Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
File: jU6XfBzSpNfsKQoB-b7DfejcnOI.mft (raw, json)
Hash identifier: 2a+tIGS3AFSPjRjSMQVCUX9mIdD2i0Fku5Sa876InY0=
Subject key identifier: 66:26:D2:6E:87:C0:62:FB:B7:66:09:B6:16:E0:14:0A:C0:DD:22:0F
Authority key identifier: 8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
Certificate issuer: /CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Certificate serial: 019749313CB048EF134BDD103C045099CAA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
Manifest number: 150C
Signing time: Sat 07 Jun 2025 07:00:52 +0000
Manifest this update: Sat 07 Jun 2025 07:00:52 +0000
Manifest next update: Sun 08 Jun 2025 07:00:52 +0000
Files and hashes: 1: jU6XfBzSpNfsKQoB-b7DfejcnOI.crl (hash: l952y/tcB+gNBWSuWGhhjeUoi0zhxlr8eTX2RWYAwas=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:3c:b0:48:ef:13:4b:dd:10:3c:04:50:99:ca:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8d4e977c1cd2a4d7ec290a01f9bec37de8dc9ce2
Validity
Not Before: Jun 7 07:00:52 2025 GMT
Not After : Jun 8 07:00:52 2025 GMT
Subject: CN=6626d26e87c062fbb76609b616e0140ac0dd220f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:90:de:16:ec:f1:d3:e0:6d:8c:73:1e:5a:89:7d:
ef:b2:2a:67:8a:f8:9b:00:f4:2c:2c:0e:93:58:03:
d5:6a:ad:44:e1:3f:68:dd:19:f3:e5:70:11:f2:24:
62:80:43:ee:00:78:1f:53:71:7d:f1:a5:c5:5e:a2:
7a:a8:92:d4:44:82:2d:b1:35:c7:c9:7d:38:ef:9b:
a1:93:50:e3:03:03:06:67:0d:4d:4a:90:37:24:a0:
88:b2:a8:ac:09:83:c1:0b:ba:44:06:f9:e7:7f:51:
23:d3:ce:05:61:d1:96:18:8e:26:38:0b:de:04:33:
50:8d:c9:29:4d:c5:6d:b5:85:58:e6:0a:7f:a7:e8:
cb:e7:a0:3e:f8:54:b2:4e:8d:7f:9a:3b:ba:7d:b2:
91:cb:fe:d3:d0:f6:1c:93:01:35:d1:d7:25:d4:db:
17:14:13:7c:82:f5:ba:fb:86:b3:5d:bc:f6:f1:dc:
72:b4:36:d2:c7:0d:9b:a7:c4:43:6b:5a:b9:a9:76:
19:79:87:b3:ad:2f:54:4c:29:81:db:2c:21:3b:72:
39:91:41:26:a5:e9:21:fa:bc:d0:81:a1:1c:ce:7f:
f4:0e:44:cb:5e:e4:22:f5:61:7d:a5:3b:a5:91:ff:
10:32:11:17:ab:5c:08:13:f6:34:e7:06:37:08:8a:
dc:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:26:D2:6E:87:C0:62:FB:B7:66:09:B6:16:E0:14:0A:C0:DD:22:0F
X509v3 Authority Key Identifier:
keyid:8D:4E:97:7C:1C:D2:A4:D7:EC:29:0A:01:F9:BE:C3:7D:E8:DC:9C:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jU6XfBzSpNfsKQoB-b7DfejcnOI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/e341d4-9949-493a-ad02-3e063302cb09/1/jU6XfBzSpNfsKQoB-b7DfejcnOI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:ba:bc:bf:bd:fe:b8:2e:e0:e7:e3:fc:67:ca:59:31:f5:63:
7b:3f:82:6d:a8:33:10:36:62:ec:dc:37:96:f0:48:8b:96:df:
51:ab:4c:ca:1e:c9:f9:cb:97:0d:38:97:62:6d:86:1d:66:61:
4e:44:a0:ce:8e:ca:52:a3:81:60:99:52:bf:48:cc:e9:05:17:
cf:be:ce:1a:97:e6:69:af:1f:b5:df:ea:cb:ba:88:ee:8d:9d:
a2:d9:85:1c:25:57:5b:08:85:01:25:d5:bd:26:28:ab:61:07:
09:73:8a:ba:fa:6c:8b:85:ba:61:af:03:24:a8:65:0a:ea:36:
85:ed:ed:98:6d:7a:87:5e:34:4d:02:9d:0e:ef:f3:7a:b5:51:
09:57:f4:de:e7:b0:f8:6f:84:ac:bb:79:57:ab:54:f0:de:25:
e0:12:58:68:1e:7d:7d:40:c5:3a:3a:8a:e3:67:53:59:71:b7:
1d:7f:93:ae:5f:48:41:83:91:31:8c:90:f4:64:62:5e:10:7a:
c2:57:84:7b:2d:9d:13:b5:22:2c:e6:2b:8f:6f:3b:38:fb:aa:
bc:22:c1:5d:ab:49:34:9a:8b:98:17:13:e0:13:37:d5:eb:2b:
bd:de:91:8a:8e:fe:f4:2f:66:40:dc:96:bd:fb:6a:11:f8:36:
5d:13:58:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMTywSO8TS90QPARQmcqmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhkNGU5NzdjMWNkMmE0ZDdlYzI5MGEwMWY5YmVjMzdkZThk
YzljZTIwHhcNMjUwNjA3MDcwMDUyWhcNMjUwNjA4MDcwMDUyWjAzMTEwLwYDVQQD
Eyg2NjI2ZDI2ZTg3YzA2MmZiYjc2NjA5YjYxNmUwMTQwYWMwZGQyMjBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkN4W7PHT4G2Mcx5aiX3vsipnivib
APQsLA6TWAPVaq1E4T9o3Rnz5XAR8iRigEPuAHgfU3F98aXFXqJ6qJLURIItsTXH
yX0475uhk1DjAwMGZw1NSpA3JKCIsqisCYPBC7pEBvnnf1Ej084FYdGWGI4mOAve
BDNQjckpTcVttYVY5gp/p+jL56A++FSyTo1/mju6fbKRy/7T0PYckwE10dcl1NsX
FBN8gvW6+4azXbz28dxytDbSxw2bp8RDa1q5qXYZeYezrS9UTCmB2ywhO3I5kUEm
pekh+rzQgaEczn/0DkTLXuQi9WF9pTulkf8QMhEXq1wIE/Y05wY3CIrcYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYm0m6HwGL7t2YJthbgFArA3SIPMB8GA1UdIwQY
MBaAFI1Ol3wc0qTX7CkKAfm+w33o3JziMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvalU2WGZCelNwTmZzS1FvQi1iN0RmZWpjbk9JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lMzQxZDQtOTk0OS00OTNhLWFkMDIt
M2UwNjMzMDJjYjA5LzEvalU2WGZCelNwTmZzS1FvQi1iN0RmZWpjbk9JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lMzQxZDQtOTk0OS00OTNhLWFkMDItM2UwNjMzMDJjYjA5
LzEvalU2WGZCelNwTmZzS1FvQi1iN0RmZWpjbk9JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAV7q8v73+
uC7g5+P8Z8pZMfVjez+CbagzEDZi7Nw3lvBIi5bfUatMyh7J+cuXDTiXYm2GHWZh
TkSgzo7KUqOBYJlSv0jM6QUXz77OGpfmaa8ftd/qy7qI7o2dotmFHCVXWwiFASXV
vSYoq2EHCXOKuvpsi4W6Ya8DJKhlCuo2he3tmG16h140TQKdDu/zerVRCVf03uew
+G+ErLt5V6tU8N4l4BJYaB59fUDFOjqK42dTWXG3HX+Trl9IQYORMYyQ9GRiXhB6
wleEey2dE7UiLOYrj287OPuqvCLBXatJNJqLmBcT4BM31esrvd6Rio7+9C9mQNyW
vftqEfg2XRNY3w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:27:06 2025 by rpki-client