Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
File: _BUrSLlhZJs3weifgRBhU9x7FDU.mft (raw, json)
Hash identifier: RYNPkL6o5nM6pVLMoTMRCk4bKiyqYg/BT8wQ8PPj2ic=
Subject key identifier: 14:93:89:D4:3C:E4:F6:02:2C:87:2B:DC:FF:26:A7:3F:B6:1E:C6:F9
Authority key identifier: FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
Certificate issuer: /CN=fc152b48b961649b37c1e89f81106153dc7b1435
Certificate serial: 01974C6989859D229DFDB8F3AE0E3DA994CC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 22:01:14 +0000
Manifest this update: Sat 07 Jun 2025 22:01:14 +0000
Manifest next update: Sun 08 Jun 2025 22:01:14 +0000
Files and hashes: 1: _BUrSLlhZJs3weifgRBhU9x7FDU.crl (hash: 1XhQ6RFqAWnbDl/tx8lRNgt1B1MNuoJ6XB6NBhtaGKg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:89:85:9d:22:9d:fd:b8:f3:ae:0e:3d:a9:94:cc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fc152b48b961649b37c1e89f81106153dc7b1435
Validity
Not Before: Jun 7 22:01:14 2025 GMT
Not After : Jun 8 22:01:14 2025 GMT
Subject: CN=149389d43ce4f6022c872bdcff26a73fb61ec6f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:b1:b1:08:23:5c:3d:75:46:10:37:f5:8f:5f:
49:dc:5c:42:be:f6:55:31:d0:83:98:8d:3f:6b:64:
71:20:b0:5a:dc:d3:63:7d:0d:23:2a:e3:8e:45:c2:
f6:35:b7:5f:33:38:b2:af:50:b6:da:65:1c:e0:48:
ac:79:0a:5e:cb:fb:2f:d5:cc:c1:83:30:15:5e:36:
51:9d:26:3a:6e:a0:f5:e6:b1:79:75:43:ff:1d:81:
c6:24:68:2f:93:76:e6:59:c0:ea:70:19:fa:ca:5e:
64:27:ef:7a:c0:13:35:23:d7:f1:70:9d:01:8b:24:
29:0f:e1:95:0c:00:d5:95:28:62:db:93:39:b1:ff:
f5:6a:46:73:61:12:25:29:61:04:7b:41:43:fe:ef:
27:10:e7:8b:f5:22:ac:52:60:c5:f9:4e:b2:59:58:
ad:b6:77:87:75:01:35:ce:b2:3f:fb:6b:b5:1f:99:
89:2b:b8:93:0d:ec:02:95:f5:c4:2d:53:b5:af:3c:
a2:7e:90:47:b6:6e:b4:74:a6:81:7a:81:2b:66:1e:
52:77:10:c2:2d:09:8d:c1:1a:1e:27:ec:2a:1e:c6:
1b:ea:f2:2f:d3:db:dd:73:32:97:a8:11:4b:10:b1:
9c:06:e6:83:09:37:54:a7:72:73:2e:f7:3d:00:26:
18:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:93:89:D4:3C:E4:F6:02:2C:87:2B:DC:FF:26:A7:3F:B6:1E:C6:F9
X509v3 Authority Key Identifier:
keyid:FC:15:2B:48:B9:61:64:9B:37:C1:E8:9F:81:10:61:53:DC:7B:14:35
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_BUrSLlhZJs3weifgRBhU9x7FDU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/31/a9b355-7e5a-405d-8e4b-a47695141a9b/1/_BUrSLlhZJs3weifgRBhU9x7FDU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:e5:83:df:06:7d:44:4e:7e:31:c3:ef:79:6f:03:a6:1d:b1:
4e:2c:be:69:2a:86:e9:0f:a1:18:94:05:a6:e0:85:2d:6a:f9:
55:fb:18:2f:6b:12:5a:96:22:8d:5f:9b:35:34:2e:62:85:5b:
ad:f8:30:16:9d:80:81:3f:20:59:36:6c:ac:d8:f5:32:b0:ab:
93:88:8a:b5:91:ac:91:2b:87:33:b4:f2:e2:04:60:2e:f5:41:
51:50:07:f8:f2:fa:b5:fa:35:d0:4f:76:a5:62:b4:62:3a:d9:
91:ed:33:0f:18:db:01:75:ac:ea:fd:06:91:64:7c:8b:1c:f7:
01:28:60:12:a6:d6:50:53:3c:ea:0a:9c:54:d7:2c:52:cc:e1:
09:64:95:67:da:42:aa:7c:44:e3:58:6b:20:37:bd:14:d6:3e:
6c:17:10:9e:7e:15:af:da:de:cb:7f:31:e7:74:4e:97:9d:d6:
e3:6e:7c:39:63:ea:73:8f:3a:a6:8a:fd:d0:b3:bf:a5:35:8d:
8b:1d:b2:39:4c:3a:83:4b:f2:e9:b7:ec:ab:cc:b3:9d:31:5e:
7e:15:d5:77:81:c5:ca:49:4b:5c:5d:ba:cc:ea:39:a7:6f:bc:
ad:1c:a4:a1:73:68:24:39:83:d7:50:0f:56:fd:9c:ba:7d:c7:
e0:c6:d8:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMaYmFnSKd/bjzrg49qZTMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZjMTUyYjQ4Yjk2MTY0OWIzN2MxZTg5ZjgxMTA2MTUzZGM3
YjE0MzUwHhcNMjUwNjA3MjIwMTE0WhcNMjUwNjA4MjIwMTE0WjAzMTEwLwYDVQQD
EygxNDkzODlkNDNjZTRmNjAyMmM4NzJiZGNmZjI2YTczZmI2MWVjNmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqbGxCCNcPXVGEDf1j19J3FxCvvZV
MdCDmI0/a2RxILBa3NNjfQ0jKuOORcL2NbdfMziyr1C22mUc4EiseQpey/sv1czB
gzAVXjZRnSY6bqD15rF5dUP/HYHGJGgvk3bmWcDqcBn6yl5kJ+96wBM1I9fxcJ0B
iyQpD+GVDADVlShi25M5sf/1akZzYRIlKWEEe0FD/u8nEOeL9SKsUmDF+U6yWVit
tneHdQE1zrI/+2u1H5mJK7iTDewClfXELVO1rzyifpBHtm60dKaBeoErZh5SdxDC
LQmNwRoeJ+wqHsYb6vIv09vdczKXqBFLELGcBuaDCTdUp3JzLvc9ACYY2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBSTidQ85PYCLIcr3P8mpz+2Hsb5MB8GA1UdIwQY
MBaAFPwVK0i5YWSbN8Hon4EQYVPcexQ1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGIt
YTQ3Njk1MTQxYTliLzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMS9hOWIzNTUtN2U1YS00MDVkLThlNGItYTQ3Njk1MTQxYTli
LzEvX0JVclNMbGhaSnMzd2VpZmdSQmhVOXg3RkRVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC+WD3wZ9
RE5+McPveW8Dph2xTiy+aSqG6Q+hGJQFpuCFLWr5VfsYL2sSWpYijV+bNTQuYoVb
rfgwFp2AgT8gWTZsrNj1MrCrk4iKtZGskSuHM7Ty4gRgLvVBUVAH+PL6tfo10E92
pWK0YjrZke0zDxjbAXWs6v0GkWR8ixz3AShgEqbWUFM86gqcVNcsUszhCWSVZ9pC
qnxE41hrIDe9FNY+bBcQnn4Vr9rey38x53ROl53W4258OWPqc486por90LO/pTWN
ix2yOUw6g0vy6bfsq8yznTFefhXVd4HFyklLXF26zOo5p2+8rRykoXNoJDmD11AP
Vv2cun3H4MbY/w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:42:55 2025 by rpki-client