Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier: DjctmflFIBg6mC7x29mHUC+ortBi02v8HVOHgBQqfNg=
Subject key identifier: BB:53:8F:F3:19:17:D0:6C:14:53:DF:C5:BF:06:EE:34:66:92:9F:7D
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial: 01975C4A855D0AA1568C3F64A224D2440264
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number: 03AB
Signing time: Wed 11 Jun 2025 00:01:16 +0000
Manifest this update: Wed 11 Jun 2025 00:01:16 +0000
Manifest next update: Thu 12 Jun 2025 00:01:16 +0000
Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: T2MINmBojOZucbDXg+b9umHvo++o/U2AMdAIEc25N9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5c:4a:85:5d:0a:a1:56:8c:3f:64:a2:24:d2:44:02:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Validity
Not Before: Jun 11 00:01:16 2025 GMT
Not After : Jun 12 00:01:16 2025 GMT
Subject: CN=bb538ff31917d06c1453dfc5bf06ee3466929f7d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:0b:d2:7e:59:be:6b:02:2e:17:e5:34:83:8a:
60:73:d2:ef:63:de:e3:20:86:84:80:5c:34:c0:37:
13:4b:84:e5:3a:e3:e2:17:3c:28:e5:64:a4:44:15:
5b:1e:f6:b7:b6:40:af:4e:42:88:4f:18:21:0c:6e:
4c:b0:f6:57:76:6b:93:ac:41:f9:8c:3a:31:77:58:
b4:f3:b5:90:3f:4c:51:0e:85:94:b8:45:26:e6:9a:
90:8a:7d:e5:09:91:cb:d5:8d:8e:09:a3:cf:e8:9a:
c3:e5:c3:8b:28:2c:7f:4c:98:b4:10:b3:bd:6e:9b:
73:12:ba:1d:08:ba:35:56:52:2a:dd:57:12:00:1c:
e9:2b:56:48:2c:9d:0c:05:4e:c9:69:d9:57:86:25:
87:cf:0c:3b:ec:e0:6e:27:05:ad:5e:f2:30:33:63:
4f:27:f0:38:a6:cb:19:89:39:40:88:77:62:1f:0b:
eb:b2:9b:e5:7c:e6:02:71:94:88:f1:eb:2a:41:7f:
8f:9e:9e:04:67:b6:65:5c:23:34:9c:ce:2e:18:b1:
50:ce:39:92:4c:39:0f:e6:e9:60:81:c4:99:d1:b9:
81:f7:24:f6:c7:31:7d:4b:5c:1a:a5:e5:d0:78:25:
64:25:ab:e5:7c:4b:56:97:6b:af:58:ed:23:49:ac:
d1:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:53:8F:F3:19:17:D0:6C:14:53:DF:C5:BF:06:EE:34:66:92:9F:7D
X509v3 Authority Key Identifier:
keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:c2:3d:5e:86:41:30:cb:1b:17:db:66:f4:1d:ba:b9:7f:ba:
9d:99:f8:f8:f8:ff:57:b7:e7:88:fd:37:6b:84:9a:c4:e4:e1:
db:a1:7b:2f:8b:35:46:4f:9a:13:8c:1f:8b:1f:33:86:14:19:
5c:17:bd:06:1a:1a:f7:b3:7a:47:90:09:76:06:6a:24:c6:e6:
b1:87:18:4c:2c:c8:1f:cf:e7:d8:b0:79:4a:86:db:aa:c7:e6:
00:63:b6:6b:b2:fb:6e:5f:36:59:5a:e9:e8:47:f8:90:ee:52:
69:c0:21:08:95:d6:fe:f2:53:ed:79:d5:7d:85:e7:65:0c:b0:
0a:2c:fa:68:f2:0e:c0:ab:aa:cf:b8:d5:6d:aa:c0:68:eb:28:
bd:71:52:70:5b:76:42:37:cd:5c:11:53:df:67:dc:b9:13:be:
d2:09:ce:5e:5c:be:9c:35:a0:0f:b6:e1:45:3d:94:73:69:6c:
c1:13:0c:21:05:6c:3e:0f:f0:57:41:73:72:74:e0:a7:d5:67:
df:d7:ec:20:e1:c1:7c:85:1d:87:ce:79:64:ce:9e:95:51:61:
37:90:87:43:97:d5:ee:9d:90:8c:5c:90:93:83:f0:3c:dd:80:
68:04:9a:6c:28:60:2d:b9:d3:70:66:df:81:ca:2f:76:75:08:
27:07:be:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdcSoVdCqFWjD9koiTSRAJkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOGVkY2I0YmVmMGFmMDE2ZjA1ODc2ZGRiY2U0Y2QyNGM3
ZGY3YWYwHhcNMjUwNjExMDAwMTE2WhcNMjUwNjEyMDAwMTE2WjAzMTEwLwYDVQQD
EyhiYjUzOGZmMzE5MTdkMDZjMTQ1M2RmYzViZjA2ZWUzNDY2OTI5ZjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswvSflm+awIuF+U0g4pgc9LvY97j
IIaEgFw0wDcTS4TlOuPiFzwo5WSkRBVbHva3tkCvTkKITxghDG5MsPZXdmuTrEH5
jDoxd1i087WQP0xRDoWUuEUm5pqQin3lCZHL1Y2OCaPP6JrD5cOLKCx/TJi0ELO9
bptzErodCLo1VlIq3VcSABzpK1ZILJ0MBU7JadlXhiWHzww77OBuJwWtXvIwM2NP
J/A4pssZiTlAiHdiHwvrspvlfOYCcZSI8esqQX+Pnp4EZ7ZlXCM0nM4uGLFQzjmS
TDkP5ulggcSZ0bmB9yT2xzF9S1wapeXQeCVkJavlfEtWl2uvWO0jSazRTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLtTj/MZF9BsFFPfxb8G7jRmkp99MB8GA1UdIwQY
MBaAFHCO3LS+8K8BbwWHbdvOTNJMffevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYt
NTdhMjQ3ZDM4MTcwLzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYtNTdhMjQ3ZDM4MTcw
LzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAMI9XoZB
MMsbF9tm9B26uX+6nZn4+Pj/V7fniP03a4SaxOTh26F7L4s1Rk+aE4wfix8zhhQZ
XBe9Bhoa97N6R5AJdgZqJMbmsYcYTCzIH8/n2LB5SobbqsfmAGO2a7L7bl82WVrp
6Ef4kO5SacAhCJXW/vJT7XnVfYXnZQywCiz6aPIOwKuqz7jVbarAaOsovXFScFt2
QjfNXBFT32fcuRO+0gnOXly+nDWgD7bhRT2Uc2lswRMMIQVsPg/wV0FzcnTgp9Vn
39fsIOHBfIUdh855ZM6elVFhN5CHQ5fV7p2QjFyQk4PwPN2AaASabChgLbnTcGbf
gcovdnUIJwe+bA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 06:49:49 2025 by rpki-client