Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
File: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft (raw, json)
Hash identifier: mQ3XW0B9i9xtBHr5OKhMIlKjpj3IV6q9QVMAUjR33b8=
Subject key identifier: 6D:F5:C0:E2:9B:50:74:5D:DF:BA:9C:43:40:D5:AD:C0:C4:21:29:10
Authority key identifier: E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
Certificate issuer: /CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Certificate serial: 0197C9F150D37C9302938AC3EA505CF55B52
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
Manifest number: 15BB
Signing time: Wed 02 Jul 2025 07:02:04 +0000
Manifest this update: Wed 02 Jul 2025 07:02:04 +0000
Manifest next update: Thu 03 Jul 2025 07:02:04 +0000
Files and hashes: 1: 4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl (hash: 2Q7O68QcpImMM5PRvtKt6gxLCwU71TFaSl4NDF1mTQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 07:02:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c9:f1:50:d3:7c:93:02:93:8a:c3:ea:50:5c:f5:5b:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e1f5c640b4aa14b26119293dc613dc6366a567f6
Validity
Not Before: Jul 2 07:02:04 2025 GMT
Not After : Jul 3 07:02:04 2025 GMT
Subject: CN=6df5c0e29b50745ddfba9c4340d5adc0c4212910
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:f6:b8:fe:d3:49:e8:73:a7:41:31:97:eb:9c:
54:64:a3:6f:1f:83:33:b4:d7:a6:91:9a:ab:53:9e:
e0:31:ff:0f:7c:03:c3:79:0d:bf:ee:dc:6e:09:a5:
81:1c:e1:91:2a:4a:8b:46:f3:e9:1c:65:23:4a:2b:
48:bb:12:89:86:6d:13:22:e3:a2:fb:12:c6:bc:64:
16:01:fc:c3:32:b1:a2:77:cb:31:f6:84:2f:5c:45:
ef:6e:93:af:97:06:b8:2b:c0:27:30:f0:f1:18:28:
e8:9f:c3:6b:52:c9:81:74:c2:b1:4d:b5:1c:63:63:
cc:ed:00:4c:3e:cf:40:07:61:54:a5:0c:21:e8:84:
5a:88:0c:c2:49:a5:11:39:cb:4d:0b:41:35:65:ee:
9a:6c:93:57:0e:29:f6:7a:9b:54:73:7d:d1:25:2e:
df:a4:76:c0:ac:d7:80:f3:14:bf:b7:60:17:6c:97:
2b:42:d6:f8:00:b8:15:7b:18:03:14:89:a4:de:16:
15:49:44:5f:5f:2c:a8:9a:ff:8b:9d:72:81:e3:c0:
f0:ec:82:a7:88:25:46:c8:cd:2d:7c:71:84:08:0a:
d4:33:1c:e5:5b:4d:4d:b7:c6:33:d3:3f:ed:5a:c4:
af:fb:1a:63:e2:55:c1:b8:3e:40:21:23:da:86:dc:
16:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:F5:C0:E2:9B:50:74:5D:DF:BA:9C:43:40:D5:AD:C0:C4:21:29:10
X509v3 Authority Key Identifier:
keyid:E1:F5:C6:40:B4:AA:14:B2:61:19:29:3D:C6:13:DC:63:66:A5:67:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/4308ab-bc04-49af-bb01-898b27cbfc47/1/4fXGQLSqFLJhGSk9xhPcY2alZ_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bc:cd:3d:ba:07:28:7f:a1:e1:7b:2f:c2:f2:94:96:a3:16:d0:
3d:7b:38:8f:b9:a3:6a:92:77:b3:e2:43:a3:54:99:62:e3:3b:
bb:e4:93:98:7c:6c:50:9a:07:4c:a8:3a:b7:88:f0:84:13:18:
80:f4:04:38:81:c3:32:6f:74:76:3e:6c:ad:70:38:8b:52:bf:
31:f2:9d:8d:f3:02:7a:22:db:a9:f3:15:5d:c7:57:53:9e:3a:
77:4e:04:52:d4:ca:f5:9a:d2:b4:a8:3f:7c:64:d1:ba:d1:ef:
92:0d:f4:49:aa:71:03:99:06:73:cd:13:f5:d0:f2:c2:48:64:
b5:6b:e1:3e:49:8d:85:96:37:09:75:88:ef:67:92:24:2a:ce:
d0:fa:91:36:93:a0:b6:b3:4b:61:47:49:18:29:a7:bd:c8:ed:
99:09:11:f2:43:1a:d6:12:23:13:40:de:be:3f:d0:cd:89:fa:
34:93:c5:52:d9:5e:45:71:fa:f7:95:11:11:26:89:e5:67:93:
9e:4f:8f:fb:a5:54:b8:6f:97:0a:d0:fb:e7:37:e3:83:e1:18:
81:21:53:4b:7c:79:22:e2:53:9d:00:8d:46:ce:fb:48:03:e1:
2e:94:f4:19:8f:5a:1b:f9:17:c5:49:c0:74:8d:b4:ce:b5:f9:
03:37:3c:b4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfJ8VDTfJMCk4rD6lBc9VtSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUxZjVjNjQwYjRhYTE0YjI2MTE5MjkzZGM2MTNkYzYzNjZh
NTY3ZjYwHhcNMjUwNzAyMDcwMjA0WhcNMjUwNzAzMDcwMjA0WjAzMTEwLwYDVQQD
Eyg2ZGY1YzBlMjliNTA3NDVkZGZiYTljNDM0MGQ1YWRjMGM0MjEyOTEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt/a4/tNJ6HOnQTGX65xUZKNvH4Mz
tNemkZqrU57gMf8PfAPDeQ2/7txuCaWBHOGRKkqLRvPpHGUjSitIuxKJhm0TIuOi
+xLGvGQWAfzDMrGid8sx9oQvXEXvbpOvlwa4K8AnMPDxGCjon8NrUsmBdMKxTbUc
Y2PM7QBMPs9AB2FUpQwh6IRaiAzCSaUROctNC0E1Ze6abJNXDin2eptUc33RJS7f
pHbArNeA8xS/t2AXbJcrQtb4ALgVexgDFImk3hYVSURfXyyomv+LnXKB48Dw7IKn
iCVGyM0tfHGECArUMxzlW01Nt8Yz0z/tWsSv+xpj4lXBuD5AISPahtwW6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG31wOKbUHRd37qcQ0DVrcDEISkQMB8GA1UdIwQY
MBaAFOH1xkC0qhSyYRkpPcYT3GNmpWf2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEt
ODk4YjI3Y2JmYzQ3LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS80MzA4YWItYmMwNC00OWFmLWJiMDEtODk4YjI3Y2JmYzQ3
LzEvNGZYR1FMU3FGTEpoR1NrOXhoUGNZMmFsWl9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvM09ugco
f6Hhey/C8pSWoxbQPXs4j7mjapJ3s+JDo1SZYuM7u+STmHxsUJoHTKg6t4jwhBMY
gPQEOIHDMm90dj5srXA4i1K/MfKdjfMCeiLbqfMVXcdXU546d04EUtTK9ZrStKg/
fGTRutHvkg30SapxA5kGc80T9dDywkhktWvhPkmNhZY3CXWI72eSJCrO0PqRNpOg
trNLYUdJGCmnvcjtmQkR8kMa1hIjE0Devj/QzYn6NJPFUtleRXH695URESaJ5WeT
nk+P+6VUuG+XCtD75zfjg+EYgSFTS3x5IuJTnQCNRs77SAPhLpT0GY9aG/kXxUnA
dI20zrX5Azc8tA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 13:19:46 2025 by rpki-client