Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
File: dQRxYHUyqMev1g1PMXqtxJDrogY.mft (raw, json)
Hash identifier: n7+hEdcA378ZpaPfAllZLwMOyaXNfAvMPwU/mdWR3bc=
Subject key identifier: C0:CC:96:A0:D7:6A:8A:3C:DA:9E:0E:DB:DF:27:67:AC:52:17:35:5B
Authority key identifier: 75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
Certificate issuer: /CN=750471607532a8c7afd60d4f317aadc490eba206
Certificate serial: 01974E5731CBB4DA2EBE7E7BD548B6FE66F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
Manifest number: 157B
Signing time: Sun 08 Jun 2025 07:00:26 +0000
Manifest this update: Sun 08 Jun 2025 07:00:26 +0000
Manifest next update: Mon 09 Jun 2025 07:00:26 +0000
Files and hashes: 1: dQRxYHUyqMev1g1PMXqtxJDrogY.crl (hash: +DkzjjLwMQllAXLb+LKqmQ0495Qtwh58NbF1JNk+zqU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:31:cb:b4:da:2e:be:7e:7b:d5:48:b6:fe:66:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=750471607532a8c7afd60d4f317aadc490eba206
Validity
Not Before: Jun 8 07:00:26 2025 GMT
Not After : Jun 9 07:00:26 2025 GMT
Subject: CN=c0cc96a0d76a8a3cda9e0edbdf2767ac5217355b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:e2:05:a2:0c:32:9c:be:5b:b7:a8:be:95:bb:
e8:1e:1a:17:38:fe:2f:7e:7a:9b:bb:a8:1f:85:96:
ca:1d:5a:66:43:df:79:55:ab:17:95:d4:01:f9:f5:
45:57:bf:05:90:c7:bb:3c:ba:91:5b:72:47:3d:6b:
52:07:e9:ba:f8:70:90:81:f7:9b:71:26:48:d4:12:
67:be:b1:59:ff:e4:db:d9:42:41:01:1e:73:fb:80:
e5:1c:8b:8d:33:79:e0:5b:49:87:e7:9c:40:47:a9:
66:2e:22:52:85:2d:01:ee:0d:77:da:3c:c0:16:0f:
9c:92:3a:2b:05:9a:af:b7:29:7e:22:2b:ff:b3:97:
6e:11:9f:e0:35:d6:8a:f5:2b:c0:fc:52:aa:37:03:
e3:13:09:8c:84:00:a9:3e:19:18:7b:57:6a:21:17:
84:45:71:8d:9b:73:25:ba:ae:43:72:8c:9d:56:d8:
f4:16:45:af:41:e7:1d:c0:48:0b:d0:50:48:82:dd:
e1:c7:d4:0a:60:a1:84:c2:f2:ea:83:49:29:4c:43:
3c:c1:67:e8:c2:56:ba:18:70:8f:34:86:a5:50:eb:
a4:f6:8e:45:b8:9b:29:8c:a7:2e:36:13:7a:74:66:
c8:dd:c8:43:84:ce:07:84:bf:be:00:79:16:9b:3f:
99:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C0:CC:96:A0:D7:6A:8A:3C:DA:9E:0E:DB:DF:27:67:AC:52:17:35:5B
X509v3 Authority Key Identifier:
keyid:75:04:71:60:75:32:A8:C7:AF:D6:0D:4F:31:7A:AD:C4:90:EB:A2:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dQRxYHUyqMev1g1PMXqtxJDrogY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/33/dfa6a1-1e4c-49ff-a480-274232d69505/1/dQRxYHUyqMev1g1PMXqtxJDrogY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:52:bc:47:3d:2e:15:d0:3c:93:e1:e1:7f:23:42:c1:7a:89:
f8:19:63:18:74:24:f9:2a:68:86:54:50:88:1c:db:2f:3a:0d:
5d:ba:28:c6:dd:a5:fa:0f:21:5d:6d:e2:8f:ba:e0:82:81:67:
ad:25:31:7c:23:a9:bf:57:cc:f2:85:a9:ae:73:56:61:6d:89:
af:b0:db:64:85:a0:e1:61:7d:a2:49:81:89:1b:91:55:c7:a6:
a0:1a:0a:e3:1f:06:68:3a:fc:7e:92:22:aa:ec:e2:26:87:dc:
8b:69:64:93:50:c8:42:55:34:29:eb:0e:af:12:c6:33:85:5f:
d2:18:ee:59:5e:5e:5e:67:91:66:66:a8:8a:d5:24:a8:0d:ef:
25:f8:8a:d8:0a:ea:b9:5b:a8:cc:eb:9d:46:6f:d5:61:66:bb:
d7:63:58:05:f2:b4:35:bb:6a:65:d9:5f:38:53:d9:93:50:84:
07:7b:78:dc:f9:d3:00:dc:c1:56:c1:e6:a9:46:0d:3e:dd:d1:
03:3d:3e:ef:10:e2:b6:96:16:89:41:eb:20:82:4f:77:11:7f:
b3:4a:b6:43:e9:1e:2c:9b:36:86:b0:fb:02:50:c6:a3:97:e8:
7c:87:7d:ff:97:aa:d0:cc:e9:65:4b:8e:32:dd:a3:91:1a:2b:
d0:28:b9:dc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOVzHLtNouvn571Ui2/mbxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MDQ3MTYwNzUzMmE4YzdhZmQ2MGQ0ZjMxN2FhZGM0OTBl
YmEyMDYwHhcNMjUwNjA4MDcwMDI2WhcNMjUwNjA5MDcwMDI2WjAzMTEwLwYDVQQD
EyhjMGNjOTZhMGQ3NmE4YTNjZGE5ZTBlZGJkZjI3NjdhYzUyMTczNTViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3+IFogwynL5bt6i+lbvoHhoXOP4v
fnqbu6gfhZbKHVpmQ995VasXldQB+fVFV78FkMe7PLqRW3JHPWtSB+m6+HCQgfeb
cSZI1BJnvrFZ/+Tb2UJBAR5z+4DlHIuNM3ngW0mH55xAR6lmLiJShS0B7g132jzA
Fg+ckjorBZqvtyl+Iiv/s5duEZ/gNdaK9SvA/FKqNwPjEwmMhACpPhkYe1dqIReE
RXGNm3Mluq5DcoydVtj0FkWvQecdwEgL0FBIgt3hx9QKYKGEwvLqg0kpTEM8wWfo
wla6GHCPNIalUOuk9o5FuJspjKcuNhN6dGbI3chDhM4HhL++AHkWmz+ZkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMDMlqDXaoo82p4O298nZ6xSFzVbMB8GA1UdIwQY
MBaAFHUEcWB1MqjHr9YNTzF6rcSQ66IGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFFSeFlIVXlxTWV2MWcxUE1YcXR4SkRyb2dZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMy9kZmE2YTEtMWU0Yy00OWZmLWE0ODAt
Mjc0MjMyZDY5NTA1LzEvZFFSeFlIVXlxTWV2MWcxUE1YcXR4SkRyb2dZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMy9kZmE2YTEtMWU0Yy00OWZmLWE0ODAtMjc0MjMyZDY5NTA1
LzEvZFFSeFlIVXlxTWV2MWcxUE1YcXR4SkRyb2dZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHlK8Rz0u
FdA8k+HhfyNCwXqJ+BljGHQk+SpohlRQiBzbLzoNXbooxt2l+g8hXW3ij7rggoFn
rSUxfCOpv1fM8oWprnNWYW2Jr7DbZIWg4WF9okmBiRuRVcemoBoK4x8GaDr8fpIi
quziJofci2lkk1DIQlU0KesOrxLGM4Vf0hjuWV5eXmeRZmaoitUkqA3vJfiK2Arq
uVuozOudRm/VYWa712NYBfK0NbtqZdlfOFPZk1CEB3t43PnTANzBVsHmqUYNPt3R
Az0+7xDitpYWiUHrIIJPdxF/s0q2Q+keLJs2hrD7AlDGo5fofId9/5eq0MzpZUuO
Mt2jkRor0Ci53A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:14:19 2025 by rpki-client