Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
File: I1HFLSNz9aW3LcbdEqddE7JluQQ.mft (raw, json)
Hash identifier: PTGt3BcmePElsyvctN9EEa8fy7vR5O4uBZQCmEGV5G4=
Subject key identifier: 60:B9:13:10:3B:D9:2F:64:63:36:0B:4C:05:93:AB:9C:7B:7F:CE:B8
Authority key identifier: 23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
Certificate issuer: /CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Certificate serial: 01984F6724C7BF92767745151B6553C7E75B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
Manifest number: 1323
Signing time: Mon 28 Jul 2025 05:00:16 +0000
Manifest this update: Mon 28 Jul 2025 05:00:16 +0000
Manifest next update: Tue 29 Jul 2025 05:00:16 +0000
Files and hashes: 1: I1HFLSNz9aW3LcbdEqddE7JluQQ.crl (hash: bxrYGCoTM8MGr08r372Pd9reMSkAgMYuh93nC9woMgc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 23:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4f:67:24:c7:bf:92:76:77:45:15:1b:65:53:c7:e7:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2351c52d2373f5a5b72dc6dd12a75d13b265b904
Validity
Not Before: Jul 28 05:00:16 2025 GMT
Not After : Jul 29 05:00:16 2025 GMT
Subject: CN=60b913103bd92f6463360b4c0593ab9c7b7fceb8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:5a:41:f0:a1:43:50:be:44:9f:74:df:cf:44:
5a:aa:94:bf:8f:d8:39:da:b0:75:3f:36:e3:1d:83:
c7:05:b3:48:cb:10:76:18:bb:fc:dc:c7:fe:a2:9d:
2a:c1:86:3c:3a:26:6b:bc:da:83:33:26:e9:c2:ba:
7b:ba:76:26:0c:cd:66:eb:bd:f1:39:e3:12:37:13:
2f:5a:0c:fe:d7:a6:bf:f6:f4:90:5f:84:d3:fc:62:
56:75:08:c3:3c:e8:7f:8d:31:ae:f6:62:b2:88:7e:
04:a6:b6:77:0f:ef:56:dd:7a:8d:22:5d:87:61:9c:
af:64:7e:f2:68:60:48:57:55:7e:05:73:ed:67:c7:
8a:a2:0d:7a:51:cc:83:a7:6b:de:58:67:f3:a1:86:
cf:69:b1:61:d9:e1:bd:e8:00:22:5b:6c:de:86:6d:
c3:e1:67:eb:8f:ef:d2:74:b9:4e:45:14:28:09:24:
a3:56:a9:07:d1:8e:20:ca:91:55:d1:9d:e9:dd:e4:
39:6a:ae:6c:54:0e:be:70:f1:de:f2:3d:0a:c7:d6:
04:70:ee:80:55:75:b1:88:bd:db:c9:6a:b5:3c:db:
25:1e:1c:76:19:08:5a:c3:6a:0c:c5:b8:35:fd:50:
90:cc:92:b1:2b:28:97:34:11:ff:d1:b2:f4:b7:08:
af:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
60:B9:13:10:3B:D9:2F:64:63:36:0B:4C:05:93:AB:9C:7B:7F:CE:B8
X509v3 Authority Key Identifier:
keyid:23:51:C5:2D:23:73:F5:A5:B7:2D:C6:DD:12:A7:5D:13:B2:65:B9:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I1HFLSNz9aW3LcbdEqddE7JluQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/efece3-e530-46c8-b388-9873afa73e7e/1/I1HFLSNz9aW3LcbdEqddE7JluQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:72:f4:86:93:2c:c1:d0:3d:fc:97:da:d3:41:a3:92:bb:28:
08:f7:2d:8b:ae:a1:f4:6d:77:c6:1c:a1:74:3d:de:9d:f9:7c:
e8:47:8e:64:c2:97:e5:57:28:94:aa:4a:dd:bd:c1:18:d3:9a:
37:f6:22:95:c9:1a:22:93:1b:9f:e9:81:a4:7a:36:9a:bc:b6:
72:38:fe:33:80:7c:a2:7b:4d:9e:a6:0b:1d:71:96:3c:93:35:
86:56:14:23:57:45:e9:11:30:c7:5f:91:b7:20:54:91:5c:21:
b5:66:7c:af:37:13:64:45:9d:10:b3:bd:97:94:c4:83:40:4c:
5b:90:11:9b:03:81:2c:60:1e:55:83:f8:f6:0e:11:28:e7:51:
3f:78:a2:e0:58:73:45:d2:c0:fd:dc:17:e1:ff:ed:f4:51:be:
e2:af:93:f3:06:77:0d:b4:97:56:0a:4c:7a:04:f2:4c:4e:97:
80:9f:b3:0f:72:89:cd:4b:11:6b:9a:b1:c0:bf:49:d8:06:05:
ed:a3:ac:62:d3:27:5f:66:69:73:73:1a:0a:53:87:6c:40:1c:
72:37:6e:c1:11:74:03:0f:99:9b:9b:bb:5c:1e:dd:5e:9a:34:
d6:7a:1e:b2:3a:d2:ec:c3:4e:3b:b7:8d:2e:b8:3e:c1:46:e9:
66:e1:73:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhPZyTHv5J2d0UVG2VTx+dbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzNTFjNTJkMjM3M2Y1YTViNzJkYzZkZDEyYTc1ZDEzYjI2
NWI5MDQwHhcNMjUwNzI4MDUwMDE2WhcNMjUwNzI5MDUwMDE2WjAzMTEwLwYDVQQD
Eyg2MGI5MTMxMDNiZDkyZjY0NjMzNjBiNGMwNTkzYWI5YzdiN2ZjZWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxVpB8KFDUL5En3Tfz0RaqpS/j9g5
2rB1PzbjHYPHBbNIyxB2GLv83Mf+op0qwYY8OiZrvNqDMybpwrp7unYmDM1m673x
OeMSNxMvWgz+16a/9vSQX4TT/GJWdQjDPOh/jTGu9mKyiH4EprZ3D+9W3XqNIl2H
YZyvZH7yaGBIV1V+BXPtZ8eKog16UcyDp2veWGfzoYbPabFh2eG96AAiW2zehm3D
4Wfrj+/SdLlORRQoCSSjVqkH0Y4gypFV0Z3p3eQ5aq5sVA6+cPHe8j0Kx9YEcO6A
VXWxiL3byWq1PNslHhx2GQhaw2oMxbg1/VCQzJKxKyiXNBH/0bL0twivcQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGC5ExA72S9kYzYLTAWTq5x7f864MB8GA1UdIwQY
MBaAFCNRxS0jc/Wlty3G3RKnXROyZbkEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTFIRkxTTno5YVczTGNiZEVxZGRFN0psdVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS9lZmVjZTMtZTUzMC00NmM4LWIzODgt
OTg3M2FmYTczZTdlLzEvSTFIRkxTTno5YVczTGNiZEVxZGRFN0psdVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS9lZmVjZTMtZTUzMC00NmM4LWIzODgtOTg3M2FmYTczZTdl
LzEvSTFIRkxTTno5YVczTGNiZEVxZGRFN0psdVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoHL0hpMs
wdA9/Jfa00GjkrsoCPcti66h9G13xhyhdD3enfl86EeOZMKX5VcolKpK3b3BGNOa
N/YilckaIpMbn+mBpHo2mry2cjj+M4B8ontNnqYLHXGWPJM1hlYUI1dF6REwx1+R
tyBUkVwhtWZ8rzcTZEWdELO9l5TEg0BMW5ARmwOBLGAeVYP49g4RKOdRP3ii4Fhz
RdLA/dwX4f/t9FG+4q+T8wZ3DbSXVgpMegTyTE6XgJ+zD3KJzUsRa5qxwL9J2AYF
7aOsYtMnX2Zpc3MaClOHbEAccjduwRF0Aw+Zm5u7XB7dXpo01noesjrS7MNOO7eN
Lrg+wUbpZuFz3g==
-----END CERTIFICATE-----
Generated at Mon Jul 28 07:21:53 2025 by rpki-client