Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
File: mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft (raw, json)
Hash identifier: 75DjdwFmRXEX2hTOcRuZoh+AtYe3IYHpH2LvUHmEVoQ=
Subject key identifier: 72:03:E9:29:DB:36:B2:75:6F:E5:16:97:11:E2:01:B5:66:68:5F:A0
Authority key identifier: 99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
Certificate issuer: /CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Certificate serial: 01974E20244D157BF77D8C3990F45BDBB690
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
Manifest number: 02AE
Signing time: Sun 08 Jun 2025 06:00:18 +0000
Manifest this update: Sun 08 Jun 2025 06:00:18 +0000
Manifest next update: Mon 09 Jun 2025 06:00:18 +0000
Files and hashes: 1: mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl (hash: KxZ7ogcTqP8uOPx6DPUZ+3Ce/cGbZuETq8lqF80pjas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:24:4d:15:7b:f7:7d:8c:39:90:f4:5b:db:b6:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9906ce2b1a980fbd1ef99c3f565368ad621bc4f4
Validity
Not Before: Jun 8 06:00:18 2025 GMT
Not After : Jun 9 06:00:18 2025 GMT
Subject: CN=7203e929db36b2756fe5169711e201b566685fa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:12:64:68:d5:46:1b:ad:23:9e:7a:80:c9:98:
d6:aa:eb:ca:f9:77:c8:f2:00:a5:03:50:9b:42:a6:
85:75:57:92:78:26:5d:ab:84:09:e8:74:bd:08:a0:
c6:b8:88:04:d2:cd:47:e7:c4:82:8e:63:b4:05:73:
c6:85:b5:0c:54:b9:53:b0:3b:20:93:89:a5:10:ce:
b3:d6:bf:5e:39:5a:2f:e0:05:e5:20:b6:5c:e2:5b:
09:78:f5:8b:fe:82:c0:fd:33:00:25:4c:19:8e:d9:
ca:e9:23:43:db:bf:46:81:0b:96:c3:1b:d9:f1:58:
70:81:db:45:79:32:84:95:32:1a:c4:24:17:9c:18:
ae:8c:b1:5c:65:7a:b1:96:fd:bf:71:2c:53:93:b5:
af:04:43:2c:66:38:4b:dc:ed:c4:3d:e1:fc:82:af:
a6:f3:8c:07:69:4e:70:c6:b2:7c:43:53:76:1b:96:
05:81:fa:e6:ac:e3:47:c8:54:93:9b:72:04:b5:08:
f8:7a:f4:f3:a2:43:2c:fa:6a:cd:f0:02:20:3c:2c:
b3:96:aa:23:3a:d7:df:64:ff:a4:86:90:3a:4b:a9:
c0:bb:b2:e9:75:d9:e2:a3:8b:1f:88:33:70:ed:5e:
d4:e0:08:30:39:65:44:ff:d4:b9:9a:5e:da:85:08:
d6:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:03:E9:29:DB:36:B2:75:6F:E5:16:97:11:E2:01:B5:66:68:5F:A0
X509v3 Authority Key Identifier:
keyid:99:06:CE:2B:1A:98:0F:BD:1E:F9:9C:3F:56:53:68:AD:62:1B:C4:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQbOKxqYD70e-Zw_VlNorWIbxPQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2c/f96dce-3a49-4571-b962-a2fe4991a037/1/mQbOKxqYD70e-Zw_VlNorWIbxPQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
79:71:e2:72:de:c1:90:98:c7:57:f0:c9:b5:29:0b:82:db:1c:
0b:a7:d9:16:b7:8c:ef:b7:04:9b:51:63:44:95:82:5d:00:54:
86:0f:c4:d6:57:57:36:7b:7e:43:ee:11:87:e7:60:48:1f:05:
50:d5:5d:1e:7c:c6:f2:6f:e8:5e:57:14:08:f3:d4:69:c7:dd:
cd:04:0e:10:19:49:5a:1e:de:79:c7:d7:54:17:b4:d5:6c:2a:
1c:73:6f:10:bc:64:74:fb:3b:56:0b:66:78:a0:6e:a8:5d:58:
3d:65:33:cf:7d:b3:8a:65:c2:1f:ec:2d:64:e1:ea:5d:b2:1f:
54:dd:be:3c:d3:52:90:54:fc:fe:08:63:1d:92:f6:50:14:da:
ef:e0:93:68:fd:1e:8d:87:27:8d:8d:52:eb:54:0a:32:79:1c:
da:6b:9c:43:9e:38:33:8d:02:a2:ea:e4:49:9c:1e:b8:94:13:
c4:59:f1:f0:69:14:45:e3:de:82:e8:fb:45:ee:4f:90:ce:55:
8f:2b:14:cf:9e:89:11:34:19:e5:b7:e8:d0:2b:39:e2:f5:6f:
e1:04:98:c0:f4:39:f7:31:38:44:26:11:c3:c4:8c:35:e1:1e:
26:25:37:1d:89:49:bc:d6:53:4d:8f:f6:af:0b:ac:26:ba:b8:
32:3d:b6:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOICRNFXv3fYw5kPRb27aQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MDZjZTJiMWE5ODBmYmQxZWY5OWMzZjU2NTM2OGFkNjIx
YmM0ZjQwHhcNMjUwNjA4MDYwMDE4WhcNMjUwNjA5MDYwMDE4WjAzMTEwLwYDVQQD
Eyg3MjAzZTkyOWRiMzZiMjc1NmZlNTE2OTcxMWUyMDFiNTY2Njg1ZmEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1RJkaNVGG60jnnqAyZjWquvK+XfI
8gClA1CbQqaFdVeSeCZdq4QJ6HS9CKDGuIgE0s1H58SCjmO0BXPGhbUMVLlTsDsg
k4mlEM6z1r9eOVov4AXlILZc4lsJePWL/oLA/TMAJUwZjtnK6SND279GgQuWwxvZ
8VhwgdtFeTKElTIaxCQXnBiujLFcZXqxlv2/cSxTk7WvBEMsZjhL3O3EPeH8gq+m
84wHaU5wxrJ8Q1N2G5YFgfrmrONHyFSTm3IEtQj4evTzokMs+mrN8AIgPCyzlqoj
OtffZP+khpA6S6nAu7Lpddnio4sfiDNw7V7U4AgwOWVE/9S5ml7ahQjW8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHID6SnbNrJ1b+UWlxHiAbVmaF+gMB8GA1UdIwQY
MBaAFJkGzisamA+9HvmcP1ZTaK1iG8T0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYy9mOTZkY2UtM2E0OS00NTcxLWI5NjIt
YTJmZTQ5OTFhMDM3LzEvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYy9mOTZkY2UtM2E0OS00NTcxLWI5NjItYTJmZTQ5OTFhMDM3
LzEvbVFiT0t4cVlENzBlLVp3X1ZsTm9yV0lieFBRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeXHict7B
kJjHV/DJtSkLgtscC6fZFreM77cEm1FjRJWCXQBUhg/E1ldXNnt+Q+4Rh+dgSB8F
UNVdHnzG8m/oXlcUCPPUacfdzQQOEBlJWh7eecfXVBe01WwqHHNvELxkdPs7Vgtm
eKBuqF1YPWUzz32zimXCH+wtZOHqXbIfVN2+PNNSkFT8/ghjHZL2UBTa7+CTaP0e
jYcnjY1S61QKMnkc2mucQ544M40CourkSZweuJQTxFnx8GkURePeguj7Re5PkM5V
jysUz56JETQZ5bfo0Cs54vVv4QSYwPQ59zE4RCYRw8SMNeEeJiU3HYlJvNZTTY/2
rwusJrq4Mj22+g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:49:27 2025 by rpki-client