Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
File: r4poziKkwZ8XcA9izPi7bC2vUeE.mft (raw, json)
Hash identifier: dq1qPICNZLVnuqghLtEPK5dcJmkILslmSeNqJV31CtQ=
Subject key identifier: A5:5B:60:DE:D9:C2:C8:A4:0C:BF:E8:0D:94:71:7D:08:AE:AB:3E:93
Authority key identifier: AF:8A:68:CE:22:A4:C1:9F:17:70:0F:62:CC:F8:BB:6C:2D:AF:51:E1
Certificate issuer: /CN=af8a68ce22a4c19f17700f62ccf8bb6c2daf51e1
Certificate serial: 01974779D3D6137615924A136832C424A966
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
Manifest number: 0EF7
Signing time: Fri 06 Jun 2025 23:00:55 +0000
Manifest this update: Fri 06 Jun 2025 23:00:55 +0000
Manifest next update: Sat 07 Jun 2025 23:00:55 +0000
Files and hashes: 1: r4poziKkwZ8XcA9izPi7bC2vUeE.crl (hash: w86+dsyf4KJuSV8ky6WmRWQPBYCkXpd8vPecfpI22ck=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:d3:d6:13:76:15:92:4a:13:68:32:c4:24:a9:66
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af8a68ce22a4c19f17700f62ccf8bb6c2daf51e1
Validity
Not Before: Jun 6 23:00:55 2025 GMT
Not After : Jun 7 23:00:55 2025 GMT
Subject: CN=a55b60ded9c2c8a40cbfe80d94717d08aeab3e93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:78:36:74:26:63:e2:cd:40:ef:5f:39:e7:18:
94:80:b3:c0:62:26:28:22:90:5a:f3:36:02:55:cd:
be:94:88:41:c3:48:55:c8:0e:61:83:50:82:ee:28:
8f:93:2b:6c:9f:88:72:af:d2:8e:3a:c4:ae:72:73:
97:d7:83:05:05:31:59:c9:67:8e:38:d5:14:12:bd:
86:9e:13:b9:eb:fb:44:1f:cb:be:a2:ce:f1:3b:bb:
f6:67:dd:6a:8c:c0:ad:92:fc:d4:32:bf:94:6e:79:
ab:f4:21:18:42:88:e6:49:25:4a:67:bb:08:f9:31:
74:ae:e5:74:0c:11:d5:a1:04:81:11:1f:7b:c9:a9:
6c:1f:73:4b:e2:89:60:04:c1:33:78:d7:ef:e5:4a:
da:59:58:7d:61:36:5b:d0:1f:25:8a:45:c6:9d:a1:
b2:ec:75:d3:4d:01:e6:a7:9f:57:2c:02:8d:5c:28:
6b:f9:ea:b7:b5:a1:34:cc:0b:b3:96:0e:4d:87:fa:
7b:71:7f:8a:1e:87:e7:8c:f4:8d:7d:c6:7a:07:cd:
4c:31:27:b0:a0:9b:37:b1:3c:67:96:98:d3:dc:8b:
c3:a7:00:c3:33:a9:ae:02:57:cc:db:dd:93:93:30:
12:06:7f:7f:00:e1:f7:2a:08:a8:0c:f0:11:aa:ec:
83:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:5B:60:DE:D9:C2:C8:A4:0C:BF:E8:0D:94:71:7D:08:AE:AB:3E:93
X509v3 Authority Key Identifier:
keyid:AF:8A:68:CE:22:A4:C1:9F:17:70:0F:62:CC:F8:BB:6C:2D:AF:51:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4poziKkwZ8XcA9izPi7bC2vUeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1f/6b8ea6-f907-40d1-9e7d-d94e601843d1/1/r4poziKkwZ8XcA9izPi7bC2vUeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:4e:1c:3d:30:1e:66:bb:0b:fe:50:60:f9:ad:28:45:5a:66:
78:06:7d:02:25:b0:15:a1:e6:5f:00:0f:ad:07:46:a6:cc:b3:
88:ec:f0:45:7b:26:b1:8a:cd:dd:08:61:fe:0e:33:7f:0c:04:
2f:50:9b:4d:7b:17:4a:d0:d6:8e:2f:5a:ba:b9:b0:33:8b:48:
b2:a3:c1:11:42:dc:76:cf:81:e9:4d:92:96:65:00:cd:12:0c:
7f:4d:1f:c3:05:6b:fa:85:f6:a2:fa:d0:37:f4:a5:91:64:a4:
0a:e2:34:11:62:c6:16:c2:28:1a:03:9d:ea:e6:f4:dd:d9:1a:
95:b9:e8:5d:a9:4a:d6:44:5f:0c:26:6b:8d:4d:69:69:61:f6:
14:7b:41:a7:9d:7f:8a:d3:0b:8a:37:78:33:ef:c2:cc:c8:b7:
02:de:8c:a5:9b:88:20:06:cc:ff:30:43:ce:e7:79:52:9b:f1:
ff:be:cd:8c:6b:b9:62:9b:6d:2f:44:59:d5:85:54:0c:ab:c7:
2d:3f:c2:92:ee:a0:cd:ce:2a:d8:8b:10:a2:30:bf:d0:f0:53:
b8:0c:63:75:e6:c4:56:aa:67:60:e6:27:8f:17:45:a9:ae:e5:
2a:67:c1:c9:ed:96:52:8a:1d:18:13:ac:7d:d9:73:f8:92:d9:
97:6e:c6:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHedPWE3YVkkoTaDLEJKlmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOGE2OGNlMjJhNGMxOWYxNzcwMGY2MmNjZjhiYjZjMmRh
ZjUxZTEwHhcNMjUwNjA2MjMwMDU1WhcNMjUwNjA3MjMwMDU1WjAzMTEwLwYDVQQD
EyhhNTViNjBkZWQ5YzJjOGE0MGNiZmU4MGQ5NDcxN2QwOGFlYWIzZTkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+Xg2dCZj4s1A71855xiUgLPAYiYo
IpBa8zYCVc2+lIhBw0hVyA5hg1CC7iiPkytsn4hyr9KOOsSucnOX14MFBTFZyWeO
ONUUEr2GnhO56/tEH8u+os7xO7v2Z91qjMCtkvzUMr+Ubnmr9CEYQojmSSVKZ7sI
+TF0ruV0DBHVoQSBER97yalsH3NL4olgBMEzeNfv5UraWVh9YTZb0B8likXGnaGy
7HXTTQHmp59XLAKNXChr+eq3taE0zAuzlg5Nh/p7cX+KHofnjPSNfcZ6B81MMSew
oJs3sTxnlpjT3IvDpwDDM6muAlfM292TkzASBn9/AOH3KgioDPARquyDFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKVbYN7ZwsikDL/oDZRxfQiuqz6TMB8GA1UdIwQY
MBaAFK+KaM4ipMGfF3APYsz4u2wtr1HhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjRwb3ppS2t3WjhYY0E5aXpQaTdiQzJ2VWVFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZi82YjhlYTYtZjkwNy00MGQxLTllN2Qt
ZDk0ZTYwMTg0M2QxLzEvcjRwb3ppS2t3WjhYY0E5aXpQaTdiQzJ2VWVFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZi82YjhlYTYtZjkwNy00MGQxLTllN2QtZDk0ZTYwMTg0M2Qx
LzEvcjRwb3ppS2t3WjhYY0E5aXpQaTdiQzJ2VWVFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJk4cPTAe
ZrsL/lBg+a0oRVpmeAZ9AiWwFaHmXwAPrQdGpsyziOzwRXsmsYrN3Qhh/g4zfwwE
L1CbTXsXStDWji9aurmwM4tIsqPBEULcds+B6U2SlmUAzRIMf00fwwVr+oX2ovrQ
N/SlkWSkCuI0EWLGFsIoGgOd6ub03dkalbnoXalK1kRfDCZrjU1paWH2FHtBp51/
itMLijd4M+/CzMi3At6MpZuIIAbM/zBDzud5Upvx/77NjGu5YpttL0RZ1YVUDKvH
LT/Cku6gzc4q2IsQojC/0PBTuAxjdebEVqpnYOYnjxdFqa7lKmfBye2WUoodGBOs
fdlz+JLZl27GpA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:15:00 2025 by rpki-client