Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
File: Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft (raw, json)
Hash identifier: fkBj0ggUVgLRe226As4UMSSuAiImYKe4ZXof3uvRXe0=
Subject key identifier: FD:FE:1C:31:8C:FA:65:83:5B:F5:B7:A6:D4:AE:1B:1C:1C:0A:B6:A2
Authority key identifier: 45:CD:81:F4:98:66:18:0F:CB:DD:3B:77:5E:79:D6:19:BF:DB:57:E6
Certificate issuer: /CN=45cd81f49866180fcbdd3b775e79d619bfdb57e6
Certificate serial: 0197B6A0A2F6A7F2A2B3CB71779BB372D3D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
Manifest number: 0FE9
Signing time: Sat 28 Jun 2025 13:01:10 +0000
Manifest this update: Sat 28 Jun 2025 13:01:10 +0000
Manifest next update: Sun 29 Jun 2025 13:01:10 +0000
Files and hashes: 1: Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl (hash: 0BChiZ66rZqigsSU9TNVc5qZUqj4zzvcgKUZUggd1XA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a2:f6:a7:f2:a2:b3:cb:71:77:9b:b3:72:d3:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45cd81f49866180fcbdd3b775e79d619bfdb57e6
Validity
Not Before: Jun 28 13:01:10 2025 GMT
Not After : Jun 29 13:01:10 2025 GMT
Subject: CN=fdfe1c318cfa65835bf5b7a6d4ae1b1c1c0ab6a2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e3:f2:ab:e8:b9:62:ce:68:15:04:36:71:8d:
71:91:fd:05:ca:e7:e3:9a:3c:5c:aa:88:d2:27:68:
38:89:96:66:d3:0c:72:06:73:c0:69:f8:bc:89:88:
16:66:3a:8e:da:46:5b:41:91:1f:54:bf:f4:a0:4a:
73:51:e0:d6:3a:30:54:a7:9a:13:8b:56:f1:e3:dd:
79:fe:fb:db:d3:29:b3:d2:f3:97:f8:a6:4a:18:09:
cc:e7:0a:3c:3c:29:53:6a:8f:21:c5:0d:58:3a:9e:
86:c0:01:7c:4b:da:51:ba:d6:97:c0:45:3e:2b:38:
3c:45:9e:31:57:7f:91:da:d6:93:8f:10:68:f7:85:
3d:62:21:69:b5:d6:f5:5e:15:64:8c:58:01:85:ad:
f7:31:c3:fb:eb:a1:78:3e:18:e3:24:0e:06:9e:f9:
80:ea:4f:f7:60:44:f8:00:4b:b0:50:4d:39:1f:7f:
c8:0f:99:b1:08:cb:8f:b9:4f:b5:f7:e9:d4:c9:78:
86:e2:d8:c3:f0:12:d6:99:fd:56:6b:97:84:cd:2e:
00:63:43:22:9a:1f:cb:c6:cc:2c:6c:e4:9d:6e:f4:
fb:e7:de:12:55:2b:f3:6c:a5:dc:da:57:c7:9c:fd:
3a:ab:83:8f:31:4a:1a:4e:9d:99:23:65:be:d1:f5:
39:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:FE:1C:31:8C:FA:65:83:5B:F5:B7:A6:D4:AE:1B:1C:1C:0A:B6:A2
X509v3 Authority Key Identifier:
keyid:45:CD:81:F4:98:66:18:0F:CB:DD:3B:77:5E:79:D6:19:BF:DB:57:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ec/311aef-3bfc-43e9-955c-9b0b3f024829/1/Rc2B9JhmGA_L3Tt3XnnWGb_bV-Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cf:25:07:a5:a6:16:be:cb:13:1b:5f:ea:b2:4e:85:f7:26:bd:
9f:c0:46:86:9d:c6:77:5f:5f:46:b1:3c:cb:be:4f:6b:18:97:
4d:40:b7:55:3d:e0:a9:7f:dd:8c:7d:72:4f:74:51:16:76:dd:
07:cb:85:36:b4:78:55:28:0c:59:3c:05:59:10:17:dc:34:09:
4f:65:f3:00:2a:dd:8e:56:af:e2:76:ee:a0:cd:a1:f1:6f:94:
f7:5f:1a:82:41:8c:79:bc:80:f3:4b:39:e3:17:4f:c8:c7:78:
22:43:00:83:27:d7:05:ae:06:81:09:cc:4f:b0:10:f6:d3:e1:
d9:fe:05:13:0b:dc:71:fb:75:f6:8a:c7:c7:53:5e:95:e3:fb:
32:e4:cf:62:a6:ff:f4:fc:b8:22:8d:d7:35:12:ca:02:6c:4f:
d5:46:e0:11:fa:23:94:58:65:96:ef:97:df:52:b1:c5:d7:73:
fe:a7:01:ae:c8:ae:7c:fc:7f:e6:38:e4:35:34:b7:b9:7f:8e:
e5:6e:d4:ad:18:8d:77:a8:9b:ab:b6:3d:c9:3a:ea:f6:4b:70:
56:59:ac:22:62:49:80:7a:2c:15:23:5b:c9:31:4d:9a:d8:82:
c4:58:29:8d:40:d6:b1:e3:9b:9b:4f:6a:3f:9e:4e:91:f3:e4:
67:05:a9:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oKL2p/Kis8txd5uzctPRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1Y2Q4MWY0OTg2NjE4MGZjYmRkM2I3NzVlNzlkNjE5YmZk
YjU3ZTYwHhcNMjUwNjI4MTMwMTEwWhcNMjUwNjI5MTMwMTEwWjAzMTEwLwYDVQQD
EyhmZGZlMWMzMThjZmE2NTgzNWJmNWI3YTZkNGFlMWIxYzFjMGFiNmEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOPyq+i5Ys5oFQQ2cY1xkf0Fyufj
mjxcqojSJ2g4iZZm0wxyBnPAafi8iYgWZjqO2kZbQZEfVL/0oEpzUeDWOjBUp5oT
i1bx4915/vvb0ymz0vOX+KZKGAnM5wo8PClTao8hxQ1YOp6GwAF8S9pRutaXwEU+
Kzg8RZ4xV3+R2taTjxBo94U9YiFptdb1XhVkjFgBha33McP766F4PhjjJA4GnvmA
6k/3YET4AEuwUE05H3/ID5mxCMuPuU+19+nUyXiG4tjD8BLWmf1Wa5eEzS4AY0Mi
mh/LxswsbOSdbvT7594SVSvzbKXc2lfHnP06q4OPMUoaTp2ZI2W+0fU56QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP3+HDGM+mWDW/W3ptSuGxwcCraiMB8GA1UdIwQY
MBaAFEXNgfSYZhgPy907d1551hm/21fmMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmMyQjlKaG1HQV9MM1R0M1hubldHYl9iVi1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYy8zMTFhZWYtM2JmYy00M2U5LTk1NWMt
OWIwYjNmMDI0ODI5LzEvUmMyQjlKaG1HQV9MM1R0M1hubldHYl9iVi1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYy8zMTFhZWYtM2JmYy00M2U5LTk1NWMtOWIwYjNmMDI0ODI5
LzEvUmMyQjlKaG1HQV9MM1R0M1hubldHYl9iVi1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAzyUHpaYW
vssTG1/qsk6F9ya9n8BGhp3Gd19fRrE8y75PaxiXTUC3VT3gqX/djH1yT3RRFnbd
B8uFNrR4VSgMWTwFWRAX3DQJT2XzACrdjlav4nbuoM2h8W+U918agkGMebyA80s5
4xdPyMd4IkMAgyfXBa4GgQnMT7AQ9tPh2f4FEwvccft19orHx1NeleP7MuTPYqb/
9Py4Io3XNRLKAmxP1UbgEfojlFhllu+X31Kxxddz/qcBrsiufPx/5jjkNTS3uX+O
5W7UrRiNd6ibq7Y9yTrq9ktwVlmsImJJgHosFSNbyTFNmtiCxFgpjUDWseObm09q
P55OkfPkZwWpiA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:08:15 2025 by rpki-client