Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
File: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft (raw, json)
Hash identifier: FqCUMeBsj2w7/grGBOv5EHc0TLzWaIMaC4/K50idgf8=
Subject key identifier: 7E:BA:54:3D:E8:F1:6B:73:CF:AF:91:E8:AC:46:92:6E:C2:3F:B0:BB
Authority key identifier: AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
Certificate issuer: /CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Certificate serial: 01974B8D99E4F342CF3730AA08C961BFFBBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
Manifest number: 08B2
Signing time: Sat 07 Jun 2025 18:01:00 +0000
Manifest this update: Sat 07 Jun 2025 18:01:00 +0000
Manifest next update: Sun 08 Jun 2025 18:01:00 +0000
Files and hashes: 1: rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl (hash: m46oMi6m+kEJeCKpzYmVuJXbNC40tQ1RReKm3S3ZxSg=)
2: sZ5FQpagRRLFHDrCpC-6uU_GQt4.roa (hash: R0iOrEjpTafz2w87NNGxT/0GFxwmG8GgeDCdte91gUA=)
3: uIQg-k4QoyqXWfTy_MZ6BVQABQM.roa (hash: Cx2jyvv/VKruIg91hf3AtutnP6nMOk9qU6tmjgX9EqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:99:e4:f3:42:cf:37:30:aa:08:c9:61:bf:fb:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac97eb967438ffc4eb66633dd8c03501893667f7
Validity
Not Before: Jun 7 18:01:00 2025 GMT
Not After : Jun 8 18:01:00 2025 GMT
Subject: CN=7eba543de8f16b73cfaf91e8ac46926ec23fb0bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:bf:49:81:2b:50:52:05:a5:0f:47:18:45:c0:
a7:e3:cb:7d:b9:99:f6:4c:84:c7:ca:e3:34:01:2d:
ca:a1:79:cb:cb:bc:42:17:93:5e:e0:88:be:24:47:
ab:c4:44:42:da:dc:d4:f4:ee:66:37:94:aa:a3:e7:
da:97:b7:6c:f3:b4:a5:01:9a:a5:c3:9e:c7:ed:f9:
45:a9:95:de:b5:47:e0:2f:e1:9f:07:4b:1d:90:1a:
a6:32:51:e1:eb:f7:ed:d1:b8:9a:ad:fd:1d:1a:b8:
b0:4c:9a:2b:e2:23:56:89:f4:69:38:02:65:72:ed:
8d:0b:6a:71:bf:13:34:73:68:48:15:67:b5:ad:53:
1b:53:c2:aa:0f:5e:9d:71:12:11:48:10:9b:90:29:
71:3b:e8:d9:3e:19:68:b0:53:47:d2:b1:13:d1:21:
c1:5e:f1:c9:ed:4c:54:f4:d0:95:af:6b:bc:a4:19:
84:8b:b8:b4:8b:71:7d:af:15:1c:60:e7:32:6c:57:
c8:82:35:23:67:94:60:27:8e:2a:44:cf:c0:90:ed:
a2:c3:27:79:21:ca:f5:81:a8:b8:7b:1e:f0:00:95:
fc:42:03:14:9c:18:bd:60:f3:dc:10:57:ce:9e:3d:
cc:7f:c4:e2:cc:ca:f8:af:96:6d:91:2f:5c:81:7b:
1b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:BA:54:3D:E8:F1:6B:73:CF:AF:91:E8:AC:46:92:6E:C2:3F:B0:BB
X509v3 Authority Key Identifier:
keyid:AC:97:EB:96:74:38:FF:C4:EB:66:63:3D:D8:C0:35:01:89:36:67:F7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/7fed52-d043-453b-8dd1-cf1997c0250d/1/rJfrlnQ4_8TrZmM92MA1AYk2Z_c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:47:8d:4e:a5:84:78:3b:7d:33:50:45:4c:ea:7e:54:30:d1:
4a:22:b2:32:2e:4b:41:78:4f:f5:87:06:5c:8b:46:6d:e9:b8:
01:61:37:64:f7:14:b0:10:92:ed:c3:e5:2f:93:a3:9b:23:36:
14:70:15:a3:91:e9:2d:1c:98:30:08:b3:9b:a2:40:96:0d:00:
bc:b1:66:61:df:7a:e3:58:e5:b5:c6:4a:6c:78:3c:6e:a5:18:
ca:82:5f:cd:8a:aa:16:95:b8:ea:a9:fd:e8:f4:b4:83:45:f5:
8f:19:49:8a:e0:d2:e4:21:78:c9:35:62:af:0b:bb:2d:cd:b6:
cb:8f:7a:94:e2:94:fe:89:ba:91:6d:88:46:61:12:b2:f0:17:
12:58:19:cd:93:5e:dd:7c:0e:95:d0:74:54:3e:4a:0b:c3:b2:
5a:90:17:7a:b0:b7:8f:bf:0a:f9:ff:2d:93:20:28:fc:91:43:
bf:20:9e:0b:8e:d4:df:ec:ee:a3:ed:7e:b7:79:72:b9:eb:91:
06:4e:65:09:e2:c1:fb:56:c2:00:9c:56:83:a5:e8:d0:5c:99:
7f:20:c4:4f:c6:30:c0:6b:4a:6f:af:5d:f9:b6:41:db:0d:6a:
a7:42:27:94:cf:11:97:95:d5:76:79:f7:a1:29:9a:e1:15:86:
bc:a8:8f:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjZnk80LPNzCqCMlhv/u9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOTdlYjk2NzQzOGZmYzRlYjY2NjMzZGQ4YzAzNTAxODkz
NjY3ZjcwHhcNMjUwNjA3MTgwMTAwWhcNMjUwNjA4MTgwMTAwWjAzMTEwLwYDVQQD
Eyg3ZWJhNTQzZGU4ZjE2YjczY2ZhZjkxZThhYzQ2OTI2ZWMyM2ZiMGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxr9JgStQUgWlD0cYRcCn48t9uZn2
TITHyuM0AS3KoXnLy7xCF5Ne4Ii+JEerxERC2tzU9O5mN5Sqo+fal7ds87SlAZql
w57H7flFqZXetUfgL+GfB0sdkBqmMlHh6/ft0biarf0dGriwTJor4iNWifRpOAJl
cu2NC2pxvxM0c2hIFWe1rVMbU8KqD16dcRIRSBCbkClxO+jZPhlosFNH0rET0SHB
XvHJ7UxU9NCVr2u8pBmEi7i0i3F9rxUcYOcybFfIgjUjZ5RgJ44qRM/AkO2iwyd5
Icr1gai4ex7wAJX8QgMUnBi9YPPcEFfOnj3Mf8TizMr4r5ZtkS9cgXsbtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH66VD3o8Wtzz6+R6KxGkm7CP7C7MB8GA1UdIwQY
MBaAFKyX65Z0OP/E62ZjPdjANQGJNmf3MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEt
Y2YxOTk3YzAyNTBkLzEvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wOS83ZmVkNTItZDA0My00NTNiLThkZDEtY2YxOTk3YzAyNTBk
LzEvckpmcmxuUTRfOFRyWm1NOTJNQTFBWWsyWl9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUeNTqWE
eDt9M1BFTOp+VDDRSiKyMi5LQXhP9YcGXItGbem4AWE3ZPcUsBCS7cPlL5OjmyM2
FHAVo5HpLRyYMAizm6JAlg0AvLFmYd9641jltcZKbHg8bqUYyoJfzYqqFpW46qn9
6PS0g0X1jxlJiuDS5CF4yTVirwu7Lc22y496lOKU/om6kW2IRmESsvAXElgZzZNe
3XwOldB0VD5KC8OyWpAXerC3j78K+f8tkyAo/JFDvyCeC47U3+zuo+1+t3lyueuR
Bk5lCeLB+1bCAJxWg6Xo0FyZfyDET8YwwGtKb69d+bZB2w1qp0InlM8Rl5XVdnn3
oSma4RWGvKiPNw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:28:51 2025 by rpki-client