Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
File: CIAqhiH4eCf9WXI85my1nDj5HyE.mft (raw, json)
Hash identifier: yWveQQ7h6tYRtz0qjp6ajSy1oE9mcKkql31mP+2MYec=
Subject key identifier: C6:E3:4F:DE:A4:D4:09:1C:F5:16:15:58:BC:B6:61:55:F4:73:22:80
Authority key identifier: 08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
Certificate issuer: /CN=08802a8621f87827fd59723ce66cb59c38f91f21
Certificate serial: 01974EC58D4389013E5221A9C305AA25A79F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
Manifest number: 08D7
Signing time: Sun 08 Jun 2025 09:00:58 +0000
Manifest this update: Sun 08 Jun 2025 09:00:58 +0000
Manifest next update: Mon 09 Jun 2025 09:00:58 +0000
Files and hashes: 1: CIAqhiH4eCf9WXI85my1nDj5HyE.crl (hash: bEVn8P1Cfs9EdWhA9jJsjTpBxwmxuI3VtY3KiD4HGMo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:8d:43:89:01:3e:52:21:a9:c3:05:aa:25:a7:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=08802a8621f87827fd59723ce66cb59c38f91f21
Validity
Not Before: Jun 8 09:00:58 2025 GMT
Not After : Jun 9 09:00:58 2025 GMT
Subject: CN=c6e34fdea4d4091cf5161558bcb66155f4732280
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:72:d1:af:7b:42:d1:c6:fc:0a:f1:1a:b2:c2:
e4:0c:cb:ad:73:e3:c9:a6:87:a7:bb:fb:ca:15:15:
84:6f:d3:e7:9f:60:bc:8f:13:0f:6b:a1:ec:61:c2:
aa:db:85:53:fa:ad:14:9d:59:ba:83:c4:20:3e:78:
92:49:a7:2e:3a:fd:d3:b9:e1:b2:db:77:7d:03:b8:
4b:e3:f5:d9:d6:b4:c1:9e:28:87:33:0f:55:cd:69:
87:08:46:6a:ba:3b:0d:a6:7a:64:d1:0f:21:f7:bc:
a3:82:bb:4a:31:7d:e3:5a:54:e8:4e:b4:eb:12:c7:
85:20:05:70:6e:ac:06:87:e0:cb:85:c0:d4:6a:66:
e7:e9:5a:1a:d7:a2:ff:16:1c:bd:14:eb:49:b1:25:
bd:11:14:80:44:5c:3a:55:56:a0:e9:65:9b:13:af:
87:60:16:d5:b0:93:51:cb:7f:73:ca:99:9e:0d:d0:
9e:ce:e0:5d:85:4e:1f:a7:71:ea:4f:93:2f:78:16:
9b:ea:1e:65:9b:a0:96:d4:25:38:e6:a8:75:56:16:
a5:25:dd:53:0f:0e:fb:7c:0d:b8:11:31:25:ea:ed:
54:5b:2b:e0:d7:f6:72:ae:05:7e:70:c9:79:be:4d:
56:8a:ac:1e:3a:58:e9:fd:66:10:d9:bd:30:7c:38:
c1:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:E3:4F:DE:A4:D4:09:1C:F5:16:15:58:BC:B6:61:55:F4:73:22:80
X509v3 Authority Key Identifier:
keyid:08:80:2A:86:21:F8:78:27:FD:59:72:3C:E6:6C:B5:9C:38:F9:1F:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CIAqhiH4eCf9WXI85my1nDj5HyE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a0/6bc0f1-d1ea-4900-98ca-f16f994ecf43/1/CIAqhiH4eCf9WXI85my1nDj5HyE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:b3:49:e6:a1:6d:24:6f:45:e9:2c:2f:6a:c0:95:31:e0:05:
3e:cf:30:8f:4c:45:3f:93:0f:70:df:cc:ed:1d:81:67:a8:c5:
ef:9e:46:89:5d:47:1f:38:94:a9:62:71:d0:b0:53:ff:59:33:
67:11:e9:07:b1:45:85:b3:8b:89:11:cf:f9:d2:76:e4:d4:39:
79:07:b5:41:fd:d3:67:cc:12:88:93:35:97:01:b2:1e:e6:fe:
1a:01:c4:57:33:a8:eb:3c:32:61:d3:eb:f1:d9:2a:b6:cd:82:
9b:40:9d:38:9c:33:f0:31:55:54:07:69:2c:28:41:48:0e:0d:
af:6c:e9:10:53:d0:3b:67:4b:f6:cf:39:c3:8d:b6:bd:80:ac:
4b:4c:76:bc:28:0c:2b:71:e6:62:26:c5:d8:ae:8a:07:b1:ee:
67:12:ce:0e:b3:97:53:ea:8b:55:9a:ea:ff:e4:b8:35:2e:ef:
10:4d:68:21:c5:d4:cf:68:4b:0c:76:70:4a:1b:5d:85:4c:45:
04:20:a4:a0:aa:fa:31:8c:b8:7a:77:e5:89:a5:fc:1d:d3:7d:
94:5b:25:dc:20:be:40:65:56:95:f2:d0:7b:16:1c:ab:7b:e2:
b7:85:49:5a:54:3f:24:b4:18:30:9c:46:8a:3f:26:96:b4:e8:
ec:5d:6e:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxY1DiQE+UiGpwwWqJaefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4ODAyYTg2MjFmODc4MjdmZDU5NzIzY2U2NmNiNTljMzhm
OTFmMjEwHhcNMjUwNjA4MDkwMDU4WhcNMjUwNjA5MDkwMDU4WjAzMTEwLwYDVQQD
EyhjNmUzNGZkZWE0ZDQwOTFjZjUxNjE1NThiY2I2NjE1NWY0NzMyMjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqXLRr3tC0cb8CvEassLkDMutc+PJ
poenu/vKFRWEb9Pnn2C8jxMPa6HsYcKq24VT+q0UnVm6g8QgPniSSacuOv3TueGy
23d9A7hL4/XZ1rTBniiHMw9VzWmHCEZqujsNpnpk0Q8h97yjgrtKMX3jWlToTrTr
EseFIAVwbqwGh+DLhcDUambn6Voa16L/Fhy9FOtJsSW9ERSARFw6VVag6WWbE6+H
YBbVsJNRy39zypmeDdCezuBdhU4fp3HqT5MveBab6h5lm6CW1CU45qh1VhalJd1T
Dw77fA24ETEl6u1UWyvg1/ZyrgV+cMl5vk1WiqweOljp/WYQ2b0wfDjB3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMbjT96k1Akc9RYVWLy2YVX0cyKAMB8GA1UdIwQY
MBaAFAiAKoYh+Hgn/VlyPOZstZw4+R8hMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMC82YmMwZjEtZDFlYS00OTAwLTk4Y2Et
ZjE2Zjk5NGVjZjQzLzEvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMC82YmMwZjEtZDFlYS00OTAwLTk4Y2EtZjE2Zjk5NGVjZjQz
LzEvQ0lBcWhpSDRlQ2Y5V1hJODVteTFuRGo1SHlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABbNJ5qFt
JG9F6SwvasCVMeAFPs8wj0xFP5MPcN/M7R2BZ6jF755GiV1HHziUqWJx0LBT/1kz
ZxHpB7FFhbOLiRHP+dJ25NQ5eQe1Qf3TZ8wSiJM1lwGyHub+GgHEVzOo6zwyYdPr
8dkqts2Cm0CdOJwz8DFVVAdpLChBSA4Nr2zpEFPQO2dL9s85w422vYCsS0x2vCgM
K3HmYibF2K6KB7HuZxLODrOXU+qLVZrq/+S4NS7vEE1oIcXUz2hLDHZwShtdhUxF
BCCkoKr6MYy4enfliaX8HdN9lFsl3CC+QGVWlfLQexYcq3vit4VJWlQ/JLQYMJxG
ij8mlrTo7F1uew==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:49:31 2025 by rpki-client