Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
File: x_MfTFLp6rWIMOOH0LOQkwaExBo.mft (raw, json)
Hash identifier: p8VgsiU1Bb3nxjlNP3w2ipbax0yFvEwf1U3pDGMJzAs=
Subject key identifier: 64:13:14:6D:01:A6:8B:2C:64:60:C8:A4:C1:58:1D:86:0F:35:27:5C
Authority key identifier: C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
Certificate issuer: /CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Certificate serial: 01974D44F0D9E7693848F348B65FFAF86FDF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
Manifest number: 157A
Signing time: Sun 08 Jun 2025 02:00:53 +0000
Manifest this update: Sun 08 Jun 2025 02:00:53 +0000
Manifest next update: Mon 09 Jun 2025 02:00:53 +0000
Files and hashes: 1: x_MfTFLp6rWIMOOH0LOQkwaExBo.crl (hash: KuUT5ssJNPBemPhpuulPMUq0Ox8lyorcHFfKmrqZLfg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 20:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:44:f0:d9:e7:69:38:48:f3:48:b6:5f:fa:f8:6f:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c7f31f4c52e9eab58830e387d0b390930684c41a
Validity
Not Before: Jun 8 02:00:53 2025 GMT
Not After : Jun 9 02:00:53 2025 GMT
Subject: CN=6413146d01a68b2c6460c8a4c1581d860f35275c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:35:f7:f2:0a:d0:ca:fa:b1:b8:25:ab:56:bd:
c2:43:cc:73:ac:ff:2c:0e:ff:7b:7c:d1:4a:84:17:
14:6e:8c:cd:bf:dd:35:6d:18:d4:b7:6f:d7:e8:3f:
ce:ed:9d:5e:f9:84:6e:13:0a:54:b8:cf:a3:bd:83:
eb:75:e6:ce:ea:8a:97:d8:27:ab:cf:86:f3:b8:e6:
cc:c9:58:ad:03:df:f3:d2:f5:e0:c3:cb:06:80:d6:
96:37:79:f5:c8:94:3f:c1:9a:be:bb:69:fb:1b:8b:
c5:eb:f6:26:0f:f6:36:3a:3e:00:35:0a:77:cd:3a:
e8:92:a8:3e:ba:a4:7c:13:3f:26:68:f2:34:52:bc:
09:60:e9:89:34:60:1c:81:bc:db:a7:c1:46:2f:ac:
9b:68:d5:cd:b1:90:53:a9:e0:c7:a9:42:5b:3b:cb:
e4:a2:bd:ac:87:8b:a3:1d:66:76:ff:1b:07:1b:96:
cf:c0:7f:37:09:df:03:30:68:e4:f9:5b:6c:4a:6d:
04:98:88:ee:c1:2c:6f:a2:ce:1a:82:4f:ec:36:5f:
c1:2f:7c:a6:47:0c:fe:fc:76:98:d6:f2:b7:53:4f:
a8:06:a1:bd:9d:15:d1:a2:69:71:e1:f2:58:ab:cf:
87:57:8a:49:29:ad:ba:86:e7:7c:8c:bc:ef:5d:43:
35:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:13:14:6D:01:A6:8B:2C:64:60:C8:A4:C1:58:1D:86:0F:35:27:5C
X509v3 Authority Key Identifier:
keyid:C7:F3:1F:4C:52:E9:EA:B5:88:30:E3:87:D0:B3:90:93:06:84:C4:1A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x_MfTFLp6rWIMOOH0LOQkwaExBo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/b900ee-0007-47a3-9f6f-8670fbea3989/1/x_MfTFLp6rWIMOOH0LOQkwaExBo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:84:45:51:d2:7e:2c:74:e1:44:a9:3c:aa:f8:54:8a:4e:bd:
3c:8e:e8:6c:15:d1:21:e6:97:59:45:4b:56:51:85:32:ae:af:
2c:70:d1:91:96:80:87:ef:13:98:cc:d8:25:fd:f8:a7:3f:b9:
45:3a:f4:a2:5a:41:20:be:a8:5c:d9:c7:4a:9a:78:5e:57:b6:
86:4f:24:90:40:e2:83:ab:3b:cc:c5:8c:41:4d:d5:ed:7e:81:
b9:b4:6a:50:b0:2c:80:5f:be:58:ef:38:af:93:a9:69:64:ff:
54:5c:94:66:74:20:05:e2:21:47:93:34:e3:7f:cf:38:a8:2d:
c6:a2:b4:f6:7c:b1:ae:5f:59:e1:1b:88:29:47:86:50:8d:ca:
23:21:3c:44:62:d7:c4:b6:e7:08:54:b4:9c:33:7c:ae:4f:60:
47:4a:10:2e:6d:e3:14:35:01:9f:ce:9d:8e:c9:32:5e:21:57:
d1:bc:9b:9d:92:a7:81:a5:1f:36:2a:94:9a:0f:f0:2f:a4:d3:
70:bb:41:3f:ce:b2:b2:cb:50:0b:dc:1c:97:a4:14:df:b9:fe:
0c:65:fb:0c:b4:76:35:60:c0:fd:7d:59:0e:07:43:7c:91:40:
e7:e8:37:73:56:af:a7:14:ff:a1:1d:92:57:e5:a3:f3:79:6b:
55:5c:84:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNRPDZ52k4SPNItl/6+G/fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3ZjMxZjRjNTJlOWVhYjU4ODMwZTM4N2QwYjM5MDkzMDY4
NGM0MWEwHhcNMjUwNjA4MDIwMDUzWhcNMjUwNjA5MDIwMDUzWjAzMTEwLwYDVQQD
Eyg2NDEzMTQ2ZDAxYTY4YjJjNjQ2MGM4YTRjMTU4MWQ4NjBmMzUyNzVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwDX38grQyvqxuCWrVr3CQ8xzrP8s
Dv97fNFKhBcUbozNv901bRjUt2/X6D/O7Z1e+YRuEwpUuM+jvYPrdebO6oqX2Cer
z4bzuObMyVitA9/z0vXgw8sGgNaWN3n1yJQ/wZq+u2n7G4vF6/YmD/Y2Oj4ANQp3
zTrokqg+uqR8Ez8maPI0UrwJYOmJNGAcgbzbp8FGL6ybaNXNsZBTqeDHqUJbO8vk
or2sh4ujHWZ2/xsHG5bPwH83Cd8DMGjk+VtsSm0EmIjuwSxvos4agk/sNl/BL3ym
Rwz+/HaY1vK3U0+oBqG9nRXRomlx4fJYq8+HV4pJKa26hud8jLzvXUM1WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGQTFG0BpossZGDIpMFYHYYPNSdcMB8GA1UdIwQY
MBaAFMfzH0xS6eq1iDDjh9CzkJMGhMQaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9iOTAwZWUtMDAwNy00N2EzLTlmNmYt
ODY3MGZiZWEzOTg5LzEveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9iOTAwZWUtMDAwNy00N2EzLTlmNmYtODY3MGZiZWEzOTg5
LzEveF9NZlRGTHA2cldJTU9PSDBMT1Frd2FFeEJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhYRFUdJ+
LHThRKk8qvhUik69PI7obBXRIeaXWUVLVlGFMq6vLHDRkZaAh+8TmMzYJf34pz+5
RTr0olpBIL6oXNnHSpp4Xle2hk8kkEDig6s7zMWMQU3V7X6BubRqULAsgF++WO84
r5OpaWT/VFyUZnQgBeIhR5M043/POKgtxqK09nyxrl9Z4RuIKUeGUI3KIyE8RGLX
xLbnCFS0nDN8rk9gR0oQLm3jFDUBn86djskyXiFX0bybnZKngaUfNiqUmg/wL6TT
cLtBP86ysstQC9wcl6QU37n+DGX7DLR2NWDA/X1ZDgdDfJFA5+g3c1avpxT/oR2S
V+Wj83lrVVyEwg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 06:20:04 2025 by rpki-client