Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
File: RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft (raw, json)
Hash identifier: bo5utzBTy8h8ee318vggB3L3vTuDIjKcQJtptAWnCbA=
Subject key identifier: 40:6B:04:F6:1B:46:E4:65:0F:D4:F1:29:D8:40:85:D4:33:88:97:B6
Authority key identifier: 46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
Certificate issuer: /CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Certificate serial: 01975233E2874E70CC4E08152981486052DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
Manifest number: 157C
Signing time: Mon 09 Jun 2025 01:00:21 +0000
Manifest this update: Mon 09 Jun 2025 01:00:21 +0000
Manifest next update: Tue 10 Jun 2025 01:00:21 +0000
Files and hashes: 1: RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl (hash: JxuJWOe0DDr200GOIu3C+SclUrGt1HF7DCjl7Plts6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:33:e2:87:4e:70:cc:4e:08:15:29:81:48:60:52:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=463260e45ee1521c6aab83f21d5b69e810c1e073
Validity
Not Before: Jun 9 01:00:21 2025 GMT
Not After : Jun 10 01:00:21 2025 GMT
Subject: CN=406b04f61b46e4650fd4f129d84085d4338897b6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:36:da:d1:b8:93:61:af:66:ee:b8:af:42:46:
96:e8:1b:ad:b5:69:1f:d0:39:37:10:73:1f:20:1c:
1d:93:49:70:f2:88:a3:5f:9c:e0:89:20:a4:3c:51:
d3:ab:39:c1:73:dd:84:4d:56:ab:5c:b8:ff:16:f9:
cd:81:93:d7:de:27:9c:cb:73:7e:a1:9d:49:02:8c:
04:51:25:d3:72:76:ef:ce:83:64:ba:b2:ac:98:fc:
5e:a5:59:b0:f0:1f:9c:67:61:fd:e1:7f:5f:13:43:
66:45:83:98:15:96:9a:8e:a5:c4:16:f1:06:37:65:
94:c5:6f:80:dc:a1:59:1f:3e:c4:ea:64:54:ba:38:
17:6e:49:4f:71:8a:83:06:10:9d:5b:f9:67:4f:9b:
c3:1d:19:cf:bc:61:4f:4d:25:80:fc:32:b7:6a:aa:
fc:0b:3f:43:85:26:7e:2f:d0:e5:1c:97:cb:51:33:
a2:f2:11:d1:f1:0d:13:28:14:3f:1a:36:b8:e9:a5:
0f:c6:ea:ff:ac:0c:b5:20:22:96:a6:e0:6e:74:42:
c5:32:1b:ce:43:05:70:16:d0:ef:4a:d7:f9:8f:db:
ea:10:1b:80:f3:4a:37:78:73:38:93:06:ce:05:e8:
37:e4:85:ad:0c:a3:09:fb:c9:78:d8:24:84:0a:3e:
1c:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:6B:04:F6:1B:46:E4:65:0F:D4:F1:29:D8:40:85:D4:33:88:97:B6
X509v3 Authority Key Identifier:
keyid:46:32:60:E4:5E:E1:52:1C:6A:AB:83:F2:1D:5B:69:E8:10:C1:E0:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RjJg5F7hUhxqq4PyHVtp6BDB4HM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/f63546-6892-4f4d-b800-8fd45cd5138a/1/RjJg5F7hUhxqq4PyHVtp6BDB4HM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:6f:41:03:8d:f6:3b:82:c0:57:11:58:23:e4:7a:ed:32:34:
2e:c1:34:76:07:99:d8:6d:49:62:d1:58:7d:af:fc:49:3b:27:
b2:f1:1f:ec:19:a7:98:fc:e2:3c:88:8a:46:17:2a:7e:41:ad:
0e:74:23:0f:2c:06:e4:44:b6:a3:be:9b:86:82:cb:a9:b7:f4:
d5:29:4f:b3:9c:59:5c:80:e0:90:21:e8:35:a9:6a:a9:2d:a5:
6e:73:df:23:36:13:35:41:37:0e:ae:cf:b5:c6:df:92:7a:40:
d2:00:3a:f3:f5:23:e4:bc:db:41:99:d0:31:19:a3:ff:ef:10:
35:51:fd:10:70:4e:b2:54:a2:0f:7d:32:b0:8e:15:1e:b8:cc:
29:ad:27:d7:b5:ef:a2:91:23:df:e0:fc:13:f5:14:7b:f6:a9:
66:c7:28:b9:e1:15:15:3b:28:9b:1d:81:2a:9c:81:f7:a9:88:
30:5a:b4:02:fb:69:08:6b:16:0a:0d:3c:87:cc:51:7d:c6:2a:
52:18:63:0c:a3:13:41:c3:3f:ad:d7:df:aa:17:16:e1:0c:78:
6f:18:64:d2:90:e7:9b:f4:3c:e0:86:42:fb:42:c2:3e:a8:4a:
43:8e:d9:15:8a:2b:c9:a1:b0:27:fc:ca:12:b0:61:b2:e9:66:
49:b3:ee:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSM+KHTnDMTggVKYFIYFLeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2MzI2MGU0NWVlMTUyMWM2YWFiODNmMjFkNWI2OWU4MTBj
MWUwNzMwHhcNMjUwNjA5MDEwMDIxWhcNMjUwNjEwMDEwMDIxWjAzMTEwLwYDVQQD
Eyg0MDZiMDRmNjFiNDZlNDY1MGZkNGYxMjlkODQwODVkNDMzODg5N2I2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvjba0biTYa9m7rivQkaW6ButtWkf
0Dk3EHMfIBwdk0lw8oijX5zgiSCkPFHTqznBc92ETVarXLj/FvnNgZPX3iecy3N+
oZ1JAowEUSXTcnbvzoNkurKsmPxepVmw8B+cZ2H94X9fE0NmRYOYFZaajqXEFvEG
N2WUxW+A3KFZHz7E6mRUujgXbklPcYqDBhCdW/lnT5vDHRnPvGFPTSWA/DK3aqr8
Cz9DhSZ+L9DlHJfLUTOi8hHR8Q0TKBQ/Gja46aUPxur/rAy1ICKWpuBudELFMhvO
QwVwFtDvStf5j9vqEBuA80o3eHM4kwbOBeg35IWtDKMJ+8l42CSECj4cEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEBrBPYbRuRlD9TxKdhAhdQziJe2MB8GA1UdIwQY
MBaAFEYyYORe4VIcaquD8h1baegQweBzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mNjM1NDYtNjg5Mi00ZjRkLWI4MDAt
OGZkNDVjZDUxMzhhLzEvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mNjM1NDYtNjg5Mi00ZjRkLWI4MDAtOGZkNDVjZDUxMzhh
LzEvUmpKZzVGN2hVaHhxcTRQeUhWdHA2QkRCNEhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEG9BA432
O4LAVxFYI+R67TI0LsE0dgeZ2G1JYtFYfa/8STsnsvEf7BmnmPziPIiKRhcqfkGt
DnQjDywG5ES2o76bhoLLqbf01SlPs5xZXIDgkCHoNalqqS2lbnPfIzYTNUE3Dq7P
tcbfknpA0gA68/Uj5LzbQZnQMRmj/+8QNVH9EHBOslSiD30ysI4VHrjMKa0n17Xv
opEj3+D8E/UUe/apZscoueEVFTsomx2BKpyB96mIMFq0AvtpCGsWCg08h8xRfcYq
UhhjDKMTQcM/rdffqhcW4Qx4bxhk0pDnm/Q84IZC+0LCPqhKQ47ZFYoryaGwJ/zK
ErBhsulmSbPung==
-----END CERTIFICATE-----
Generated at Mon Jun 9 04:21:42 2025 by rpki-client