Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
File: x9CAN66dCrMNEA0U2WFLeNY5Srw.mft (raw, json)
Hash identifier: 1/ru7GjoH6xPRDo+1AcRTz/m0QufiXxATn3silGTX3c=
Subject key identifier: BA:F2:B6:B8:B1:8F:5B:49:6E:7D:1E:F4:46:20:3F:AE:A5:75:57:1C
Authority key identifier: C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC
Certificate issuer: /CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc
Certificate serial: 0197C94BBCAA041450450113F18C3FD01756
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
Manifest number: 016D
Signing time: Wed 02 Jul 2025 04:01:13 +0000
Manifest this update: Wed 02 Jul 2025 04:01:13 +0000
Manifest next update: Thu 03 Jul 2025 04:01:13 +0000
Files and hashes: 1: x9CAN66dCrMNEA0U2WFLeNY5Srw.crl (hash: bgd9jX4NrhTdSnJ8zm9Na7ZxaT4siJ9rNsmiUdUPPGc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 02:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:4b:bc:aa:04:14:50:45:01:13:f1:8c:3f:d0:17:56
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7d08037ae9d0ab30d100d14d9614b78d6394abc
Validity
Not Before: Jul 2 04:01:13 2025 GMT
Not After : Jul 3 04:01:13 2025 GMT
Subject: CN=baf2b6b8b18f5b496e7d1ef446203faea575571c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:c9:ca:81:0b:89:33:15:e9:cf:b6:dc:9b:98:
fb:7a:6e:78:d0:7f:9f:28:4d:14:5f:0d:7b:3e:6f:
34:17:8a:1f:a4:cf:05:b2:e4:5c:de:16:74:1b:24:
66:ba:28:18:89:6e:1f:29:71:ae:34:10:60:9d:00:
f8:ad:ec:18:22:16:c3:a3:28:7f:a3:8c:77:6e:5b:
d7:a9:a7:c9:09:18:91:ec:99:ae:d6:1c:80:60:f0:
a7:aa:16:06:92:e8:31:71:28:27:12:91:c9:5d:d9:
7e:68:0a:fa:68:1f:92:d6:77:d8:78:61:f6:7f:e7:
70:91:a0:26:00:84:31:08:73:45:f2:6f:bc:c7:c6:
55:d2:a2:26:4d:df:2f:d0:b7:b2:87:ed:f6:fa:22:
4f:66:6f:4f:be:0c:81:d9:6a:c1:26:21:1a:34:0e:
4c:88:3b:a6:5e:fd:78:15:d4:f6:bf:9f:ac:f8:4f:
3c:9b:e6:28:3b:48:37:4f:74:c6:03:0f:e4:a3:fe:
3e:c2:c7:c4:dd:73:23:91:de:9b:3d:42:1b:93:6d:
f4:b1:d4:c9:67:74:24:b6:10:9a:b2:9c:33:e1:d4:
8c:19:b9:0a:d2:f5:c8:cc:b6:4d:20:04:0b:54:64:
bc:f8:a2:31:28:23:7e:73:8f:f0:a9:9b:7a:9d:0b:
46:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:F2:B6:B8:B1:8F:5B:49:6E:7D:1E:F4:46:20:3F:AE:A5:75:57:1C
X509v3 Authority Key Identifier:
keyid:C7:D0:80:37:AE:9D:0A:B3:0D:10:0D:14:D9:61:4B:78:D6:39:4A:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x9CAN66dCrMNEA0U2WFLeNY5Srw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ac/90f61b-9542-4433-913e-3e9a8fbeaaa5/1/x9CAN66dCrMNEA0U2WFLeNY5Srw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:e8:11:64:6b:73:30:0a:62:17:a6:21:88:05:20:fa:c3:bf:
16:7f:f5:77:5a:39:cb:3d:71:b5:8c:8d:7d:ab:6a:2f:25:60:
df:5c:a2:3e:29:78:cc:dc:75:c4:59:5d:f8:47:2d:a0:4d:89:
df:8b:a7:84:e1:02:74:8e:71:15:59:3a:79:be:c8:11:b1:97:
4d:67:93:d8:07:5d:2d:67:fc:be:d0:f7:bf:33:4c:aa:48:81:
af:1c:57:9f:f1:08:d2:da:56:51:e8:29:87:fa:4b:4b:f5:bc:
fd:b1:e4:c3:d3:92:15:fb:40:d8:2a:18:79:f5:77:33:64:bb:
ea:dd:eb:16:bd:88:60:07:c7:82:d9:5e:5e:09:f0:c9:71:6b:
71:f9:81:dd:41:df:57:d1:cc:6d:af:53:64:ad:44:2a:a5:43:
4b:10:f2:75:28:39:69:a2:ed:78:90:eb:db:83:2f:a4:7c:60:
a9:06:de:6a:22:e5:7a:d5:0b:91:e5:bf:cd:9a:31:fa:3c:a7:
78:17:08:b7:ac:a8:a0:d7:46:6b:64:45:bd:1f:c9:af:88:35:
be:96:24:2c:29:22:7b:b3:15:5e:8e:23:6b:57:da:40:c3:61:
f1:ef:ee:8a:aa:a6:fc:84:a1:cb:33:e3:26:cf:97:1b:18:47:
cc:49:82:fc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfJS7yqBBRQRQET8Yw/0BdWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZDA4MDM3YWU5ZDBhYjMwZDEwMGQxNGQ5NjE0Yjc4ZDYz
OTRhYmMwHhcNMjUwNzAyMDQwMTEzWhcNMjUwNzAzMDQwMTEzWjAzMTEwLwYDVQQD
EyhiYWYyYjZiOGIxOGY1YjQ5NmU3ZDFlZjQ0NjIwM2ZhZWE1NzU1NzFjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2snKgQuJMxXpz7bcm5j7em540H+f
KE0UXw17Pm80F4ofpM8FsuRc3hZ0GyRmuigYiW4fKXGuNBBgnQD4rewYIhbDoyh/
o4x3blvXqafJCRiR7Jmu1hyAYPCnqhYGkugxcSgnEpHJXdl+aAr6aB+S1nfYeGH2
f+dwkaAmAIQxCHNF8m+8x8ZV0qImTd8v0Leyh+32+iJPZm9PvgyB2WrBJiEaNA5M
iDumXv14FdT2v5+s+E88m+YoO0g3T3TGAw/ko/4+wsfE3XMjkd6bPUIbk230sdTJ
Z3QkthCaspwz4dSMGbkK0vXIzLZNIAQLVGS8+KIxKCN+c4/wqZt6nQtGMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLrytrixj1tJbn0e9EYgP66ldVccMB8GA1UdIwQY
MBaAFMfQgDeunQqzDRANFNlhS3jWOUq8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDlDQU42NmRDck1ORUEwVTJXRkxlTlk1U3J3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYy85MGY2MWItOTU0Mi00NDMzLTkxM2Ut
M2U5YThmYmVhYWE1LzEveDlDQU42NmRDck1ORUEwVTJXRkxlTlk1U3J3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYy85MGY2MWItOTU0Mi00NDMzLTkxM2UtM2U5YThmYmVhYWE1
LzEveDlDQU42NmRDck1ORUEwVTJXRkxlTlk1U3J3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF+gRZGtz
MApiF6YhiAUg+sO/Fn/1d1o5yz1xtYyNfatqLyVg31yiPil4zNx1xFld+EctoE2J
34unhOECdI5xFVk6eb7IEbGXTWeT2AddLWf8vtD3vzNMqkiBrxxXn/EI0tpWUegp
h/pLS/W8/bHkw9OSFftA2CoYefV3M2S76t3rFr2IYAfHgtleXgnwyXFrcfmB3UHf
V9HMba9TZK1EKqVDSxDydSg5aaLteJDr24MvpHxgqQbeaiLletULkeW/zZox+jyn
eBcIt6yooNdGa2RFvR/Jr4g1vpYkLCkie7MVXo4ja1faQMNh8e/uiqqm/IShyzPj
Js+XGxhHzEmC/A==
-----END CERTIFICATE-----
Generated at Wed Jul 2 12:24:40 2025 by rpki-client