Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
File: S3DLCl46TlMIm1HemjcKXyM4dMY.mft (raw, json)
Hash identifier: 1qAElnfda6YNISxmvzvKLjmIvJfgLuLAu0amwAW0Ci8=
Subject key identifier: F8:86:61:D9:3D:15:90:15:10:BD:77:B6:98:24:5D:E8:19:29:30:BA
Authority key identifier: 4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
Certificate issuer: /CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Certificate serial: 0197469EA8E8A77C1C3FEA8B76EE7CB61EBD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
Manifest number: 1578
Signing time: Fri 06 Jun 2025 19:01:32 +0000
Manifest this update: Fri 06 Jun 2025 19:01:32 +0000
Manifest next update: Sat 07 Jun 2025 19:01:32 +0000
Files and hashes: 1: S3DLCl46TlMIm1HemjcKXyM4dMY.crl (hash: ezzISDPUXTm+X8lOjN9PNv7wpWvVTlx1hngyJZy0uJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:32 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:a8:e8:a7:7c:1c:3f:ea:8b:76:ee:7c:b6:1e:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b70cb0a5e3a4e53089b51de9a370a5f233874c6
Validity
Not Before: Jun 6 19:01:32 2025 GMT
Not After : Jun 7 19:01:32 2025 GMT
Subject: CN=f88661d93d15901510bd77b698245de8192930ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:d5:bf:b0:4d:8d:e1:45:5d:af:a1:54:64:b5:
d9:00:6d:ef:d7:49:aa:14:38:4e:6e:71:07:f6:34:
b3:82:f6:fd:63:d2:15:8e:7b:7d:bd:ca:9b:b9:e9:
31:d9:82:13:b3:30:b6:f0:c9:a7:91:54:80:9a:5a:
2e:86:68:0d:0c:e7:25:9d:0f:a1:51:c6:9e:96:8d:
04:9f:eb:5b:0c:71:c0:2f:b0:32:25:d1:29:f6:15:
24:50:32:cf:86:60:a3:96:06:82:0d:ca:8e:d0:8a:
cd:9a:a0:57:83:f3:fe:c4:60:1e:cc:17:40:21:6c:
42:7e:b7:ad:34:7b:4d:3f:30:03:cf:3b:83:9f:78:
ac:3e:80:de:b6:07:d5:de:8f:1a:7b:81:36:9e:9f:
83:89:38:50:78:13:87:b4:27:d4:44:ea:b7:b9:03:
75:c6:e6:96:30:7f:29:64:31:af:bb:0b:43:c6:f9:
55:6e:77:95:ed:49:a1:55:3a:5a:48:ad:96:f2:ab:
67:ce:ac:22:09:6f:9a:bd:5c:75:bb:45:c8:78:11:
b2:0c:1c:fc:80:2c:f6:d0:69:0f:32:6b:ae:21:81:
05:30:13:9e:3a:80:16:e7:74:f6:37:ec:51:e0:e9:
8e:be:87:16:84:55:b4:91:bb:69:76:b7:55:c3:46:
9a:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:86:61:D9:3D:15:90:15:10:BD:77:B6:98:24:5D:E8:19:29:30:BA
X509v3 Authority Key Identifier:
keyid:4B:70:CB:0A:5E:3A:4E:53:08:9B:51:DE:9A:37:0A:5F:23:38:74:C6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3DLCl46TlMIm1HemjcKXyM4dMY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/04e22e-e555-4ece-85cf-ce59522ef66f/1/S3DLCl46TlMIm1HemjcKXyM4dMY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:f9:1c:eb:dd:26:af:44:9e:8d:c6:e7:e6:c9:3f:31:fe:3f:
73:60:2b:4a:15:23:77:5a:17:f3:d2:2b:7d:ca:e4:43:b2:6c:
c7:28:d7:49:e4:86:7c:19:94:6b:79:af:5b:87:89:42:b7:28:
65:82:9e:d3:36:a1:43:d1:74:57:a7:61:cc:63:cc:81:e5:45:
e9:c2:a5:b4:09:98:0a:df:7f:47:84:52:4a:0c:98:9b:e8:4f:
d2:c3:03:34:16:49:19:a4:ef:10:67:4b:03:54:f6:4c:b6:a6:
36:f2:ae:60:bb:f5:e8:e8:dd:f1:cc:ef:7c:70:23:9d:da:71:
2d:88:d1:71:ab:2f:02:02:d5:14:63:06:e9:d1:26:74:8f:86:
13:1d:91:b6:ef:07:ee:55:28:1e:53:c4:f9:41:14:6f:c2:9a:
90:bf:4c:ce:f4:e0:02:ea:28:c1:bb:95:d4:99:06:4c:47:ac:
09:30:ae:39:eb:57:4b:1d:74:9c:fb:f5:8f:20:5e:1f:d4:ee:
76:7d:a8:0d:4b:69:63:fc:0a:73:7b:fa:7d:fd:bc:67:10:d5:
f9:a4:1f:8f:d9:7a:7a:9f:06:8d:2b:59:b2:9f:e1:e8:4b:65:
82:4b:07:0c:97:5e:bd:cf:57:ac:e1:32:38:c1:61:41:06:a0:
95:46:36:a2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnqjop3wcP+qLdu58th69MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiNzBjYjBhNWUzYTRlNTMwODliNTFkZTlhMzcwYTVmMjMz
ODc0YzYwHhcNMjUwNjA2MTkwMTMyWhcNMjUwNjA3MTkwMTMyWjAzMTEwLwYDVQQD
EyhmODg2NjFkOTNkMTU5MDE1MTBiZDc3YjY5ODI0NWRlODE5MjkzMGJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqtW/sE2N4UVdr6FUZLXZAG3v10mq
FDhObnEH9jSzgvb9Y9IVjnt9vcqbuekx2YITszC28MmnkVSAmlouhmgNDOclnQ+h
Ucaelo0En+tbDHHAL7AyJdEp9hUkUDLPhmCjlgaCDcqO0IrNmqBXg/P+xGAezBdA
IWxCfretNHtNPzADzzuDn3isPoDetgfV3o8ae4E2np+DiThQeBOHtCfUROq3uQN1
xuaWMH8pZDGvuwtDxvlVbneV7UmhVTpaSK2W8qtnzqwiCW+avVx1u0XIeBGyDBz8
gCz20GkPMmuuIYEFMBOeOoAW53T2N+xR4OmOvocWhFW0kbtpdrdVw0aahwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiGYdk9FZAVEL13tpgkXegZKTC6MB8GA1UdIwQY
MBaAFEtwywpeOk5TCJtR3po3Cl8jOHTGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2Yt
Y2U1OTUyMmVmNjZmLzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8wNGUyMmUtZTU1NS00ZWNlLTg1Y2YtY2U1OTUyMmVmNjZm
LzEvUzNETENsNDZUbE1JbTFIZW1qY0tYeU00ZE1ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAPkc690m
r0Sejcbn5sk/Mf4/c2ArShUjd1oX89IrfcrkQ7JsxyjXSeSGfBmUa3mvW4eJQrco
ZYKe0zahQ9F0V6dhzGPMgeVF6cKltAmYCt9/R4RSSgyYm+hP0sMDNBZJGaTvEGdL
A1T2TLamNvKuYLv16Ojd8czvfHAjndpxLYjRcasvAgLVFGMG6dEmdI+GEx2Rtu8H
7lUoHlPE+UEUb8KakL9MzvTgAuoowbuV1JkGTEesCTCuOetXSx10nPv1jyBeH9Tu
dn2oDUtpY/wKc3v6ff28ZxDV+aQfj9l6ep8GjStZsp/h6EtlgksHDJdevc9XrOEy
OMFhQQaglUY2og==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:08:02 2025 by rpki-client