
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
File: r6seSN7xSynSHTQjTESOqAjmGL8.mft (raw, json)
Hash identifier: nRy5IHyaf+PdQrIbV8mkEk4yywLaUOn38ai2X7E9nzY=
Subject key identifier: 40:57:86:D6:2A:CE:D3:D6:23:8E:3A:22:0C:3F:B3:68:F9:17:D1:FC
Authority key identifier: AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
Certificate issuer: /CN=afab1e48def14b29d21d34234c448ea808e618bf
Certificate serial: 019747429D0A310B30DCA3BCD18C8265879F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
Manifest number: 0C60
Signing time: Fri 06 Jun 2025 22:00:37 +0000
Manifest this update: Fri 06 Jun 2025 22:00:37 +0000
Manifest next update: Sat 07 Jun 2025 22:00:37 +0000
Files and hashes: 1: r6seSN7xSynSHTQjTESOqAjmGL8.crl (hash: Ebed11KU49bNkG4sMcBRKza1PxRl4avkg703tmn8+D0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:9d:0a:31:0b:30:dc:a3:bc:d1:8c:82:65:87:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afab1e48def14b29d21d34234c448ea808e618bf
Validity
Not Before: Jun 6 22:00:37 2025 GMT
Not After : Jun 7 22:00:37 2025 GMT
Subject: CN=405786d62aced3d6238e3a220c3fb368f917d1fc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:8b:db:48:96:84:36:f4:81:bc:20:dc:c5:a1:
75:ad:2f:b5:16:9d:3b:5c:7f:05:f3:75:b8:c5:7a:
e2:30:a1:8e:30:bc:4e:d3:2a:2a:a1:21:df:46:4d:
05:d4:c0:7f:49:65:78:d7:27:cb:f8:30:bf:fc:4d:
9a:2b:8b:3b:24:0f:13:c4:6b:55:34:4e:84:18:a4:
e3:cb:01:75:ce:96:af:ec:d1:d8:13:97:89:73:59:
ec:c9:32:74:6d:bd:a5:79:b9:e1:76:54:51:6e:48:
5f:57:24:ee:a1:42:11:2f:ee:19:73:ef:c6:78:30:
4d:73:d7:d9:c1:f2:8a:ec:33:47:6b:67:b6:d6:9f:
a0:2e:72:7a:e4:87:62:b0:98:cd:e2:ce:d4:e3:5c:
ed:42:27:79:43:9b:14:ce:8e:10:58:2c:52:d1:f9:
72:3c:64:96:fd:f8:b7:78:92:71:f8:ff:13:c9:4c:
5f:b2:00:7a:3b:d5:28:bc:e1:ae:5e:ef:c6:ca:9c:
91:0e:8c:03:c1:75:3d:bb:e3:6c:48:08:c0:89:a4:
bb:01:fa:b8:b2:97:2c:64:56:4b:c8:34:c0:19:f2:
80:df:29:10:58:4e:89:62:71:13:32:22:ff:74:ba:
c0:1d:ff:24:a1:f0:7a:a4:17:99:f6:07:21:8a:7f:
08:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:57:86:D6:2A:CE:D3:D6:23:8E:3A:22:0C:3F:B3:68:F9:17:D1:FC
X509v3 Authority Key Identifier:
keyid:AF:AB:1E:48:DE:F1:4B:29:D2:1D:34:23:4C:44:8E:A8:08:E6:18:BF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6seSN7xSynSHTQjTESOqAjmGL8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/0e607f-e21f-4cfa-a336-9314860c2c7f/1/r6seSN7xSynSHTQjTESOqAjmGL8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:3e:67:38:c3:9f:46:8c:e3:37:71:2b:ba:1c:7e:c3:2a:36:
01:b9:a1:4e:21:8b:b1:fa:ca:d4:89:04:3b:ba:50:f9:e1:3c:
b3:64:c2:e6:43:04:49:96:65:23:89:4b:61:28:e1:64:f3:9f:
32:00:38:77:52:a8:42:d1:cb:c7:07:96:0e:95:67:01:32:eb:
19:b1:d8:ce:30:86:86:2f:fe:1e:ce:ea:6b:61:17:c5:b5:2c:
fa:23:02:78:c0:54:8d:86:b7:63:02:ab:a5:0f:55:21:24:bb:
b0:fe:90:5e:50:30:53:13:cd:6c:3b:77:02:72:2e:72:16:0d:
cf:15:38:fa:0f:85:a4:7d:02:fc:a8:cf:51:01:5f:75:6b:db:
44:d6:ff:76:d7:ef:a2:6a:fc:a3:ea:49:7d:01:8e:8e:6e:55:
42:41:70:bf:28:e4:53:89:88:11:22:ea:99:c5:f0:d5:f0:a4:
22:e1:d0:12:7c:b2:6b:bb:a7:21:ae:d6:3d:2e:71:f7:f1:89:
28:f0:a5:a3:7a:39:f0:fe:95:9b:35:92:82:14:05:fb:2d:c5:
0d:7c:41:93:16:0f:e4:d7:7d:8f:ea:d4:b5:74:85:d3:b5:d1:
21:f1:cd:83:45:ee:41:aa:ec:a4:0a:1e:5c:be:a8:d6:ec:d4:
66:c9:fb:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQp0KMQsw3KO80YyCZYefMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYWIxZTQ4ZGVmMTRiMjlkMjFkMzQyMzRjNDQ4ZWE4MDhl
NjE4YmYwHhcNMjUwNjA2MjIwMDM3WhcNMjUwNjA3MjIwMDM3WjAzMTEwLwYDVQQD
Eyg0MDU3ODZkNjJhY2VkM2Q2MjM4ZTNhMjIwYzNmYjM2OGY5MTdkMWZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjYvbSJaENvSBvCDcxaF1rS+1Fp07
XH8F83W4xXriMKGOMLxO0yoqoSHfRk0F1MB/SWV41yfL+DC//E2aK4s7JA8TxGtV
NE6EGKTjywF1zpav7NHYE5eJc1nsyTJ0bb2lebnhdlRRbkhfVyTuoUIRL+4Zc+/G
eDBNc9fZwfKK7DNHa2e21p+gLnJ65IdisJjN4s7U41ztQid5Q5sUzo4QWCxS0fly
PGSW/fi3eJJx+P8TyUxfsgB6O9UovOGuXu/GypyRDowDwXU9u+NsSAjAiaS7Afq4
spcsZFZLyDTAGfKA3ykQWE6JYnETMiL/dLrAHf8kofB6pBeZ9gchin8IwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBXhtYqztPWI446Igw/s2j5F9H8MB8GA1UdIwQY
MBaAFK+rHkje8Usp0h00I0xEjqgI5hi/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy8wZTYwN2YtZTIxZi00Y2ZhLWEzMzYt
OTMxNDg2MGMyYzdmLzEvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy8wZTYwN2YtZTIxZi00Y2ZhLWEzMzYtOTMxNDg2MGMyYzdm
LzEvcjZzZVNON3hTeW5TSFRRalRFU09xQWptR0w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQD5nOMOf
RozjN3Eruhx+wyo2AbmhTiGLsfrK1IkEO7pQ+eE8s2TC5kMESZZlI4lLYSjhZPOf
MgA4d1KoQtHLxweWDpVnATLrGbHYzjCGhi/+Hs7qa2EXxbUs+iMCeMBUjYa3YwKr
pQ9VISS7sP6QXlAwUxPNbDt3AnIuchYNzxU4+g+FpH0C/KjPUQFfdWvbRNb/dtfv
omr8o+pJfQGOjm5VQkFwvyjkU4mIESLqmcXw1fCkIuHQEnyya7unIa7WPS5x9/GJ
KPClo3o58P6VmzWSghQF+y3FDXxBkxYP5Nd9j+rUtXSF07XRIfHNg0XuQarspAoe
XL6o1uzUZsn7MQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:57:14 2025 by rpki-client