Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
File: r4yBlkcmb7yxOeZyqPuaV89Ysog.mft (raw, json)
Hash identifier: VdbvrY4biRhhApU1vQWXa2qzD2rR9RNQrFrfWzObKbY=
Subject key identifier: DA:C0:4E:E3:68:F9:A9:32:17:53:79:D9:6C:12:5B:58:A4:BE:2C:9D
Authority key identifier: AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
Certificate issuer: /CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Certificate serial: 01974AE8C7D509989BF6E71048C9B083B260
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
Manifest number: 038F
Signing time: Sat 07 Jun 2025 15:00:58 +0000
Manifest this update: Sat 07 Jun 2025 15:00:58 +0000
Manifest next update: Sun 08 Jun 2025 15:00:58 +0000
Files and hashes: 1: r4yBlkcmb7yxOeZyqPuaV89Ysog.crl (hash: k4u55/16yZw3eqsFN+Zi5C/iE8fT6wKoGXeFNU+UicM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:c7:d5:09:98:9b:f6:e7:10:48:c9:b0:83:b2:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=af8c819647266fbcb139e672a8fb9a57cf58b288
Validity
Not Before: Jun 7 15:00:58 2025 GMT
Not After : Jun 8 15:00:58 2025 GMT
Subject: CN=dac04ee368f9a932175379d96c125b58a4be2c9d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:d7:db:c4:85:03:1c:20:03:c4:c1:3f:ac:42:
38:37:99:fa:35:1c:18:7f:b6:78:1d:0f:4a:d8:0b:
1d:e2:06:0d:69:48:55:f6:ce:c9:35:3d:25:5b:a1:
60:f0:fc:5f:e2:bb:b4:ea:b0:93:b5:c5:0e:6d:b2:
7a:ca:4a:b8:10:aa:85:3e:ab:03:92:a4:4e:b2:0a:
48:dd:08:73:d7:c4:89:8c:1b:4b:6d:de:fc:be:97:
b8:fe:2d:14:9f:fb:92:c6:35:17:ef:1e:0f:41:a6:
72:1b:f4:6e:4d:f3:2f:b4:b4:d9:31:da:98:7a:80:
96:7f:20:b7:d1:ad:22:f7:86:61:cb:c0:48:eb:df:
b2:3b:ad:e6:f9:fd:70:73:5d:c6:cf:f0:48:f7:53:
27:3b:25:87:1a:b0:10:3f:4a:0a:bc:0a:18:0f:44:
d9:9d:e0:c8:d1:a7:e1:82:7d:12:68:59:6b:19:33:
39:39:23:1d:1b:76:c8:3c:76:9f:69:6a:ec:b9:ae:
99:88:e2:f6:95:30:5a:43:2a:80:88:1f:d7:9b:9e:
56:51:b4:f8:e7:cc:ad:ee:d2:04:f6:c0:99:20:2b:
6d:0a:53:3d:7b:6c:e3:59:a1:4b:9a:ec:41:a1:35:
9d:c2:23:e5:a8:9f:44:6d:5f:d4:ac:d2:72:6f:7e:
2e:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:C0:4E:E3:68:F9:A9:32:17:53:79:D9:6C:12:5B:58:A4:BE:2C:9D
X509v3 Authority Key Identifier:
keyid:AF:8C:81:96:47:26:6F:BC:B1:39:E6:72:A8:FB:9A:57:CF:58:B2:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r4yBlkcmb7yxOeZyqPuaV89Ysog.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/6be7af-97b8-4777-bbdd-30117c20bf42/1/r4yBlkcmb7yxOeZyqPuaV89Ysog.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b2:14:28:a7:5b:ae:ac:b1:30:11:ab:7a:80:a0:4e:39:b6:09:
1f:18:13:40:54:da:7a:b0:c3:57:ca:24:f8:d3:c1:d5:dd:1b:
a0:8a:3d:1b:f4:3d:be:c9:a1:7f:92:ab:68:45:7a:1f:f8:c8:
60:5b:4e:7d:37:08:f5:64:ee:29:e7:d9:1c:1f:d3:3a:b8:d3:
a6:97:95:cd:bd:76:a9:23:c1:56:2c:ef:8f:f4:1a:f9:f0:0d:
2c:83:db:31:a1:3b:78:68:8d:ba:95:26:46:c2:57:f1:6a:9a:
20:be:ff:3a:42:ba:61:0d:64:2c:93:61:38:86:b7:73:48:c8:
c7:c8:94:8a:33:c6:82:72:44:aa:de:d3:8b:b2:8d:cb:c5:7f:
95:c5:77:52:b1:28:2b:61:93:cd:2d:60:a9:c5:ea:b5:92:0a:
de:a2:5c:ae:68:53:6f:7c:22:8f:55:ac:c4:cc:a9:39:5c:6a:
74:7d:3a:4c:81:f2:56:6b:83:5a:ae:c2:24:4d:e0:b5:8e:17:
a2:0f:01:30:16:01:b4:88:e3:8a:eb:a9:75:d1:a6:f3:7f:91:
47:b9:ac:35:ef:02:5e:1d:d7:dc:03:12:87:42:9c:56:05:8b:
83:d3:0b:e7:45:8c:b9:1f:44:c7:d3:f4:7a:d2:c0:06:10:07:
7f:5f:8b:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6MfVCZib9ucQSMmwg7JgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmOGM4MTk2NDcyNjZmYmNiMTM5ZTY3MmE4ZmI5YTU3Y2Y1
OGIyODgwHhcNMjUwNjA3MTUwMDU4WhcNMjUwNjA4MTUwMDU4WjAzMTEwLwYDVQQD
EyhkYWMwNGVlMzY4ZjlhOTMyMTc1Mzc5ZDk2YzEyNWI1OGE0YmUyYzlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtNfbxIUDHCADxME/rEI4N5n6NRwY
f7Z4HQ9K2Asd4gYNaUhV9s7JNT0lW6Fg8Pxf4ru06rCTtcUObbJ6ykq4EKqFPqsD
kqROsgpI3Qhz18SJjBtLbd78vpe4/i0Un/uSxjUX7x4PQaZyG/RuTfMvtLTZMdqY
eoCWfyC30a0i94Zhy8BI69+yO63m+f1wc13Gz/BI91MnOyWHGrAQP0oKvAoYD0TZ
neDI0afhgn0SaFlrGTM5OSMdG3bIPHafaWrsua6ZiOL2lTBaQyqAiB/Xm55WUbT4
58yt7tIE9sCZICttClM9e2zjWaFLmuxBoTWdwiPlqJ9EbV/UrNJyb34ubwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNrATuNo+akyF1N52WwSW1ikviydMB8GA1UdIwQY
MBaAFK+MgZZHJm+8sTnmcqj7mlfPWLKIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjR5QmxrY21iN3l4T2VaeXFQdWFWODlZc29nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC82YmU3YWYtOTdiOC00Nzc3LWJiZGQt
MzAxMTdjMjBiZjQyLzEvcjR5QmxrY21iN3l4T2VaeXFQdWFWODlZc29nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC82YmU3YWYtOTdiOC00Nzc3LWJiZGQtMzAxMTdjMjBiZjQy
LzEvcjR5QmxrY21iN3l4T2VaeXFQdWFWODlZc29nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAshQop1uu
rLEwEat6gKBOObYJHxgTQFTaerDDV8ok+NPB1d0boIo9G/Q9vsmhf5KraEV6H/jI
YFtOfTcI9WTuKefZHB/TOrjTppeVzb12qSPBVizvj/Qa+fANLIPbMaE7eGiNupUm
RsJX8WqaIL7/OkK6YQ1kLJNhOIa3c0jIx8iUijPGgnJEqt7Ti7KNy8V/lcV3UrEo
K2GTzS1gqcXqtZIK3qJcrmhTb3wij1WsxMypOVxqdH06TIHyVmuDWq7CJE3gtY4X
og8BMBYBtIjjiuupddGm83+RR7msNe8CXh3X3AMSh0KcVgWLg9ML50WMuR9Ex9P0
etLABhAHf1+LQg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:36:11 2025 by rpki-client