:86:2c:28:67:cf:91:31:98:c3:9e:
39:c1:7a:29:5c:97:ca:dc:67:04:65:34:ca:58:35:
94:db:87:f2:f9:41:f9:d3:76:16:69:15:52:16:82:
64:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:9E:91:EC:90:DD:08:BA:23:B6:F4:CA:EA:AF:DC:FE:4C:54:D7:09
X509v3 Authority Key Identifier:
keyid:A4:DD:79:70:71:24:B2:06:72:E6:9C:38:E1:7B:66:6B:7F:AE:7C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pN15cHEksgZy5pw44Xtma3-ufB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/8d1cea-4d9d-4906-98d7-7188d91a6ca9/1/pN15cHEksgZy5pw44Xtma3-ufB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:43:21:d1:9c:02:1c:97:a3:98:a0:89:25:3a:25:a7:f6:b8:
fa:3c:46:e8:e8:61:90:1e:9e:62:43:f2:ff:15:f4:f7:c9:57:
00:79:f4:bb:94:02:60:6a:55:06:e0:6c:c2:4e:4f:8e:3f:98:
74:36:cd:00:47:3f:ae:3a:be:ad:77:7b:98:47:ad:fb:dd:53:
97:43:68:db:5e:b8:90:ea:6b:4a:6b:b9:2f:88:23:5b:02:56:
c9:87:24:db:4b:24:21:b9:6f:6c:e1:95:04:cd:d6:be:36:0a:
b8:94:83:50:51:a7:e6:ca:06:1c:08:3a:e8:2e:82:0b:e3:c9:
dd:c3:f4:f0:9c:05:85:33:35:39:ed:67:26:fc:8a:75:f7:d7:
17:d2:36:44:ca:dd:7c:71:ae:05:51:99:71:6a:bc:0b:20:27:
db:3a:c7:2e:0d:38:19:cd:e8:54:c3:74:20:a1:07:7d:9a:0a:
1e:58:58:e6:be:f8:b7:32:30:34:65:e1:d7:46:57:68:3e:2d:
2f:1a:29:b2:b5:ef:9a:06:86:55:82:f6:dc:6e:e8:df:8e:5d:
a5:0d:19:69:d5:cd:88:dd:bd:b8:70:6d:bc:67:f5:d3:fb:2f:
73:ad:d0:d7:be:fa:f7:fc:03:ae:3f:97:fc:a1:82:82:a4:4e:
93:67:ae:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fIRxxqct1o8rVbzTTZV6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZGQ3OTcwNzEyNGIyMDY3MmU2OWMzOGUxN2I2NjZiN2Zh
ZTdjMWQwHhcNMjUwNjI4MTcwMTIwWhcNMjUwNjI5MTcwMTIwWjAzMTEwLwYDVQQD
EyhiZDllOTFlYzkwZGQwOGJhMjNiNmY0Y2FlYWFmZGNmZTRjNTRkNzA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5e4numIplGOqG79dwIX2F0jp6hsd
Dr369vJ6MembMONMaGl4OM7W5T2C6YYe0qY+AcCYOigpKThq2b/RNf5eEUglOiig
qnrcxminfeYwp5KCSfPHbLUE9dR7OIUGgjBSE3Pd8e3WtQRB7G1dgerTkU6IF0kD
w9V17V7pGM9KIF0ob3nQATuMlX+x94twjF6guQ+r3Q7XWIZI/pylGrNtNWiHWHI9
FKS7w58juW4GOLCr61NqL07sECVrjzR6vSvrSrlddNaTDqDdrRWvQZp5rDUA84XT
LoYsKGfPkTGYw545wXopXJfK3GcEZTTKWDWU24fy+UH503YWaRVSFoJkOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL2ekeyQ3Qi6I7b0yuqv3P5MVNcJMB8GA1UdIwQY
MBaAFKTdeXBxJLIGcuacOOF7Zmt/rnwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE4xNWNIRWtzZ1p5NXB3NDRYdG1hMy11ZkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi84ZDFjZWEtNGQ5ZC00OTA2LTk4ZDct
NzE4OGQ5MWE2Y2E5LzEvcE4xNWNIRWtzZ1p5NXB3NDRYdG1hMy11ZkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi84ZDFjZWEtNGQ5ZC00OTA2LTk4ZDctNzE4OGQ5MWE2Y2E5
LzEvcE4xNWNIRWtzZ1p5NXB3NDRYdG1hMy11ZkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABUMh0ZwC
HJejmKCJJTolp/a4+jxG6OhhkB6eYkPy/xX098lXAHn0u5QCYGpVBuBswk5Pjj+Y
dDbNAEc/rjq+rXd7mEet+91Tl0No2164kOprSmu5L4gjWwJWyYck20skIblvbOGV
BM3WvjYKuJSDUFGn5soGHAg66C6CC+PJ3cP08JwFhTM1Oe1nJvyKdffXF9I2RMrd
fHGuBVGZcWq8CyAn2zrHLg04Gc3oVMN0IKEHfZoKHlhY5r74tzIwNGXh10ZXaD4t
LxopsrXvmgaGVYL23G7o345dpQ0ZadXNiN29uHBtvGf10/svc63Q17769/wDrj+X
/KGCgqROk2eusQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:11:48 2025 by rpki-client