Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
File: I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft (raw, json)
Hash identifier: 7A07P9cIJn19/+AtidaDu0vJ6k7bkC1SC87gCtPkbU4=
Subject key identifier: 1D:03:14:A7:2A:63:88:DD:28:09:15:20:79:3A:86:22:35:ED:F2:22
Authority key identifier: 23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
Certificate issuer: /CN=237c83447d17183380f489bc946c8b9e300ffb1d
Certificate serial: 01974967D0BC0D903FF426492C57AFCC4952
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
Manifest number: 1293
Signing time: Sat 07 Jun 2025 08:00:29 +0000
Manifest this update: Sat 07 Jun 2025 08:00:29 +0000
Manifest next update: Sun 08 Jun 2025 08:00:29 +0000
Files and hashes: 1: I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl (hash: aKF0lKsT+yDoJ/tG9IcaUY5X9G3x+jdcdln3CQR+4wg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:d0:bc:0d:90:3f:f4:26:49:2c:57:af:cc:49:52
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=237c83447d17183380f489bc946c8b9e300ffb1d
Validity
Not Before: Jun 7 08:00:29 2025 GMT
Not After : Jun 8 08:00:29 2025 GMT
Subject: CN=1d0314a72a6388dd28091520793a862235edf222
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:fb:f0:cd:b9:4c:74:12:4e:5d:9c:ce:a8:f9:
86:ff:18:92:61:d7:59:84:8e:21:f0:8d:63:06:d0:
8a:29:aa:1d:13:3e:c9:c9:01:6a:3e:ee:6a:79:6c:
27:1d:cc:18:a2:78:94:d0:2e:42:d8:21:f3:7f:20:
5c:a7:37:90:02:b3:4a:66:0d:84:57:84:60:0a:77:
a8:e8:21:85:5b:8d:7a:53:d0:cd:2e:8b:14:77:23:
f9:a5:25:48:a9:69:59:e9:76:e5:00:b5:c3:b4:54:
11:45:93:7b:88:da:9b:29:71:1e:c7:03:fe:b6:6b:
a0:6c:36:c7:c4:1e:a9:37:02:5c:04:e5:eb:9b:ac:
f7:b7:4f:0e:48:20:75:26:11:af:8b:18:8f:b8:bd:
01:b9:c7:c7:dc:24:1a:2b:3e:4d:db:0f:59:de:10:
59:7d:52:4c:c7:42:1d:58:3a:21:9c:18:ad:35:67:
a8:e5:ac:c8:9e:fe:c3:ee:81:95:d2:9a:a7:01:9d:
de:67:66:9b:31:2b:a2:f1:3b:d7:1a:8a:9f:e7:29:
21:a7:98:4a:56:75:be:dd:85:f5:7d:03:ac:63:73:
0f:af:07:a3:2a:eb:19:bd:3b:10:6f:37:dc:73:bc:
f6:e7:ca:90:a2:86:3b:6e:91:76:2e:32:cc:8f:99:
b0:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:03:14:A7:2A:63:88:DD:28:09:15:20:79:3A:86:22:35:ED:F2:22
X509v3 Authority Key Identifier:
keyid:23:7C:83:44:7D:17:18:33:80:F4:89:BC:94:6C:8B:9E:30:0F:FB:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I3yDRH0XGDOA9Im8lGyLnjAP-x0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/9d59e1-7a67-469d-b4da-8b3372234dc0/1/I3yDRH0XGDOA9Im8lGyLnjAP-x0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:be:04:d8:23:54:b3:ab:43:6f:5d:e4:4f:b7:f0:96:2a:7b:
a7:d5:54:96:47:d5:fc:a7:29:7c:ca:a6:3d:b3:26:76:36:b7:
fc:2c:d8:d9:b2:c2:5f:6e:ff:5f:31:3f:5e:5e:71:23:e2:51:
c8:04:f3:e4:12:cb:08:61:10:36:ca:e6:06:cf:3c:76:e6:f6:
ab:b9:99:90:69:79:63:ed:fd:4e:2e:96:96:1d:95:87:50:80:
89:e1:1b:fa:8e:2c:28:9a:53:e0:7e:0b:8f:c1:78:f8:2d:85:
29:91:d9:8a:d8:1c:57:3c:4b:47:75:53:fc:bb:64:59:f4:ac:
43:ae:30:fe:3b:4e:c6:dd:52:e1:4c:19:ad:bd:63:16:1e:0e:
76:94:91:b0:ff:9d:97:3e:f0:12:ad:46:b0:ea:cc:70:6b:c9:
48:3b:3a:3f:22:fd:1f:3f:8c:9c:f4:5d:91:d9:9f:e9:66:6b:
ef:47:04:d9:fc:40:d6:49:a2:d9:34:c7:ce:a3:45:91:31:a1:
8b:1b:68:97:2d:49:01:05:a8:3b:d3:e9:78:3b:20:bf:dc:d9:
b2:f8:5f:ef:4c:98:43:67:ea:e2:30:b7:22:51:c8:04:ba:c6:
9c:20:33:d7:ad:ea:04:ec:3f:9f:da:f0:0b:c5:46:c6:35:66:
70:0b:e2:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ9C8DZA/9CZJLFevzElSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzN2M4MzQ0N2QxNzE4MzM4MGY0ODliYzk0NmM4YjllMzAw
ZmZiMWQwHhcNMjUwNjA3MDgwMDI5WhcNMjUwNjA4MDgwMDI5WjAzMTEwLwYDVQQD
EygxZDAzMTRhNzJhNjM4OGRkMjgwOTE1MjA3OTNhODYyMjM1ZWRmMjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2/vwzblMdBJOXZzOqPmG/xiSYddZ
hI4h8I1jBtCKKaodEz7JyQFqPu5qeWwnHcwYoniU0C5C2CHzfyBcpzeQArNKZg2E
V4RgCneo6CGFW416U9DNLosUdyP5pSVIqWlZ6XblALXDtFQRRZN7iNqbKXEexwP+
tmugbDbHxB6pNwJcBOXrm6z3t08OSCB1JhGvixiPuL0BucfH3CQaKz5N2w9Z3hBZ
fVJMx0IdWDohnBitNWeo5azInv7D7oGV0pqnAZ3eZ2abMSui8TvXGoqf5ykhp5hK
VnW+3YX1fQOsY3MPrwejKusZvTsQbzfcc7z258qQooY7bpF2LjLMj5mwWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0DFKcqY4jdKAkVIHk6hiI17fIiMB8GA1UdIwQY
MBaAFCN8g0R9FxgzgPSJvJRsi54wD/sdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEt
OGIzMzcyMjM0ZGMwLzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS85ZDU5ZTEtN2E2Ny00NjlkLWI0ZGEtOGIzMzcyMjM0ZGMw
LzEvSTN5RFJIMFhHRE9BOUltOGxHeUxuakFQLXgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi74E2CNU
s6tDb13kT7fwlip7p9VUlkfV/KcpfMqmPbMmdja3/CzY2bLCX27/XzE/Xl5xI+JR
yATz5BLLCGEQNsrmBs88dub2q7mZkGl5Y+39Ti6Wlh2Vh1CAieEb+o4sKJpT4H4L
j8F4+C2FKZHZitgcVzxLR3VT/LtkWfSsQ64w/jtOxt1S4UwZrb1jFh4OdpSRsP+d
lz7wEq1GsOrMcGvJSDs6PyL9Hz+MnPRdkdmf6WZr70cE2fxA1kmi2TTHzqNFkTGh
ixtoly1JAQWoO9PpeDsgv9zZsvhf70yYQ2fq4jC3IlHIBLrGnCAz163qBOw/n9rw
C8VGxjVmcAviIA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:42:15 2025 by rpki-client