Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
File: prEMlxD_hEDaQeVJvif-h38Uuwc.mft (raw, json)
Hash identifier: yCwh4KTGmjmRz2xZHigMbu0MmxjLsho07usUsHtiB9M=
Subject key identifier: 9B:40:BB:2A:E4:53:66:4B:04:09:B1:44:3C:3F:48:5D:97:F2:3F:56
Authority key identifier: A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
Certificate issuer: /CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Certificate serial: 0197469E4999B0FC08CFD5C3F9B8530506E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
Manifest number: 08D7
Signing time: Fri 06 Jun 2025 19:01:08 +0000
Manifest this update: Fri 06 Jun 2025 19:01:08 +0000
Manifest next update: Sat 07 Jun 2025 19:01:08 +0000
Files and hashes: 1: prEMlxD_hEDaQeVJvif-h38Uuwc.crl (hash: 7w31+Lsx14gQj/I5W05PInoZfKf4UyZ8dfey+S351CI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:49:99:b0:fc:08:cf:d5:c3:f9:b8:53:05:06:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6b10c9710ff8440da41e549be27fe877f14bb07
Validity
Not Before: Jun 6 19:01:08 2025 GMT
Not After : Jun 7 19:01:08 2025 GMT
Subject: CN=9b40bb2ae453664b0409b1443c3f485d97f23f56
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dc:94:90:d3:c2:83:13:cf:c8:c7:c1:3a:82:
1c:22:d9:da:d1:d5:ad:fc:71:8d:77:3c:e9:e5:78:
10:77:67:d9:da:6f:13:0f:42:4e:31:1d:0c:4b:ff:
43:1d:fa:e7:5c:95:6b:86:9f:77:0d:24:c0:fe:91:
8c:36:e2:a4:81:1a:f6:bb:60:e2:81:4a:ba:5d:c2:
01:b6:c6:b5:e0:46:58:7d:31:01:c6:39:95:b4:44:
c7:3e:21:1f:7d:62:6d:20:35:97:6e:9b:4e:52:28:
20:94:82:9e:c1:b5:9c:96:f6:6a:68:c2:cf:64:53:
7e:a8:10:74:d8:8c:53:1d:03:d5:76:58:65:9c:55:
4c:1b:63:44:16:68:e4:53:26:9a:ed:ec:83:b7:03:
6d:2d:27:db:d0:d4:01:ff:1e:ac:fd:26:e5:94:49:
42:13:e7:57:58:0d:1a:bf:e0:7e:c1:a7:81:06:97:
c9:5d:7e:38:9e:56:d6:b4:2f:b8:98:fd:14:87:a3:
79:8e:38:d5:04:16:bb:ae:65:6c:fe:31:f4:e5:f4:
a5:da:6c:8c:54:7f:ac:a4:97:99:5b:44:41:34:07:
b0:8c:02:50:44:19:97:f4:10:a3:4b:7d:c9:26:e1:
2b:09:49:27:a2:1c:2f:16:39:e4:47:92:a3:56:5f:
f4:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:40:BB:2A:E4:53:66:4B:04:09:B1:44:3C:3F:48:5D:97:F2:3F:56
X509v3 Authority Key Identifier:
keyid:A6:B1:0C:97:10:FF:84:40:DA:41:E5:49:BE:27:FE:87:7F:14:BB:07
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/prEMlxD_hEDaQeVJvif-h38Uuwc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/08/b21cf3-e576-427b-91c9-ce7f958d8135/1/prEMlxD_hEDaQeVJvif-h38Uuwc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:79:68:e0:4b:3d:36:6e:59:88:47:b8:ca:28:7b:77:e8:eb:
0f:7c:ee:19:a3:2c:3a:b2:8b:c4:8c:3b:f2:a3:ca:89:98:83:
66:6f:18:70:1e:b2:4d:a5:9d:59:49:78:a7:b0:8e:3a:10:bf:
50:bb:33:89:e3:85:82:86:ea:ae:33:d7:c6:a8:ed:00:fd:53:
47:13:99:47:58:fb:4c:89:25:5d:2a:99:66:0f:78:a3:4f:76:
80:91:58:69:fa:79:96:13:72:bb:30:eb:1d:ae:51:50:4b:3e:
b1:9b:73:f8:5e:f1:71:71:fc:ae:e9:44:7d:f3:b5:0c:95:fb:
89:45:be:0c:34:66:7d:cf:51:4b:5a:2f:0e:3c:7e:1a:95:33:
c0:c3:46:cb:8c:75:58:fb:53:f6:ee:91:9e:21:a1:b8:3c:f4:
2a:cd:60:e7:f0:e7:09:ff:9b:bb:df:fc:de:40:5e:d4:d3:1b:
59:2e:e2:d5:cb:b5:bb:1f:ec:d4:c5:72:04:d0:9f:db:05:e4:
3f:02:56:c5:74:7a:c9:ee:75:9b:b2:f1:8d:4c:2a:5b:db:f4:
7f:55:ac:22:14:c3:3f:2e:8c:e8:f4:1d:a4:21:59:09:45:fc:
2c:e4:7e:ec:e1:4a:dd:19:8e:42:21:03:b4:d4:c0:96:0d:35:
07:d1:7b:73
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnkmZsPwIz9XD+bhTBQbnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YjEwYzk3MTBmZjg0NDBkYTQxZTU0OWJlMjdmZTg3N2Yx
NGJiMDcwHhcNMjUwNjA2MTkwMTA4WhcNMjUwNjA3MTkwMTA4WjAzMTEwLwYDVQQD
Eyg5YjQwYmIyYWU0NTM2NjRiMDQwOWIxNDQzYzNmNDg1ZDk3ZjIzZjU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwdyUkNPCgxPPyMfBOoIcItna0dWt
/HGNdzzp5XgQd2fZ2m8TD0JOMR0MS/9DHfrnXJVrhp93DSTA/pGMNuKkgRr2u2Di
gUq6XcIBtsa14EZYfTEBxjmVtETHPiEffWJtIDWXbptOUigglIKewbWclvZqaMLP
ZFN+qBB02IxTHQPVdlhlnFVMG2NEFmjkUyaa7eyDtwNtLSfb0NQB/x6s/SbllElC
E+dXWA0av+B+waeBBpfJXX44nlbWtC+4mP0Uh6N5jjjVBBa7rmVs/jH05fSl2myM
VH+spJeZW0RBNAewjAJQRBmX9BCjS33JJuErCUknohwvFjnkR5KjVl/0PQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtAuyrkU2ZLBAmxRDw/SF2X8j9WMB8GA1UdIwQY
MBaAFKaxDJcQ/4RA2kHlSb4n/od/FLsHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOC9iMjFjZjMtZTU3Ni00MjdiLTkxYzkt
Y2U3Zjk1OGQ4MTM1LzEvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOC9iMjFjZjMtZTU3Ni00MjdiLTkxYzktY2U3Zjk1OGQ4MTM1
LzEvcHJFTWx4RF9oRURhUWVWSnZpZi1oMzhVdXdjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI3lo4Es9
Nm5ZiEe4yih7d+jrD3zuGaMsOrKLxIw78qPKiZiDZm8YcB6yTaWdWUl4p7COOhC/
ULszieOFgobqrjPXxqjtAP1TRxOZR1j7TIklXSqZZg94o092gJFYafp5lhNyuzDr
Ha5RUEs+sZtz+F7xcXH8rulEffO1DJX7iUW+DDRmfc9RS1ovDjx+GpUzwMNGy4x1
WPtT9u6RniGhuDz0Ks1g5/DnCf+bu9/83kBe1NMbWS7i1cu1ux/s1MVyBNCf2wXk
PwJWxXR6ye51m7LxjUwqW9v0f1WsIhTDPy6M6PQdpCFZCUX8LOR+7OFK3RmOQiED
tNTAlg01B9F7cw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:55:38 2025 by rpki-client