Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
File: RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft (raw, json)
Hash identifier: O9Tjl1ooqKhs72Oig+bh25TCyov4zZnKS50Eb4uWfS8=
Subject key identifier: 5C:76:C2:B7:21:9B:38:53:AA:D4:9A:59:B5:31:15:C8:E4:A5:B7:CE
Authority key identifier: 46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
Certificate issuer: /CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Certificate serial: 0197B6A03B0EA1832082A211BD547129C6B9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
Manifest number: 0817
Signing time: Sat 28 Jun 2025 13:00:43 +0000
Manifest this update: Sat 28 Jun 2025 13:00:43 +0000
Manifest next update: Sun 29 Jun 2025 13:00:43 +0000
Files and hashes: 1: RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl (hash: Mw3OIC1Ljt+JlRH7W3S/Sg25j11OJmp20qA+Jh3p7q8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:3b:0e:a1:83:20:82:a2:11:bd:54:71:29:c6:b9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46947c5c3d4c2fc4c4a4a7428b622a7fef392e29
Validity
Not Before: Jun 28 13:00:43 2025 GMT
Not After : Jun 29 13:00:43 2025 GMT
Subject: CN=5c76c2b7219b3853aad49a59b53115c8e4a5b7ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a0:06:84:0c:48:70:5a:ac:ba:1f:1e:7a:6a:
3b:9f:d0:05:23:bd:4b:cc:8c:2d:bc:ce:fc:dc:09:
f4:02:bb:17:14:c0:de:98:ce:7d:22:a1:35:b3:87:
57:71:e8:41:0f:18:1e:8a:aa:ac:d0:ad:7c:4d:c1:
91:1e:78:43:8f:df:e3:ee:84:9e:2c:eb:6f:a5:f0:
c3:01:80:3d:17:db:e0:b6:ff:5e:05:4b:07:ea:4e:
6a:8d:86:b1:2a:df:29:ad:19:67:48:7f:cd:a7:8b:
80:23:3c:c9:3e:65:48:a2:26:bd:2f:c8:d0:6d:b1:
e2:bc:cc:e6:70:c3:db:c3:b9:1d:dd:83:83:60:c8:
ab:50:d1:de:07:45:5f:28:69:54:3e:f7:5c:2a:dd:
27:e7:75:5a:d9:5b:77:95:c4:b9:e4:ac:8a:01:78:
68:0b:46:3a:c4:c1:e3:de:24:62:74:c9:55:3b:1a:
57:a2:2f:1e:7d:3c:ff:ca:ed:90:fb:3a:3e:0e:44:
90:9b:ec:ad:fb:97:db:a7:79:4a:7b:fd:d9:78:42:
aa:6e:9e:0a:af:e2:2d:7c:ba:2d:01:4d:c1:f2:2e:
0e:3e:ee:b7:70:9e:fb:21:bd:33:3e:66:af:a4:f7:
38:05:13:86:e1:24:8c:3d:0f:5f:26:25:69:29:91:
39:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:76:C2:B7:21:9B:38:53:AA:D4:9A:59:B5:31:15:C8:E4:A5:B7:CE
X509v3 Authority Key Identifier:
keyid:46:94:7C:5C:3D:4C:2F:C4:C4:A4:A7:42:8B:62:2A:7F:EF:39:2E:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpR8XD1ML8TEpKdCi2Iqf-85Lik.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/b49562-f157-4382-998e-8f934e71767c/1/RpR8XD1ML8TEpKdCi2Iqf-85Lik.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:8c:79:eb:5b:e8:b7:e4:fb:52:39:b8:30:77:c5:df:cb:09:
1b:55:b4:c9:4d:92:ab:71:7b:3b:4c:19:8c:57:7d:31:ed:d4:
fe:c8:bb:10:3c:88:0b:37:f0:9a:82:14:c8:b9:50:b2:e9:5e:
19:96:d3:72:9b:db:f9:38:0a:48:01:5c:98:59:e4:e0:56:14:
41:cb:88:67:ee:27:a2:1a:b4:70:4b:05:33:fb:1f:94:a7:50:
7b:01:25:d4:eb:27:48:1d:55:69:89:83:82:5b:66:6e:3a:61:
70:89:2c:47:72:ee:84:a4:72:51:78:06:b3:69:f0:c3:b3:ac:
43:9b:72:a6:43:7a:e9:bd:d9:92:da:27:be:1f:9d:91:6f:bf:
5c:32:0f:7f:9f:7c:c7:f5:74:3d:95:ea:8e:98:cb:9c:5e:68:
53:52:66:27:63:a7:11:37:d2:64:04:d0:f2:56:bc:49:bc:63:
51:e9:ae:ea:cf:ef:b7:2c:fa:e7:2f:3e:1b:87:4f:b9:e0:de:
61:f0:2b:d4:b1:92:29:df:b7:83:0c:0b:51:3d:7f:2d:4b:a1:
71:77:8f:0b:b8:e0:32:a6:c9:e7:40:cc:43:25:39:24:38:9b:
6f:f1:6e:d9:ff:f2:6a:66:3b:7a:cd:73:fa:86:bf:1f:a5:0d:
0f:cb:c0:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oDsOoYMggqIRvVRxKca5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OTQ3YzVjM2Q0YzJmYzRjNGE0YTc0MjhiNjIyYTdmZWYz
OTJlMjkwHhcNMjUwNjI4MTMwMDQzWhcNMjUwNjI5MTMwMDQzWjAzMTEwLwYDVQQD
Eyg1Yzc2YzJiNzIxOWIzODUzYWFkNDlhNTliNTMxMTVjOGU0YTViN2NlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6AGhAxIcFqsuh8eemo7n9AFI71L
zIwtvM783An0ArsXFMDemM59IqE1s4dXcehBDxgeiqqs0K18TcGRHnhDj9/j7oSe
LOtvpfDDAYA9F9vgtv9eBUsH6k5qjYaxKt8prRlnSH/Np4uAIzzJPmVIoia9L8jQ
bbHivMzmcMPbw7kd3YODYMirUNHeB0VfKGlUPvdcKt0n53Va2Vt3lcS55KyKAXho
C0Y6xMHj3iRidMlVOxpXoi8efTz/yu2Q+zo+DkSQm+yt+5fbp3lKe/3ZeEKqbp4K
r+ItfLotAU3B8i4OPu63cJ77Ib0zPmavpPc4BROG4SSMPQ9fJiVpKZE5RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFx2wrchmzhTqtSaWbUxFcjkpbfOMB8GA1UdIwQY
MBaAFEaUfFw9TC/ExKSnQotiKn/vOS4pMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9iNDk1NjItZjE1Ny00MzgyLTk5OGUt
OGY5MzRlNzE3NjdjLzEvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9iNDk1NjItZjE1Ny00MzgyLTk5OGUtOGY5MzRlNzE3Njdj
LzEvUnBSOFhEMU1MOFRFcEtkQ2kySXFmLTg1TGlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtYx561vo
t+T7Ujm4MHfF38sJG1W0yU2Sq3F7O0wZjFd9Me3U/si7EDyICzfwmoIUyLlQsule
GZbTcpvb+TgKSAFcmFnk4FYUQcuIZ+4nohq0cEsFM/sflKdQewEl1OsnSB1VaYmD
gltmbjphcIksR3LuhKRyUXgGs2nww7OsQ5typkN66b3Zktonvh+dkW+/XDIPf598
x/V0PZXqjpjLnF5oU1JmJ2OnETfSZATQ8la8SbxjUemu6s/vtyz65y8+G4dPueDe
YfAr1LGSKd+3gwwLUT1/LUuhcXePC7jgMqbJ50DMQyU5JDibb/Fu2f/yamY7es1z
+oa/H6UND8vAiA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:32:48 2025 by rpki-client