Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
File: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft (raw, json)
Hash identifier: /U/SbfscS/HuwBque2pjCVPCBZ9shQ+G8bCmO1cRfgM=
Subject key identifier: A9:76:65:AC:13:64:DB:99:70:F2:7B:48:19:40:1D:83:CC:E9:64:B1
Authority key identifier: B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
Certificate issuer: /CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Certificate serial: 019749D58DC4CDF4F63ED09EC65C7F7DEBFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 10:00:21 +0000
Manifest this update: Sat 07 Jun 2025 10:00:21 +0000
Manifest next update: Sun 08 Jun 2025 10:00:21 +0000
Files and hashes: 1: txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl (hash: L6ryx5HqDMwrMPhqB4jo41maqkkWmiYRhzivw/OTNYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:8d:c4:cd:f4:f6:3e:d0:9e:c6:5c:7f:7d:eb:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b71758b085d10ef27cc3e168f490075d3e7c4efe
Validity
Not Before: Jun 7 10:00:21 2025 GMT
Not After : Jun 8 10:00:21 2025 GMT
Subject: CN=a97665ac1364db9970f27b4819401d83cce964b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:0e:b4:7a:dd:ce:04:d0:a2:16:33:95:d0:9c:
7e:0e:44:5d:90:fe:9c:eb:a0:7e:6d:87:58:2d:0c:
af:07:7c:e2:96:0c:db:a9:b3:d2:fb:eb:22:11:d6:
8f:26:ff:0d:7b:9d:ab:88:09:89:e4:52:21:d8:b0:
4a:63:33:96:4f:3b:5a:76:ee:c3:aa:38:b2:94:fb:
65:b8:f3:55:73:41:38:3d:b4:2d:79:5f:84:a8:ea:
15:1f:ef:a0:d3:2f:71:76:34:77:12:19:e9:c6:de:
34:95:e2:59:bc:bf:cc:a4:3f:e0:f2:b2:4e:95:76:
e6:f1:b4:e2:2f:a2:95:95:d2:0e:04:81:25:c2:da:
88:67:07:30:64:71:98:87:ab:4e:e9:64:a2:97:1d:
e8:19:0b:7d:1f:d6:c1:d4:77:fc:4c:5d:67:2d:de:
bc:30:2c:49:c8:e5:5f:90:23:3a:6e:f4:21:27:8e:
17:ec:d4:ce:ee:a3:8b:6d:e5:50:7c:9f:79:66:a7:
56:82:d3:3b:70:54:88:ac:06:ff:26:2a:18:b5:f8:
41:b1:77:94:f4:6c:8e:c1:0d:d8:4c:19:a9:4c:1b:
49:20:05:97:2e:d5:c1:a1:ba:10:38:c4:14:4d:b5:
21:88:9c:92:69:ba:85:22:89:6d:e0:32:a9:5c:cf:
46:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A9:76:65:AC:13:64:DB:99:70:F2:7B:48:19:40:1D:83:CC:E9:64:B1
X509v3 Authority Key Identifier:
keyid:B7:17:58:B0:85:D1:0E:F2:7C:C3:E1:68:F4:90:07:5D:3E:7C:4E:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/5521d8-09c6-4814-baa6-c2f2ea31e09e/1/txdYsIXRDvJ8w-Fo9JAHXT58Tv4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:b6:47:a5:f5:8f:a9:a9:96:a7:33:cc:9e:76:47:79:db:dc:
51:97:57:9d:9e:6f:01:d7:56:bc:79:88:8a:12:1c:16:65:89:
de:92:34:6e:df:f1:00:f5:d0:ab:10:b9:50:a9:c0:27:9e:ca:
20:12:79:ac:93:9d:19:55:55:20:0b:ba:c3:19:eb:2c:7c:9d:
96:52:4a:b7:26:0d:99:49:26:c8:13:40:b2:8f:a0:8d:82:82:
d6:ef:6a:2a:1b:a3:e1:1d:8f:7c:66:f8:de:8e:8b:2c:79:68:
26:78:af:2d:df:50:01:f0:23:7e:38:ef:80:f0:f2:36:8e:d3:
05:e8:8b:b3:02:50:28:c8:12:06:f9:32:de:57:e9:69:b0:6e:
4d:97:a8:c6:2f:44:54:22:08:e7:47:b6:f8:78:c7:05:d9:36:
fa:43:dc:2d:2e:3e:f9:75:4b:27:67:fa:7d:21:93:ea:2b:0c:
1b:8f:7f:b7:0d:13:e5:8b:44:61:45:cc:59:09:e1:bb:02:87:
1e:53:d7:10:b2:db:8d:a8:5a:b2:37:7a:d7:8d:59:12:f1:e1:
13:4c:12:33:c3:8d:92:84:5f:de:58:09:27:05:df:f6:a5:24:
43:0f:c1:f0:de:69:bc:79:7b:c1:7b:07:cc:02:ae:ba:cd:40:
74:20:5e:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1Y3EzfT2PtCexlx/fev8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3MTc1OGIwODVkMTBlZjI3Y2MzZTE2OGY0OTAwNzVkM2U3
YzRlZmUwHhcNMjUwNjA3MTAwMDIxWhcNMjUwNjA4MTAwMDIxWjAzMTEwLwYDVQQD
EyhhOTc2NjVhYzEzNjRkYjk5NzBmMjdiNDgxOTQwMWQ4M2NjZTk2NGIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjQ60et3OBNCiFjOV0Jx+DkRdkP6c
66B+bYdYLQyvB3zilgzbqbPS++siEdaPJv8Ne52riAmJ5FIh2LBKYzOWTztadu7D
qjiylPtluPNVc0E4PbQteV+EqOoVH++g0y9xdjR3Ehnpxt40leJZvL/MpD/g8rJO
lXbm8bTiL6KVldIOBIElwtqIZwcwZHGYh6tO6WSilx3oGQt9H9bB1Hf8TF1nLd68
MCxJyOVfkCM6bvQhJ44X7NTO7qOLbeVQfJ95ZqdWgtM7cFSIrAb/JioYtfhBsXeU
9GyOwQ3YTBmpTBtJIAWXLtXBoboQOMQUTbUhiJySabqFIolt4DKpXM9GEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKl2ZawTZNuZcPJ7SBlAHYPM6WSxMB8GA1UdIwQY
MBaAFLcXWLCF0Q7yfMPhaPSQB10+fE7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdHhkWXNJWFJEdko4dy1GbzlKQUhYVDU4VHY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi81NTIxZDgtMDljNi00ODE0LWJhYTYt
YzJmMmVhMzFlMDllLzEvdHhkWXNJWFJEdko4dy1GbzlKQUhYVDU4VHY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi81NTIxZDgtMDljNi00ODE0LWJhYTYtYzJmMmVhMzFlMDll
LzEvdHhkWXNJWFJEdko4dy1GbzlKQUhYVDU4VHY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASrZHpfWP
qamWpzPMnnZHedvcUZdXnZ5vAddWvHmIihIcFmWJ3pI0bt/xAPXQqxC5UKnAJ57K
IBJ5rJOdGVVVIAu6wxnrLHydllJKtyYNmUkmyBNAso+gjYKC1u9qKhuj4R2PfGb4
3o6LLHloJnivLd9QAfAjfjjvgPDyNo7TBeiLswJQKMgSBvky3lfpabBuTZeoxi9E
VCII50e2+HjHBdk2+kPcLS4++XVLJ2f6fSGT6isMG49/tw0T5YtEYUXMWQnhuwKH
HlPXELLbjahasjd6141ZEvHhE0wSM8ONkoRf3lgJJwXf9qUkQw/B8N5pvHl7wXsH
zAKuus1AdCBeNA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:11:48 2025 by rpki-client