Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
File: j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft (raw, json)
Hash identifier: 9hbAugYxxmO/JSbqkY5ekWgJRaU4tRoODw2uoMSvt7c=
Subject key identifier: 69:91:95:F0:EB:67:06:F1:60:C4:3A:53:DC:7C:32:41:1C:D5:62:9F
Authority key identifier: 8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
Certificate issuer: /CN=8fa698c9f803032579201048b87c19c63c8e1197
Certificate serial: 0197CB02F3B9954BE7C9CBD7529480155A6B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
Manifest number: 46
Signing time: Wed 02 Jul 2025 12:00:57 +0000
Manifest this update: Wed 02 Jul 2025 12:00:57 +0000
Manifest next update: Thu 03 Jul 2025 12:00:57 +0000
Files and hashes: 1: j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl (hash: wGM3U6LK7l7EDXXpyJs5XMOKRRcDcf3cpdHT7oHhGEc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:02:f3:b9:95:4b:e7:c9:cb:d7:52:94:80:15:5a:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8fa698c9f803032579201048b87c19c63c8e1197
Validity
Not Before: Jul 2 12:00:57 2025 GMT
Not After : Jul 3 12:00:57 2025 GMT
Subject: CN=699195f0eb6706f160c43a53dc7c32411cd5629f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:3b:ed:52:1b:8e:cc:79:81:60:02:d3:12:92:
fd:d5:56:07:48:3a:bd:8e:83:ed:3c:cc:7e:09:90:
4d:21:18:e5:55:cf:83:1d:7e:df:93:81:b0:fe:c7:
ee:9b:5b:c1:38:c3:8b:cb:63:67:ae:a6:f5:fc:60:
99:2f:59:5a:eb:25:a6:3f:8d:93:20:27:54:e6:a7:
b3:4e:31:23:68:6f:b0:f3:c7:59:87:5f:71:af:18:
d2:41:23:b9:14:dd:38:cd:b2:74:b1:43:3a:ed:f7:
78:71:b1:ca:84:51:41:bd:7f:aa:36:ea:16:98:78:
d5:d3:34:2c:26:a6:53:2e:5c:13:6d:b7:ed:64:8d:
8e:5f:aa:bd:3d:f4:1d:fe:c0:01:d2:99:4a:b4:fd:
5e:fa:e6:56:95:85:c7:e4:83:51:0e:a3:07:1c:a9:
b0:9c:07:0a:b8:a3:47:55:cf:1f:48:39:d3:58:b8:
f4:3b:57:f9:e8:59:a8:da:04:80:69:20:aa:b8:81:
61:a4:35:8c:f7:0f:37:f3:a3:b8:c4:03:f6:53:79:
9c:7f:70:6f:4b:2a:18:c4:25:56:ec:50:33:97:3c:
d8:ca:0a:72:34:79:62:dd:1e:0d:61:c0:00:54:f8:
0b:dc:4a:ab:24:ca:c6:4f:93:19:d4:13:16:2b:e9:
47:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:91:95:F0:EB:67:06:F1:60:C4:3A:53:DC:7C:32:41:1C:D5:62:9F
X509v3 Authority Key Identifier:
keyid:8F:A6:98:C9:F8:03:03:25:79:20:10:48:B8:7C:19:C6:3C:8E:11:97
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/j6aYyfgDAyV5IBBIuHwZxjyOEZc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/067404-9e9e-44b8-905c-f44809578cca/1/j6aYyfgDAyV5IBBIuHwZxjyOEZc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b9:c7:b9:3a:7e:b9:ca:73:ac:7f:9e:ed:94:9b:27:31:cc:aa:
f6:a2:17:6b:42:16:db:36:2c:9f:52:aa:75:77:2b:78:76:1b:
46:cf:4a:54:cb:04:dd:d3:ae:02:d7:20:45:ca:c7:ee:4a:67:
b2:83:72:e6:65:92:4b:a3:87:65:9e:bb:20:b0:f8:f3:a7:6b:
7e:1b:b2:d8:7c:3b:31:33:4c:91:30:cb:3f:25:3b:ff:d3:3b:
b4:8d:46:20:3c:34:35:d5:e4:10:bc:75:39:4b:61:70:6b:0b:
dd:28:be:75:e6:da:ad:e2:7b:31:b5:e9:88:c2:0e:8d:1b:71:
ff:61:f3:85:f5:f5:da:9f:b5:5e:14:f2:c0:a2:85:3d:e4:e1:
b9:28:6e:91:38:28:14:38:9c:e2:44:22:39:ca:6a:89:85:f2:
51:e1:61:9a:5a:26:69:30:c3:0c:0a:41:f0:3f:c0:84:0f:12:
4f:72:ca:8a:3a:cb:f0:d7:4b:4c:73:00:1c:5b:3e:c1:58:02:
12:b9:c0:70:3b:ad:e9:f0:c7:61:92:8e:c2:ef:dd:86:04:b5:
f8:80:ec:9e:b2:f2:a1:17:a8:1b:ca:32:b7:0d:2c:52:ca:b8:
77:37:10:39:7f:ca:51:3e:5a:ea:1f:f0:18:56:c5:c0:7f:ba:
00:f6:f7:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfLAvO5lUvnycvXUpSAFVprMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhmYTY5OGM5ZjgwMzAzMjU3OTIwMTA0OGI4N2MxOWM2M2M4
ZTExOTcwHhcNMjUwNzAyMTIwMDU3WhcNMjUwNzAzMTIwMDU3WjAzMTEwLwYDVQQD
Eyg2OTkxOTVmMGViNjcwNmYxNjBjNDNhNTNkYzdjMzI0MTFjZDU2MjlmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmTvtUhuOzHmBYALTEpL91VYHSDq9
joPtPMx+CZBNIRjlVc+DHX7fk4Gw/sfum1vBOMOLy2Nnrqb1/GCZL1la6yWmP42T
ICdU5qezTjEjaG+w88dZh19xrxjSQSO5FN04zbJ0sUM67fd4cbHKhFFBvX+qNuoW
mHjV0zQsJqZTLlwTbbftZI2OX6q9PfQd/sAB0plKtP1e+uZWlYXH5INRDqMHHKmw
nAcKuKNHVc8fSDnTWLj0O1f56Fmo2gSAaSCquIFhpDWM9w8386O4xAP2U3mcf3Bv
SyoYxCVW7FAzlzzYygpyNHli3R4NYcAAVPgL3EqrJMrGT5MZ1BMWK+lHVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGmRlfDrZwbxYMQ6U9x8MkEc1WKfMB8GA1UdIwQY
MBaAFI+mmMn4AwMleSAQSLh8GcY8jhGXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvajZhWXlmZ0RBeVY1SUJCSXVId1p4anlPRVpjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC8wNjc0MDQtOWU5ZS00NGI4LTkwNWMt
ZjQ0ODA5NTc4Y2NhLzEvajZhWXlmZ0RBeVY1SUJCSXVId1p4anlPRVpjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC8wNjc0MDQtOWU5ZS00NGI4LTkwNWMtZjQ0ODA5NTc4Y2Nh
LzEvajZhWXlmZ0RBeVY1SUJCSXVId1p4anlPRVpjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAuce5On65
ynOsf57tlJsnMcyq9qIXa0IW2zYsn1KqdXcreHYbRs9KVMsE3dOuAtcgRcrH7kpn
soNy5mWSS6OHZZ67ILD486drfhuy2Hw7MTNMkTDLPyU7/9M7tI1GIDw0NdXkELx1
OUthcGsL3Si+debareJ7MbXpiMIOjRtx/2HzhfX12p+1XhTywKKFPeThuShukTgo
FDic4kQiOcpqiYXyUeFhmlomaTDDDApB8D/AhA8ST3LKijrL8NdLTHMAHFs+wVgC
ErnAcDut6fDHYZKOwu/dhgS1+IDsnrLyoReoG8oytw0sUsq4dzcQOX/KUT5a6h/w
GFbFwH+6APb3PQ==
-----END CERTIFICATE-----
Generated at Wed Jul 2 15:02:06 2025 by rpki-client