Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
File: 1-RCU3VhuycgtHBaTDK9rv-8htbU.mft (raw, json)
Hash identifier: QnrziS+Q4gbK3SdwQeQL3Q6iB4w+nhhfXxo5RhZQLRs=
Subject key identifier: 0C:49:E9:C6:DB:B5:EA:66:54:87:96:16:47:9A:C3:DF:74:72:84:24
Authority key identifier: F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
Certificate issuer: /CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Certificate serial: 01974A7B8C71930115384A95A705D4E3C0A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
Manifest number: 10FB
Signing time: Sat 07 Jun 2025 13:01:40 +0000
Manifest this update: Sat 07 Jun 2025 13:01:40 +0000
Manifest next update: Sun 08 Jun 2025 13:01:40 +0000
Files and hashes: 1: 1-RCU3VhuycgtHBaTDK9rv-8htbU.crl (hash: RGJI5Whp1/VJrN6vbz0WCFSPi11XxeL/tNFL/lDXHio=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:8c:71:93:01:15:38:4a:95:a7:05:d4:e3:c0:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f91094dd586ec9c82d1c16930caf6bbfef21b5b5
Validity
Not Before: Jun 7 13:01:40 2025 GMT
Not After : Jun 8 13:01:40 2025 GMT
Subject: CN=0c49e9c6dbb5ea6654879616479ac3df74728424
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:85:04:00:7c:f4:31:61:77:5a:95:cb:8c:de:
e9:23:79:bd:30:53:b7:62:62:f0:f6:00:a3:7f:3c:
ec:79:b9:9f:a8:36:b5:67:74:d3:77:36:20:10:df:
51:7d:82:89:f4:c5:a6:5c:a7:3d:d1:15:5b:34:4a:
52:be:06:08:e1:b9:70:7e:75:1d:38:d4:c4:1b:69:
dd:99:6e:77:c2:bd:6e:33:be:6b:eb:f3:7c:c1:99:
04:a2:dd:d4:4e:13:bc:88:0a:e9:4b:fb:b7:ac:4f:
36:29:ea:54:53:c2:84:54:28:db:f0:d8:57:85:5a:
16:52:2b:11:f9:fd:2b:07:54:2d:4b:36:ca:86:68:
18:30:b8:36:38:9e:b3:4b:5c:95:89:97:64:e9:6f:
fe:19:2c:c0:9f:e8:15:43:04:1f:2d:3f:15:69:07:
86:32:5f:00:53:5c:6a:c8:a4:ea:9a:3c:0f:83:63:
42:0f:16:86:f5:c1:cc:58:95:ef:49:d2:60:81:b3:
dd:da:16:0d:93:65:86:e0:48:8a:b2:0f:f3:64:8e:
3f:67:21:39:ed:d5:14:3f:b2:ac:d2:fb:de:c0:36:
ae:ff:75:20:da:b1:5b:cf:8c:7b:8a:13:26:5b:3b:
06:ab:56:31:bc:48:fb:e5:d0:da:9e:e6:0f:93:42:
02:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0C:49:E9:C6:DB:B5:EA:66:54:87:96:16:47:9A:C3:DF:74:72:84:24
X509v3 Authority Key Identifier:
keyid:F9:10:94:DD:58:6E:C9:C8:2D:1C:16:93:0C:AF:6B:BF:EF:21:B5:B5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-RCU3VhuycgtHBaTDK9rv-8htbU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b8/cb2687-ba89-4b7e-8b47-d7a18a183f7a/1/1-RCU3VhuycgtHBaTDK9rv-8htbU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
01:cf:15:5b:cb:74:af:ac:d2:54:31:ba:26:43:0a:ff:e1:0c:
54:7f:84:a7:40:e4:65:8a:0f:03:01:5a:8d:fb:5d:cd:9e:19:
5d:ad:9a:e9:11:f7:08:ba:ff:27:64:56:87:4a:65:77:ec:20:
f5:2b:91:4a:9d:f3:4f:47:bf:78:57:52:6b:43:5e:32:1e:fd:
dd:e1:f0:cd:2d:19:bb:cf:9c:4b:45:b5:69:d7:00:11:01:e6:
c5:69:0a:9e:c4:bd:c1:77:a5:f9:49:90:fa:70:80:a3:4c:89:
2a:9f:7a:14:4b:7c:5d:5c:48:91:58:91:b8:58:33:2d:39:3d:
0c:72:d5:e6:96:1d:3b:66:b8:ed:c8:56:a0:17:36:c2:4c:4a:
7d:9b:3c:25:24:a2:1e:42:11:63:82:a9:dd:31:a1:b9:3b:d6:
cd:6e:71:fc:ff:b0:99:2b:7d:6b:60:ab:9f:f9:2f:48:9b:9b:
aa:91:7b:0b:7f:03:88:1b:17:3f:94:57:be:34:36:5f:ea:f2:
8d:6c:1d:db:64:01:9c:33:2c:ae:1a:74:c3:64:25:34:bb:e0:
25:b2:4f:09:fe:03:0f:4a:7e:84:5c:ef:11:46:7c:c7:49:a5:
16:96:03:de:19:2d:40:f2:a4:8f:79:e8:e2:b1:5f:ff:bd:50:
55:7e:11:d0
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdKe4xxkwEVOEqVpwXU48CmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5MTA5NGRkNTg2ZWM5YzgyZDFjMTY5MzBjYWY2YmJmZWYy
MWI1YjUwHhcNMjUwNjA3MTMwMTQwWhcNMjUwNjA4MTMwMTQwWjAzMTEwLwYDVQQD
EygwYzQ5ZTljNmRiYjVlYTY2NTQ4Nzk2MTY0NzlhYzNkZjc0NzI4NDI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsoUEAHz0MWF3WpXLjN7pI3m9MFO3
YmLw9gCjfzzsebmfqDa1Z3TTdzYgEN9RfYKJ9MWmXKc90RVbNEpSvgYI4blwfnUd
ONTEG2ndmW53wr1uM75r6/N8wZkEot3UThO8iArpS/u3rE82KepUU8KEVCjb8NhX
hVoWUisR+f0rB1QtSzbKhmgYMLg2OJ6zS1yViZdk6W/+GSzAn+gVQwQfLT8VaQeG
Ml8AU1xqyKTqmjwPg2NCDxaG9cHMWJXvSdJggbPd2hYNk2WG4EiKsg/zZI4/ZyE5
7dUUP7Ks0vvewDau/3Ug2rFbz4x7ihMmWzsGq1YxvEj75dDanuYPk0ICcQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFAxJ6cbbtepmVIeWFkeaw990coQkMB8GA1UdIwQY
MBaAFPkQlN1YbsnILRwWkwyva7/vIbW1MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1SQ1UzVmh1eWNndEhCYVRESzlydi04aHRiVS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvYjgvY2IyNjg3LWJhODktNGI3ZS04YjQ3
LWQ3YTE4YTE4M2Y3YS8xLzEtUkNVM1ZodXljZ3RIQmFUREs5cnYtOGh0YlUubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2I4L2NiMjY4Ny1iYTg5LTRiN2UtOGI0Ny1kN2ExOGExODNm
N2EvMS8xLVJDVTNWaHV5Y2d0SEJhVERLOXJ2LThodGJVLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAc8V
W8t0r6zSVDG6JkMK/+EMVH+Ep0DkZYoPAwFajftdzZ4ZXa2a6RH3CLr/J2RWh0pl
d+wg9SuRSp3zT0e/eFdSa0NeMh793eHwzS0Zu8+cS0W1adcAEQHmxWkKnsS9wXel
+UmQ+nCAo0yJKp96FEt8XVxIkViRuFgzLTk9DHLV5pYdO2a47chWoBc2wkxKfZs8
JSSiHkIRY4Kp3TGhuTvWzW5x/P+wmSt9a2Crn/kvSJubqpF7C38DiBsXP5RXvjQ2
X+ryjWwd22QBnDMsrhp0w2QlNLvgJbJPCf4DD0p+hFzvEUZ8x0mlFpYD3hktQPKk
j3no4rFf/71QVX4R0A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:42:30 2025 by rpki-client