Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
File: rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft (raw, json)
Hash identifier: bqyIizLkaDpmrnoUTcPXpsBj2ZIBhj4hD0ETpfTrnzo=
Subject key identifier: 90:90:73:F4:D7:FA:C8:8C:D8:15:9B:68:52:4D:BD:25:59:DF:33:54
Authority key identifier: AF:1B:C3:29:5A:C3:05:F8:59:60:E0:40:1B:00:F4:87:A9:4A:B3:94
Certificate issuer: /CN=af1bc3295ac305f85960e0401b00f487a94ab394
Certificate serial: 01974D45017F5625B07D1AD5CAD123A767D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
Manifest number: 1199
Signing time: Sun 08 Jun 2025 02:00:57 +0000
Manifest this update: Sun 08 Jun 2025 02:00:57 +0000
Manifest next update: Mon 09 Jun 2025 02:00:57 +0000
Files and hashes: 1: rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl (hash: WHPOIHjoEx8y8RCcvasGQylosdMXIQdiRJeUxvxKEq4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 02:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:45:01:7f:56:25:b0:7d:1a:d5:ca:d1:23:a7:67:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af1bc3295ac305f85960e0401b00f487a94ab394
Validity
Not Before: Jun 8 02:00:57 2025 GMT
Not After : Jun 9 02:00:57 2025 GMT
Subject: CN=909073f4d7fac88cd8159b68524dbd2559df3354
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e7:a0:bf:a9:98:2e:d8:87:c4:d4:f2:2c:49:67:
79:69:e7:d1:13:f0:36:4c:15:53:d1:8b:57:bf:6e:
8c:ba:72:35:50:8f:51:cc:99:51:7c:6c:1c:23:5b:
70:00:5f:e7:83:de:49:47:97:df:18:b3:5e:be:79:
97:ed:cd:1e:ca:fe:2b:74:db:55:33:bb:2a:3d:76:
59:6b:65:a1:88:70:56:ef:d2:4a:44:c0:93:75:1b:
c5:88:1d:0c:48:8a:87:dd:04:c2:f0:b2:3c:de:80:
1b:d9:68:67:6a:66:a0:b5:e7:2d:a9:83:d7:76:b5:
87:30:4a:a7:7a:3d:e4:6a:ec:0e:18:e4:2a:26:c9:
f3:61:11:cd:70:12:59:88:71:c7:0d:5d:2c:17:8c:
21:06:9e:50:b6:1d:d9:31:8d:f7:95:b8:f4:d7:9b:
ac:39:1a:6e:fd:b4:9d:d2:16:cd:9a:76:a3:da:b8:
2a:83:10:d6:89:aa:af:dd:42:9f:0d:1c:70:19:7b:
18:a0:bd:52:fd:b0:54:7a:f2:1d:9f:ca:59:87:1d:
1d:e2:ce:83:b0:15:bf:f1:5c:a7:29:9a:42:c6:2c:
09:53:6e:0c:b4:d2:65:9c:88:fc:69:62:90:f9:00:
04:ad:17:4d:ee:d0:1a:2a:22:6e:37:ea:68:63:99:
2a:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:90:73:F4:D7:FA:C8:8C:D8:15:9B:68:52:4D:BD:25:59:DF:33:54
X509v3 Authority Key Identifier:
keyid:AF:1B:C3:29:5A:C3:05:F8:59:60:E0:40:1B:00:F4:87:A9:4A:B3:94
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/da250b-452d-4f3f-a3e7-8e5e695e978e/1/rxvDKVrDBfhZYOBAGwD0h6lKs5Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
74:e1:7b:ec:b4:02:92:2b:8e:dc:da:83:84:4d:fe:5d:f7:2c:
6a:43:75:d7:ef:32:c2:2e:63:2f:b0:8f:25:d7:a8:7a:a9:ff:
6a:87:2c:7c:54:2c:18:03:ac:b2:56:c7:38:8b:3a:a3:1b:ae:
c2:dd:95:42:6f:bd:d1:68:06:2b:03:7d:bd:7d:02:29:82:94:
1e:67:cc:33:1a:71:08:04:61:dc:ba:15:34:d5:60:f9:a9:f5:
93:fe:54:ca:8c:c3:0e:86:64:bc:6f:5c:bc:c2:82:bd:7c:4d:
15:d0:26:c3:43:68:7f:cc:22:dd:d8:55:58:0f:5d:26:5f:5b:
5a:87:3e:be:c5:a7:09:b0:41:0e:f7:7d:7c:c2:68:5d:f1:e0:
fc:08:6a:d4:28:2f:ad:a2:b3:d2:0f:88:64:aa:fd:40:16:18:
48:ed:6f:a5:a8:7e:96:73:31:87:71:29:98:bc:c7:85:ca:7f:
4c:0b:1f:45:68:82:56:43:01:56:cc:cd:e3:02:d6:88:98:c9:
03:98:4c:ce:ff:f9:52:01:ea:cb:6e:f1:09:16:3a:2c:95:12:
0b:4c:6d:07:ab:1b:ba:fa:2c:e0:73:df:ce:8f:be:b8:12:53:
81:b5:9f:ad:dd:a4:99:5f:88:5f:07:b9:3d:c8:4b:e1:20:4d:
b8:b2:0a:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRQF/ViWwfRrVytEjp2fRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmMWJjMzI5NWFjMzA1Zjg1OTYwZTA0MDFiMDBmNDg3YTk0
YWIzOTQwHhcNMjUwNjA4MDIwMDU3WhcNMjUwNjA5MDIwMDU3WjAzMTEwLwYDVQQD
Eyg5MDkwNzNmNGQ3ZmFjODhjZDgxNTliNjg1MjRkYmQyNTU5ZGYzMzU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA56C/qZgu2IfE1PIsSWd5aefRE/A2
TBVT0YtXv26MunI1UI9RzJlRfGwcI1twAF/ng95JR5ffGLNevnmX7c0eyv4rdNtV
M7sqPXZZa2WhiHBW79JKRMCTdRvFiB0MSIqH3QTC8LI83oAb2WhnamagtectqYPX
drWHMEqnej3kauwOGOQqJsnzYRHNcBJZiHHHDV0sF4whBp5Qth3ZMY33lbj015us
ORpu/bSd0hbNmnaj2rgqgxDWiaqv3UKfDRxwGXsYoL1S/bBUevIdn8pZhx0d4s6D
sBW/8VynKZpCxiwJU24MtNJlnIj8aWKQ+QAErRdN7tAaKiJuN+poY5kq2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJCQc/TX+siM2BWbaFJNvSVZ3zNUMB8GA1UdIwQY
MBaAFK8bwylawwX4WWDgQBsA9IepSrOUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnh2REtWckRCZmhaWU9CQUd3RDBoNmxLczVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9kYTI1MGItNDUyZC00ZjNmLWEzZTct
OGU1ZTY5NWU5NzhlLzEvcnh2REtWckRCZmhaWU9CQUd3RDBoNmxLczVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9kYTI1MGItNDUyZC00ZjNmLWEzZTctOGU1ZTY5NWU5Nzhl
LzEvcnh2REtWckRCZmhaWU9CQUd3RDBoNmxLczVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdOF77LQC
kiuO3NqDhE3+XfcsakN11+8ywi5jL7CPJdeoeqn/aocsfFQsGAOsslbHOIs6oxuu
wt2VQm+90WgGKwN9vX0CKYKUHmfMMxpxCARh3LoVNNVg+an1k/5UyozDDoZkvG9c
vMKCvXxNFdAmw0Nof8wi3dhVWA9dJl9bWoc+vsWnCbBBDvd9fMJoXfHg/Ahq1Cgv
raKz0g+IZKr9QBYYSO1vpah+lnMxh3EpmLzHhcp/TAsfRWiCVkMBVszN4wLWiJjJ
A5hMzv/5UgHqy27xCRY6LJUSC0xtB6sbuvos4HPfzo++uBJTgbWfrd2kmV+IXwe5
PchL4SBNuLIK1g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:04:01 2025 by rpki-client