Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f2/75c57b-2786-47b9-981c-faa8b718b6cb/1/r4Kgl6KKa2ppnY1qvk3LlbsZgzA.mft
File: r4Kgl6KKa2ppnY1qvk3LlbsZgzA.mft (raw, json)
Hash identifier: DmZ4QB6dTYIARIWFJsMG3XcXJqVMyDp04wKiCHFlURs=
Subject key identifier: 16:A8:87:B0:79:24:9E:9C:FF:0B:22:90:62:F4:22:25:C7:C4:52:26
Authority key identifier: AF:82:A0:97:A2:8A:6B:6A:69:9D:8D:6A:BE:4D:CB:95:BB:19:83:30
Certificate issuer: /CN=af82a097a28a6b6a699d8d6abe4dcb95bb198330
Certificate serial: 0197B88FB8CF3FBD6E66BAA7989FA9D9959E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4Kgl6KKa2ppnY1qvk3LlbsZgzA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f2/75c57b-2786-47b9-981c-faa8b718b6cb/1/r4Kgl6KKa2ppnY1qvk3LlbsZgzA.mft
Manifest number: 0E4B
Signing time: Sat 28 Jun 2025 22:01:56 +0000
Manifest this update: Sat 28 Jun 2025 22:01:56 +0000
Manifest next update: Sun 29 Jun 2025 22:01:56 +0000
Files and hashes: 1: r4Kgl6KKa2ppnY1qvk3LlbsZgzA.crl (hash: dLCYBQ0O3Ejt/gUYosj725MyLOe3QLRwk0D3xH/R5CM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f2/75c57b-2786-47b9-981c-faa8b718b6cb/1/r4Kgl6KKa2ppnY1qvk3LlbsZgzA.crl
rsync://rpki.ripe.net/repository/DEFAULT/f2/75c57b-2786-47b9-981c-faa8b718b6cb/1/r4Kgl6KKa2ppnY1qvk3LlbsZgzA.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4Kgl6KKa2ppnY1qvk3LlbsZgzA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:b8:cf:3f:bd:6e:66:ba:a7:98:9f:a9:d9:95:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af82a097a28a6b6a699d8d6abe4dcb95bb198330
Validity
Not Before: Jun 28 22:01:56 2025 GMT
Not After : Jun 29 22:01:56 2025 GMT
Subject: CN=16a887b079249e9cff0b229062f42225c7c45226
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:80:f9:61:89:63:30:98:e4:bf:65:b8:ff:84:
ff:0a:05:44:0a:60:85:85:20:f9:12:d2:ac:56:5a:
5e:77:65:61:15:48:21:bf:41:4a:b4:e7:2a:38:71:
8a:35:f9:68:09:19:94:f5:5c:4e:9d:3d:cc:2e:d2:
18:b5:92:98:62:b5:9b:2c:87:8a:51:a7:a3:df:4e:
a4:f5:f1:72:3f:33:77:60:43:e3:d7:50:d0:2d:bd:
48:0a:ec:cb:9f:b5:55:e5:9e:72:a1:83:ed:a0:74:
fc:1d:69:63:7f:c8:ff:79:dc:49:02:9f:f1:c0:5f:
02:66:fb:29:80:b7:af:ea:01:58:cf:22:75:f3:5a:
ac:b0:5e:e3:0a:63:59:af:36:ea:70:ee:ca:2e:95:
fa:da:c9:dc:56:fd:49:a6:43:f5:8e:a6:27:7c:fb:
8e:8f:d7:1d:d4:fb:bf:05:0f:60:c9:b6:3a:a3:c8:
fb:ea:14:be:58:5d:ec:82:23:40:8a:95:70:6a:cc:
f9:86:22:87:66:7e:1b:50:73:66:de:59:ed:f7:7c:
76:3c:b0:ee:4e:be:e1:08:83:eb:1a:a3:ef:90:de:
7d:c6:bb:a6:87:56:5b:b8:55:3c:2e:3c:1a:53:59:
c5:d8:db:6d:8d:03:4f:c4:5d:58:13:40:fd:70:81:
26:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:A8:87:B0:79:24:9E:9C:FF:0B:22:90:62:F4:22:25:C7:C4:52:26
X509v3 Authority Key Identifier:
keyid:AF:82:A0:97:A2:8A:6B:6A:69:9D:8D:6A:BE:4D:CB:95:BB:19:83:30
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4Kgl6KKa2ppnY1qvk3LlbsZgzA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/75c57b-2786-47b9-981c-faa8b718b6cb/1/r4Kgl6KKa2ppnY1qvk3LlbsZgzA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f2/75c57b-2786-47b9-981c-faa8b718b6cb/1/r4Kgl6KKa2ppnY1qvk3LlbsZgzA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:0b:e5:59:cc:c9:f8:a9:ef:eb:ea:93:04:35:ae:bf:b7:2a:
2a:3b:c2:71:5b:c3:7a:1e:56:d1:08:97:f4:78:4b:eb:6b:ef:
34:55:7e:27:27:2e:47:b8:41:31:96:28:9d:5a:a6:88:d3:04:
87:9a:66:45:c1:2a:4d:df:cd:9b:f2:0e:1e:28:c0:09:5a:6b:
50:22:a9:96:19:08:4a:5e:8f:8a:56:23:84:65:c8:14:7b:1f:
f2:de:62:c2:29:5e:a7:60:f2:c0:cb:59:c7:b4:89:30:54:a2:
dd:bd:8c:a7:b0:fb:b0:57:f7:a9:2a:ce:a5:25:c6:5c:b0:c4:
24:92:b1:46:df:7c:6b:1d:48:79:2f:2f:aa:21:dd:fe:db:5f:
d0:ee:d2:7b:e0:29:cc:94:b3:8a:9b:59:bc:54:1f:85:eb:9b:
0f:bf:79:ef:87:1b:e5:bc:6c:b5:f6:fc:ff:7b:e2:24:99:ac:
23:e3:59:ab:46:0e:6a:9c:6f:be:b3:5e:f9:71:a1:a9:5d:6c:
1b:e7:3b:6c:15:59:fb:55:11:ff:19:39:df:4f:18:6f:ff:e6:
a4:b3:43:f0:42:94:06:3c:92:8a:96:fe:5a:bd:b6:4c:c8:8d:
c6:24:40:fe:5d:c0:4e:9c:9e:37:44:42:18:c7:5c:69:6d:52:
e6:e2:0f:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j7jPP71uZrqnmJ+p2ZWeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmODJhMDk3YTI4YTZiNmE2OTlkOGQ2YWJlNGRjYjk1YmIx
OTgzMzAwHhcNMjUwNjI4MjIwMTU2WhcNMjUwNjI5MjIwMTU2WjAzMTEwLwYDVQQD
EygxNmE4ODdiMDc5MjQ5ZTljZmYwYjIyOTA2MmY0MjIyNWM3YzQ1MjI2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3YD5YYljMJjkv2W4/4T/CgVECmCF
hSD5EtKsVlped2VhFUghv0FKtOcqOHGKNfloCRmU9VxOnT3MLtIYtZKYYrWbLIeK
Uaej306k9fFyPzN3YEPj11DQLb1ICuzLn7VV5Z5yoYPtoHT8HWljf8j/edxJAp/x
wF8CZvspgLev6gFYzyJ181qssF7jCmNZrzbqcO7KLpX62sncVv1JpkP1jqYnfPuO
j9cd1Pu/BQ9gybY6o8j76hS+WF3sgiNAipVwasz5hiKHZn4bUHNm3lnt93x2PLDu
Tr7hCIPrGqPvkN59xrumh1ZbuFU8LjwaU1nF2NttjQNPxF1YE0D9cIEm0QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaoh7B5JJ6c/wsikGL0IiXHxFImMB8GA1UdIwQY
MBaAFK+CoJeiimtqaZ2Nar5Ny5W7GYMwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRLZ2w2S0thMnBwblkxcXZrM0xsYnNaZ3pBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMi83NWM1N2ItMjc4Ni00N2I5LTk4MWMt
ZmFhOGI3MThiNmNiLzEvcjRLZ2w2S0thMnBwblkxcXZrM0xsYnNaZ3pBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMi83NWM1N2ItMjc4Ni00N2I5LTk4MWMtZmFhOGI3MThiNmNi
LzEvcjRLZ2w2S0thMnBwblkxcXZrM0xsYnNaZ3pBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwvlWczJ
+Knv6+qTBDWuv7cqKjvCcVvDeh5W0QiX9HhL62vvNFV+JycuR7hBMZYonVqmiNME
h5pmRcEqTd/Nm/IOHijACVprUCKplhkISl6PilYjhGXIFHsf8t5iwilep2DywMtZ
x7SJMFSi3b2Mp7D7sFf3qSrOpSXGXLDEJJKxRt98ax1IeS8vqiHd/ttf0O7Se+Ap
zJSziptZvFQfheubD79574cb5bxstfb8/3viJJmsI+NZq0YOapxvvrNe+XGhqV1s
G+c7bBVZ+1UR/xk5308Yb//mpLND8EKUBjySipb+Wr22TMiNxiRA/l3ATpyeN0RC
GMdcaW1S5uIPNQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:46:06 2025 by rpki-client