Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
File: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft (raw, json)
Hash identifier: p3g+wGPio8qUs/ClyWeR9jlx5FDkRoae2xHcPN/A1h8=
Subject key identifier: 37:C4:BB:8D:1E:17:2E:9D:7B:24:9B:84:60:75:72:EC:87:31:5F:57
Authority key identifier: FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
Certificate issuer: /CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Certificate serial: 01974967E02D8AC34EC0C4E01881A1784FBE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
Manifest number: 0291
Signing time: Sat 07 Jun 2025 08:00:33 +0000
Manifest this update: Sat 07 Jun 2025 08:00:33 +0000
Manifest next update: Sun 08 Jun 2025 08:00:33 +0000
Files and hashes: 1: 1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl (hash: wGjOjEAVf9l7rAVmVi2dKZOyB4VQniAivWQwNZXlT0Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:e0:2d:8a:c3:4e:c0:c4:e0:18:81:a1:78:4f:be
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fae115c302be0b4b8bcca0b32a8293a05c69d70b
Validity
Not Before: Jun 7 08:00:33 2025 GMT
Not After : Jun 8 08:00:33 2025 GMT
Subject: CN=37c4bb8d1e172e9d7b249b84607572ec87315f57
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:73:1d:6e:6e:c1:f7:6b:00:95:3f:be:3c:96:
41:68:eb:fe:68:19:bd:b9:19:5e:e7:ee:69:2e:53:
73:76:a9:e2:bd:8a:9e:62:ad:79:9b:17:91:64:cd:
b6:e4:7a:0d:c5:09:2c:86:1e:d5:d6:a8:17:3a:8b:
a1:53:5b:ac:c7:a3:df:6d:ff:20:ad:ee:33:67:7c:
b7:9f:d9:42:23:6e:d8:c6:8e:35:d8:ef:b9:1e:16:
0b:e6:05:2c:0c:49:c6:57:5f:ae:98:29:63:1a:8d:
17:37:d0:d9:ca:42:5c:42:ab:ac:2d:82:e2:34:c3:
43:c5:4d:6e:ca:59:b8:d9:44:59:9b:2c:30:1f:7d:
35:96:9c:30:ad:f1:90:ad:4a:92:1b:da:b8:ae:81:
cd:2c:04:39:e0:48:44:0c:b2:68:dc:d2:1f:da:51:
c6:32:0d:52:a7:bc:01:54:fc:fe:f5:78:10:0d:57:
84:e4:ea:59:4e:39:4a:60:68:cc:84:3a:c9:1f:dd:
97:21:8a:e0:80:65:02:03:26:74:1f:dd:e4:bb:08:
8b:8e:66:e5:5c:13:27:fa:09:7b:c2:9e:b7:62:45:
c4:d4:87:c3:64:e9:f2:78:0f:f3:67:07:3c:7c:2c:
12:bc:d4:d2:0a:2f:20:8e:7e:3d:08:fe:f8:aa:3b:
59:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
37:C4:BB:8D:1E:17:2E:9D:7B:24:9B:84:60:75:72:EC:87:31:5F:57
X509v3 Authority Key Identifier:
keyid:FA:E1:15:C3:02:BE:0B:4B:8B:CC:A0:B3:2A:82:93:A0:5C:69:D7:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-uEVwwK-C0uLzKCzKoKToFxp1ws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/ddeb79-6ab8-47e1-a5fe-d0f704e0309f/1/1-uEVwwK-C0uLzKCzKoKToFxp1ws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:56:1b:be:ce:5b:4f:00:e7:f1:d8:db:df:9e:77:e8:28:e0:
bf:2c:7d:bd:86:93:7d:03:d5:77:16:17:68:39:e7:e4:00:cb:
91:e8:ea:44:ac:e4:ae:50:e9:7d:de:5e:81:1e:a8:bc:ad:d0:
d2:fc:f0:d8:77:21:fd:86:52:b4:a9:52:e2:f5:5b:bb:be:c5:
10:71:3e:b2:04:98:3f:89:9e:3c:c5:bb:6a:cb:8b:4c:40:71:
50:e7:e1:74:48:eb:09:28:2c:60:53:20:86:ac:8d:c1:44:12:
c8:ce:03:b5:3a:01:8b:a5:0a:84:70:9f:10:10:b9:32:07:4c:
de:49:a1:18:6e:45:40:85:44:5a:07:2a:a1:c3:29:3d:5c:3a:
22:a6:96:d0:3a:7e:15:1a:5d:19:4d:17:e9:31:bc:61:f3:62:
6d:ef:70:98:c0:18:00:a8:a7:28:d3:f1:29:72:02:20:3d:c0:
41:94:14:88:97:ed:f4:a6:4f:eb:e6:1b:4a:0a:59:bc:ce:22:
66:ab:aa:61:47:ed:ce:20:7b:3d:99:3b:f8:90:16:6b:52:33:
f6:d8:14:cf:0e:0f:1f:a4:be:75:41:9c:90:ed:ea:9a:23:fd:
f3:3f:a8:fd:d2:37:97:83:6b:da:59:24:2d:3b:06:42:4c:28:
06:20:45:ba
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdJZ+AtisNOwMTgGIGheE++MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhZTExNWMzMDJiZTBiNGI4YmNjYTBiMzJhODI5M2EwNWM2
OWQ3MGIwHhcNMjUwNjA3MDgwMDMzWhcNMjUwNjA4MDgwMDMzWjAzMTEwLwYDVQQD
EygzN2M0YmI4ZDFlMTcyZTlkN2IyNDliODQ2MDc1NzJlYzg3MzE1ZjU3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu3Mdbm7B92sAlT++PJZBaOv+aBm9
uRle5+5pLlNzdqnivYqeYq15mxeRZM225HoNxQkshh7V1qgXOouhU1usx6Pfbf8g
re4zZ3y3n9lCI27Yxo412O+5HhYL5gUsDEnGV1+umCljGo0XN9DZykJcQqusLYLi
NMNDxU1uylm42URZmywwH301lpwwrfGQrUqSG9q4roHNLAQ54EhEDLJo3NIf2lHG
Mg1Sp7wBVPz+9XgQDVeE5OpZTjlKYGjMhDrJH92XIYrggGUCAyZ0H93kuwiLjmbl
XBMn+gl7wp63YkXE1IfDZOnyeA/zZwc8fCwSvNTSCi8gjn49CP74qjtZnQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFDfEu40eFy6deySbhGB1cuyHMV9XMB8GA1UdIwQY
MBaAFPrhFcMCvgtLi8ygsyqCk6BcadcLMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS11RVZ3d0stQzB1THpLQ3pLb0tUb0Z4cDF3cy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMjgvZGRlYjc5LTZhYjgtNDdlMS1hNWZl
LWQwZjcwNGUwMzA5Zi8xLzEtdUVWd3dLLUMwdUx6S0N6S29LVG9GeHAxd3MubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzI4L2RkZWI3OS02YWI4LTQ3ZTEtYTVmZS1kMGY3MDRlMDMw
OWYvMS8xLXVFVnd3Sy1DMHVMektDektvS1RvRnhwMXdzLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk1Yb
vs5bTwDn8djb35536Cjgvyx9vYaTfQPVdxYXaDnn5ADLkejqRKzkrlDpfd5egR6o
vK3Q0vzw2Hch/YZStKlS4vVbu77FEHE+sgSYP4mePMW7asuLTEBxUOfhdEjrCSgs
YFMghqyNwUQSyM4DtToBi6UKhHCfEBC5MgdM3kmhGG5FQIVEWgcqocMpPVw6IqaW
0Dp+FRpdGU0X6TG8YfNibe9wmMAYAKinKNPxKXICID3AQZQUiJft9KZP6+YbSgpZ
vM4iZquqYUftziB7PZk7+JAWa1Iz9tgUzw4PH6S+dUGckO3qmiP98z+o/dI3l4Nr
2lkkLTsGQkwoBiBFug==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:30:09 2025 by rpki-client