Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
File: 7jSQhUVj0yIi6azlrYpknptKFyk.mft (raw, json)
Hash identifier: ZbqCaBQN6dCBPfBieV9vDavaUjhYKi62c3dWmfKzJ8w=
Subject key identifier: 30:9E:59:6D:0C:12:41:11:72:05:5E:6C:8F:91:60:B6:27:0D:F9:60
Authority key identifier: EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
Certificate issuer: /CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Certificate serial: 01974666F88434A327A4ED56BA8A4628F0A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
Manifest number: 01DC
Signing time: Fri 06 Jun 2025 18:00:42 +0000
Manifest this update: Fri 06 Jun 2025 18:00:42 +0000
Manifest next update: Sat 07 Jun 2025 18:00:42 +0000
Files and hashes: 1: 7jSQhUVj0yIi6azlrYpknptKFyk.crl (hash: zGdQ+Yb9o0HBa4xikOmLXc9RkCUSFvnaCvdwWYc4rSQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 18:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:66:f8:84:34:a3:27:a4:ed:56:ba:8a:46:28:f0:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ee3490854563d32222e9ace5ad8a649e9b4a1729
Validity
Not Before: Jun 6 18:00:42 2025 GMT
Not After : Jun 7 18:00:42 2025 GMT
Subject: CN=309e596d0c12411172055e6c8f9160b6270df960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:6d:65:dd:51:4b:5b:d1:3d:20:8a:c0:d3:83:
8e:21:c5:d8:cd:37:e9:ba:38:2b:47:81:b7:1e:c1:
5e:59:e7:7e:f2:8f:e5:d5:70:6b:61:c0:c9:fb:78:
3b:e0:84:d6:ea:8b:fa:3a:36:c9:cd:6c:2d:4d:93:
5c:6f:cf:c2:fc:fa:3f:79:1d:d5:c2:f7:57:8b:82:
21:7c:ee:c2:3d:e3:a8:cb:47:dc:68:41:bd:32:46:
ae:53:47:aa:ef:9c:ba:14:fc:96:be:3f:59:68:b2:
19:2c:f8:13:a7:3f:af:d7:b7:1e:fc:36:8b:b9:b1:
5a:ef:8c:6a:5e:60:cd:4c:65:5d:20:1c:22:2d:6a:
ea:35:7e:82:53:e6:ee:22:30:7f:2e:9b:05:6b:03:
2f:97:88:18:2e:b7:65:3c:d1:b5:a3:4e:11:ff:80:
26:59:eb:94:c4:44:23:bc:43:bd:01:7d:0b:3a:1b:
e5:81:0d:0f:c2:9d:bd:c0:ba:f8:e3:fb:3b:10:4e:
51:d2:95:84:05:2e:20:02:b0:15:69:3b:37:17:e4:
a2:1e:84:07:91:7e:e6:d8:d7:78:e0:d7:c6:93:f6:
2c:67:12:05:30:fb:ae:c6:73:64:0a:0f:46:83:3f:
10:19:17:ff:2d:f6:06:85:c2:6e:bf:93:95:3f:5e:
11:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:9E:59:6D:0C:12:41:11:72:05:5E:6C:8F:91:60:B6:27:0D:F9:60
X509v3 Authority Key Identifier:
keyid:EE:34:90:85:45:63:D3:22:22:E9:AC:E5:AD:8A:64:9E:9B:4A:17:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7jSQhUVj0yIi6azlrYpknptKFyk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/d02fbc-8bf5-468d-a2a3-45c53b7ef9fa/1/7jSQhUVj0yIi6azlrYpknptKFyk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:d5:d2:4d:5c:76:8d:8a:50:b7:ce:a0:d7:23:7b:39:47:0b:
c2:2d:c5:d0:67:fb:67:66:5e:6b:0c:df:f0:f4:b5:23:77:3f:
16:24:96:a1:84:a7:67:97:03:7e:f1:ab:8c:b3:42:d1:3b:b0:
f5:f5:e9:c5:fc:53:d8:91:a6:00:f4:6e:9e:19:1c:4d:8e:4a:
80:2f:2b:98:cc:1d:b3:54:61:98:b7:9a:b9:e1:20:dc:55:ba:
ee:77:40:46:73:06:75:e7:25:2d:16:7c:80:50:a4:6f:41:58:
d2:eb:fe:df:1e:b1:05:8c:72:c4:81:07:29:74:19:7c:76:62:
79:7c:6b:bf:bf:40:e6:31:ac:0b:3b:35:8d:3e:72:c6:30:26:
48:63:a6:ea:f2:55:9f:bd:b0:1d:83:1f:13:c3:dd:bc:7a:9f:
62:55:62:1f:eb:42:67:53:4c:72:a2:2d:94:38:00:70:08:d6:
66:54:28:cd:a1:a7:28:f6:e2:1f:9f:e4:45:0a:11:54:58:71:
53:4b:f6:e9:26:8e:60:60:0c:18:a6:80:d6:cd:ac:99:cd:30:
66:d5:c0:77:20:be:4b:eb:8b:7f:ba:a0:ab:66:2e:75:53:24:
a3:dc:e7:f8:13:e8:6b:72:7a:6b:2c:6c:40:ca:77:e9:7d:7a:
55:a6:e7:e1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGZviENKMnpO1WuopGKPCiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVlMzQ5MDg1NDU2M2QzMjIyMmU5YWNlNWFkOGE2NDllOWI0
YTE3MjkwHhcNMjUwNjA2MTgwMDQyWhcNMjUwNjA3MTgwMDQyWjAzMTEwLwYDVQQD
EygzMDllNTk2ZDBjMTI0MTExNzIwNTVlNmM4ZjkxNjBiNjI3MGRmOTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2G1l3VFLW9E9IIrA04OOIcXYzTfp
ujgrR4G3HsFeWed+8o/l1XBrYcDJ+3g74ITW6ov6OjbJzWwtTZNcb8/C/Po/eR3V
wvdXi4IhfO7CPeOoy0fcaEG9MkauU0eq75y6FPyWvj9ZaLIZLPgTpz+v17ce/DaL
ubFa74xqXmDNTGVdIBwiLWrqNX6CU+buIjB/LpsFawMvl4gYLrdlPNG1o04R/4Am
WeuUxEQjvEO9AX0LOhvlgQ0Pwp29wLr44/s7EE5R0pWEBS4gArAVaTs3F+SiHoQH
kX7m2Nd44NfGk/YsZxIFMPuuxnNkCg9Ggz8QGRf/LfYGhcJuv5OVP14RMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDCeWW0MEkERcgVebI+RYLYnDflgMB8GA1UdIwQY
MBaAFO40kIVFY9MiIums5a2KZJ6bShcpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy9kMDJmYmMtOGJmNS00NjhkLWEyYTMt
NDVjNTNiN2VmOWZhLzEvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy9kMDJmYmMtOGJmNS00NjhkLWEyYTMtNDVjNTNiN2VmOWZh
LzEvN2pTUWhVVmoweUlpNmF6bHJZcGtucHRLRnlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZdXSTVx2
jYpQt86g1yN7OUcLwi3F0Gf7Z2Zeawzf8PS1I3c/FiSWoYSnZ5cDfvGrjLNC0Tuw
9fXpxfxT2JGmAPRunhkcTY5KgC8rmMwds1RhmLeaueEg3FW67ndARnMGdeclLRZ8
gFCkb0FY0uv+3x6xBYxyxIEHKXQZfHZieXxrv79A5jGsCzs1jT5yxjAmSGOm6vJV
n72wHYMfE8PdvHqfYlViH+tCZ1NMcqItlDgAcAjWZlQozaGnKPbiH5/kRQoRVFhx
U0v26SaOYGAMGKaA1s2smc0wZtXAdyC+S+uLf7qgq2YudVMko9zn+BPoa3J6ayxs
QMp36X16Vabn4Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:45:45 2025 by rpki-client