Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier: fgHMHJIqawgevpJl/rFA24TqmBAqvxenPyTdSB9LxgM=
Subject key identifier: DD:64:68:69:FE:A5:18:43:64:0A:5E:A7:33:1C:D1:CD:C9:F1:2F:A6
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial: 01975045BDA5B9999BFFA84174E31D38E922
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number: 150E
Signing time: Sun 08 Jun 2025 16:00:37 +0000
Manifest this update: Sun 08 Jun 2025 16:00:37 +0000
Manifest next update: Mon 09 Jun 2025 16:00:37 +0000
Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: GuoJOxVc++6J/z05y2oMzvjbavM2Zz8qnhywkzKyQ8M=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:44:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:bd:a5:b9:99:9b:ff:a8:41:74:e3:1d:38:e9:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Validity
Not Before: Jun 8 16:00:37 2025 GMT
Not After : Jun 9 16:00:37 2025 GMT
Subject: CN=dd646869fea51843640a5ea7331cd1cdc9f12fa6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:de:34:c7:b3:65:f4:3c:5e:89:fb:a1:61:c1:
f4:4e:2c:cf:01:38:74:c4:40:ea:55:eb:79:21:d2:
d7:2f:48:87:35:19:ca:62:8a:1b:b7:56:00:01:d7:
df:6a:35:ad:8a:fa:fa:8b:64:7f:b4:c4:1a:61:0d:
03:9e:5b:b5:81:10:e2:53:01:ed:1e:b6:99:5d:47:
5f:f9:a6:2c:f6:f6:ef:fb:a8:02:3b:3e:7f:d0:58:
cc:4c:d6:63:70:fb:21:bc:07:26:83:5d:d4:54:51:
4f:86:3b:9c:25:a9:b1:87:34:b8:cc:6b:30:6f:18:
05:07:1f:25:99:c2:98:7b:28:7a:84:3f:d0:92:63:
9d:b1:0f:42:76:28:1a:8d:7c:17:26:31:17:71:51:
49:3d:2d:3b:e5:e0:a0:bb:10:f1:d0:55:5e:ca:9e:
8d:1d:4a:49:c9:21:16:f3:6c:16:6b:e1:ab:e3:63:
fd:7d:96:a5:53:6f:9b:f7:13:04:b2:11:73:70:1e:
c3:fd:c5:0a:48:8f:41:d9:2b:d7:fe:5e:3d:f8:ce:
7a:1e:36:d5:f8:b9:fd:ef:96:d7:14:d7:8f:bb:9c:
1a:3c:3c:62:04:7e:73:22:61:4d:45:1c:6b:24:a3:
cd:14:a8:c2:ef:0f:db:72:1c:40:10:f3:b9:3a:85:
f1:89
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:64:68:69:FE:A5:18:43:64:0A:5E:A7:33:1C:D1:CD:C9:F1:2F:A6
X509v3 Authority Key Identifier:
keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:7b:13:30:16:40:34:c5:da:3c:37:b7:cb:f7:c1:e0:dc:18:
1c:99:cc:6a:e1:f0:0f:52:10:98:31:fa:7e:66:a2:ba:55:8b:
ad:29:5e:a6:63:e8:61:56:61:20:00:e9:61:44:ba:3f:17:1d:
5d:f1:83:89:14:93:bc:6d:cf:f9:bf:a6:15:30:ff:72:93:73:
e9:91:4c:53:f0:1c:9d:9a:75:a4:f1:30:32:c5:e4:d2:f4:69:
88:98:51:96:43:38:d9:8e:d8:ef:a9:24:cc:8f:c8:03:47:d5:
7f:d8:a1:c2:3e:fb:c8:78:01:46:34:11:20:d1:80:e3:d5:f5:
1c:f5:e8:23:db:18:9f:7b:7f:65:bb:9d:66:42:04:92:38:30:
47:7b:9f:e5:0f:8c:4f:95:84:47:58:b9:94:e6:51:88:fd:08:
1a:80:94:8a:41:ac:e2:40:f3:d7:34:ed:d2:01:2a:14:92:7d:
ef:e5:be:d8:7e:16:ab:8d:1a:8a:cf:1f:22:79:47:f7:2c:c9:
49:66:06:28:79:08:63:c6:82:33:e7:76:bf:63:79:3c:d5:c7:
2a:bb:d5:0e:0f:c7:dc:a2:af:83:68:24:16:c7:1b:ce:c2:0c:
90:ff:c4:3c:d6:25:1e:83:45:6d:f1:40:df:e8:fc:6b:b4:da:
60:10:63:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRb2luZmb/6hBdOMdOOkiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTlhNmFlZmQzY2E4ZjUwZmM4ZjM0YWIzZDE0NzkyNTZk
YjlkNzgwHhcNMjUwNjA4MTYwMDM3WhcNMjUwNjA5MTYwMDM3WjAzMTEwLwYDVQQD
EyhkZDY0Njg2OWZlYTUxODQzNjQwYTVlYTczMzFjZDFjZGM5ZjEyZmE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAod40x7Nl9DxeifuhYcH0TizPATh0
xEDqVet5IdLXL0iHNRnKYoobt1YAAdffajWtivr6i2R/tMQaYQ0Dnlu1gRDiUwHt
HraZXUdf+aYs9vbv+6gCOz5/0FjMTNZjcPshvAcmg13UVFFPhjucJamxhzS4zGsw
bxgFBx8lmcKYeyh6hD/QkmOdsQ9CdigajXwXJjEXcVFJPS075eCguxDx0FVeyp6N
HUpJySEW82wWa+Gr42P9fZalU2+b9xMEshFzcB7D/cUKSI9B2SvX/l49+M56HjbV
+Ln975bXFNePu5waPDxiBH5zImFNRRxrJKPNFKjC7w/bchxAEPO5OoXxiQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN1kaGn+pRhDZApepzMc0c3J8S+mMB8GA1UdIwQY
MBaAFHkZpq79PKj1D8jzSrPRR5JW2514MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAt
OTExZTgzOTA0Y2ExLzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAtOTExZTgzOTA0Y2Ex
LzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV3sTMBZA
NMXaPDe3y/fB4NwYHJnMauHwD1IQmDH6fmaiulWLrSlepmPoYVZhIADpYUS6Pxcd
XfGDiRSTvG3P+b+mFTD/cpNz6ZFMU/AcnZp1pPEwMsXk0vRpiJhRlkM42Y7Y76kk
zI/IA0fVf9ihwj77yHgBRjQRINGA49X1HPXoI9sYn3t/ZbudZkIEkjgwR3uf5Q+M
T5WER1i5lOZRiP0IGoCUikGs4kDz1zTt0gEqFJJ97+W+2H4Wq40ais8fInlH9yzJ
SWYGKHkIY8aCM+d2v2N5PNXHKrvVDg/H3KKvg2gkFscbzsIMkP/EPNYlHoNFbfFA
3+j8a7TaYBBjfw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:04:14 2025 by rpki-client