
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
File: 1II6TKTXaJe13f55iOJx_2gTGPI.mft (raw, json)
Hash identifier: OcBevELCpXWVsBZuRjm2STErIeEajGd+e4aJpu5tMuY=
Subject key identifier: AA:30:82:91:4B:67:83:24:D9:8D:33:8E:F2:C4:2F:72:8D:29:17:50
Authority key identifier: D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
Certificate issuer: /CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Certificate serial: 019745F8F22A5C6E8232EF63EC643DE7CE6A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
Manifest number: 125F
Signing time: Fri 06 Jun 2025 16:00:32 +0000
Manifest this update: Fri 06 Jun 2025 16:00:32 +0000
Manifest next update: Sat 07 Jun 2025 16:00:32 +0000
Files and hashes: 1: 1II6TKTXaJe13f55iOJx_2gTGPI.crl (hash: 8n+Jd0QNZtIL6qjv5BvmrETvbOLuxHUS/dNV7wVPw6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:45:f8:f2:2a:5c:6e:82:32:ef:63:ec:64:3d:e7:ce:6a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4823a4ca4d76897b5ddfe7988e271ff681318f2
Validity
Not Before: Jun 6 16:00:32 2025 GMT
Not After : Jun 7 16:00:32 2025 GMT
Subject: CN=aa3082914b678324d98d338ef2c42f728d291750
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:4e:e6:83:40:d7:49:be:df:af:fe:0b:02:3e:
b4:2d:ff:84:68:78:c5:3a:1f:35:bc:2e:e6:b4:cd:
6d:e7:62:c3:86:14:af:ff:bb:e3:9c:9a:32:80:cd:
40:c5:22:12:08:4a:a9:5d:df:32:77:1d:f9:2b:42:
8e:58:28:1d:1d:84:5b:0e:7b:e1:6a:7b:a1:fa:2b:
71:77:86:21:c4:53:97:c1:ef:fc:e8:56:74:14:08:
06:4d:11:e4:a7:7e:f5:c3:86:b1:10:1f:2e:eb:a8:
01:da:27:3b:1e:da:a0:c7:4c:1b:b5:74:91:b8:41:
d6:32:1d:91:c0:44:7e:b3:ff:4b:b7:1c:87:1c:3b:
89:43:da:c5:8e:99:ff:84:43:28:aa:80:24:83:fe:
a2:c5:41:98:82:25:45:a1:76:ad:d8:66:6b:e1:8e:
53:82:09:4e:60:69:62:5c:cf:7e:3d:ae:72:e4:17:
e4:d1:8e:36:ad:c5:e9:de:aa:68:87:42:3b:3c:43:
f0:6c:21:c1:8c:60:62:0b:71:55:13:34:cd:ba:7a:
cc:6e:6c:c8:64:48:5a:17:65:39:11:09:8e:3c:ca:
10:f2:bf:2a:6b:7c:7f:96:0c:1d:42:82:38:0f:41:
c9:2e:b4:15:08:bd:0f:f0:5d:52:7c:78:8f:c4:68:
fc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:30:82:91:4B:67:83:24:D9:8D:33:8E:F2:C4:2F:72:8D:29:17:50
X509v3 Authority Key Identifier:
keyid:D4:82:3A:4C:A4:D7:68:97:B5:DD:FE:79:88:E2:71:FF:68:13:18:F2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1II6TKTXaJe13f55iOJx_2gTGPI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/5e43c3-cadf-4374-99aa-4e2f89cae1da/1/1II6TKTXaJe13f55iOJx_2gTGPI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:38:ad:cd:c5:47:2d:dd:4a:75:dd:e1:fd:7e:09:14:13:fc:
eb:9e:51:57:b3:49:a8:1a:68:03:49:92:05:c6:0a:b7:ec:50:
c8:9b:8d:df:0a:a6:c8:8f:c1:3f:6f:f4:29:95:c6:1e:08:93:
d1:92:a7:08:3d:b4:f4:4e:8e:7a:95:92:ea:5c:8e:d2:68:ab:
5f:a1:d6:80:ff:73:50:74:3f:f4:29:ba:28:25:19:e2:ea:48:
02:bd:66:86:ba:64:eb:ac:93:e7:4c:a2:e9:27:4d:49:da:b6:
c9:03:4e:fb:1f:28:db:a5:99:a5:0d:2c:b5:5b:cf:58:e3:7f:
4e:0d:c3:c1:c4:7c:48:57:ff:25:06:01:87:0d:cc:cf:b0:80:
b9:03:f7:03:b5:2c:47:7b:ea:d8:7b:2b:7a:97:77:35:88:54:
b2:bc:08:4b:ed:ae:71:d8:19:d7:22:95:1b:b4:f5:07:0b:7e:
d1:d6:5d:11:d3:9c:5e:a1:cd:10:ce:e7:17:b2:d0:77:6a:20:
c3:67:81:ec:0f:36:d3:08:7e:17:ab:98:fb:1f:23:20:e8:86:
1b:3b:9c:4d:11:17:58:fc:b7:23:5d:81:4d:7e:5c:30:ed:f1:
53:04:86:5f:22:20:8a:c2:81:33:7b:0b:d0:89:f2:8c:98:63:
14:7e:9c:af
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdF+PIqXG6CMu9j7GQ9585qMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0ODIzYTRjYTRkNzY4OTdiNWRkZmU3OTg4ZTI3MWZmNjgx
MzE4ZjIwHhcNMjUwNjA2MTYwMDMyWhcNMjUwNjA3MTYwMDMyWjAzMTEwLwYDVQQD
EyhhYTMwODI5MTRiNjc4MzI0ZDk4ZDMzOGVmMmM0MmY3MjhkMjkxNzUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqE7mg0DXSb7fr/4LAj60Lf+EaHjF
Oh81vC7mtM1t52LDhhSv/7vjnJoygM1AxSISCEqpXd8ydx35K0KOWCgdHYRbDnvh
anuh+itxd4YhxFOXwe/86FZ0FAgGTRHkp371w4axEB8u66gB2ic7Htqgx0wbtXSR
uEHWMh2RwER+s/9LtxyHHDuJQ9rFjpn/hEMoqoAkg/6ixUGYgiVFoXat2GZr4Y5T
gglOYGliXM9+Pa5y5Bfk0Y42rcXp3qpoh0I7PEPwbCHBjGBiC3FVEzTNunrMbmzI
ZEhaF2U5EQmOPMoQ8r8qa3x/lgwdQoI4D0HJLrQVCL0P8F1SfHiPxGj8DwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKowgpFLZ4Mk2Y0zjvLEL3KNKRdQMB8GA1UdIwQY
MBaAFNSCOkyk12iXtd3+eYjicf9oExjyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUlJNlRLVFhhSmUxM2Y1NWlPSnhfMmdUR1BJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy81ZTQzYzMtY2FkZi00Mzc0LTk5YWEt
NGUyZjg5Y2FlMWRhLzEvMUlJNlRLVFhhSmUxM2Y1NWlPSnhfMmdUR1BJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy81ZTQzYzMtY2FkZi00Mzc0LTk5YWEtNGUyZjg5Y2FlMWRh
LzEvMUlJNlRLVFhhSmUxM2Y1NWlPSnhfMmdUR1BJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQjitzcVH
Ld1Kdd3h/X4JFBP8655RV7NJqBpoA0mSBcYKt+xQyJuN3wqmyI/BP2/0KZXGHgiT
0ZKnCD209E6OepWS6lyO0mirX6HWgP9zUHQ/9Cm6KCUZ4upIAr1mhrpk66yT50yi
6SdNSdq2yQNO+x8o26WZpQ0stVvPWON/Tg3DwcR8SFf/JQYBhw3Mz7CAuQP3A7Us
R3vq2Hsrepd3NYhUsrwIS+2ucdgZ1yKVG7T1Bwt+0dZdEdOcXqHNEM7nF7LQd2og
w2eB7A820wh+F6uY+x8jIOiGGzucTREXWPy3I12BTX5cMO3xUwSGXyIgisKBM3sL
0InyjJhjFH6crw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 00:59:12 2025 by rpki-client