Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: 2HQwMm4tBvrkmICuv7QOFr+idIqLq7JeVqOD+TRdb+c=
Subject key identifier: D7:E9:52:11:D1:F5:CF:EA:24:62:82:74:D5:B1:8C:EA:52:5F:83:22
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 01974D44941ABC671853F5830176294B65DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 1150
Signing time: Sun 08 Jun 2025 02:00:29 +0000
Manifest this update: Sun 08 Jun 2025 02:00:29 +0000
Manifest next update: Mon 09 Jun 2025 02:00:29 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: lXLpexMaHg/j1ibNLEQLhffDR7s8VU5K7pq1LU7BduQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:94:1a:bc:67:18:53:f5:83:01:76:29:4b:65:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: Jun 8 02:00:29 2025 GMT
Not After : Jun 9 02:00:29 2025 GMT
Subject: CN=d7e95211d1f5cfea24628274d5b18cea525f8322
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:2a:1b:b6:62:c5:20:61:67:b6:f9:93:c1:8e:
fc:c3:ed:99:db:93:b2:77:81:23:18:d7:14:3e:e6:
ea:9f:3c:21:2e:5c:80:a4:d9:96:07:77:7f:db:88:
c9:83:c4:3e:ab:34:f1:8b:26:c4:de:35:ed:93:cc:
e2:c2:cc:86:29:30:a0:f3:da:0d:75:34:88:35:e6:
6f:b5:f6:07:ba:d0:f8:bb:be:eb:8d:2c:fb:fc:3f:
a5:49:c4:20:4e:b3:67:03:cb:3a:c7:ea:7e:66:d4:
d3:23:00:70:e4:b8:cd:ad:27:31:cb:f8:be:5a:89:
f9:18:8d:06:75:a0:07:ed:4d:b6:2d:d0:db:26:b1:
23:e7:92:f9:48:88:9b:06:b5:31:a8:cf:3f:a8:01:
16:d1:9b:e6:76:92:e6:6d:f2:bf:34:a4:36:61:63:
0c:50:9c:b5:74:9d:3d:09:a3:46:c2:24:f7:77:b1:
04:ef:2f:58:11:bb:10:30:1a:e9:e4:8b:9d:95:87:
ca:1f:0f:2c:e4:f4:43:fd:ae:2b:a4:ee:0d:2b:b4:
a5:22:3a:93:61:31:3e:6d:5c:60:03:30:26:be:01:
dc:ca:a8:a4:90:07:d3:9c:d0:b7:1d:59:76:69:db:
79:90:a7:25:37:2d:85:4a:9a:8f:d8:75:86:3b:25:
fd:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D7:E9:52:11:D1:F5:CF:EA:24:62:82:74:D5:B1:8C:EA:52:5F:83:22
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a4:7c:b4:50:6e:f4:c2:da:e4:9c:b3:84:cc:93:33:a0:fd:27:
09:d8:5e:54:d4:78:74:3d:58:ad:5e:cf:63:91:f1:18:bc:88:
20:cc:3d:da:78:f3:78:bc:c0:ec:bf:a2:80:fc:6e:a4:12:54:
d9:8d:ba:28:f3:00:ae:0c:d3:62:76:74:d2:12:92:9d:a8:aa:
18:b3:c1:a8:b7:08:82:a9:af:cb:c2:d6:11:b8:b9:81:84:cf:
04:81:d5:c9:99:6c:a9:ad:fc:90:bf:09:00:fd:4f:42:75:ae:
56:0a:0d:01:04:e0:04:53:db:66:61:84:ec:e6:b1:a2:19:ff:
ef:e6:3c:91:07:e5:f4:c7:01:96:e4:5b:ba:7e:76:72:4d:28:
bf:35:ef:49:d5:cd:e6:18:aa:24:4e:c9:6e:fe:f1:f7:55:85:
5d:19:86:02:63:bf:55:68:fc:61:00:1b:92:b9:fc:7d:8e:ba:
26:ba:51:f4:5c:7c:24:e2:7d:91:a8:00:b8:e7:ca:53:1e:db:
d0:fe:10:b6:3b:fd:07:75:29:e3:37:af:3f:ad:bd:8e:d4:4e:
46:7b:e4:04:ff:80:e5:d7:f7:ed:37:6e:74:87:27:3d:93:51:
18:d3:7b:d1:a3:47:ab:c4:7f:20:9d:6c:99:10:7f:b1:0b:af:
d8:81:41:7d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRJQavGcYU/WDAXYpS2XcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2U0YjFjOTU4NzcyNzEzM2M3ZWUwMGJiYmE4ZWM1NmVh
ZTY0MWQwHhcNMjUwNjA4MDIwMDI5WhcNMjUwNjA5MDIwMDI5WjAzMTEwLwYDVQQD
EyhkN2U5NTIxMWQxZjVjZmVhMjQ2MjgyNzRkNWIxOGNlYTUyNWY4MzIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApCobtmLFIGFntvmTwY78w+2Z25Oy
d4EjGNcUPubqnzwhLlyApNmWB3d/24jJg8Q+qzTxiybE3jXtk8ziwsyGKTCg89oN
dTSINeZvtfYHutD4u77rjSz7/D+lScQgTrNnA8s6x+p+ZtTTIwBw5LjNrScxy/i+
Won5GI0GdaAH7U22LdDbJrEj55L5SIibBrUxqM8/qAEW0ZvmdpLmbfK/NKQ2YWMM
UJy1dJ09CaNGwiT3d7EE7y9YEbsQMBrp5IudlYfKHw8s5PRD/a4rpO4NK7SlIjqT
YTE+bVxgAzAmvgHcyqikkAfTnNC3HVl2adt5kKclNy2FSpqP2HWGOyX9EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNfpUhHR9c/qJGKCdNWxjOpSX4MiMB8GA1UdIwQY
MBaAFPV+SxyVh3JxM8fuALu6jsVurmQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85ZTkxMTktZTVlNi00MDRhLWI1OGEt
MTg4YjkxYTllOTkwLzEvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85ZTkxMTktZTVlNi00MDRhLWI1OGEtMTg4YjkxYTllOTkw
LzEvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApHy0UG70
wtrknLOEzJMzoP0nCdheVNR4dD1YrV7PY5HxGLyIIMw92njzeLzA7L+igPxupBJU
2Y26KPMArgzTYnZ00hKSnaiqGLPBqLcIgqmvy8LWEbi5gYTPBIHVyZlsqa38kL8J
AP1PQnWuVgoNAQTgBFPbZmGE7Oaxohn/7+Y8kQfl9McBluRbun52ck0ovzXvSdXN
5hiqJE7Jbv7x91WFXRmGAmO/VWj8YQAbkrn8fY66JrpR9Fx8JOJ9kagAuOfKUx7b
0P4Qtjv9B3Up4zevP629jtRORnvkBP+A5df37TdudIcnPZNRGNN70aNHq8R/IJ1s
mRB/sQuv2IFBfQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:08:03 2025 by rpki-client