Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
File: pTjytsVCHgpCkQBAxbhlCKiVuRY.mft (raw, json)
Hash identifier: FvXbTqyAOsh6LbyTWpMmvuxXSX0J71P+axmOcPJeGc0=
Subject key identifier: 0E:CF:90:2D:4D:0F:49:FF:E7:47:36:C5:37:B7:A6:A8:DC:A0:31:25
Authority key identifier: A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
Certificate issuer: /CN=a538f2b6c5421e0a42910040c5b86508a895b916
Certificate serial: 01974DE9AA16F5FA9F45AEE6219F6FF52857
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
Manifest number: 040E
Signing time: Sun 08 Jun 2025 05:00:48 +0000
Manifest this update: Sun 08 Jun 2025 05:00:48 +0000
Manifest next update: Mon 09 Jun 2025 05:00:48 +0000
Files and hashes: 1: pTjytsVCHgpCkQBAxbhlCKiVuRY.crl (hash: qKcz8JaJEpLOQHgoC4mawoRtupWSXSc2QbUSPvmY4SQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:e9:aa:16:f5:fa:9f:45:ae:e6:21:9f:6f:f5:28:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a538f2b6c5421e0a42910040c5b86508a895b916
Validity
Not Before: Jun 8 05:00:48 2025 GMT
Not After : Jun 9 05:00:48 2025 GMT
Subject: CN=0ecf902d4d0f49ffe74736c537b7a6a8dca03125
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:25:1b:f4:20:c2:00:53:92:64:9c:15:99:65:
26:24:e8:40:c1:d6:f9:23:29:6f:a4:ba:78:c8:35:
d3:93:22:d5:96:e8:aa:70:aa:58:18:31:0f:5d:a0:
bb:87:c0:4a:50:13:75:c2:13:11:03:b6:9f:e9:49:
68:7b:4d:73:93:89:fc:01:4a:1d:17:f2:3f:b3:e7:
bb:be:78:25:c9:44:eb:4d:ce:91:77:33:d3:a8:ad:
30:31:fb:1f:9b:28:f8:69:82:f9:67:d1:e2:1b:b5:
d5:7e:35:0e:77:4b:47:06:18:1c:94:9f:3b:da:6d:
5e:07:0e:ff:03:11:81:8e:e8:76:c6:89:5e:81:6d:
4b:0e:68:64:18:dd:ed:e9:ea:75:24:74:3f:af:78:
5f:ba:ea:3b:d1:e7:bf:f1:54:d4:e6:1a:6d:bf:ac:
88:52:9c:b4:f2:72:69:31:82:18:e3:3d:d8:4c:57:
48:bf:f1:09:f9:c4:dd:05:bf:70:df:63:be:82:e0:
42:6b:dc:c9:0a:18:82:c9:ce:ae:61:46:c3:e7:8d:
81:90:57:67:3d:cd:fa:25:ab:7f:6d:2e:69:bb:e5:
56:07:a1:a9:89:9c:3b:59:73:2a:cf:f2:8c:51:55:
96:91:38:38:6d:1b:32:af:a6:45:70:d7:be:6e:4d:
8e:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0E:CF:90:2D:4D:0F:49:FF:E7:47:36:C5:37:B7:A6:A8:DC:A0:31:25
X509v3 Authority Key Identifier:
keyid:A5:38:F2:B6:C5:42:1E:0A:42:91:00:40:C5:B8:65:08:A8:95:B9:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pTjytsVCHgpCkQBAxbhlCKiVuRY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/5ae935-f6e0-4073-9f79-ec6c01f4724e/1/pTjytsVCHgpCkQBAxbhlCKiVuRY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:55:52:8a:99:01:f9:a1:eb:04:9c:3b:ff:5a:1c:81:28:6f:
db:7d:5d:d1:09:e4:ff:80:15:d3:42:dd:2c:17:cb:51:aa:ca:
e7:1c:bf:07:e8:d9:74:7f:ba:2d:71:84:f4:38:48:6c:70:07:
64:35:8b:9a:1b:71:3c:6f:06:18:8a:35:be:82:b0:7b:17:29:
57:fe:6a:3b:82:33:3e:c7:18:4a:89:83:6d:aa:18:5b:ab:c7:
71:10:54:d8:87:89:8d:98:94:27:94:b4:16:02:d2:3c:71:a1:
16:fe:d6:9f:8e:47:1a:2d:6a:66:62:5b:c0:85:12:9e:18:b3:
70:f1:fc:ab:ee:3f:5c:c7:8d:4c:3e:50:11:88:a1:cd:67:2d:
c1:4a:dd:51:fc:2a:88:e3:a8:9c:a1:b7:32:64:c1:88:bd:5f:
66:f8:9e:8d:ac:e6:47:a3:04:e6:a2:d7:fa:23:eb:cf:7b:51:
36:9e:b4:64:5c:54:06:30:f1:e8:05:8f:35:de:0f:43:f7:45:
f3:7c:97:f1:3b:45:63:ad:c5:ab:bc:6c:6e:2c:90:f6:b3:2b:
22:bf:fd:ad:a0:83:a6:9f:cf:65:65:3d:fa:a3:34:b1:a8:b6:
ff:89:36:f9:81:fb:64:62:3b:db:49:3a:83:ed:0a:90:09:41:
af:38:d0:28
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdN6aoW9fqfRa7mIZ9v9ShXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1MzhmMmI2YzU0MjFlMGE0MjkxMDA0MGM1Yjg2NTA4YTg5
NWI5MTYwHhcNMjUwNjA4MDUwMDQ4WhcNMjUwNjA5MDUwMDQ4WjAzMTEwLwYDVQQD
EygwZWNmOTAyZDRkMGY0OWZmZTc0NzM2YzUzN2I3YTZhOGRjYTAzMTI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuSUb9CDCAFOSZJwVmWUmJOhAwdb5
IylvpLp4yDXTkyLVluiqcKpYGDEPXaC7h8BKUBN1whMRA7af6Uloe01zk4n8AUod
F/I/s+e7vnglyUTrTc6RdzPTqK0wMfsfmyj4aYL5Z9HiG7XVfjUOd0tHBhgclJ87
2m1eBw7/AxGBjuh2xolegW1LDmhkGN3t6ep1JHQ/r3hfuuo70ee/8VTU5hptv6yI
Upy08nJpMYIY4z3YTFdIv/EJ+cTdBb9w32O+guBCa9zJChiCyc6uYUbD542BkFdn
Pc36Jat/bS5pu+VWB6GpiZw7WXMqz/KMUVWWkTg4bRsyr6ZFcNe+bk2OewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA7PkC1ND0n/50c2xTe3pqjcoDElMB8GA1UdIwQY
MBaAFKU48rbFQh4KQpEAQMW4ZQiolbkWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcFRqeXRzVkNIZ3BDa1FCQXhiaGxDS2lWdVJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC81YWU5MzUtZjZlMC00MDczLTlmNzkt
ZWM2YzAxZjQ3MjRlLzEvcFRqeXRzVkNIZ3BDa1FCQXhiaGxDS2lWdVJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC81YWU5MzUtZjZlMC00MDczLTlmNzktZWM2YzAxZjQ3MjRl
LzEvcFRqeXRzVkNIZ3BDa1FCQXhiaGxDS2lWdVJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPVVSipkB
+aHrBJw7/1ocgShv231d0Qnk/4AV00LdLBfLUarK5xy/B+jZdH+6LXGE9DhIbHAH
ZDWLmhtxPG8GGIo1voKwexcpV/5qO4IzPscYSomDbaoYW6vHcRBU2IeJjZiUJ5S0
FgLSPHGhFv7Wn45HGi1qZmJbwIUSnhizcPH8q+4/XMeNTD5QEYihzWctwUrdUfwq
iOOonKG3MmTBiL1fZviejazmR6ME5qLX+iPrz3tRNp60ZFxUBjDx6AWPNd4PQ/dF
83yX8TtFY63Fq7xsbiyQ9rMrIr/9raCDpp/PZWU9+qM0sai2/4k2+YH7ZGI720k6
g+0KkAlBrzjQKA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:34:24 2025 by rpki-client