Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
File: R7lNsbPetIBa0mFVS65rpfp0CMs.mft (raw, json)
Hash identifier: lpVfkkwQ5Mr3jC1rDQbV9n7hP0wwz67ml1Ymqfv93tk=
Subject key identifier: F6:85:CB:E3:18:A2:B7:05:08:22:31:35:67:85:D5:95:A0:41:1B:40
Authority key identifier: 47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
Certificate issuer: /CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Certificate serial: 0197B6A0F83522B4D205EEB90B209390E92F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
Manifest number: 15B0
Signing time: Sat 28 Jun 2025 13:01:32 +0000
Manifest this update: Sat 28 Jun 2025 13:01:32 +0000
Manifest next update: Sun 29 Jun 2025 13:01:32 +0000
Files and hashes: 1: R7lNsbPetIBa0mFVS65rpfp0CMs.crl (hash: 0QGinpn2on9rF46ir90EsT6rbFGc+HDgNuxhbOehDEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:f8:35:22:b4:d2:05:ee:b9:0b:20:93:90:e9:2f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b94db1b3deb4805ad261554bae6ba5fa7408cb
Validity
Not Before: Jun 28 13:01:32 2025 GMT
Not After : Jun 29 13:01:32 2025 GMT
Subject: CN=f685cbe318a2b705082231356785d595a0411b40
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:54:82:a6:d5:f2:dc:47:2a:3b:78:bd:f2:3f:
e1:aa:30:ef:1d:83:d1:42:93:bc:2c:4d:b5:ec:7d:
7e:c3:40:2c:1e:f4:09:d8:96:ee:85:42:37:2b:c5:
07:b5:35:e2:6b:04:18:f0:bc:f9:f5:0a:08:17:e2:
fc:01:75:6e:b2:ef:41:99:a6:bb:71:4e:bf:e4:33:
64:3f:49:0d:2b:d0:41:2b:67:e3:86:59:4c:99:85:
3d:b6:a8:44:0f:fb:4f:c8:a6:44:ad:a4:64:54:1c:
9f:e6:3c:e0:e4:29:4c:9e:a6:8f:9b:2e:81:f0:d1:
ae:fb:14:59:c1:ee:51:53:cf:e8:02:25:e3:a2:4e:
77:27:d9:9a:69:53:9c:88:94:e9:a3:1c:e6:40:84:
36:13:4c:e0:4f:bd:03:10:e4:98:27:e1:0f:dd:a7:
b1:68:8e:e8:91:b4:52:e7:f1:a3:e3:36:2a:58:e3:
38:48:5a:01:dc:5d:25:a7:e4:f1:88:24:7c:2c:91:
f7:2a:1e:05:79:16:4d:48:d7:ed:74:06:dd:14:08:
62:a3:2f:08:08:6b:e2:26:a3:fe:51:f0:0d:65:a1:
c3:1a:7d:d3:b2:d2:e2:2b:2b:45:48:f1:a5:cb:d8:
0a:28:31:e9:43:56:91:5f:b7:d1:7b:1e:c0:aa:28:
f8:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:85:CB:E3:18:A2:B7:05:08:22:31:35:67:85:D5:95:A0:41:1B:40
X509v3 Authority Key Identifier:
keyid:47:B9:4D:B1:B3:DE:B4:80:5A:D2:61:55:4B:AE:6B:A5:FA:74:08:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7lNsbPetIBa0mFVS65rpfp0CMs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/871f8e-e7c0-4264-baea-2c294ec81297/1/R7lNsbPetIBa0mFVS65rpfp0CMs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:7b:20:56:ab:e1:52:7a:e1:42:96:8c:2a:54:a3:c8:37:d5:
ef:0b:da:f5:29:fd:67:d9:1b:b7:4e:cf:98:33:85:fb:6d:48:
a3:8a:49:d1:76:fc:1a:cb:a1:b1:b6:d3:3c:74:cd:b5:7a:43:
4e:89:1b:a1:74:78:aa:95:68:d5:7c:cd:5d:c1:50:78:dc:8b:
56:1f:a0:04:aa:d4:40:43:f0:55:c5:c7:3c:7f:1b:82:f2:b0:
d9:ca:69:3c:dd:d0:3c:d1:b9:a9:dc:0f:0b:ff:51:e0:d2:aa:
e4:1a:b0:67:57:67:56:95:06:f1:6f:be:97:40:85:cc:26:bb:
21:34:bc:ff:6d:65:56:8c:e1:38:32:a6:7e:98:44:cd:da:60:
05:8e:83:72:eb:8f:d0:0c:7b:fb:5e:74:8c:c3:fe:7c:16:f7:
e1:02:7d:a5:13:29:b4:ea:ef:f4:d8:6a:86:0a:97:2a:01:da:
51:db:9d:64:d8:f7:16:b9:c4:61:f1:12:e3:5c:6e:7d:fb:98:
0e:0d:50:9a:c1:23:eb:0f:16:fd:50:5b:a7:f1:09:88:81:81:
8d:b2:7e:cc:2e:8a:94:42:bc:76:c2:f4:70:5b:12:30:a9:c5:
c5:8c:b4:b1:48:a8:29:cc:62:fb:45:d5:70:74:50:cc:f2:a6:
19:3c:09:7a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oPg1IrTSBe65CyCTkOkvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3Yjk0ZGIxYjNkZWI0ODA1YWQyNjE1NTRiYWU2YmE1ZmE3
NDA4Y2IwHhcNMjUwNjI4MTMwMTMyWhcNMjUwNjI5MTMwMTMyWjAzMTEwLwYDVQQD
EyhmNjg1Y2JlMzE4YTJiNzA1MDgyMjMxMzU2Nzg1ZDU5NWEwNDExYjQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvlSCptXy3EcqO3i98j/hqjDvHYPR
QpO8LE217H1+w0AsHvQJ2JbuhUI3K8UHtTXiawQY8Lz59QoIF+L8AXVusu9Bmaa7
cU6/5DNkP0kNK9BBK2fjhllMmYU9tqhED/tPyKZEraRkVByf5jzg5ClMnqaPmy6B
8NGu+xRZwe5RU8/oAiXjok53J9maaVOciJTpoxzmQIQ2E0zgT70DEOSYJ+EP3aex
aI7okbRS5/Gj4zYqWOM4SFoB3F0lp+TxiCR8LJH3Kh4FeRZNSNftdAbdFAhioy8I
CGviJqP+UfANZaHDGn3TstLiKytFSPGly9gKKDHpQ1aRX7fRex7Aqij4YwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPaFy+MYorcFCCIxNWeF1ZWgQRtAMB8GA1UdIwQY
MBaAFEe5TbGz3rSAWtJhVUuua6X6dAjLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjdsTnNiUGV0SUJhMG1GVlM2NXJwZnAwQ01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC84NzFmOGUtZTdjMC00MjY0LWJhZWEt
MmMyOTRlYzgxMjk3LzEvUjdsTnNiUGV0SUJhMG1GVlM2NXJwZnAwQ01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC84NzFmOGUtZTdjMC00MjY0LWJhZWEtMmMyOTRlYzgxMjk3
LzEvUjdsTnNiUGV0SUJhMG1GVlM2NXJwZnAwQ01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHsgVqvh
UnrhQpaMKlSjyDfV7wva9Sn9Z9kbt07PmDOF+21Io4pJ0Xb8GsuhsbbTPHTNtXpD
TokboXR4qpVo1XzNXcFQeNyLVh+gBKrUQEPwVcXHPH8bgvKw2cppPN3QPNG5qdwP
C/9R4NKq5BqwZ1dnVpUG8W++l0CFzCa7ITS8/21lVozhODKmfphEzdpgBY6DcuuP
0Ax7+150jMP+fBb34QJ9pRMptOrv9NhqhgqXKgHaUdudZNj3FrnEYfES41xuffuY
Dg1QmsEj6w8W/VBbp/EJiIGBjbJ+zC6KlEK8dsL0cFsSMKnFxYy0sUioKcxi+0XV
cHRQzPKmGTwJeg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:43:12 2025 by rpki-client