Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
File: Es84yOexki9uvz_TQHNc2wQjFBg.mft (raw, json)
Hash identifier: QfahmfKw+0JwbEVDap6JfaV6UdpR6FNBa8+0oAc09q8=
Subject key identifier: 29:4A:CE:E7:B3:09:3F:A1:A5:A7:83:B2:A3:12:CB:EC:A5:B4:4F:2F
Authority key identifier: 12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
Certificate issuer: /CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Certificate serial: 01974B1FCD0577FAD21D103945F3EE85F348
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
Manifest number: 157A
Signing time: Sat 07 Jun 2025 16:01:04 +0000
Manifest this update: Sat 07 Jun 2025 16:01:04 +0000
Manifest next update: Sun 08 Jun 2025 16:01:04 +0000
Files and hashes: 1: Es84yOexki9uvz_TQHNc2wQjFBg.crl (hash: Tjc9W7rMaF0Ak6XBc0+wbjERvYIBRDwhAJYQo03FDxk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 16:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:cd:05:77:fa:d2:1d:10:39:45:f3:ee:85:f3:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=12cf38c8e7b1922f6ebf3fd340735cdb04231418
Validity
Not Before: Jun 7 16:01:04 2025 GMT
Not After : Jun 8 16:01:04 2025 GMT
Subject: CN=294acee7b3093fa1a5a783b2a312cbeca5b44f2f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:a9:06:04:e9:28:90:9a:5d:70:0c:e1:ff:ba:
c9:2d:7d:94:71:d5:a5:04:00:90:25:0b:1f:0f:c6:
1a:d8:25:88:d1:c9:7b:06:ee:cf:3b:dc:be:33:20:
31:9d:b1:d9:c9:bd:25:ba:bf:cc:27:bb:8d:76:a2:
99:aa:66:60:28:15:ba:70:ee:bd:36:6a:6f:1f:1d:
b3:50:36:70:f2:98:84:ca:69:69:8e:7d:ac:46:0d:
19:a4:e1:4d:24:ed:13:4f:06:54:09:13:da:f2:d4:
03:50:1f:dd:c0:3f:9c:a7:7c:bb:9b:ca:b1:d3:28:
7b:a0:e9:6c:5d:e6:84:e0:7d:e5:e1:ba:b3:ce:df:
f8:c7:f2:0d:a0:13:15:84:97:59:25:97:85:86:57:
2c:4f:fa:9c:8d:ed:0e:9d:a3:73:c1:2d:9c:c5:1f:
89:fd:75:d7:ec:9c:fc:f9:3a:31:d0:be:b1:15:f6:
eb:4a:95:59:80:e5:2b:24:a4:e6:eb:e6:23:b4:a3:
59:89:8c:54:d4:0a:b0:f6:74:83:0a:6c:7f:50:f3:
21:72:a6:12:f4:2b:ef:90:88:c7:59:e7:b8:5f:96:
70:3f:d0:97:45:53:cc:eb:92:53:f3:fc:d8:48:37:
77:a4:6c:4c:94:a6:eb:5d:35:7f:7e:c3:5d:ce:1f:
20:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:4A:CE:E7:B3:09:3F:A1:A5:A7:83:B2:A3:12:CB:EC:A5:B4:4F:2F
X509v3 Authority Key Identifier:
keyid:12:CF:38:C8:E7:B1:92:2F:6E:BF:3F:D3:40:73:5C:DB:04:23:14:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Es84yOexki9uvz_TQHNc2wQjFBg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c1/7fd6b4-a77d-4dec-a03c-be0bafb782ee/1/Es84yOexki9uvz_TQHNc2wQjFBg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8e:d8:a0:cc:11:a9:6c:25:50:59:08:5a:27:6b:b4:a9:9b:6d:
c7:c8:3e:5d:9f:3a:d9:04:9c:86:40:10:bc:25:90:e5:49:4a:
c3:50:64:6b:fb:62:09:e7:00:0c:a1:94:42:5d:57:31:e7:1b:
d7:b7:8e:97:e0:ab:a5:24:39:78:d2:54:2e:cc:09:2b:56:7c:
10:b1:d0:b0:cf:26:ae:ca:c5:fb:41:32:2c:93:5f:82:bd:49:
78:dd:cf:22:15:76:36:6a:e6:e8:30:c0:90:79:ea:1e:79:44:
35:77:71:2f:e6:27:45:a2:de:75:3e:2c:d6:3f:df:84:89:82:
6d:7a:86:b8:13:e7:69:a0:43:cb:62:e5:53:63:1a:48:95:4a:
d5:61:e8:13:a8:61:e7:74:ac:ff:71:4f:36:31:68:44:a4:1d:
84:62:1b:59:be:a8:7d:54:dc:75:ea:b3:4b:51:97:2f:f4:ab:
93:e0:88:3f:b9:69:5e:52:b5:df:7d:86:33:5b:5b:53:ff:6b:
ee:05:56:80:71:69:04:9a:e2:6d:11:81:a3:f3:3f:6f:04:50:
82:93:c0:af:c1:d3:32:68:6f:26:27:53:c0:e0:12:3e:5b:16:
72:47:7e:c3:6b:89:65:4c:a7:3b:1c:8d:67:ff:2d:68:cb:06:
c2:9c:2e:63
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLH80Fd/rSHRA5RfPuhfNIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDEyY2YzOGM4ZTdiMTkyMmY2ZWJmM2ZkMzQwNzM1Y2RiMDQy
MzE0MTgwHhcNMjUwNjA3MTYwMTA0WhcNMjUwNjA4MTYwMTA0WjAzMTEwLwYDVQQD
EygyOTRhY2VlN2IzMDkzZmExYTVhNzgzYjJhMzEyY2JlY2E1YjQ0ZjJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuakGBOkokJpdcAzh/7rJLX2UcdWl
BACQJQsfD8Ya2CWI0cl7Bu7PO9y+MyAxnbHZyb0lur/MJ7uNdqKZqmZgKBW6cO69
NmpvHx2zUDZw8piEymlpjn2sRg0ZpOFNJO0TTwZUCRPa8tQDUB/dwD+cp3y7m8qx
0yh7oOlsXeaE4H3l4bqzzt/4x/INoBMVhJdZJZeFhlcsT/qcje0OnaNzwS2cxR+J
/XXX7Jz8+Tox0L6xFfbrSpVZgOUrJKTm6+YjtKNZiYxU1Aqw9nSDCmx/UPMhcqYS
9CvvkIjHWee4X5ZwP9CXRVPM65JT8/zYSDd3pGxMlKbrXTV/fsNdzh8g5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFClKzuezCT+hpaeDsqMSy+yltE8vMB8GA1UdIwQY
MBaAFBLPOMjnsZIvbr8/00BzXNsEIxQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMS83ZmQ2YjQtYTc3ZC00ZGVjLWEwM2Mt
YmUwYmFmYjc4MmVlLzEvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMS83ZmQ2YjQtYTc3ZC00ZGVjLWEwM2MtYmUwYmFmYjc4MmVl
LzEvRXM4NHlPZXhraTl1dnpfVFFITmMyd1FqRkJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjtigzBGp
bCVQWQhaJ2u0qZttx8g+XZ862QSchkAQvCWQ5UlKw1Bka/tiCecADKGUQl1XMecb
17eOl+CrpSQ5eNJULswJK1Z8ELHQsM8mrsrF+0EyLJNfgr1JeN3PIhV2Nmrm6DDA
kHnqHnlENXdxL+YnRaLedT4s1j/fhImCbXqGuBPnaaBDy2LlU2MaSJVK1WHoE6hh
53Ss/3FPNjFoRKQdhGIbWb6ofVTcdeqzS1GXL/Srk+CIP7lpXlK1332GM1tbU/9r
7gVWgHFpBJribRGBo/M/bwRQgpPAr8HTMmhvJidTwOASPlsWckd+w2uJZUynOxyN
Z/8taMsGwpwuYw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 01:58:09 2025 by rpki-client