Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
File: id8L4W7M0-twbmQXlLyQ1PfWeMk.mft (raw, json)
Hash identifier: kc3gZTgS/eYlC7saIbn2HjPZfQcLqzl8NdXkhqO454I=
Subject key identifier: 2E:AA:52:07:CC:F9:5B:0C:A5:FF:20:8D:12:E9:6D:FA:21:FE:CD:BB
Authority key identifier: 89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9
Certificate issuer: /CN=89df0be16eccd3eb706e641794bc90d4f7d678c9
Certificate serial: 0197496840E9291D35B5C52031862D44C527
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 08:00:58 +0000
Manifest this update: Sat 07 Jun 2025 08:00:58 +0000
Manifest next update: Sun 08 Jun 2025 08:00:58 +0000
Files and hashes: 1: id8L4W7M0-twbmQXlLyQ1PfWeMk.crl (hash: JNR9EWvecGBifeoaBkUnTJ7Ec8Ue7MkqiRZ6lpL1N7w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.crl
rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:40:e9:29:1d:35:b5:c5:20:31:86:2d:44:c5:27
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=89df0be16eccd3eb706e641794bc90d4f7d678c9
Validity
Not Before: Jun 7 08:00:58 2025 GMT
Not After : Jun 8 08:00:58 2025 GMT
Subject: CN=2eaa5207ccf95b0ca5ff208d12e96dfa21fecdbb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:55:8b:64:78:6b:36:41:b5:f4:4d:70:10:9a:
8a:eb:7d:0e:15:dd:c7:66:9e:b0:a4:11:b0:f6:61:
9e:ab:bf:21:5b:9b:35:28:6f:9a:67:c5:61:7e:2c:
dc:cb:b1:bb:9d:df:6d:1c:07:e0:f2:e2:d6:a4:86:
fd:2b:e2:1c:80:8f:26:05:07:b2:86:d5:7b:f4:a6:
b4:39:81:22:9a:f8:ad:17:c4:cc:2c:c6:61:74:26:
1e:d8:54:90:df:a0:90:e6:b1:64:f7:63:8f:6e:15:
47:cd:0d:90:34:cc:f0:6e:86:6b:01:6b:51:b3:a2:
b5:91:1d:2d:b0:37:60:db:de:43:22:93:70:8f:73:
c3:c9:03:f8:a0:42:2b:fc:dd:71:30:75:2c:9e:64:
18:01:7c:0c:60:1d:38:a6:ea:dc:56:16:57:e6:29:
2e:47:9e:43:33:e9:85:a2:30:d0:77:8b:cf:44:23:
05:71:95:55:b4:7d:b2:a0:9d:af:8a:f4:6d:f1:29:
d8:73:c7:cd:12:33:27:4a:ff:5b:99:2d:ac:a3:16:
a3:9b:ec:70:30:ed:19:ac:58:56:18:17:e8:a3:ca:
4b:4a:b8:8c:7d:cf:66:40:3c:29:f0:72:97:a7:b8:
3a:55:d7:da:8e:21:67:2c:db:fd:0b:e8:d1:59:f5:
b9:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:AA:52:07:CC:F9:5B:0C:A5:FF:20:8D:12:E9:6D:FA:21:FE:CD:BB
X509v3 Authority Key Identifier:
keyid:89:DF:0B:E1:6E:CC:D3:EB:70:6E:64:17:94:BC:90:D4:F7:D6:78:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/id8L4W7M0-twbmQXlLyQ1PfWeMk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9d/4f9bf2-625e-4f7c-8f4f-30839ec0eed9/1/id8L4W7M0-twbmQXlLyQ1PfWeMk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:af:cd:23:3d:be:dd:ed:55:5c:9e:ab:48:4d:79:79:7d:e1:
da:39:52:d5:0b:2d:29:c3:bc:17:56:14:a2:50:a9:a3:07:97:
18:00:fd:37:38:2e:cf:bb:56:ca:9e:e4:42:db:67:89:af:59:
56:78:a1:48:1b:97:48:78:e8:c1:88:28:f2:0a:a5:8c:98:69:
16:c5:fe:80:2e:41:6a:71:df:80:b1:94:a4:05:d8:04:42:6a:
0d:19:e9:9b:a3:88:a5:65:65:84:5d:bf:e7:ac:f0:d4:55:48:
52:73:a1:82:42:05:7c:c6:62:86:8c:69:a2:61:c3:ea:f6:e5:
12:89:b3:9f:3f:0a:08:78:bc:80:66:94:19:ca:02:dc:ee:12:
d7:6d:74:8a:3c:4e:4e:c5:df:42:38:30:ad:1a:b1:d5:5b:df:
1e:fd:39:8c:77:c5:85:a7:02:dc:f7:6d:2b:64:92:ac:61:51:
ff:b0:06:3f:47:49:11:f9:31:d3:6d:f0:4d:80:d0:bc:29:1d:
fa:2e:88:89:2f:92:09:2e:42:e8:ac:06:d0:6c:65:f4:da:f6:
f7:43:5f:ce:ef:44:a6:dc:62:ea:ae:ca:11:cc:5a:ea:d2:3e:
f5:b2:9c:74:64:07:52:61:5f:de:dd:45:6c:63:bf:41:e8:b3:
8d:17:1a:60
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaEDpKR01tcUgMYYtRMUnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5ZGYwYmUxNmVjY2QzZWI3MDZlNjQxNzk0YmM5MGQ0Zjdk
Njc4YzkwHhcNMjUwNjA3MDgwMDU4WhcNMjUwNjA4MDgwMDU4WjAzMTEwLwYDVQQD
EygyZWFhNTIwN2NjZjk1YjBjYTVmZjIwOGQxMmU5NmRmYTIxZmVjZGJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr1WLZHhrNkG19E1wEJqK630OFd3H
Zp6wpBGw9mGeq78hW5s1KG+aZ8Vhfizcy7G7nd9tHAfg8uLWpIb9K+IcgI8mBQey
htV79Ka0OYEimvitF8TMLMZhdCYe2FSQ36CQ5rFk92OPbhVHzQ2QNMzwboZrAWtR
s6K1kR0tsDdg295DIpNwj3PDyQP4oEIr/N1xMHUsnmQYAXwMYB04purcVhZX5iku
R55DM+mFojDQd4vPRCMFcZVVtH2yoJ2vivRt8SnYc8fNEjMnSv9bmS2soxajm+xw
MO0ZrFhWGBfoo8pLSriMfc9mQDwp8HKXp7g6VdfajiFnLNv9C+jRWfW5uQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC6qUgfM+VsMpf8gjRLpbfoh/s27MB8GA1UdIwQY
MBaAFInfC+FuzNPrcG5kF5S8kNT31njJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWQ4TDRXN00wLXR3Ym1RWGxMeVExUGZXZU1rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZC80ZjliZjItNjI1ZS00ZjdjLThmNGYt
MzA4MzllYzBlZWQ5LzEvaWQ4TDRXN00wLXR3Ym1RWGxMeVExUGZXZU1rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZC80ZjliZjItNjI1ZS00ZjdjLThmNGYtMzA4MzllYzBlZWQ5
LzEvaWQ4TDRXN00wLXR3Ym1RWGxMeVExUGZXZU1rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE6/NIz2+
3e1VXJ6rSE15eX3h2jlS1QstKcO8F1YUolCpoweXGAD9Nzguz7tWyp7kQttnia9Z
VnihSBuXSHjowYgo8gqljJhpFsX+gC5BanHfgLGUpAXYBEJqDRnpm6OIpWVlhF2/
56zw1FVIUnOhgkIFfMZihoxpomHD6vblEomznz8KCHi8gGaUGcoC3O4S1210ijxO
TsXfQjgwrRqx1VvfHv05jHfFhacC3PdtK2SSrGFR/7AGP0dJEfkx023wTYDQvCkd
+i6IiS+SCS5C6KwG0Gxl9Nr290Nfzu9Eptxi6q7KEcxa6tI+9bKcdGQHUmFf3t1F
bGO/QeizjRcaYA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:46:05 2025 by rpki-client