Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
File: aVnWvK7pOGJcG_oNMifA67q6qtk.mft (raw, json)
Hash identifier: W3x+WFB6Yckq7kjhLz6dP48x6EEoBFMsI6l4KMsx7Aw=
Subject key identifier: DD:4F:A9:35:07:00:BD:95:9F:24:F9:1A:AC:79:85:91:ED:A0:18:3D
Authority key identifier: 69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
Certificate issuer: /CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Certificate serial: 0197B88EE0F8BE6AA8E1980E0FA81488F425
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
Manifest number: 0957
Signing time: Sat 28 Jun 2025 22:01:00 +0000
Manifest this update: Sat 28 Jun 2025 22:01:00 +0000
Manifest next update: Sun 29 Jun 2025 22:01:00 +0000
Files and hashes: 1: aVnWvK7pOGJcG_oNMifA67q6qtk.crl (hash: dhHt5TpzoMJaEklQILeq1FOxCutaZWk+2LBNAgpKYms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:e0:f8:be:6a:a8:e1:98:0e:0f:a8:14:88:f4:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6959d6bcaee938625c1bfa0d3227c0ebbabaaad9
Validity
Not Before: Jun 28 22:01:00 2025 GMT
Not After : Jun 29 22:01:00 2025 GMT
Subject: CN=dd4fa9350700bd959f24f91aac798591eda0183d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:e5:a1:6d:58:b2:f9:7f:ed:e0:65:1a:50:4f:
87:5b:57:0b:a1:e3:bc:2a:a1:75:2e:9a:c1:37:a2:
e6:f3:6b:d9:72:9b:f3:91:b8:2c:52:9a:37:f9:70:
14:27:7d:d3:e6:71:20:db:a5:03:00:a8:91:9a:6c:
30:49:b6:df:8d:16:5f:25:3a:60:00:c2:0a:75:c2:
56:34:4f:94:be:31:3f:40:ca:17:4b:39:dc:6f:62:
17:a4:81:ff:78:af:b0:39:e7:2b:ae:48:9c:9c:47:
12:39:45:58:e1:e6:e8:03:18:79:ca:57:d0:61:ff:
32:3a:bc:0b:10:db:da:dc:05:4f:10:9b:40:7f:86:
30:05:45:17:6c:a6:11:fc:5e:18:94:ca:4a:c3:f9:
57:d8:cd:72:b9:83:09:ae:9f:68:79:c2:4e:90:b6:
44:4f:66:0f:38:cc:db:95:80:58:b3:ce:13:16:61:
db:b6:4d:a3:8a:54:1d:93:2e:ad:16:0f:08:64:3e:
f4:3f:23:e0:aa:72:d6:52:18:d4:f7:0a:4f:d0:ae:
e2:29:3e:ff:64:52:1f:56:5d:2e:07:48:fb:62:83:
2f:b5:c8:c3:2c:fd:d9:92:13:ef:32:de:1e:ef:53:
50:f5:36:82:f6:be:19:ec:f7:54:18:7e:0b:9f:ce:
dd:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:4F:A9:35:07:00:BD:95:9F:24:F9:1A:AC:79:85:91:ED:A0:18:3D
X509v3 Authority Key Identifier:
keyid:69:59:D6:BC:AE:E9:38:62:5C:1B:FA:0D:32:27:C0:EB:BA:BA:AA:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aVnWvK7pOGJcG_oNMifA67q6qtk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/241f38-3f17-4ffe-bb47-cc1cacecc6e2/1/aVnWvK7pOGJcG_oNMifA67q6qtk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:7a:87:2d:ac:9c:bb:79:f0:38:5a:f7:df:70:53:7c:bb:03:
a7:a0:77:b2:fc:93:71:8d:71:ef:de:77:fb:d9:15:80:0e:1b:
f0:7f:ae:e9:5c:0c:86:04:97:3f:f6:81:38:90:5a:cf:9f:1b:
92:62:ea:9a:5c:fc:3d:a2:8a:6d:e6:ee:f0:f5:4b:32:a5:09:
23:e6:cf:b2:a3:16:5f:45:21:21:ea:1c:be:dc:0a:53:b8:75:
d6:ff:37:38:19:32:2f:32:26:78:df:4c:fa:ff:0d:33:e2:0b:
4d:25:d6:6f:ac:ef:84:5a:a3:89:22:8f:f4:28:37:2c:90:08:
34:d1:59:6a:d7:35:0c:92:ec:15:3e:31:8e:48:bf:fa:54:ae:
35:e4:47:43:06:03:d9:00:e7:d2:0a:c6:7a:93:13:d3:c5:47:
07:3c:11:0b:0b:f5:78:2c:75:48:5d:12:c8:13:ce:7a:ee:b7:
37:ac:f2:ea:41:0c:22:7e:bf:6b:b9:33:c9:7b:fa:c8:00:f3:
24:a1:15:b6:28:4f:6f:eb:1c:9e:31:19:78:50:41:ae:c8:d3:
18:2d:65:20:59:34:d7:30:84:bc:9a:a5:37:cc:a1:10:22:d7:
bd:42:fa:62:39:a3:fd:92:1d:d2:da:61:16:87:fc:5b:d6:4a:
7f:db:96:1d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4juD4vmqo4ZgOD6gUiPQlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5NTlkNmJjYWVlOTM4NjI1YzFiZmEwZDMyMjdjMGViYmFi
YWFhZDkwHhcNMjUwNjI4MjIwMTAwWhcNMjUwNjI5MjIwMTAwWjAzMTEwLwYDVQQD
EyhkZDRmYTkzNTA3MDBiZDk1OWYyNGY5MWFhYzc5ODU5MWVkYTAxODNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArOWhbViy+X/t4GUaUE+HW1cLoeO8
KqF1LprBN6Lm82vZcpvzkbgsUpo3+XAUJ33T5nEg26UDAKiRmmwwSbbfjRZfJTpg
AMIKdcJWNE+UvjE/QMoXSzncb2IXpIH/eK+wOecrrkicnEcSOUVY4eboAxh5ylfQ
Yf8yOrwLENva3AVPEJtAf4YwBUUXbKYR/F4YlMpKw/lX2M1yuYMJrp9oecJOkLZE
T2YPOMzblYBYs84TFmHbtk2jilQdky6tFg8IZD70PyPgqnLWUhjU9wpP0K7iKT7/
ZFIfVl0uB0j7YoMvtcjDLP3ZkhPvMt4e71NQ9TaC9r4Z7PdUGH4Ln87dowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1PqTUHAL2VnyT5Gqx5hZHtoBg9MB8GA1UdIwQY
MBaAFGlZ1ryu6ThiXBv6DTInwOu6uqrZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVZuV3ZLN3BPR0pjR19vTk1pZkE2N3E2cXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8yNDFmMzgtM2YxNy00ZmZlLWJiNDct
Y2MxY2FjZWNjNmUyLzEvYVZuV3ZLN3BPR0pjR19vTk1pZkE2N3E2cXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8yNDFmMzgtM2YxNy00ZmZlLWJiNDctY2MxY2FjZWNjNmUy
LzEvYVZuV3ZLN3BPR0pjR19vTk1pZkE2N3E2cXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd3qHLayc
u3nwOFr333BTfLsDp6B3svyTcY1x7953+9kVgA4b8H+u6VwMhgSXP/aBOJBaz58b
kmLqmlz8PaKKbebu8PVLMqUJI+bPsqMWX0UhIeocvtwKU7h11v83OBkyLzImeN9M
+v8NM+ILTSXWb6zvhFqjiSKP9Cg3LJAINNFZatc1DJLsFT4xjki/+lSuNeRHQwYD
2QDn0grGepMT08VHBzwRCwv1eCx1SF0SyBPOeu63N6zy6kEMIn6/a7kzyXv6yADz
JKEVtihPb+scnjEZeFBBrsjTGC1lIFk01zCEvJqlN8yhECLXvUL6Yjmj/ZId0tph
Fof8W9ZKf9uWHQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:15:32 2025 by rpki-client