Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
File: lB47mlO74C4stDl6bRoB2Aym5Bg.mft (raw, json)
Hash identifier: hnuXdKBwCPcR42s9yu4QUW+zeT+114l/EHYHaR1tjiw=
Subject key identifier: EC:77:B0:CF:61:32:8E:E0:4A:10:4D:53:E4:45:4E:25:1A:C7:EA:C4
Authority key identifier: 94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
Certificate issuer: /CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Certificate serial: 0197470B7E5368B15AB22C89A58DBBF80F59
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
Manifest number: 1579
Signing time: Fri 06 Jun 2025 21:00:24 +0000
Manifest this update: Fri 06 Jun 2025 21:00:24 +0000
Manifest next update: Sat 07 Jun 2025 21:00:24 +0000
Files and hashes: 1: lB47mlO74C4stDl6bRoB2Aym5Bg.crl (hash: 8WefkzlM/MTTqqpw9G8vU5Zbldqw189brquNmKM6vfE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 21:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:7e:53:68:b1:5a:b2:2c:89:a5:8d:bb:f8:0f:59
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=941e3b9a53bbe02e2cb4397a6d1a01d80ca6e418
Validity
Not Before: Jun 6 21:00:24 2025 GMT
Not After : Jun 7 21:00:24 2025 GMT
Subject: CN=ec77b0cf61328ee04a104d53e4454e251ac7eac4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:87:e7:8b:7c:fe:78:98:b3:3e:32:84:b1:68:
5b:25:fa:53:a2:00:bc:a3:62:4e:0c:7c:ee:46:da:
45:81:16:e6:9d:42:50:82:25:4c:a2:56:21:4b:99:
ec:45:9f:56:3b:f3:64:46:7e:13:3f:15:d8:c1:1a:
34:d3:29:8c:51:16:76:12:6b:66:ba:cc:69:75:a1:
a5:5f:2f:e3:df:c7:db:c5:dd:89:b4:74:d1:ab:ea:
ae:b9:a2:a4:80:98:02:1f:fa:d1:f8:57:78:13:44:
88:2f:75:60:06:86:1a:4a:88:81:8a:88:f0:5b:57:
b4:cc:a2:2d:94:37:ca:92:2c:cc:00:11:be:c6:d4:
af:58:5a:f3:c7:9e:de:9f:aa:e5:c6:45:c3:f1:92:
14:a5:42:08:7b:5f:f0:0a:5d:f4:b4:cb:50:0a:f0:
7a:fe:a5:ea:cf:eb:e8:0c:4a:dc:94:f7:dc:2a:e5:
75:28:54:b3:08:ed:5d:82:54:94:66:d0:88:4a:6b:
00:81:af:d0:7d:78:70:b1:95:86:bf:9f:3e:4f:0f:
08:2f:24:4f:65:2b:ba:98:2d:ed:af:92:20:59:2c:
e8:3e:82:3b:8d:01:ac:ac:eb:3a:ba:6a:56:b0:49:
19:37:22:7d:82:11:28:e6:e8:12:7c:97:99:1a:50:
d4:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EC:77:B0:CF:61:32:8E:E0:4A:10:4D:53:E4:45:4E:25:1A:C7:EA:C4
X509v3 Authority Key Identifier:
keyid:94:1E:3B:9A:53:BB:E0:2E:2C:B4:39:7A:6D:1A:01:D8:0C:A6:E4:18
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lB47mlO74C4stDl6bRoB2Aym5Bg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/08e404-f426-42e2-9594-da99e34cc30b/1/lB47mlO74C4stDl6bRoB2Aym5Bg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:ea:b4:1b:23:05:29:70:89:1e:b4:91:10:53:b9:5d:35:e5:
4e:e3:19:25:1b:4f:91:18:11:32:cf:3a:64:3f:39:5a:1f:43:
e1:f6:5d:1e:bd:2a:aa:46:9c:a6:92:89:83:3a:17:d0:b1:2d:
69:fd:80:e0:a0:95:08:7e:d9:32:fd:cc:6e:74:70:13:75:a1:
87:75:8e:f7:75:d9:97:b5:b1:47:06:a9:36:53:fc:c6:fa:17:
f7:5f:ed:3f:4e:d2:c4:5c:85:45:8c:23:26:33:c3:ee:be:57:
18:3d:f9:54:44:e0:a3:66:ce:f3:a2:f9:0b:89:7d:d6:94:56:
51:8c:73:d0:9f:32:fe:11:ae:5c:d2:25:81:33:48:c2:4c:40:
a9:21:4a:c6:f0:ce:bf:f2:8c:cd:4a:73:f1:1e:7c:15:99:92:
f3:60:47:4f:e6:49:19:af:6c:ba:e1:2f:16:90:e3:32:34:56:
ae:e2:71:ff:d6:64:c1:c4:87:25:59:85:34:f7:fe:d3:e3:dd:
23:58:d8:af:a4:b3:2f:cb:bf:bc:34:08:51:99:78:d2:c6:1f:
c8:67:64:26:39:b3:13:74:e4:1d:c1:68:18:a5:34:02:77:8e:
6c:82:2a:bd:a9:89:1c:95:e2:0c:5a:7d:d5:8b:9f:fc:99:ca:
10:f2:5b:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHC35TaLFasiyJpY27+A9ZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk0MWUzYjlhNTNiYmUwMmUyY2I0Mzk3YTZkMWEwMWQ4MGNh
NmU0MTgwHhcNMjUwNjA2MjEwMDI0WhcNMjUwNjA3MjEwMDI0WjAzMTEwLwYDVQQD
EyhlYzc3YjBjZjYxMzI4ZWUwNGExMDRkNTNlNDQ1NGUyNTFhYzdlYWM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYfni3z+eJizPjKEsWhbJfpTogC8
o2JODHzuRtpFgRbmnUJQgiVMolYhS5nsRZ9WO/NkRn4TPxXYwRo00ymMURZ2Emtm
usxpdaGlXy/j38fbxd2JtHTRq+quuaKkgJgCH/rR+Fd4E0SIL3VgBoYaSoiBiojw
W1e0zKItlDfKkizMABG+xtSvWFrzx57en6rlxkXD8ZIUpUIIe1/wCl30tMtQCvB6
/qXqz+voDErclPfcKuV1KFSzCO1dglSUZtCISmsAga/QfXhwsZWGv58+Tw8ILyRP
ZSu6mC3tr5IgWSzoPoI7jQGsrOs6umpWsEkZNyJ9ghEo5ugSfJeZGlDUGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOx3sM9hMo7gShBNU+RFTiUax+rEMB8GA1UdIwQY
MBaAFJQeO5pTu+AuLLQ5em0aAdgMpuQYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbEI0N21sTzc0QzRzdERsNmJSb0IyQXltNUJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8wOGU0MDQtZjQyNi00MmUyLTk1OTQt
ZGE5OWUzNGNjMzBiLzEvbEI0N21sTzc0QzRzdERsNmJSb0IyQXltNUJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8wOGU0MDQtZjQyNi00MmUyLTk1OTQtZGE5OWUzNGNjMzBi
LzEvbEI0N21sTzc0QzRzdERsNmJSb0IyQXltNUJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfuq0GyMF
KXCJHrSREFO5XTXlTuMZJRtPkRgRMs86ZD85Wh9D4fZdHr0qqkacppKJgzoX0LEt
af2A4KCVCH7ZMv3MbnRwE3Whh3WO93XZl7WxRwapNlP8xvoX91/tP07SxFyFRYwj
JjPD7r5XGD35VETgo2bO86L5C4l91pRWUYxz0J8y/hGuXNIlgTNIwkxAqSFKxvDO
v/KMzUpz8R58FZmS82BHT+ZJGa9suuEvFpDjMjRWruJx/9ZkwcSHJVmFNPf+0+Pd
I1jYr6SzL8u/vDQIUZl40sYfyGdkJjmzE3TkHcFoGKU0AneObIIqvamJHJXiDFp9
1Yuf/JnKEPJb/w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 02:50:08 2025 by rpki-client