Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
File: G3esnt9lAaus5fStroTZyv4HkI0.mft (raw, json)
Hash identifier: WH9pGIKhHIaaBBoe5rlezEUGggtmKF/k3UP6MQlAWg0=
Subject key identifier: B0:4B:9C:1A:96:41:F8:74:83:61:EB:0D:81:60:DE:B4:37:BF:37:DA
Authority key identifier: 1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D
Certificate issuer: /CN=1b77ac9edf6501abace5f4adae84d9cafe07908d
Certificate serial: 0197469E9288F4B68A8ABE0AFBA297067390
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
Manifest number: 157A
Signing time: Fri 06 Jun 2025 19:01:26 +0000
Manifest this update: Fri 06 Jun 2025 19:01:26 +0000
Manifest next update: Sat 07 Jun 2025 19:01:26 +0000
Files and hashes: 1: G3esnt9lAaus5fStroTZyv4HkI0.crl (hash: g6Iz3UCJ7wD92pPdHgpe0JvcXh6O279q900MMwakiMc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:92:88:f4:b6:8a:8a:be:0a:fb:a2:97:06:73:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b77ac9edf6501abace5f4adae84d9cafe07908d
Validity
Not Before: Jun 6 19:01:26 2025 GMT
Not After : Jun 7 19:01:26 2025 GMT
Subject: CN=b04b9c1a9641f8748361eb0d8160deb437bf37da
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:7f:ae:1c:72:d5:c6:87:2e:84:83:18:fd:e1:
08:ba:23:41:74:e5:a3:74:5c:11:98:33:fb:22:21:
ef:55:f1:1d:d8:06:f1:f9:67:db:a3:92:3e:d1:9d:
82:68:90:ae:27:f5:7d:bd:ad:89:7e:bb:0f:46:cc:
cf:5b:02:36:91:7a:c1:64:33:bd:06:7d:8a:af:fb:
9d:5b:14:3b:97:c3:f6:9e:c7:d2:2a:81:3f:7d:67:
09:41:16:c3:cf:84:6e:1e:ee:90:30:31:42:67:89:
54:a9:5b:c2:06:f8:34:2e:7f:db:db:d5:04:28:48:
d4:ff:3a:db:65:3f:91:23:49:9b:cc:4e:b3:8b:2f:
da:10:bf:34:02:40:d5:c6:c2:84:51:70:5b:3b:bd:
81:d4:aa:88:bd:66:53:09:1e:4c:50:7d:f6:c4:57:
23:16:23:a1:f9:51:29:39:16:eb:f0:10:10:30:5d:
03:3f:bb:e5:5f:f6:70:c2:c4:5c:97:cd:2d:6d:20:
28:df:92:6e:3e:1d:28:20:b2:91:85:a8:86:43:98:
a9:62:ae:f0:ab:47:75:32:34:75:d6:e0:54:1f:e0:
ce:51:1b:d3:26:50:03:93:9f:3c:21:6e:2b:f9:9f:
fb:17:be:3e:84:97:bd:a9:52:d3:8f:73:82:87:c9:
6b:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:4B:9C:1A:96:41:F8:74:83:61:EB:0D:81:60:DE:B4:37:BF:37:DA
X509v3 Authority Key Identifier:
keyid:1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3b:5b:fd:d3:6b:77:a1:10:98:fc:80:66:16:05:85:87:62:14:
40:0b:19:b2:0c:cf:dc:ea:1a:ca:27:0a:16:ba:b0:68:73:f7:
41:a7:96:28:3b:36:65:7c:cc:6d:f6:b7:99:18:5b:67:39:bf:
fd:9d:f6:75:20:54:ff:b9:2c:eb:33:88:95:73:3d:95:fd:90:
fe:54:4b:ca:f6:a3:2d:96:da:80:43:a2:e4:18:58:95:de:76:
08:d6:73:e0:1b:b4:38:32:45:68:1f:04:83:b4:99:42:7e:79:
14:57:2c:be:32:3e:8e:f0:a2:a3:89:91:c9:10:75:ca:e9:5d:
8e:c7:60:a4:de:c1:77:08:78:ce:37:93:84:38:27:a3:48:80:
0d:33:ef:9b:0e:64:a5:bd:ac:2c:da:ae:75:27:16:f4:98:f8:
67:45:b2:e1:6e:a5:e2:c9:a9:b1:6d:49:78:87:77:42:80:d5:
62:7f:9b:e9:65:c0:d3:b7:38:a3:93:b7:cc:42:79:89:c8:db:
56:28:3e:90:a5:1c:0b:a9:c6:e3:4a:01:20:59:10:ed:32:8d:
16:d4:84:ef:16:be:be:b1:96:27:2d:2e:49:51:81:b3:35:0f:
06:4a:fa:bf:06:11:b1:d4:b2:94:e6:2b:d6:68:98:87:3d:a2:
11:30:6c:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGnpKI9LaKir4K+6KXBnOQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNzdhYzllZGY2NTAxYWJhY2U1ZjRhZGFlODRkOWNhZmUw
NzkwOGQwHhcNMjUwNjA2MTkwMTI2WhcNMjUwNjA3MTkwMTI2WjAzMTEwLwYDVQQD
EyhiMDRiOWMxYTk2NDFmODc0ODM2MWViMGQ4MTYwZGViNDM3YmYzN2RhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm3+uHHLVxocuhIMY/eEIuiNBdOWj
dFwRmDP7IiHvVfEd2Abx+Wfbo5I+0Z2CaJCuJ/V9va2JfrsPRszPWwI2kXrBZDO9
Bn2Kr/udWxQ7l8P2nsfSKoE/fWcJQRbDz4RuHu6QMDFCZ4lUqVvCBvg0Ln/b29UE
KEjU/zrbZT+RI0mbzE6ziy/aEL80AkDVxsKEUXBbO72B1KqIvWZTCR5MUH32xFcj
FiOh+VEpORbr8BAQMF0DP7vlX/ZwwsRcl80tbSAo35JuPh0oILKRhaiGQ5ipYq7w
q0d1MjR11uBUH+DOURvTJlADk588IW4r+Z/7F74+hJe9qVLTj3OCh8lrDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLBLnBqWQfh0g2HrDYFg3rQ3vzfaMB8GA1UdIwQY
MBaAFBt3rJ7fZQGrrOX0ra6E2cr+B5CNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzNlc250OWxBYXVzNWZTdHJvVFp5djRIa0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83MWJlNzYtNTY0Zi00Mjk0LTljMjQt
ZDE1OGQ1YzVjYmNjLzEvRzNlc250OWxBYXVzNWZTdHJvVFp5djRIa0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83MWJlNzYtNTY0Zi00Mjk0LTljMjQtZDE1OGQ1YzVjYmNj
LzEvRzNlc250OWxBYXVzNWZTdHJvVFp5djRIa0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAO1v902t3
oRCY/IBmFgWFh2IUQAsZsgzP3OoayicKFrqwaHP3QaeWKDs2ZXzMbfa3mRhbZzm/
/Z32dSBU/7ks6zOIlXM9lf2Q/lRLyvajLZbagEOi5BhYld52CNZz4Bu0ODJFaB8E
g7SZQn55FFcsvjI+jvCio4mRyRB1yuldjsdgpN7Bdwh4zjeThDgno0iADTPvmw5k
pb2sLNqudScW9Jj4Z0Wy4W6l4smpsW1JeId3QoDVYn+b6WXA07c4o5O3zEJ5icjb
Vig+kKUcC6nG40oBIFkQ7TKNFtSE7xa+vrGWJy0uSVGBszUPBkr6vwYRsdSylOYr
1miYhz2iETBsMA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:16:19 2025 by rpki-client