Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
File: a1a9UK-T9GN-LAfi7EAya8ZABSc.mft (raw, json)
Hash identifier: MzBoaZVAFo9WwLx+UPzGqjpjvHrSO/hALSLsruH4r7I=
Subject key identifier: 62:AB:7D:23:6E:28:F2:AB:A8:DE:1F:70:F9:61:BA:A9:2E:56:33:1F
Authority key identifier: 6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
Certificate issuer: /CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Certificate serial: 01976AAAB3BB9C89F0894657FFB1B3C21E1C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
Manifest number: 01EA
Signing time: Fri 13 Jun 2025 19:01:01 +0000
Manifest this update: Fri 13 Jun 2025 19:01:01 +0000
Manifest next update: Sat 14 Jun 2025 19:01:01 +0000
Files and hashes: 1: a1a9UK-T9GN-LAfi7EAya8ZABSc.crl (hash: puActDhJBALrww3V+O0UWEUmJeEveCTt1aevBHJY+zw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:aa:b3:bb:9c:89:f0:89:46:57:ff:b1:b3:c2:1e:1c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b56bd50af93f4637e2c07e2ec40326bc6400527
Validity
Not Before: Jun 13 19:01:01 2025 GMT
Not After : Jun 14 19:01:01 2025 GMT
Subject: CN=62ab7d236e28f2aba8de1f70f961baa92e56331f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:8a:cc:2d:c1:9c:7f:02:a6:36:17:3c:94:14:
e7:e8:01:70:ba:e6:18:34:b5:6c:3e:17:12:d2:9a:
ba:88:05:34:a4:3e:be:b2:e7:0a:6f:cc:dd:cb:69:
fb:d1:4e:6a:18:78:50:3e:d8:15:79:95:56:39:62:
4f:98:b3:93:57:c9:a6:e9:dc:5e:39:84:66:31:72:
26:38:38:e0:8c:68:71:22:e9:e9:f3:da:61:05:5c:
83:aa:a1:07:ba:55:67:c7:2f:6f:76:fd:e4:2a:05:
5f:ea:39:6e:d9:70:19:d7:f4:75:8e:6a:3d:7d:69:
11:61:93:0a:82:71:d8:1e:ef:86:1a:3c:8a:09:04:
1f:ac:c7:5a:f4:3d:89:92:4b:dc:0e:cb:fe:f2:90:
75:7c:9b:04:8f:3c:87:60:d5:fb:46:ee:fb:87:88:
b5:25:40:58:f5:c4:51:0b:c9:e0:60:73:fe:c1:1b:
95:30:77:3a:7e:63:d7:85:5e:3f:9b:46:c5:39:3d:
47:07:2d:f5:88:14:ff:12:ee:85:40:2a:c3:30:05:
e1:e5:65:ac:ba:32:0f:1c:fd:98:81:24:30:79:7d:
10:45:d0:6e:b4:9e:eb:c6:2b:f4:6f:05:89:1b:39:
e2:c8:35:99:70:d3:ad:5b:bf:8d:24:17:f1:01:28:
6b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:AB:7D:23:6E:28:F2:AB:A8:DE:1F:70:F9:61:BA:A9:2E:56:33:1F
X509v3 Authority Key Identifier:
keyid:6B:56:BD:50:AF:93:F4:63:7E:2C:07:E2:EC:40:32:6B:C6:40:05:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1a9UK-T9GN-LAfi7EAya8ZABSc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fc/fd3429-4524-4fcf-9592-2996d8fb697e/1/a1a9UK-T9GN-LAfi7EAya8ZABSc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:b8:f0:66:52:c6:c1:2c:6a:e3:0d:82:76:ad:a0:d2:34:3f:
42:87:b3:4d:18:4b:cd:07:06:cf:c5:3c:88:08:23:e7:90:f4:
b5:68:58:00:7c:d1:75:ca:04:f1:89:d0:71:03:8c:b2:38:cb:
ee:c9:46:38:8e:b5:c5:83:8c:a3:96:87:eb:ba:fd:c1:ff:24:
86:16:97:05:88:83:86:75:00:72:aa:2f:7f:aa:7e:e4:45:d5:
f4:43:4c:0c:e7:bb:34:f5:df:6a:52:a6:c3:36:b0:08:15:1a:
2f:f3:87:89:71:f9:ca:e3:22:12:4f:a0:5a:14:b5:ad:53:94:
1a:8e:e7:57:07:f5:53:14:d8:af:dd:a6:57:b9:e8:5f:40:1f:
6b:c7:8f:09:48:89:a8:ca:14:a3:2f:22:19:64:64:8a:bb:b3:
51:78:7e:97:a1:fa:1e:39:cb:06:8b:97:13:bd:6b:e0:d2:09:
05:c9:5c:77:1f:bb:66:14:00:2d:84:2a:a5:a0:8c:7d:b7:a9:
68:22:d6:9c:1c:2f:51:5a:b9:55:48:3e:40:79:c5:61:99:57:
df:09:dd:32:05:bd:4f:69:4c:df:a3:08:22:a3:88:2f:68:8f:
5c:6d:76:dd:b7:27:d3:95:8c:39:b4:75:24:c1:0a:56:89:da:
d9:41:39:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqqrO7nInwiUZX/7Gzwh4cMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNTZiZDUwYWY5M2Y0NjM3ZTJjMDdlMmVjNDAzMjZiYzY0
MDA1MjcwHhcNMjUwNjEzMTkwMTAxWhcNMjUwNjE0MTkwMTAxWjAzMTEwLwYDVQQD
Eyg2MmFiN2QyMzZlMjhmMmFiYThkZTFmNzBmOTYxYmFhOTJlNTYzMzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxIrMLcGcfwKmNhc8lBTn6AFwuuYY
NLVsPhcS0pq6iAU0pD6+sucKb8zdy2n70U5qGHhQPtgVeZVWOWJPmLOTV8mm6dxe
OYRmMXImODjgjGhxIunp89phBVyDqqEHulVnxy9vdv3kKgVf6jlu2XAZ1/R1jmo9
fWkRYZMKgnHYHu+GGjyKCQQfrMda9D2JkkvcDsv+8pB1fJsEjzyHYNX7Ru77h4i1
JUBY9cRRC8ngYHP+wRuVMHc6fmPXhV4/m0bFOT1HBy31iBT/Eu6FQCrDMAXh5WWs
ujIPHP2YgSQweX0QRdButJ7rxiv0bwWJGzniyDWZcNOtW7+NJBfxAShrkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGKrfSNuKPKrqN4fcPlhuqkuVjMfMB8GA1UdIwQY
MBaAFGtWvVCvk/RjfiwH4uxAMmvGQAUnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTFhOVVLLVQ5R04tTEFmaTdFQXlhOFpBQlNjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYy9mZDM0MjktNDUyNC00ZmNmLTk1OTIt
Mjk5NmQ4ZmI2OTdlLzEvYTFhOVVLLVQ5R04tTEFmaTdFQXlhOFpBQlNjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYy9mZDM0MjktNDUyNC00ZmNmLTk1OTItMjk5NmQ4ZmI2OTdl
LzEvYTFhOVVLLVQ5R04tTEFmaTdFQXlhOFpBQlNjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeLjwZlLG
wSxq4w2Cdq2g0jQ/QoezTRhLzQcGz8U8iAgj55D0tWhYAHzRdcoE8YnQcQOMsjjL
7slGOI61xYOMo5aH67r9wf8khhaXBYiDhnUAcqovf6p+5EXV9ENMDOe7NPXfalKm
wzawCBUaL/OHiXH5yuMiEk+gWhS1rVOUGo7nVwf1UxTYr92mV7noX0Afa8ePCUiJ
qMoUoy8iGWRkiruzUXh+l6H6HjnLBouXE71r4NIJBclcdx+7ZhQALYQqpaCMfbep
aCLWnBwvUVq5VUg+QHnFYZlX3wndMgW9T2lM36MIIqOIL2iPXG123bcn05WMObR1
JMEKVona2UE5lw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 22:55:09 2025 by rpki-client