Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
File: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft (raw, json)
Hash identifier: 1Da1jwkT7a5V6wQfj1lg1uWiL2of7OtFDhNAQgs27bo=
Subject key identifier: 6F:E3:7B:E7:D7:A0:2D:F4:45:EE:F5:E3:51:5A:B5:3B:59:28:7D:6A
Authority key identifier: 0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
Certificate issuer: /CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Certificate serial: 0197B6A16BE0771EE560FCD0C34A9CEBB873
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
Manifest number: 046F
Signing time: Sat 28 Jun 2025 13:02:01 +0000
Manifest this update: Sat 28 Jun 2025 13:02:01 +0000
Manifest next update: Sun 29 Jun 2025 13:02:01 +0000
Files and hashes: 1: C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl (hash: Cr39qHUTlxFXHbDXFVevjldam8714hSKFW1vb+xTQWg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:6b:e0:77:1e:e5:60:fc:d0:c3:4a:9c:eb:b8:73
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ba950a38b73743b2b62fe531b7b1135fdd6c65d
Validity
Not Before: Jun 28 13:02:01 2025 GMT
Not After : Jun 29 13:02:01 2025 GMT
Subject: CN=6fe37be7d7a02df445eef5e3515ab53b59287d6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:fc:44:d4:b7:49:7a:ff:f4:cc:b6:17:80:0a:
40:1a:5e:ac:f1:98:30:e5:2b:cd:af:ba:58:1b:bd:
28:6e:6b:3a:6a:e4:4b:c9:f1:23:68:a9:ba:40:1f:
5d:4b:9b:55:02:31:c2:4a:db:bc:ca:3b:e0:c6:91:
82:53:e3:60:54:21:dc:e7:be:3f:b3:5f:c0:c3:aa:
73:d8:7b:92:e7:9b:12:71:27:a4:cd:a7:32:02:9d:
a6:75:11:38:54:71:7b:50:81:31:38:5a:01:59:dc:
73:28:b7:61:07:c0:a3:0c:02:c9:82:9d:dc:fd:4c:
b4:76:18:c9:97:03:76:91:b6:e6:0a:ef:09:67:8b:
4f:48:c2:8b:01:29:5a:08:24:38:37:35:2a:b7:01:
69:27:8d:86:7a:bf:3f:25:f4:e6:60:c7:bf:3f:1d:
6f:0d:9f:c0:f8:5d:82:c5:a5:7a:ca:97:e4:4a:67:
80:5c:cf:3c:d7:99:f0:b7:ca:d2:2a:da:35:71:d2:
59:f6:74:7c:20:39:8e:4b:65:13:82:d1:5c:54:3d:
5e:b5:4b:51:68:01:e5:43:c4:d8:2d:dd:eb:41:a7:
70:52:5c:ee:28:a7:a1:99:d5:22:d2:19:fd:db:ca:
c7:c3:93:67:8c:df:9b:cc:1b:15:8c:3c:65:cc:d9:
37:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6F:E3:7B:E7:D7:A0:2D:F4:45:EE:F5:E3:51:5A:B5:3B:59:28:7D:6A
X509v3 Authority Key Identifier:
keyid:0B:A9:50:A3:8B:73:74:3B:2B:62:FE:53:1B:7B:11:35:FD:D6:C6:5D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/d506b5-9f62-4daf-bd62-d5ad6a45ad75/1/C6lQo4tzdDsrYv5TG3sRNf3Wxl0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:53:a9:cf:fc:b8:8d:fe:d9:d1:51:33:ed:24:74:7c:54:3a:
c4:78:d7:64:42:dd:07:20:7c:4d:cb:f8:33:5f:c2:6a:3a:de:
65:2b:fc:64:48:26:2f:2e:16:fb:e1:29:c1:8a:48:83:76:b6:
45:63:61:ea:11:85:4e:69:fc:06:58:18:26:3c:ee:15:84:f8:
09:8b:be:0a:b2:51:d7:43:11:e9:cb:bd:e1:c2:8d:ea:8d:63:
7f:b7:72:7f:12:be:b4:d5:3a:1d:ca:dd:0f:43:f4:0f:eb:53:
9f:f3:db:b3:9c:d9:2c:97:ed:0a:89:43:80:11:e5:93:c3:0a:
2a:5c:10:d6:76:c0:3f:29:93:6a:7d:7f:09:e5:9b:8e:c7:b8:
21:c0:0c:33:48:14:96:d2:15:c5:42:5e:f4:2d:00:05:ec:8e:
8c:a3:d0:8e:9d:0e:f0:4f:13:a8:67:b0:19:6b:12:01:b6:6a:
0d:b7:6e:4a:7f:20:8c:f9:4e:fa:f3:78:60:08:cf:c3:e0:22:
15:13:5f:96:e0:6b:1b:7e:60:95:a0:c2:ce:fb:79:a3:09:01:
2e:d4:3b:1f:e3:4b:13:74:aa:0d:c3:79:74:80:6f:16:68:0a:
54:8b:68:2f:04:3f:54:4e:e2:7f:0d:a8:cd:ce:15:70:84:8c:
8e:b0:26:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oWvgdx7lYPzQw0qc67hzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiYTk1MGEzOGI3Mzc0M2IyYjYyZmU1MzFiN2IxMTM1ZmRk
NmM2NWQwHhcNMjUwNjI4MTMwMjAxWhcNMjUwNjI5MTMwMjAxWjAzMTEwLwYDVQQD
Eyg2ZmUzN2JlN2Q3YTAyZGY0NDVlZWY1ZTM1MTVhYjUzYjU5Mjg3ZDZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5PxE1LdJev/0zLYXgApAGl6s8Zgw
5SvNr7pYG70obms6auRLyfEjaKm6QB9dS5tVAjHCStu8yjvgxpGCU+NgVCHc574/
s1/Aw6pz2HuS55sScSekzacyAp2mdRE4VHF7UIExOFoBWdxzKLdhB8CjDALJgp3c
/Uy0dhjJlwN2kbbmCu8JZ4tPSMKLASlaCCQ4NzUqtwFpJ42Ger8/JfTmYMe/Px1v
DZ/A+F2CxaV6ypfkSmeAXM8815nwt8rSKto1cdJZ9nR8IDmOS2UTgtFcVD1etUtR
aAHlQ8TYLd3rQadwUlzuKKehmdUi0hn928rHw5NnjN+bzBsVjDxlzNk3qQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG/je+fXoC30Re7141FatTtZKH1qMB8GA1UdIwQY
MBaAFAupUKOLc3Q7K2L+Uxt7ETX91sZdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzZsUW80dHpkRHNyWXY1VEczc1JOZjNXeGwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9kNTA2YjUtOWY2Mi00ZGFmLWJkNjIt
ZDVhZDZhNDVhZDc1LzEvQzZsUW80dHpkRHNyWXY1VEczc1JOZjNXeGwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9kNTA2YjUtOWY2Mi00ZGFmLWJkNjItZDVhZDZhNDVhZDc1
LzEvQzZsUW80dHpkRHNyWXY1VEczc1JOZjNXeGwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlVOpz/y4
jf7Z0VEz7SR0fFQ6xHjXZELdByB8Tcv4M1/CajreZSv8ZEgmLy4W++EpwYpIg3a2
RWNh6hGFTmn8BlgYJjzuFYT4CYu+CrJR10MR6cu94cKN6o1jf7dyfxK+tNU6Hcrd
D0P0D+tTn/Pbs5zZLJftColDgBHlk8MKKlwQ1nbAPymTan1/CeWbjse4IcAMM0gU
ltIVxUJe9C0ABeyOjKPQjp0O8E8TqGewGWsSAbZqDbduSn8gjPlO+vN4YAjPw+Ai
FRNfluBrG35glaDCzvt5owkBLtQ7H+NLE3SqDcN5dIBvFmgKVItoLwQ/VE7ifw2o
zc4VcISMjrAm5A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:41 2025 by rpki-client