Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
File: G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft (raw, json)
Hash identifier: lWZ0+UsAE3ImXHpS0ikFzKhyuqfpBL0NTlxSSANEXxE=
Subject key identifier: 3E:B9:33:05:67:75:5F:B2:16:A6:1C:12:03:71:FB:35:06:C4:E7:4C
Authority key identifier: 1B:F9:2C:29:94:FF:B5:35:7F:8D:C4:62:79:BD:D9:9B:E3:A5:6C:BD
Certificate issuer: /CN=1bf92c2994ffb5357f8dc46279bdd99be3a56cbd
Certificate serial: 01974A7B9D79B20C3F14B42B545A465F14E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
Manifest number: 0D15
Signing time: Sat 07 Jun 2025 13:01:44 +0000
Manifest this update: Sat 07 Jun 2025 13:01:44 +0000
Manifest next update: Sun 08 Jun 2025 13:01:44 +0000
Files and hashes: 1: G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl (hash: k+nOfYC41jd6EiP5u2UGVD1VhWJg4T42qzFnaKT+KV0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:9d:79:b2:0c:3f:14:b4:2b:54:5a:46:5f:14:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1bf92c2994ffb5357f8dc46279bdd99be3a56cbd
Validity
Not Before: Jun 7 13:01:44 2025 GMT
Not After : Jun 8 13:01:44 2025 GMT
Subject: CN=3eb9330567755fb216a61c120371fb3506c4e74c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:80:bd:77:d8:42:2f:28:e2:6b:0c:62:99:d3:
5d:a8:d5:e0:89:e6:44:cd:84:dd:4f:a7:42:e3:97:
86:ca:53:7e:31:6b:a9:e6:f8:a4:c6:03:d3:f6:a2:
76:a9:27:27:1c:4c:8d:99:1a:2e:79:8e:2d:24:f9:
08:10:5d:3b:af:67:2a:bc:1c:b7:5d:1a:25:fe:0c:
c6:b6:50:4b:2d:f4:14:06:e8:2e:7e:01:c5:42:2f:
61:af:4c:ff:b1:aa:57:b2:8d:b6:f4:fb:85:44:58:
cc:c3:4a:b0:46:cc:f6:44:45:ed:c8:d5:c3:fa:f0:
74:a8:84:01:f3:74:e7:e5:65:5c:67:f7:47:88:33:
25:58:ff:b6:72:dc:db:cd:4c:f3:dc:b3:73:aa:4a:
f9:b6:af:38:3c:dd:ae:93:7a:ea:54:30:38:83:ee:
77:68:4b:60:c2:70:98:fc:71:06:e7:d1:2a:b6:56:
43:11:d3:25:2e:b6:34:03:9c:2d:df:b2:50:fc:d9:
9f:57:fe:50:62:67:ee:27:30:e6:aa:72:48:79:78:
9d:56:50:4f:37:51:ad:46:f4:3f:05:06:b9:95:1c:
e6:37:20:f0:45:f9:b7:4e:24:d0:1a:81:e7:b4:eb:
e0:b2:0b:53:66:7a:d1:8c:53:8d:77:12:bc:b9:af:
6f:0b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3E:B9:33:05:67:75:5F:B2:16:A6:1C:12:03:71:FB:35:06:C4:E7:4C
X509v3 Authority Key Identifier:
keyid:1B:F9:2C:29:94:FF:B5:35:7F:8D:C4:62:79:BD:D9:9B:E3:A5:6C:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G_ksKZT_tTV_jcRieb3Zm-OlbL0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/7f7361-b1e6-4019-ad63-2005994df471/1/G_ksKZT_tTV_jcRieb3Zm-OlbL0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:dd:b0:94:13:c7:3f:f5:07:e2:46:0a:cd:3e:16:35:f4:d3:
3e:f5:f7:6e:03:df:c4:5f:4e:45:a4:2a:8a:8d:6c:79:c1:59:
31:18:02:ea:5e:5b:02:6f:43:ae:39:24:23:2f:be:f9:0c:3f:
62:27:64:0e:3e:ef:6f:c6:8a:88:d4:da:1d:4f:82:ca:77:cf:
a4:c5:91:ba:5a:72:af:7e:63:e1:e6:3f:b7:85:3b:5d:cd:de:
d6:4d:c2:49:f5:94:9c:fb:1a:7e:26:90:79:99:a9:27:33:fe:
8b:70:78:f2:5d:0f:37:79:f3:b3:92:5d:c4:8f:1c:52:08:8b:
62:9e:99:9d:9a:cb:09:09:d3:6c:ad:fa:66:aa:29:86:00:78:
33:23:a3:5a:7f:96:65:9e:c4:aa:db:f3:ad:f3:59:35:15:62:
e7:2b:7a:e3:81:a4:85:11:27:27:15:c6:43:5a:39:d5:55:38:
eb:f3:43:a3:55:c1:e3:aa:50:b9:ce:32:12:30:fb:72:e9:49:
62:c1:2d:d0:2e:f4:d3:68:09:b6:88:63:33:8b:19:d1:44:24:
8c:4d:2c:e6:ab:c3:b9:91:93:73:cc:f8:cd:f9:18:cd:9c:3f:
d1:ca:d4:6b:16:a0:88:9a:ba:81:d7:ba:fd:89:f8:36:f5:4d:
26:65:a2:f0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKe515sgw/FLQrVFpGXxTkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiZjkyYzI5OTRmZmI1MzU3ZjhkYzQ2Mjc5YmRkOTliZTNh
NTZjYmQwHhcNMjUwNjA3MTMwMTQ0WhcNMjUwNjA4MTMwMTQ0WjAzMTEwLwYDVQQD
EygzZWI5MzMwNTY3NzU1ZmIyMTZhNjFjMTIwMzcxZmIzNTA2YzRlNzRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuoC9d9hCLyjiawximdNdqNXgieZE
zYTdT6dC45eGylN+MWup5vikxgPT9qJ2qScnHEyNmRoueY4tJPkIEF07r2cqvBy3
XRol/gzGtlBLLfQUBugufgHFQi9hr0z/sapXso229PuFRFjMw0qwRsz2REXtyNXD
+vB0qIQB83Tn5WVcZ/dHiDMlWP+2ctzbzUzz3LNzqkr5tq84PN2uk3rqVDA4g+53
aEtgwnCY/HEG59EqtlZDEdMlLrY0A5wt37JQ/NmfV/5QYmfuJzDmqnJIeXidVlBP
N1GtRvQ/BQa5lRzmNyDwRfm3TiTQGoHntOvgsgtTZnrRjFONdxK8ua9vCwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD65MwVndV+yFqYcEgNx+zUGxOdMMB8GA1UdIwQY
MBaAFBv5LCmU/7U1f43EYnm92ZvjpWy9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvR19rc0taVF90VFZfamNSaWViM1ptLU9sYkwwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83ZjczNjEtYjFlNi00MDE5LWFkNjMt
MjAwNTk5NGRmNDcxLzEvR19rc0taVF90VFZfamNSaWViM1ptLU9sYkwwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83ZjczNjEtYjFlNi00MDE5LWFkNjMtMjAwNTk5NGRmNDcx
LzEvR19rc0taVF90VFZfamNSaWViM1ptLU9sYkwwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYN2wlBPH
P/UH4kYKzT4WNfTTPvX3bgPfxF9ORaQqio1secFZMRgC6l5bAm9DrjkkIy+++Qw/
YidkDj7vb8aKiNTaHU+CynfPpMWRulpyr35j4eY/t4U7Xc3e1k3CSfWUnPsafiaQ
eZmpJzP+i3B48l0PN3nzs5JdxI8cUgiLYp6ZnZrLCQnTbK36ZqophgB4MyOjWn+W
ZZ7EqtvzrfNZNRVi5yt644GkhREnJxXGQ1o51VU46/NDo1XB46pQuc4yEjD7culJ
YsEt0C7002gJtohjM4sZ0UQkjE0s5qvDuZGTc8z4zfkYzZw/0crUaxagiJq6gde6
/Yn4NvVNJmWi8A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:08:06 2025 by rpki-client