Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
File: FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft (raw, json)
Hash identifier: my0l98t/WffbpEKsi1rkztqeTsbv5C3dByDckKDcDO4=
Subject key identifier: B7:EF:01:BB:CD:43:84:A0:79:BC:9F:9C:9A:1F:50:88:8A:70:45:64
Authority key identifier: 15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
Certificate issuer: /CN=15894575555cde14c770cbb183da5535d144b540
Certificate serial: 019752A2BF9647C21A45665C35EBE3061E13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
Manifest number: 156B
Signing time: Mon 09 Jun 2025 03:01:26 +0000
Manifest this update: Mon 09 Jun 2025 03:01:26 +0000
Manifest next update: Tue 10 Jun 2025 03:01:26 +0000
Files and hashes: 1: FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl (hash: /cjcOq8cg9v+Nq6l+W93BYypJ2htRqhkkYgCZ4jrkAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 03:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:a2:bf:96:47:c2:1a:45:66:5c:35:eb:e3:06:1e:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=15894575555cde14c770cbb183da5535d144b540
Validity
Not Before: Jun 9 03:01:26 2025 GMT
Not After : Jun 10 03:01:26 2025 GMT
Subject: CN=b7ef01bbcd4384a079bc9f9c9a1f50888a704564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:71:af:16:e3:6a:53:ce:c9:29:df:26:d8:5a:
7c:b5:c0:92:2a:d0:a1:b1:99:99:ef:cc:1f:a7:55:
f5:8b:56:6e:56:8d:ee:29:91:17:98:cd:26:bf:da:
8d:98:7a:e2:86:34:d2:2b:a9:f8:91:9e:f8:33:e3:
61:76:91:06:78:61:5e:8b:fa:14:33:fb:14:bf:42:
65:56:4d:a9:49:3c:22:4a:46:fc:7a:79:31:da:2a:
33:db:32:23:91:e1:4e:76:e1:b0:ef:9c:cb:5d:95:
04:2a:bb:29:b7:13:f5:9f:00:61:e0:d0:75:e1:c8:
73:36:8f:bb:e5:fa:5f:bc:4c:ee:77:6b:bc:92:dc:
5c:be:24:21:cd:eb:35:11:e8:e4:11:1e:7a:03:c3:
79:b0:df:01:c5:74:5f:c5:d6:d0:10:0d:06:7c:64:
a4:e7:87:f4:4e:8c:54:28:81:a4:12:5f:46:e1:b9:
3c:a7:81:da:f2:09:70:cc:30:78:f1:51:77:86:fc:
cc:b5:49:99:33:0a:e2:bd:06:05:39:91:27:5a:aa:
68:58:3e:cb:9e:bb:ad:57:be:5d:ad:4d:45:21:9c:
79:79:ff:e1:6f:e1:81:d4:1f:49:02:f9:fc:0b:99:
bd:b3:6f:84:b3:ff:43:79:41:c9:f3:3b:cd:2a:81:
32:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:EF:01:BB:CD:43:84:A0:79:BC:9F:9C:9A:1F:50:88:8A:70:45:64
X509v3 Authority Key Identifier:
keyid:15:89:45:75:55:5C:DE:14:C7:70:CB:B1:83:DA:55:35:D1:44:B5:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/FYlFdVVc3hTHcMuxg9pVNdFEtUA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/682722-04be-463b-922b-4a0312fb1a75/1/FYlFdVVc3hTHcMuxg9pVNdFEtUA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:c5:6d:e8:66:ae:f7:ff:97:a4:9b:be:1a:97:25:67:4f:13:
ae:bc:05:4e:3e:17:f3:f0:60:56:0c:22:4b:fe:98:87:14:89:
8a:a2:bd:de:ce:5c:a3:1a:df:e0:d0:71:d5:c7:c4:e2:99:7e:
1b:e9:e7:45:f0:2e:32:8f:84:0e:85:af:50:1e:17:bb:f2:e2:
cf:06:82:ca:21:d0:d7:9c:f7:3c:bd:9e:38:25:23:b5:7d:f2:
a0:74:eb:b1:d8:11:59:a5:ea:88:17:b8:89:5a:9d:f2:ab:36:
b6:04:22:69:e0:4c:cd:5a:cc:bc:a3:76:89:bf:76:ea:d6:10:
46:05:8c:18:75:d8:91:8f:14:87:64:1f:97:40:e5:e5:5d:b7:
8c:c4:bb:a5:68:99:ca:8a:be:46:a0:7b:c1:45:8c:5a:a8:76:
64:16:9e:f9:61:91:7d:fa:a3:77:93:61:90:bb:b2:a1:84:3b:
52:65:b2:43:b5:47:82:fa:43:40:d7:5f:ba:87:d5:36:12:8b:
62:26:1b:53:f3:85:3d:57:ee:bc:cc:6e:52:49:fc:90:93:2d:
9b:3d:44:2f:5e:29:95:19:e5:cd:06:1f:59:ae:95:e3:53:72:
08:0a:29:40:32:3d:d2:cb:8e:7e:36:72:33:61:be:0c:94:0e:
08:94:76:a0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSor+WR8IaRWZcNevjBh4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDE1ODk0NTc1NTU1Y2RlMTRjNzcwY2JiMTgzZGE1NTM1ZDE0
NGI1NDAwHhcNMjUwNjA5MDMwMTI2WhcNMjUwNjEwMDMwMTI2WjAzMTEwLwYDVQQD
EyhiN2VmMDFiYmNkNDM4NGEwNzliYzlmOWM5YTFmNTA4ODhhNzA0NTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxXGvFuNqU87JKd8m2Fp8tcCSKtCh
sZmZ78wfp1X1i1ZuVo3uKZEXmM0mv9qNmHrihjTSK6n4kZ74M+NhdpEGeGFei/oU
M/sUv0JlVk2pSTwiSkb8enkx2ioz2zIjkeFOduGw75zLXZUEKrsptxP1nwBh4NB1
4chzNo+75fpfvEzud2u8ktxcviQhzes1EejkER56A8N5sN8BxXRfxdbQEA0GfGSk
54f0ToxUKIGkEl9G4bk8p4Ha8glwzDB48VF3hvzMtUmZMwrivQYFOZEnWqpoWD7L
nrutV75drU1FIZx5ef/hb+GB1B9JAvn8C5m9s2+Es/9DeUHJ8zvNKoEywQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLfvAbvNQ4SgebyfnJofUIiKcEVkMB8GA1UdIwQY
MBaAFBWJRXVVXN4Ux3DLsYPaVTXRRLVAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRllsRmRWVmMzaFRIY011eGc5cFZOZEZFdFVBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS82ODI3MjItMDRiZS00NjNiLTkyMmIt
NGEwMzEyZmIxYTc1LzEvRllsRmRWVmMzaFRIY011eGc5cFZOZEZFdFVBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS82ODI3MjItMDRiZS00NjNiLTkyMmItNGEwMzEyZmIxYTc1
LzEvRllsRmRWVmMzaFRIY011eGc5cFZOZEZFdFVBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAecVt6Gau
9/+XpJu+GpclZ08TrrwFTj4X8/BgVgwiS/6YhxSJiqK93s5coxrf4NBx1cfE4pl+
G+nnRfAuMo+EDoWvUB4Xu/LizwaCyiHQ15z3PL2eOCUjtX3yoHTrsdgRWaXqiBe4
iVqd8qs2tgQiaeBMzVrMvKN2ib926tYQRgWMGHXYkY8Uh2Qfl0Dl5V23jMS7pWiZ
yoq+RqB7wUWMWqh2ZBae+WGRffqjd5NhkLuyoYQ7UmWyQ7VHgvpDQNdfuofVNhKL
YiYbU/OFPVfuvMxuUkn8kJMtmz1EL14plRnlzQYfWa6V41NyCAopQDI90suOfjZy
M2G+DJQOCJR2oA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:44:54 2025 by rpki-client