Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
File: fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json)
Hash identifier: fMNRPsVOle7h5uO6FJRKENhPZNWgIuKqR6rwpoo8V3E=
Subject key identifier: 31:5A:18:73:A5:F2:09:ED:02:A2:0F:21:11:F2:30:8E:05:4F:9F:FB
Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
Certificate issuer: /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Certificate serial: 019758DAC1131FE4EB280414FC97A2F4D6A5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
Manifest number: 13D9
Signing time: Tue 10 Jun 2025 08:00:20 +0000
Manifest this update: Tue 10 Jun 2025 08:00:20 +0000
Manifest next update: Wed 11 Jun 2025 08:00:20 +0000
Files and hashes: 1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: JeedbBZfxyp/kHrVlIcAksIuBfk0SlEf2BPTHu0bWx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 08:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:58:da:c1:13:1f:e4:eb:28:04:14:fc:97:a2:f4:d6:a5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Validity
Not Before: Jun 10 08:00:20 2025 GMT
Not After : Jun 11 08:00:20 2025 GMT
Subject: CN=315a1873a5f209ed02a20f2111f2308e054f9ffb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:0b:b2:bc:47:23:09:10:d4:4e:ad:fa:09:31:
6a:84:71:b3:ee:72:ae:10:41:f4:f0:a8:5e:23:8b:
e0:73:f6:04:f6:65:b5:c7:6f:b2:8f:9a:6a:37:bf:
b0:71:0f:40:54:38:73:88:39:65:5a:8d:c2:a4:8e:
1d:81:38:45:e5:6f:d9:36:d6:01:d8:7d:54:db:51:
a8:c2:2d:74:58:61:27:b9:a1:d2:9e:d9:13:35:30:
1c:dd:1d:02:a0:66:f1:ec:68:b5:86:47:1f:53:d1:
d7:bd:3c:c9:06:da:f4:62:30:99:67:e2:90:0d:8f:
9c:b9:4b:60:12:24:89:a3:b5:3a:e2:6a:e5:b9:7e:
5a:a7:81:3b:c8:45:4b:ea:a6:c1:9e:00:d8:14:71:
22:3b:ac:aa:0c:82:c3:3c:05:89:b5:cd:f9:26:20:
dd:cf:a1:75:e0:f8:40:9e:ef:b4:32:82:52:89:09:
8a:50:12:ff:1e:56:82:ce:c6:19:22:54:ef:6a:48:
8f:b0:31:c7:48:96:fe:9f:0a:eb:c6:e6:35:1a:4e:
1d:f0:53:91:67:98:60:cb:aa:b0:56:8e:3e:5f:83:
68:04:e2:21:9d:7f:a2:e3:a5:b2:4d:52:06:ef:bc:
11:ba:37:ef:f0:6e:51:8f:02:c4:cf:8d:96:d4:f1:
81:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:5A:18:73:A5:F2:09:ED:02:A2:0F:21:11:F2:30:8E:05:4F:9F:FB
X509v3 Authority Key Identifier:
keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:f0:92:f8:10:55:3a:5c:d6:40:73:ff:db:16:8b:77:97:44:
72:37:aa:4d:87:3b:24:dd:61:8b:6f:e1:06:d0:8e:4a:d2:2c:
c8:86:dc:58:8d:7c:da:f5:bb:28:5e:f4:cf:0c:7d:6e:7b:16:
a8:ec:e8:cf:b7:1f:4d:82:c8:ba:72:69:a0:8b:d5:bc:cd:a4:
22:8a:64:6e:61:d8:c9:30:b1:0c:ea:e7:dc:00:e9:80:6f:3e:
15:9c:fd:87:9d:db:6c:36:ef:35:5d:9b:be:42:a8:3c:72:0b:
5b:93:e6:0a:a1:2a:e4:60:2b:10:d5:01:19:3f:b8:ab:1b:49:
fd:c2:0c:5a:3c:7b:d8:60:a7:d8:98:cb:22:6e:a1:0c:6a:60:
7c:0d:37:59:00:63:37:a0:22:45:cc:ae:a1:49:39:6c:bb:15:
e0:37:6b:9e:e6:4a:53:b4:11:40:db:d5:9c:79:06:97:8c:04:
ac:2f:5b:f0:bf:a5:97:e0:22:24:db:c8:d0:26:76:7f:24:ff:
4c:0b:ae:54:f5:26:cf:71:1a:fe:4b:ac:0f:f0:bb:57:c8:b0:
8c:de:e8:2e:84:05:3e:35:2b:06:a9:ce:e8:eb:1a:4e:7e:01:
01:6a:b0:11:4e:28:63:32:22:7d:f3:55:06:71:6f:7b:85:48:
3c:fd:13:f3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdY2sETH+TrKAQU/Jei9NalMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjN2JlYzcyMDVkZjg4ZDA3NzA4NmY0YThmYjVhZWNlNzVj
YmI2NjEwHhcNMjUwNjEwMDgwMDIwWhcNMjUwNjExMDgwMDIwWjAzMTEwLwYDVQQD
EygzMTVhMTg3M2E1ZjIwOWVkMDJhMjBmMjExMWYyMzA4ZTA1NGY5ZmZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArwuyvEcjCRDUTq36CTFqhHGz7nKu
EEH08KheI4vgc/YE9mW1x2+yj5pqN7+wcQ9AVDhziDllWo3CpI4dgThF5W/ZNtYB
2H1U21Gowi10WGEnuaHSntkTNTAc3R0CoGbx7Gi1hkcfU9HXvTzJBtr0YjCZZ+KQ
DY+cuUtgEiSJo7U64mrluX5ap4E7yEVL6qbBngDYFHEiO6yqDILDPAWJtc35JiDd
z6F14PhAnu+0MoJSiQmKUBL/HlaCzsYZIlTvakiPsDHHSJb+nwrrxuY1Gk4d8FOR
Z5hgy6qwVo4+X4NoBOIhnX+i46WyTVIG77wRujfv8G5RjwLEz42W1PGBewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDFaGHOl8gntAqIPIRHyMI4FT5/7MB8GA1UdIwQY
MBaAFHx77HIF34jQdwhvSo+1rs51y7ZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yY2Q0Y2MtZjQ5OC00ZGFlLTllMjQt
OGFmNjZmNDg4YmJjLzEvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8yY2Q0Y2MtZjQ5OC00ZGFlLTllMjQtOGFmNjZmNDg4YmJj
LzEvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgfCS+BBV
OlzWQHP/2xaLd5dEcjeqTYc7JN1hi2/hBtCOStIsyIbcWI182vW7KF70zwx9bnsW
qOzoz7cfTYLIunJpoIvVvM2kIopkbmHYyTCxDOrn3ADpgG8+FZz9h53bbDbvNV2b
vkKoPHILW5PmCqEq5GArENUBGT+4qxtJ/cIMWjx72GCn2JjLIm6hDGpgfA03WQBj
N6AiRcyuoUk5bLsV4DdrnuZKU7QRQNvVnHkGl4wErC9b8L+ll+AiJNvI0CZ2fyT/
TAuuVPUmz3Ea/kusD/C7V8iwjN7oLoQFPjUrBqnO6OsaTn4BAWqwEU4oYzIiffNV
BnFve4VIPP0T8w==
-----END CERTIFICATE-----
Generated at Tue Jun 10 18:40:08 2025 by rpki-client