Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
File: bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft (raw, json)
Hash identifier: X3Nt1VK2yUOSnh3oyJwY6sVpfTe9F/1sYUppejFrTak=
Subject key identifier: 56:6E:14:41:64:E6:FD:1C:B3:F5:14:3C:A9:C9:86:48:93:3C:CE:D8
Authority key identifier: 6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
Certificate issuer: /CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Certificate serial: 019748FA2C6289BCB3D077C6FC54B44BFFEC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
Manifest number: 120E
Signing time: Sat 07 Jun 2025 06:00:44 +0000
Manifest this update: Sat 07 Jun 2025 06:00:44 +0000
Manifest next update: Sun 08 Jun 2025 06:00:44 +0000
Files and hashes: 1: bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl (hash: FBtmdeaqY6D1LRHGPpBJjyrpJ4/8B/YZkn1hz/q0yao=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 06:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:2c:62:89:bc:b3:d0:77:c6:fc:54:b4:4b:ff:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c51614b6bfb6c618783676911bdf3bc829f97d7
Validity
Not Before: Jun 7 06:00:44 2025 GMT
Not After : Jun 8 06:00:44 2025 GMT
Subject: CN=566e144164e6fd1cb3f5143ca9c98648933cced8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:54:b5:23:d9:a9:50:d2:64:ae:97:22:d0:60:
9b:da:bb:19:06:db:9f:ce:30:97:a7:e2:c3:50:35:
76:9f:5b:8a:d1:6f:0c:47:8d:ba:6c:d9:40:3f:79:
9b:b5:cc:26:ad:14:55:89:98:a3:30:50:37:5a:32:
d9:ae:d1:48:32:51:80:b5:55:a2:35:f3:45:6c:2e:
f6:d2:45:ae:61:8a:92:77:52:78:da:03:bf:8f:f0:
73:42:c8:83:d1:13:3d:89:90:b3:50:c2:7a:5f:82:
8c:42:97:60:99:d1:cb:31:0b:3b:83:2a:1c:cc:3d:
1c:0e:e7:eb:00:9b:f7:30:c7:31:c9:ac:ba:ae:dd:
8e:ce:07:50:8b:61:0f:7a:54:75:e3:d9:0a:80:0a:
d0:7b:9f:d3:58:5b:49:ef:bc:b4:d3:5f:61:13:15:
fa:7d:f9:79:07:c8:ba:8f:39:2f:4d:4b:6f:6d:ec:
b3:7c:db:e6:01:43:60:68:cf:7e:04:48:9d:eb:25:
ca:4d:3e:9c:27:a7:39:7e:5a:0b:65:16:5b:70:ae:
27:d8:26:a4:00:ed:a3:01:a9:25:0c:2e:d7:25:b1:
0b:45:17:c7:44:e0:f9:1a:61:29:9f:90:e3:f0:37:
d8:05:61:3e:30:5b:3d:4a:63:79:ae:9d:89:e6:45:
c7:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
56:6E:14:41:64:E6:FD:1C:B3:F5:14:3C:A9:C9:86:48:93:3C:CE:D8
X509v3 Authority Key Identifier:
keyid:6C:51:61:4B:6B:FB:6C:61:87:83:67:69:11:BD:F3:BC:82:9F:97:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bFFhS2v7bGGHg2dpEb3zvIKfl9c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/60ce7e-1923-4993-900c-7d5eb1831ef1/1/bFFhS2v7bGGHg2dpEb3zvIKfl9c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:b3:c3:19:1a:ef:a1:a9:15:98:03:d3:ca:a9:4d:b4:d4:35:
50:23:e8:67:a3:d2:68:d1:a3:11:c8:4e:16:8d:b2:fb:c2:c6:
e3:84:21:2f:55:cc:a6:13:6b:76:4e:9b:02:5b:f2:65:50:1e:
2b:bb:84:1f:a3:f0:6d:d9:f3:95:aa:8e:cb:31:93:e0:78:dc:
62:7d:30:87:ac:14:d6:ed:15:70:d3:03:22:fa:c5:ad:1a:7f:
1f:ab:05:bc:62:fb:ce:fe:c2:4d:18:80:1b:14:38:66:93:56:
de:09:90:a2:a3:79:ec:59:c7:9d:0d:69:f1:29:dd:1b:60:42:
f9:c0:3b:39:86:da:a0:de:47:e8:6d:8b:3a:b4:ae:3c:ca:39:
56:f2:4b:dc:97:52:0d:29:0a:b9:97:a2:40:43:ea:0e:e5:fc:
61:7b:bf:58:c3:cd:05:08:56:01:a5:ab:a0:05:6e:29:36:b5:
78:87:85:02:60:66:b4:e1:38:9f:e0:e1:0c:1c:82:df:5a:16:
6b:8d:b0:aa:1b:9d:9a:19:ea:ff:30:b2:72:99:f8:7f:2b:c2:
bf:c1:28:36:94:d7:00:9a:97:5b:11:92:16:9a:4d:f4:bb:9d:
75:6a:ba:9c:44:34:94:09:16:40:d6:8f:fe:4e:25:7c:02:2a:
46:b1:38:45
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+ixiibyz0HfG/FS0S//sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjNTE2MTRiNmJmYjZjNjE4NzgzNjc2OTExYmRmM2JjODI5
Zjk3ZDcwHhcNMjUwNjA3MDYwMDQ0WhcNMjUwNjA4MDYwMDQ0WjAzMTEwLwYDVQQD
Eyg1NjZlMTQ0MTY0ZTZmZDFjYjNmNTE0M2NhOWM5ODY0ODkzM2NjZWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2FS1I9mpUNJkrpci0GCb2rsZBtuf
zjCXp+LDUDV2n1uK0W8MR426bNlAP3mbtcwmrRRViZijMFA3WjLZrtFIMlGAtVWi
NfNFbC720kWuYYqSd1J42gO/j/BzQsiD0RM9iZCzUMJ6X4KMQpdgmdHLMQs7gyoc
zD0cDufrAJv3MMcxyay6rt2OzgdQi2EPelR149kKgArQe5/TWFtJ77y0019hExX6
ffl5B8i6jzkvTUtvbeyzfNvmAUNgaM9+BEid6yXKTT6cJ6c5floLZRZbcK4n2Cak
AO2jAaklDC7XJbELRRfHROD5GmEpn5Dj8DfYBWE+MFs9SmN5rp2J5kXHBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFZuFEFk5v0cs/UUPKnJhkiTPM7YMB8GA1UdIwQY
MBaAFGxRYUtr+2xhh4NnaRG987yCn5fXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkZGaFMydjdiR0dIZzJkcEViM3p2SUtmbDljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi82MGNlN2UtMTkyMy00OTkzLTkwMGMt
N2Q1ZWIxODMxZWYxLzEvYkZGaFMydjdiR0dIZzJkcEViM3p2SUtmbDljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi82MGNlN2UtMTkyMy00OTkzLTkwMGMtN2Q1ZWIxODMxZWYx
LzEvYkZGaFMydjdiR0dIZzJkcEViM3p2SUtmbDljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApLPDGRrv
oakVmAPTyqlNtNQ1UCPoZ6PSaNGjEchOFo2y+8LG44QhL1XMphNrdk6bAlvyZVAe
K7uEH6PwbdnzlaqOyzGT4HjcYn0wh6wU1u0VcNMDIvrFrRp/H6sFvGL7zv7CTRiA
GxQ4ZpNW3gmQoqN57FnHnQ1p8SndG2BC+cA7OYbaoN5H6G2LOrSuPMo5VvJL3JdS
DSkKuZeiQEPqDuX8YXu/WMPNBQhWAaWroAVuKTa1eIeFAmBmtOE4n+DhDByC31oW
a42wqhudmhnq/zCycpn4fyvCv8EoNpTXAJqXWxGSFppN9LuddWq6nEQ0lAkWQNaP
/k4lfAIqRrE4RQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:36:15 2025 by rpki-client