
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
File: RmSgU4XAYmgVApGX6xUGSF09bRw.mft (raw, json)
Hash identifier: 6kRcKOpC6QCGssJbMNVhBRrCO5oIz1agXJ5R2vHxzLQ=
Subject key identifier: E3:F2:25:7A:DF:6A:13:34:CA:6F:41:B6:E9:E4:75:5D:1D:FA:47:85
Authority key identifier: 46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
Certificate issuer: /CN=4664a05385c0626815029197eb1506485d3d6d1c
Certificate serial: 019749D5FD9A726EE666A41F4E71A2C0C2FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
Manifest number: 06D2
Signing time: Sat 07 Jun 2025 10:00:50 +0000
Manifest this update: Sat 07 Jun 2025 10:00:50 +0000
Manifest next update: Sun 08 Jun 2025 10:00:50 +0000
Files and hashes: 1: RmSgU4XAYmgVApGX6xUGSF09bRw.crl (hash: 0kCr+bxfD9HybTCh5tAyA2LNxpbaqRCRxdvgbdu7Gfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:fd:9a:72:6e:e6:66:a4:1f:4e:71:a2:c0:c2:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4664a05385c0626815029197eb1506485d3d6d1c
Validity
Not Before: Jun 7 10:00:50 2025 GMT
Not After : Jun 8 10:00:50 2025 GMT
Subject: CN=e3f2257adf6a1334ca6f41b6e9e4755d1dfa4785
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:91:fe:a0:51:b3:5b:43:36:07:58:4b:50:68:
20:fd:0d:6a:54:43:0a:eb:62:d7:6f:ff:d2:67:2a:
de:a8:2d:72:0c:ca:53:31:74:66:43:88:98:e0:cf:
48:44:02:ac:05:e2:46:cf:3f:33:11:72:b1:d5:5e:
ed:e1:0c:a0:2c:e5:66:4f:f2:69:f4:d9:81:29:d3:
8e:bc:d1:e6:76:04:d5:67:97:24:0b:63:b9:c0:ab:
22:81:ff:ef:9f:49:41:e1:2d:03:8b:85:3e:d7:53:
87:8f:af:9f:7d:ba:43:95:bd:cc:2f:4d:fb:1c:1a:
69:ad:e8:ea:a7:4b:47:e4:52:ab:1c:b3:36:d2:dd:
31:8c:a2:79:e1:7c:58:88:36:e1:3a:59:85:2c:29:
86:18:3b:7a:61:a6:c8:ef:78:f2:3e:b1:77:43:90:
07:bf:62:3d:e2:29:45:24:92:24:df:29:8c:5b:08:
3f:e7:aa:05:e3:03:0f:ad:b9:e1:07:f4:71:65:81:
26:29:92:5c:3a:5a:af:fa:04:7a:02:da:6d:35:6b:
74:9b:2a:92:21:d5:04:3a:85:19:4c:97:ee:eb:33:
ef:47:37:03:aa:3d:4e:2c:c0:08:64:ad:e3:58:01:
1d:e5:56:5f:c9:c3:74:d8:29:89:3a:39:14:a7:b2:
29:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E3:F2:25:7A:DF:6A:13:34:CA:6F:41:B6:E9:E4:75:5D:1D:FA:47:85
X509v3 Authority Key Identifier:
keyid:46:64:A0:53:85:C0:62:68:15:02:91:97:EB:15:06:48:5D:3D:6D:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmSgU4XAYmgVApGX6xUGSF09bRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/bd7646-add9-4859-9de9-9c8485483d59/1/RmSgU4XAYmgVApGX6xUGSF09bRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
29:42:91:58:da:f9:df:db:1c:6a:ea:88:97:cd:b8:cb:64:c3:
17:3a:99:77:95:6e:a9:27:e5:83:88:a5:81:bb:f0:cb:75:90:
03:b2:f1:ac:73:63:36:f6:c4:b8:3b:ac:f5:92:52:c6:f5:19:
62:7b:5e:1d:32:90:fb:bd:60:51:d7:80:47:5f:08:5c:1c:46:
25:de:55:2d:52:8b:0f:2e:a2:e5:fc:68:1d:b9:41:cc:b9:d5:
96:65:73:45:df:01:a4:90:c6:04:51:1b:6d:23:9e:5c:de:d8:
69:37:42:8b:0e:4a:41:47:c8:07:89:2c:76:c3:2b:9c:cc:f9:
13:ee:3d:12:28:a7:1f:14:fd:b8:98:1b:f8:de:eb:13:ee:09:
f0:a3:4e:e1:0d:ad:5b:01:91:98:03:94:7e:50:94:58:d9:ef:
9c:f1:6d:a1:07:8b:9d:02:f3:62:83:9a:fd:25:17:22:17:83:
e2:ba:bd:89:04:eb:d1:95:2c:9a:ae:62:21:bf:7f:4a:24:f5:
34:55:09:ad:ed:5a:40:ea:b3:cd:ed:7d:fe:e6:b0:a2:12:d1:
ec:14:5e:0c:9b:7e:4f:c1:63:86:d6:22:3f:b5:dd:6b:09:25:
61:04:f9:e4:10:9e:e3:94:b8:b8:a1:eb:3f:7b:c6:14:14:df:
62:61:49:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1f2acm7mZqQfTnGiwML8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjRhMDUzODVjMDYyNjgxNTAyOTE5N2ViMTUwNjQ4NWQz
ZDZkMWMwHhcNMjUwNjA3MTAwMDUwWhcNMjUwNjA4MTAwMDUwWjAzMTEwLwYDVQQD
EyhlM2YyMjU3YWRmNmExMzM0Y2E2ZjQxYjZlOWU0NzU1ZDFkZmE0Nzg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpH+oFGzW0M2B1hLUGgg/Q1qVEMK
62LXb//SZyreqC1yDMpTMXRmQ4iY4M9IRAKsBeJGzz8zEXKx1V7t4QygLOVmT/Jp
9NmBKdOOvNHmdgTVZ5ckC2O5wKsigf/vn0lB4S0Di4U+11OHj6+ffbpDlb3ML037
HBpprejqp0tH5FKrHLM20t0xjKJ54XxYiDbhOlmFLCmGGDt6YabI73jyPrF3Q5AH
v2I94ilFJJIk3ymMWwg/56oF4wMPrbnhB/RxZYEmKZJcOlqv+gR6AtptNWt0myqS
IdUEOoUZTJfu6zPvRzcDqj1OLMAIZK3jWAEd5VZfycN02CmJOjkUp7Ip6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOPyJXrfahM0ym9BtunkdV0d+keFMB8GA1UdIwQY
MBaAFEZkoFOFwGJoFQKRl+sVBkhdPW0cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1TZ1U0WEFZbWdWQXBHWDZ4VUdTRjA5YlJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi9iZDc2NDYtYWRkOS00ODU5LTlkZTkt
OWM4NDg1NDgzZDU5LzEvUm1TZ1U0WEFZbWdWQXBHWDZ4VUdTRjA5YlJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi9iZDc2NDYtYWRkOS00ODU5LTlkZTktOWM4NDg1NDgzZDU5
LzEvUm1TZ1U0WEFZbWdWQXBHWDZ4VUdTRjA5YlJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKUKRWNr5
39scauqIl824y2TDFzqZd5VuqSflg4ilgbvwy3WQA7LxrHNjNvbEuDus9ZJSxvUZ
YnteHTKQ+71gUdeAR18IXBxGJd5VLVKLDy6i5fxoHblBzLnVlmVzRd8BpJDGBFEb
bSOeXN7YaTdCiw5KQUfIB4ksdsMrnMz5E+49EiinHxT9uJgb+N7rE+4J8KNO4Q2t
WwGRmAOUflCUWNnvnPFtoQeLnQLzYoOa/SUXIheD4rq9iQTr0ZUsmq5iIb9/SiT1
NFUJre1aQOqzze19/uawohLR7BReDJt+T8FjhtYiP7XdawklYQT55BCe45S4uKHr
P3vGFBTfYmFJxg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:09:27 2025 by rpki-client