Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
File: mQRCuMDNHdU1vq5yuU3TX5JyA40.mft (raw, json)
Hash identifier: CogrS/X/Njh8/l2XEN/NZ5MgE5NFsXqZw1Duk60B53A=
Subject key identifier: 59:74:BC:EB:2F:4E:57:97:97:6A:36:FE:40:91:90:3B:3F:3A:DB:37
Authority key identifier: 99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
Certificate issuer: /CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Certificate serial: 01974A7A7D92692FB5546105A36618D5F9C5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
Manifest number: 0651
Signing time: Sat 07 Jun 2025 13:00:30 +0000
Manifest this update: Sat 07 Jun 2025 13:00:30 +0000
Manifest next update: Sun 08 Jun 2025 13:00:30 +0000
Files and hashes: 1: mQRCuMDNHdU1vq5yuU3TX5JyA40.crl (hash: tJOYoBKLSdFK8FX7BFrUIHqBpF4+mQ7F/D/CgzCkQOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:7d:92:69:2f:b5:54:61:05:a3:66:18:d5:f9:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=990442b8c0cd1dd535beae72b94dd35f9272038d
Validity
Not Before: Jun 7 13:00:30 2025 GMT
Not After : Jun 8 13:00:30 2025 GMT
Subject: CN=5974bceb2f4e5797976a36fe4091903b3f3adb37
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:5f:a1:45:ad:7c:01:87:b5:58:d4:7b:69:0f:
87:6a:3c:50:5f:25:22:f1:11:ba:69:2e:f9:45:10:
60:c6:98:98:fe:f8:ae:9a:de:ec:76:49:36:00:db:
f1:16:c5:75:34:1e:7a:c1:6f:c2:e5:33:6a:40:0e:
b7:af:7f:c9:02:60:f7:80:24:d7:cb:7a:c7:a6:3f:
70:19:3b:ae:80:d4:8c:32:99:d8:f3:71:47:3e:14:
e4:9a:de:0f:2d:37:23:c5:e6:ea:6a:ee:e3:4c:dd:
b8:25:1e:6d:ed:8a:01:77:7f:63:80:05:c6:ef:5e:
5c:e1:4b:53:88:8b:53:9b:c2:3f:cc:97:8f:e7:77:
6a:73:23:99:1b:b8:ef:55:35:b3:46:f5:2f:8d:44:
66:63:ac:32:e0:38:c5:5e:86:2e:4c:41:8e:dc:93:
0b:0d:af:56:c8:51:40:de:83:27:a0:37:a9:42:3b:
d3:cf:f0:81:2c:b7:03:33:7c:9d:ef:5f:72:12:3d:
6f:26:e8:44:f7:d3:bd:4c:15:9e:f0:0b:e7:63:f8:
40:76:9d:22:55:09:ce:76:50:2b:1a:59:a5:5c:2d:
ea:44:ec:dd:42:08:25:17:96:9c:1f:74:f1:75:8b:
01:57:ac:d4:9b:ed:00:6e:d2:2e:1a:c9:37:07:8f:
f9:6b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:74:BC:EB:2F:4E:57:97:97:6A:36:FE:40:91:90:3B:3F:3A:DB:37
X509v3 Authority Key Identifier:
keyid:99:04:42:B8:C0:CD:1D:D5:35:BE:AE:72:B9:4D:D3:5F:92:72:03:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mQRCuMDNHdU1vq5yuU3TX5JyA40.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/15ecde-4038-4b46-893c-84cad7a6e5cb/1/mQRCuMDNHdU1vq5yuU3TX5JyA40.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
40:6d:1f:66:9d:f3:7d:3c:c3:e2:56:03:be:f1:53:d9:79:b5:
f0:e9:f2:3a:bc:dd:bc:70:0c:9c:c6:1b:d1:ff:79:f1:a2:ca:
50:2e:9d:96:00:79:27:76:97:fb:68:a3:a6:a8:63:3f:70:fd:
49:ed:18:d9:ee:7e:0b:34:02:89:e9:a9:c1:07:1c:dc:ff:50:
25:31:8a:3e:98:a4:65:d0:48:9b:bf:70:92:da:53:5b:e1:76:
c3:26:b2:ed:5c:a5:c4:4f:e9:c9:57:48:64:2a:6d:44:08:2a:
69:b6:46:0c:db:83:52:81:d0:7d:f9:0f:c3:9d:73:a7:08:ad:
1f:10:f8:aa:a1:49:c9:95:92:81:0d:c5:5c:f7:d6:a5:55:20:
c8:d1:e5:a8:a4:1e:14:8e:f5:a1:57:f1:a6:67:8b:4a:92:06:
a7:09:b3:fc:44:43:ab:c3:20:f1:65:1f:a4:f3:d3:a5:e8:e7:
ba:3a:b6:e0:60:dd:c1:e9:b8:ab:bf:b9:57:c9:6b:1a:75:d3:
5a:bb:bf:88:c4:0c:41:8f:6e:ca:ed:8e:a4:9e:26:00:0c:d9:
7a:a0:c4:7d:79:f2:c2:02:c5:9b:6d:29:58:25:79:b7:c9:0c:
c1:de:aa:70:e0:3f:a2:23:ab:ff:24:86:82:fa:a6:a2:89:1b:
06:0f:75:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKen2SaS+1VGEFo2YY1fnFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MDQ0MmI4YzBjZDFkZDUzNWJlYWU3MmI5NGRkMzVmOTI3
MjAzOGQwHhcNMjUwNjA3MTMwMDMwWhcNMjUwNjA4MTMwMDMwWjAzMTEwLwYDVQQD
Eyg1OTc0YmNlYjJmNGU1Nzk3OTc2YTM2ZmU0MDkxOTAzYjNmM2FkYjM3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvF+hRa18AYe1WNR7aQ+HajxQXyUi
8RG6aS75RRBgxpiY/viumt7sdkk2ANvxFsV1NB56wW/C5TNqQA63r3/JAmD3gCTX
y3rHpj9wGTuugNSMMpnY83FHPhTkmt4PLTcjxebqau7jTN24JR5t7YoBd39jgAXG
715c4UtTiItTm8I/zJeP53dqcyOZG7jvVTWzRvUvjURmY6wy4DjFXoYuTEGO3JML
Da9WyFFA3oMnoDepQjvTz/CBLLcDM3yd719yEj1vJuhE99O9TBWe8AvnY/hAdp0i
VQnOdlArGlmlXC3qROzdQgglF5acH3TxdYsBV6zUm+0AbtIuGsk3B4/5awIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFl0vOsvTleXl2o2/kCRkDs/Ots3MB8GA1UdIwQY
MBaAFJkEQrjAzR3VNb6ucrlN01+ScgONMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS8xNWVjZGUtNDAzOC00YjQ2LTg5M2Mt
ODRjYWQ3YTZlNWNiLzEvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS8xNWVjZGUtNDAzOC00YjQ2LTg5M2MtODRjYWQ3YTZlNWNi
LzEvbVFSQ3VNRE5IZFUxdnE1eXVVM1RYNUp5QTQwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQG0fZp3z
fTzD4lYDvvFT2Xm18OnyOrzdvHAMnMYb0f958aLKUC6dlgB5J3aX+2ijpqhjP3D9
Se0Y2e5+CzQCiempwQcc3P9QJTGKPpikZdBIm79wktpTW+F2wyay7VylxE/pyVdI
ZCptRAgqabZGDNuDUoHQffkPw51zpwitHxD4qqFJyZWSgQ3FXPfWpVUgyNHlqKQe
FI71oVfxpmeLSpIGpwmz/ERDq8Mg8WUfpPPTpejnujq24GDdwem4q7+5V8lrGnXT
Wru/iMQMQY9uyu2OpJ4mAAzZeqDEfXnywgLFm20pWCV5t8kMwd6qcOA/oiOr/ySG
gvqmookbBg91XQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:07:24 2025 by rpki-client