Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
File: jWvXmZuRV6pP3EcXQUWA1PziQDk.mft (raw, json)
Hash identifier: u1Du52pjgh4Sg00nTVs2NyzbdsseRMbVrZXV4Huo8Uk=
Subject key identifier: 46:22:2E:76:CC:97:34:AB:B3:FD:06:2F:E3:18:74:D7:78:E0:8C:8F
Authority key identifier: 8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
Certificate issuer: /CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Certificate serial: 01974E57A9A03CF6976CA7F1353BD2ACE080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
Manifest number: 0D53
Signing time: Sun 08 Jun 2025 07:00:57 +0000
Manifest this update: Sun 08 Jun 2025 07:00:57 +0000
Manifest next update: Mon 09 Jun 2025 07:00:57 +0000
Files and hashes: 1: jWvXmZuRV6pP3EcXQUWA1PziQDk.crl (hash: zBXSIwY4lzRfBtZ1Ku538xwAjFrRlVJAtVcIP3j7XqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:a9:a0:3c:f6:97:6c:a7:f1:35:3b:d2:ac:e0:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d6bd7999b9157aa4fdc4717414580d4fce24039
Validity
Not Before: Jun 8 07:00:57 2025 GMT
Not After : Jun 9 07:00:57 2025 GMT
Subject: CN=46222e76cc9734abb3fd062fe31874d778e08c8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:ab:d9:b7:18:81:f4:f5:43:92:6a:67:b2:1e:
0f:5a:08:b4:a9:b5:ca:a0:52:ef:c7:a4:ff:7c:df:
e5:8f:8a:ad:1b:51:7d:2b:78:a6:0a:b2:cd:43:95:
f2:e4:20:8e:25:9d:57:2f:66:ff:91:7d:2f:c9:cf:
f8:65:81:04:05:42:45:a9:1a:c9:3f:0d:1a:f0:53:
69:26:fb:04:c1:76:da:fc:5a:55:1e:ec:f1:9c:3f:
a6:76:80:dc:8f:49:4b:09:67:ec:4d:b7:14:51:05:
e2:8d:c4:25:fd:dc:24:c2:40:84:b0:cd:6a:7c:d2:
8a:e9:cd:08:fc:0f:3d:03:d4:4d:d9:82:7b:ef:74:
ac:a5:43:8e:f6:86:e6:7f:18:47:06:a4:71:20:e2:
11:32:56:1a:45:ed:14:a2:dc:db:f3:66:23:45:aa:
44:66:84:71:e0:5d:b7:3f:91:e5:31:44:c3:20:50:
ec:b8:18:08:dd:bd:e3:6f:5d:ee:68:ad:0a:5f:d4:
f1:11:ab:1d:3e:39:5b:86:e4:d8:20:57:b4:42:f2:
5b:2f:6f:76:9c:b4:2b:0c:55:0c:5f:1b:8a:44:e1:
4c:1c:66:58:4c:c8:95:a7:c3:2b:7d:52:35:19:62:
d9:74:d2:6d:71:cc:f7:3c:a1:eb:77:b1:e7:e1:78:
e5:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:22:2E:76:CC:97:34:AB:B3:FD:06:2F:E3:18:74:D7:78:E0:8C:8F
X509v3 Authority Key Identifier:
keyid:8D:6B:D7:99:9B:91:57:AA:4F:DC:47:17:41:45:80:D4:FC:E2:40:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jWvXmZuRV6pP3EcXQUWA1PziQDk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f3eff6-fef1-4d9b-944d-69fa4fb021af/1/jWvXmZuRV6pP3EcXQUWA1PziQDk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:58:9c:16:d1:0b:ae:15:ce:a8:89:b5:4b:16:2f:da:dc:19:
3a:83:97:ae:2d:71:50:99:70:cb:41:51:d0:07:62:e9:4c:83:
7a:da:11:27:10:79:1e:4a:d8:66:9d:56:6d:fa:7a:f0:38:8d:
af:59:98:d9:50:68:40:cd:20:ea:3d:c1:29:2d:e9:a9:4e:b3:
71:ef:e2:8f:d7:2d:96:83:3b:05:16:ae:96:8d:01:1b:d3:c9:
c8:03:a9:c5:db:31:90:70:53:4c:0f:60:a2:56:8b:91:be:f6:
06:b2:5b:dd:67:87:48:65:9c:1d:af:d1:70:2d:e5:fe:ce:90:
b7:d2:8a:65:86:02:b5:02:1f:9e:f3:0c:9e:81:d0:34:fc:30:
0c:7d:64:c2:77:b4:e5:5e:f4:ee:19:02:96:78:26:25:b5:5e:
92:90:bb:c2:24:02:55:34:b9:d1:0a:06:0e:d3:d7:f0:d7:15:
d4:ed:01:aa:ba:95:81:c7:1e:4d:35:89:13:f2:78:66:74:f6:
ad:49:c2:fa:b7:3d:b6:21:b2:6e:34:e9:21:70:25:cb:56:76:
e6:77:d6:8e:79:2e:80:6a:1e:a1:d8:aa:1c:9b:1f:4c:4e:28:
ef:2c:59:f6:e8:d2:b6:7e:b2:a6:8e:f7:89:21:1f:b3:75:91:
9b:32:6c:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV6mgPPaXbKfxNTvSrOCAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNmJkNzk5OWI5MTU3YWE0ZmRjNDcxNzQxNDU4MGQ0ZmNl
MjQwMzkwHhcNMjUwNjA4MDcwMDU3WhcNMjUwNjA5MDcwMDU3WjAzMTEwLwYDVQQD
Eyg0NjIyMmU3NmNjOTczNGFiYjNmZDA2MmZlMzE4NzRkNzc4ZTA4YzhmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoavZtxiB9PVDkmpnsh4PWgi0qbXK
oFLvx6T/fN/lj4qtG1F9K3imCrLNQ5Xy5CCOJZ1XL2b/kX0vyc/4ZYEEBUJFqRrJ
Pw0a8FNpJvsEwXba/FpVHuzxnD+mdoDcj0lLCWfsTbcUUQXijcQl/dwkwkCEsM1q
fNKK6c0I/A89A9RN2YJ773SspUOO9obmfxhHBqRxIOIRMlYaRe0Uotzb82YjRapE
ZoRx4F23P5HlMUTDIFDsuBgI3b3jb13uaK0KX9TxEasdPjlbhuTYIFe0QvJbL292
nLQrDFUMXxuKROFMHGZYTMiVp8MrfVI1GWLZdNJtccz3PKHrd7Hn4XjlKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEYiLnbMlzSrs/0GL+MYdNd44IyPMB8GA1UdIwQY
MBaAFI1r15mbkVeqT9xHF0FFgNT84kA5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvald2WG1adVJWNnBQM0VjWFFVV0ExUHppUURrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mM2VmZjYtZmVmMS00ZDliLTk0NGQt
NjlmYTRmYjAyMWFmLzEvald2WG1adVJWNnBQM0VjWFFVV0ExUHppUURrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mM2VmZjYtZmVmMS00ZDliLTk0NGQtNjlmYTRmYjAyMWFm
LzEvald2WG1adVJWNnBQM0VjWFFVV0ExUHppUURrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAVicFtEL
rhXOqIm1SxYv2twZOoOXri1xUJlwy0FR0Adi6UyDetoRJxB5HkrYZp1Wbfp68DiN
r1mY2VBoQM0g6j3BKS3pqU6zce/ij9ctloM7BRaulo0BG9PJyAOpxdsxkHBTTA9g
olaLkb72BrJb3WeHSGWcHa/RcC3l/s6Qt9KKZYYCtQIfnvMMnoHQNPwwDH1kwne0
5V707hkClngmJbVekpC7wiQCVTS50QoGDtPX8NcV1O0BqrqVgcceTTWJE/J4ZnT2
rUnC+rc9tiGybjTpIXAly1Z25nfWjnkugGoeodiqHJsfTE4o7yxZ9ujStn6ypo73
iSEfs3WRmzJsnA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 15:58:58 2025 by rpki-client