Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
File: 8cgdjkJn0tRetlJQoqSCULX7Uls.mft (raw, json)
Hash identifier: nBfgoltzCd4nXdOgFZYySqNtaSjdy+fCNB6/8n33elM=
Subject key identifier: DA:B3:F9:0F:D1:3A:30:AB:99:22:F2:5D:A3:97:26:CD:71:8C:2D:E4
Authority key identifier: F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B
Certificate issuer: /CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b
Certificate serial: 0197488CD9EB48E0409050C139AB46A99668
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
Manifest number: 09A0
Signing time: Sat 07 Jun 2025 04:01:19 +0000
Manifest this update: Sat 07 Jun 2025 04:01:19 +0000
Manifest next update: Sun 08 Jun 2025 04:01:19 +0000
Files and hashes: 1: 8cgdjkJn0tRetlJQoqSCULX7Uls.crl (hash: /BcutB513KrSTfFLOGO8IsoGTOjfHBrJSshYxayRBMU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:01:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:d9:eb:48:e0:40:90:50:c1:39:ab:46:a9:96:68
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f1c81d8e4267d2d45eb65250a2a48250b5fb525b
Validity
Not Before: Jun 7 04:01:19 2025 GMT
Not After : Jun 8 04:01:19 2025 GMT
Subject: CN=dab3f90fd13a30ab9922f25da39726cd718c2de4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:10:02:cd:74:9d:ba:d6:1c:28:8b:97:7c:b6:
4b:99:61:ce:cf:ae:69:82:86:8f:aa:47:45:f8:e4:
93:06:79:c9:ad:58:ae:ce:a0:a5:4b:eb:66:93:89:
8b:2c:80:69:54:52:c4:1d:11:15:45:b9:cd:0a:43:
fb:d7:24:47:44:e9:51:d7:df:9b:e7:f1:26:48:30:
60:8f:25:c8:2c:6f:d0:b1:0d:57:21:29:a2:2d:ca:
cc:d2:88:06:2b:4a:67:54:5c:9d:32:37:b1:7f:1e:
75:b7:e6:94:f5:10:5b:16:20:8d:5a:9d:d0:b0:c2:
8e:44:dc:fc:b0:d4:98:f6:0a:3a:aa:ac:55:8e:fa:
80:e8:32:03:01:a3:2c:bd:fc:09:f1:f8:a2:1a:3f:
de:f8:5b:c6:03:46:91:7e:7e:c3:99:94:bf:57:11:
b1:b3:70:73:6f:03:cb:54:af:54:7f:18:10:b5:75:
4b:60:f1:a0:e0:45:8d:46:68:a6:8f:18:2f:60:18:
b8:e2:de:a0:1b:f5:72:4a:32:e4:4d:2c:c0:90:95:
9b:45:19:ce:e5:43:f3:01:ee:f2:5d:e0:93:4f:5a:
fc:0e:d6:28:cd:25:8a:62:b9:c8:f3:79:4f:a3:4a:
ac:1b:0b:94:73:65:a2:f1:bb:18:22:94:cd:e5:e9:
a8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:B3:F9:0F:D1:3A:30:AB:99:22:F2:5D:A3:97:26:CD:71:8C:2D:E4
X509v3 Authority Key Identifier:
keyid:F1:C8:1D:8E:42:67:D2:D4:5E:B6:52:50:A2:A4:82:50:B5:FB:52:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8cgdjkJn0tRetlJQoqSCULX7Uls.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/ebab47-6091-4b14-8008-362bb5446085/1/8cgdjkJn0tRetlJQoqSCULX7Uls.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:cf:fc:f4:6a:0a:29:08:e6:c7:83:19:3b:49:c7:cc:93:a8:
2e:8c:8d:30:38:0e:83:80:d0:5c:5f:92:7b:dc:e6:70:32:86:
c8:85:f4:19:cf:ef:9e:c5:b6:18:d3:00:34:74:4c:05:8f:c4:
94:04:60:62:b0:a1:8f:a8:06:ba:93:de:49:86:63:57:20:d4:
e3:68:85:85:c7:da:a9:97:ed:19:8a:e4:81:87:d0:b3:06:2f:
86:f2:15:f5:46:9e:51:7a:cb:1c:15:ee:97:22:e9:0c:e1:ea:
0e:7f:8f:f2:1a:31:44:60:40:2f:4a:e1:9e:c7:e9:4e:0f:63:
ff:0f:0b:09:94:a3:d5:5e:3e:cf:8d:95:04:c7:21:c6:dc:d2:
8c:88:b7:06:ee:b2:71:31:2e:77:e8:4b:43:f5:7d:88:f9:75:
4b:77:f0:11:6c:93:76:4e:42:e2:aa:06:9c:b1:93:c9:63:e1:
50:bf:03:11:4f:2c:c0:21:8a:f7:84:f6:85:fc:70:36:7c:ac:
d3:42:17:96:bb:74:97:fc:73:c2:75:70:8f:71:f6:3c:5c:c8:
bd:37:1d:b2:fd:20:eb:33:1c:2f:e8:89:cc:e8:25:54:c8:af:
84:ad:58:39:a1:77:3c:7b:ba:59:94:0c:10:f3:ee:78:61:2a:
4a:24:74:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjNnrSOBAkFDBOatGqZZoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxYzgxZDhlNDI2N2QyZDQ1ZWI2NTI1MGEyYTQ4MjUwYjVm
YjUyNWIwHhcNMjUwNjA3MDQwMTE5WhcNMjUwNjA4MDQwMTE5WjAzMTEwLwYDVQQD
EyhkYWIzZjkwZmQxM2EzMGFiOTkyMmYyNWRhMzk3MjZjZDcxOGMyZGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2xACzXSdutYcKIuXfLZLmWHOz65p
goaPqkdF+OSTBnnJrViuzqClS+tmk4mLLIBpVFLEHREVRbnNCkP71yRHROlR19+b
5/EmSDBgjyXILG/QsQ1XISmiLcrM0ogGK0pnVFydMjexfx51t+aU9RBbFiCNWp3Q
sMKORNz8sNSY9go6qqxVjvqA6DIDAaMsvfwJ8fiiGj/e+FvGA0aRfn7DmZS/VxGx
s3BzbwPLVK9UfxgQtXVLYPGg4EWNRmimjxgvYBi44t6gG/VySjLkTSzAkJWbRRnO
5UPzAe7yXeCTT1r8DtYozSWKYrnI83lPo0qsGwuUc2Wi8bsYIpTN5emo1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNqz+Q/ROjCrmSLyXaOXJs1xjC3kMB8GA1UdIwQY
MBaAFPHIHY5CZ9LUXrZSUKKkglC1+1JbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGNnZGprSm4wdFJldGxKUW9xU0NVTFg3VWxzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9lYmFiNDctNjA5MS00YjE0LTgwMDgt
MzYyYmI1NDQ2MDg1LzEvOGNnZGprSm4wdFJldGxKUW9xU0NVTFg3VWxzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9lYmFiNDctNjA5MS00YjE0LTgwMDgtMzYyYmI1NDQ2MDg1
LzEvOGNnZGprSm4wdFJldGxKUW9xU0NVTFg3VWxzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARM/89GoK
KQjmx4MZO0nHzJOoLoyNMDgOg4DQXF+Se9zmcDKGyIX0Gc/vnsW2GNMANHRMBY/E
lARgYrChj6gGupPeSYZjVyDU42iFhcfaqZftGYrkgYfQswYvhvIV9UaeUXrLHBXu
lyLpDOHqDn+P8hoxRGBAL0rhnsfpTg9j/w8LCZSj1V4+z42VBMchxtzSjIi3Bu6y
cTEud+hLQ/V9iPl1S3fwEWyTdk5C4qoGnLGTyWPhUL8DEU8swCGK94T2hfxwNnys
00IXlrt0l/xzwnVwj3H2PFzIvTcdsv0g6zMcL+iJzOglVMivhK1YOaF3PHu6WZQM
EPPueGEqSiR0AQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:55:52 2025 by rpki-client