Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
File: its62HX3YlxjkjZZ8UKVjbeHijI.mft (raw, json)
Hash identifier: A48cBv2bvw6r3dqHlL1LziWca0u3y7rgmPPZDCILY7M=
Subject key identifier: B5:AE:17:4C:E3:81:54:30:C7:38:36:E7:9A:C0:F9:4E:82:83:3C:76
Authority key identifier: 8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
Certificate issuer: /CN=8adb3ad875f7625c63923659f142958db7878a32
Certificate serial: 019754234D629F2A6FC1465071558AB4F775
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
Manifest number: 157E
Signing time: Mon 09 Jun 2025 10:01:29 +0000
Manifest this update: Mon 09 Jun 2025 10:01:29 +0000
Manifest next update: Tue 10 Jun 2025 10:01:29 +0000
Files and hashes: 1: its62HX3YlxjkjZZ8UKVjbeHijI.crl (hash: AvDKbw4EJhgrSmi0LZKOqeLuHkn8ucC3DYAYdxVR5B0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 10:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:23:4d:62:9f:2a:6f:c1:46:50:71:55:8a:b4:f7:75
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8adb3ad875f7625c63923659f142958db7878a32
Validity
Not Before: Jun 9 10:01:29 2025 GMT
Not After : Jun 10 10:01:29 2025 GMT
Subject: CN=b5ae174ce3815430c73836e79ac0f94e82833c76
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:88:b6:8d:11:50:fe:f7:d5:b0:31:73:5d:f7:
59:29:a4:71:6b:94:eb:d4:99:55:75:6d:f9:03:34:
9f:2a:64:60:d2:cb:ae:fe:4f:ef:2d:9e:3e:2d:bd:
3d:be:a8:0f:4e:4e:42:09:d6:0c:28:da:ac:b1:1a:
67:6d:8b:e8:1d:fc:7a:97:f5:53:61:c4:6a:bb:15:
1e:7e:39:1c:98:0d:5d:a9:89:51:b7:a4:7f:96:8d:
5a:8c:10:ae:36:6f:d1:ac:b6:e5:47:a3:bb:d4:af:
cd:e3:28:49:61:f9:aa:10:9d:85:9c:ef:28:10:ee:
18:42:3b:fe:64:6e:a9:ee:1c:8b:47:33:f9:bc:64:
dc:11:6c:f1:88:e6:20:46:54:2d:8e:f9:07:0b:de:
84:84:00:46:e1:da:76:11:5e:02:79:20:a7:b4:09:
06:d2:22:8f:92:e6:80:88:36:ab:96:49:56:52:18:
5c:52:2d:6d:be:90:00:38:cd:bb:17:55:c8:1c:3d:
92:64:03:44:e3:39:87:82:55:fb:5e:5a:d5:c0:30:
a4:d2:ba:9b:0e:7f:43:ba:94:08:b3:ba:97:d7:1b:
f6:47:4e:04:b9:3e:b4:35:b3:c9:36:f1:11:1f:ae:
09:27:4e:04:0e:af:7e:cc:ae:5b:95:11:b6:0b:3a:
74:67
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:AE:17:4C:E3:81:54:30:C7:38:36:E7:9A:C0:F9:4E:82:83:3C:76
X509v3 Authority Key Identifier:
keyid:8A:DB:3A:D8:75:F7:62:5C:63:92:36:59:F1:42:95:8D:B7:87:8A:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/its62HX3YlxjkjZZ8UKVjbeHijI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/187f0b-4be9-474a-b435-885bc54dce62/1/its62HX3YlxjkjZZ8UKVjbeHijI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:5b:d5:1d:af:a6:20:0f:20:54:53:3d:e0:84:28:40:69:ad:
8a:41:ef:6c:01:f4:53:1b:c9:c4:94:f4:3d:61:f8:65:47:b2:
d4:08:c4:ac:f0:88:a8:aa:ed:1f:fb:45:fc:ba:48:ff:12:1b:
80:ee:e9:64:06:ba:99:42:30:55:39:d6:a5:77:f9:64:4d:9b:
86:23:8a:4c:97:6a:91:1a:d2:bc:72:98:81:39:6f:65:1f:f6:
3c:0d:5f:0a:82:e3:a0:23:f1:bb:64:3f:c6:44:9b:6b:7a:9b:
53:a1:ea:6e:43:1f:05:0f:ee:9b:d9:8d:3c:e8:39:4b:28:e6:
9f:25:a9:00:3d:1c:2f:e7:6d:92:d1:1f:0b:9e:e7:05:4c:79:
46:19:21:22:a5:13:1e:dd:2c:19:07:81:81:d3:7a:5f:e9:53:
1c:5f:ac:98:a0:a8:8c:dc:3e:70:69:2c:5f:fd:7b:9c:00:b9:
4b:a2:69:44:b8:a5:0c:04:db:4f:9a:d9:0e:ae:d6:95:fb:00:
9c:d2:c9:29:6d:17:4a:3e:2f:7e:48:99:07:75:aa:b0:1d:43:
b7:39:3d:dd:48:e8:5e:be:b0:d7:9c:ee:8f:76:c7:30:ac:8a:
cc:64:88:53:e6:e0:56:dc:46:2f:68:ce:f1:3a:21:4c:f5:07:
b2:bb:1e:7f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUI01inypvwUZQcVWKtPd1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZGIzYWQ4NzVmNzYyNWM2MzkyMzY1OWYxNDI5NThkYjc4
NzhhMzIwHhcNMjUwNjA5MTAwMTI5WhcNMjUwNjEwMTAwMTI5WjAzMTEwLwYDVQQD
EyhiNWFlMTc0Y2UzODE1NDMwYzczODM2ZTc5YWMwZjk0ZTgyODMzYzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv4i2jRFQ/vfVsDFzXfdZKaRxa5Tr
1JlVdW35AzSfKmRg0suu/k/vLZ4+Lb09vqgPTk5CCdYMKNqssRpnbYvoHfx6l/VT
YcRquxUefjkcmA1dqYlRt6R/lo1ajBCuNm/RrLblR6O71K/N4yhJYfmqEJ2FnO8o
EO4YQjv+ZG6p7hyLRzP5vGTcEWzxiOYgRlQtjvkHC96EhABG4dp2EV4CeSCntAkG
0iKPkuaAiDarlklWUhhcUi1tvpAAOM27F1XIHD2SZANE4zmHglX7XlrVwDCk0rqb
Dn9DupQIs7qX1xv2R04EuT60NbPJNvERH64JJ04EDq9+zK5blRG2Czp0ZwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLWuF0zjgVQwxzg255rA+U6Cgzx2MB8GA1UdIwQY
MBaAFIrbOth192JcY5I2WfFClY23h4oyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRzNjJIWDNZbHhqa2paWjhVS1ZqYmVIaWpJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS8xODdmMGItNGJlOS00NzRhLWI0MzUt
ODg1YmM1NGRjZTYyLzEvaXRzNjJIWDNZbHhqa2paWjhVS1ZqYmVIaWpJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS8xODdmMGItNGJlOS00NzRhLWI0MzUtODg1YmM1NGRjZTYy
LzEvaXRzNjJIWDNZbHhqa2paWjhVS1ZqYmVIaWpJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjlvVHa+m
IA8gVFM94IQoQGmtikHvbAH0UxvJxJT0PWH4ZUey1AjErPCIqKrtH/tF/LpI/xIb
gO7pZAa6mUIwVTnWpXf5ZE2bhiOKTJdqkRrSvHKYgTlvZR/2PA1fCoLjoCPxu2Q/
xkSba3qbU6HqbkMfBQ/um9mNPOg5SyjmnyWpAD0cL+dtktEfC57nBUx5RhkhIqUT
Ht0sGQeBgdN6X+lTHF+smKCojNw+cGksX/17nAC5S6JpRLilDATbT5rZDq7WlfsA
nNLJKW0XSj4vfkiZB3WqsB1Dtzk93UjoXr6w15zuj3bHMKyKzGSIU+bgVtxGL2jO
8TohTPUHsrsefw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 19:02:13 2025 by rpki-client