Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
File: v0lCu3vSTK23SF6M6lklCaPH2vU.mft (raw, json)
Hash identifier: 9+kiL3oiLjOu0UcboqgtXSFn0oe6v9+h/Qx+ILytwEs=
Subject key identifier: 21:1C:93:31:7A:04:24:12:E0:1B:4B:2F:98:AD:E0:3A:96:76:45:64
Authority key identifier: BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
Certificate issuer: /CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Certificate serial: 019748FABEBAFCB892CF04E8108B400A86E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
Manifest number: 0AB1
Signing time: Sat 07 Jun 2025 06:01:21 +0000
Manifest this update: Sat 07 Jun 2025 06:01:21 +0000
Manifest next update: Sun 08 Jun 2025 06:01:21 +0000
Files and hashes: 1: v0lCu3vSTK23SF6M6lklCaPH2vU.crl (hash: AnfxyYl64WoLSKvf/5FRqkcLM8sunq3xrqnjvS3IH2Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:fa:be:ba:fc:b8:92:cf:04:e8:10:8b:40:0a:86:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bf4942bb7bd24cadb7485e8cea592509a3c7daf5
Validity
Not Before: Jun 7 06:01:21 2025 GMT
Not After : Jun 8 06:01:21 2025 GMT
Subject: CN=211c93317a042412e01b4b2f98ade03a96764564
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:3f:6a:40:d4:6e:77:e4:8b:7c:33:21:50:a6:
8e:61:35:b6:0d:13:7f:77:62:c6:27:71:20:71:dd:
73:f6:5b:e6:78:2e:c2:21:38:52:3c:e5:c5:cd:35:
eb:86:b8:e6:be:12:3b:e7:52:95:ef:de:48:f6:a2:
9b:88:eb:a7:94:84:fa:62:8d:d9:d7:f0:4a:d0:20:
87:df:77:d4:65:9b:8b:98:10:01:94:a0:93:bf:f6:
56:61:b7:68:c8:95:3f:03:cc:8b:ca:6b:4c:e5:7b:
1b:0f:04:34:7c:12:d5:ea:dc:fa:7e:d8:a0:77:cc:
3e:e1:dc:98:68:48:71:79:98:26:61:50:26:b7:e1:
4d:9d:ef:54:e4:f1:52:52:36:38:ea:76:95:71:7a:
49:da:36:03:d8:bd:3a:4e:60:49:0f:9a:62:51:8b:
c3:7a:0b:3d:03:62:a3:c9:8e:1c:fd:54:cc:cf:17:
5e:3e:fc:d0:7c:5e:02:66:f7:00:26:43:8b:87:d2:
28:95:92:4d:6b:a2:08:a5:04:e6:3a:1c:e4:b5:30:
57:f1:d5:3a:d7:46:57:66:bb:1c:0c:96:75:78:59:
83:ed:5b:82:3a:76:cc:48:85:f1:46:25:4c:91:e5:
9e:b5:c5:6a:11:e5:a9:c0:02:86:cd:8a:10:29:00:
41:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:1C:93:31:7A:04:24:12:E0:1B:4B:2F:98:AD:E0:3A:96:76:45:64
X509v3 Authority Key Identifier:
keyid:BF:49:42:BB:7B:D2:4C:AD:B7:48:5E:8C:EA:59:25:09:A3:C7:DA:F5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/v0lCu3vSTK23SF6M6lklCaPH2vU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/64/ad2c42-4d81-407a-a66b-2f94258ab69b/1/v0lCu3vSTK23SF6M6lklCaPH2vU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:d5:24:ac:53:b3:b5:6b:7a:91:66:0d:61:3b:65:6e:e6:62:
ae:ce:de:35:8f:bf:fa:56:0f:64:a5:e5:f0:84:a3:31:dc:f8:
42:56:a9:1a:f2:43:80:70:42:b2:6c:5f:cb:65:48:85:1b:ab:
31:8b:7b:ed:8e:68:0e:35:48:39:94:e9:50:f9:d6:9a:bf:6e:
01:7f:02:00:87:46:85:e1:74:85:04:12:a1:7d:73:70:b6:76:
ad:dd:b9:4d:d5:69:82:b2:da:94:9e:96:25:5c:0b:6d:68:ee:
d6:ab:1c:94:66:92:2d:15:ac:ca:20:88:f7:a3:cb:4a:c1:d5:
c9:3b:7b:cb:13:fd:a4:05:1c:f2:2e:ba:7b:e9:30:c5:15:5e:
07:d9:90:60:13:f9:49:c6:22:75:92:4a:82:9a:eb:b2:e8:83:
71:3a:e8:26:44:ac:59:25:e4:9c:7a:0a:75:ee:38:11:1d:34:
0c:58:f1:4d:f0:e4:cb:1c:67:54:f2:9f:df:cf:3f:da:b9:c0:
f7:6a:9d:6d:da:e3:ec:18:6b:6d:cf:95:12:03:ba:2c:34:4a:
8a:26:b4:9b:3d:44:59:0b:0a:f3:4a:09:a6:0f:9f:a8:49:3c:
da:36:ad:40:0d:1b:7c:cc:11:8f:01:53:16:be:b9:c3:4f:66:
69:6d:bd:61
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdI+r66/LiSzwToEItACobkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJmNDk0MmJiN2JkMjRjYWRiNzQ4NWU4Y2VhNTkyNTA5YTNj
N2RhZjUwHhcNMjUwNjA3MDYwMTIxWhcNMjUwNjA4MDYwMTIxWjAzMTEwLwYDVQQD
EygyMTFjOTMzMTdhMDQyNDEyZTAxYjRiMmY5OGFkZTAzYTk2NzY0NTY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnD9qQNRud+SLfDMhUKaOYTW2DRN/
d2LGJ3Egcd1z9lvmeC7CIThSPOXFzTXrhrjmvhI751KV795I9qKbiOunlIT6Yo3Z
1/BK0CCH33fUZZuLmBABlKCTv/ZWYbdoyJU/A8yLymtM5XsbDwQ0fBLV6tz6ftig
d8w+4dyYaEhxeZgmYVAmt+FNne9U5PFSUjY46naVcXpJ2jYD2L06TmBJD5piUYvD
egs9A2KjyY4c/VTMzxdePvzQfF4CZvcAJkOLh9IolZJNa6IIpQTmOhzktTBX8dU6
10ZXZrscDJZ1eFmD7VuCOnbMSIXxRiVMkeWetcVqEeWpwAKGzYoQKQBBiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEckzF6BCQS4BtLL5it4DqWdkVkMB8GA1UdIwQY
MBaAFL9JQrt70kytt0hejOpZJQmjx9r1MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdjBsQ3UzdlNUSzIzU0Y2TTZsa2xDYVBIMnZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NC9hZDJjNDItNGQ4MS00MDdhLWE2NmIt
MmY5NDI1OGFiNjliLzEvdjBsQ3UzdlNUSzIzU0Y2TTZsa2xDYVBIMnZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NC9hZDJjNDItNGQ4MS00MDdhLWE2NmItMmY5NDI1OGFiNjli
LzEvdjBsQ3UzdlNUSzIzU0Y2TTZsa2xDYVBIMnZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAm9UkrFOz
tWt6kWYNYTtlbuZirs7eNY+/+lYPZKXl8ISjMdz4QlapGvJDgHBCsmxfy2VIhRur
MYt77Y5oDjVIOZTpUPnWmr9uAX8CAIdGheF0hQQSoX1zcLZ2rd25TdVpgrLalJ6W
JVwLbWju1qsclGaSLRWsyiCI96PLSsHVyTt7yxP9pAUc8i66e+kwxRVeB9mQYBP5
ScYidZJKgprrsuiDcTroJkSsWSXknHoKde44ER00DFjxTfDkyxxnVPKf388/2rnA
92qdbdrj7Bhrbc+VEgO6LDRKiia0mz1EWQsK80oJpg+fqEk82jatQA0bfMwRjwFT
Fr65w09maW29YQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:21:12 2025 by rpki-client