Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft
File: iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft (raw, json)
Hash identifier: v2gyTDgIydVdfTLqxiYLeQ6QRETuVs4g4kVDap3aL4I=
Subject key identifier: D3:1E:5D:EA:0C:12:B8:5C:24:0A:F7:44:6A:4F:9D:A6:FA:A3:A5:E0
Authority key identifier: 89:15:C3:BC:8D:59:05:F2:4F:BE:30:51:BC:E7:20:09:21:38:30:09
Certificate issuer: /CN=8915c3bc8d5905f24fbe3051bce7200921383009
Certificate serial: 0197462FE55C09AE72A81DFCFF116189CA51
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft
Manifest number: 4C
Signing time: Fri 06 Jun 2025 17:00:33 +0000
Manifest this update: Fri 06 Jun 2025 17:00:33 +0000
Manifest next update: Sat 07 Jun 2025 17:00:33 +0000
Files and hashes: 1: iRXDvI1ZBfJPvjBRvOcgCSE4MAk.crl (hash: ObvKqwTuYPeSdYM3TSHFQeNLRSUddlbDYTt+OGhLLXU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.crl
rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft
rsync://rpki.ripe.net/repository/DEFAULT/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:e5:5c:09:ae:72:a8:1d:fc:ff:11:61:89:ca:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8915c3bc8d5905f24fbe3051bce7200921383009
Validity
Not Before: Jun 6 17:00:33 2025 GMT
Not After : Jun 7 17:00:33 2025 GMT
Subject: CN=d31e5dea0c12b85c240af7446a4f9da6faa3a5e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cd:98:83:34:d9:50:72:c7:09:94:58:30:3d:c6:
d7:d4:58:28:4d:bb:9b:a4:21:0f:d2:d5:61:3a:ec:
66:03:39:d5:e5:c3:33:fd:22:82:44:cb:c4:93:dd:
09:ce:77:d6:56:b5:aa:88:db:47:ba:ae:77:79:48:
60:c3:b9:60:79:38:9e:d8:a0:17:b1:cc:c6:fe:08:
dd:14:da:d0:c9:80:bd:86:f6:cd:fe:30:39:d9:de:
43:84:de:45:00:a9:aa:38:04:e1:6e:50:ff:ce:6a:
15:f5:c1:27:fa:d5:54:0a:0e:3e:fb:1a:f8:73:37:
35:e4:7c:5d:58:2d:2f:cd:5e:65:00:37:0c:bd:d6:
38:8a:bd:11:37:a1:82:3a:bd:fc:4a:09:d6:77:cf:
95:e0:e2:52:ec:1e:32:d8:d9:0a:2e:72:5b:13:9f:
fb:6b:ee:03:46:aa:72:4f:c5:06:8d:a8:0e:e9:27:
11:46:37:b2:39:bd:74:78:93:5e:48:b2:32:22:d2:
f6:f6:14:e7:d9:b2:45:bc:ba:f8:f5:08:4a:d8:a0:
65:46:2b:5a:8c:0e:8f:36:86:90:aa:d9:70:0b:72:
10:92:03:7a:0b:3f:93:83:39:1f:33:cd:08:61:f6:
01:59:d9:f4:5b:77:39:23:cf:75:0e:80:9e:bc:1e:
50:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:1E:5D:EA:0C:12:B8:5C:24:0A:F7:44:6A:4F:9D:A6:FA:A3:A5:E0
X509v3 Authority Key Identifier:
keyid:89:15:C3:BC:8D:59:05:F2:4F:BE:30:51:BC:E7:20:09:21:38:30:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b9/63ecd9-3d18-4810-9db4-d36c16279552/1/iRXDvI1ZBfJPvjBRvOcgCSE4MAk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:87:76:05:9f:81:27:c0:f3:65:ce:86:d5:dd:aa:b3:5d:f3:
84:a0:0d:24:e7:d0:69:67:5c:31:b1:e9:07:3c:25:1f:9c:4b:
40:29:2b:e1:dc:d9:a9:20:24:ef:8f:87:3b:ac:5a:25:8f:1b:
95:37:6b:5c:3a:5f:36:71:7b:8c:ea:17:73:af:18:d0:74:44:
98:d6:f2:f2:90:02:ed:3b:58:72:68:bb:d6:7b:8a:86:51:b4:
5d:f5:a5:06:13:86:37:be:78:64:28:3f:60:eb:d7:5c:ef:34:
26:32:6b:ef:5c:4a:48:4d:70:68:4f:cd:05:01:9d:8d:0c:36:
fa:ae:d4:4e:d8:a5:77:46:98:e7:56:87:4b:d1:9f:92:f7:79:
37:34:9f:3a:ae:ab:a6:e2:11:b3:3f:82:da:dd:58:cd:4d:d1:
17:87:4c:3b:4d:c4:1b:e9:1b:78:66:14:b2:b3:90:ff:9c:cc:
51:4f:17:eb:c9:57:ee:3e:69:51:78:b6:ce:d7:f5:9e:12:f8:
e6:34:51:e2:f8:bb:a0:da:dd:ad:5d:2c:1f:8b:93:36:76:61:
27:6a:c6:ea:5e:fa:fd:ed:80:71:3e:8d:37:dc:13:bc:63:9e:
48:a5:1c:94:0e:19:a0:b9:3e:66:89:2b:7c:c3:77:11:2a:33:
99:9c:43:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGL+VcCa5yqB38/xFhicpRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5MTVjM2JjOGQ1OTA1ZjI0ZmJlMzA1MWJjZTcyMDA5MjEz
ODMwMDkwHhcNMjUwNjA2MTcwMDMzWhcNMjUwNjA3MTcwMDMzWjAzMTEwLwYDVQQD
EyhkMzFlNWRlYTBjMTJiODVjMjQwYWY3NDQ2YTRmOWRhNmZhYTNhNWUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzZiDNNlQcscJlFgwPcbX1FgoTbub
pCEP0tVhOuxmAznV5cMz/SKCRMvEk90JznfWVrWqiNtHuq53eUhgw7lgeTie2KAX
sczG/gjdFNrQyYC9hvbN/jA52d5DhN5FAKmqOAThblD/zmoV9cEn+tVUCg4++xr4
czc15HxdWC0vzV5lADcMvdY4ir0RN6GCOr38SgnWd8+V4OJS7B4y2NkKLnJbE5/7
a+4DRqpyT8UGjagO6ScRRjeyOb10eJNeSLIyItL29hTn2bJFvLr49QhK2KBlRita
jA6PNoaQqtlwC3IQkgN6Cz+TgzkfM80IYfYBWdn0W3c5I891DoCevB5QwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNMeXeoMErhcJAr3RGpPnab6o6XgMB8GA1UdIwQY
MBaAFIkVw7yNWQXyT74wUbznIAkhODAJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVJYRHZJMVpCZkpQdmpCUnZPY2dDU0U0TUFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iOS82M2VjZDktM2QxOC00ODEwLTlkYjQt
ZDM2YzE2Mjc5NTUyLzEvaVJYRHZJMVpCZkpQdmpCUnZPY2dDU0U0TUFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iOS82M2VjZDktM2QxOC00ODEwLTlkYjQtZDM2YzE2Mjc5NTUy
LzEvaVJYRHZJMVpCZkpQdmpCUnZPY2dDU0U0TUFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAId2BZ+B
J8DzZc6G1d2qs13zhKANJOfQaWdcMbHpBzwlH5xLQCkr4dzZqSAk74+HO6xaJY8b
lTdrXDpfNnF7jOoXc68Y0HREmNby8pAC7TtYcmi71nuKhlG0XfWlBhOGN754ZCg/
YOvXXO80JjJr71xKSE1waE/NBQGdjQw2+q7UTtild0aY51aHS9Gfkvd5NzSfOq6r
puIRsz+C2t1YzU3RF4dMO03EG+kbeGYUsrOQ/5zMUU8X68lX7j5pUXi2ztf1nhL4
5jRR4vi7oNrdrV0sH4uTNnZhJ2rG6l76/e2AcT6NN9wTvGOeSKUclA4ZoLk+Zokr
fMN3ESozmZxD3g==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:37 2025 by rpki-client