Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
File: tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft (raw, json)
Hash identifier: nYY+JnKqQMovyACiLzoW4sRSGvMJJN8xvVzIzSOUgvQ=
Subject key identifier: 9F:1B:A5:81:A8:4A:54:B2:F0:26:72:F7:E1:47:F5:1B:1C:1B:5D:B0
Authority key identifier: B5:3A:CA:36:84:6D:2D:30:23:64:8E:AC:58:1C:7D:9B:63:17:EE:DC
Certificate issuer: /CN=b53aca36846d2d3023648eac581c7d9b6317eedc
Certificate serial: 01974967D4C4045D81A75DD0717BF930D8BB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
Manifest number: 017B
Signing time: Sat 07 Jun 2025 08:00:30 +0000
Manifest this update: Sat 07 Jun 2025 08:00:30 +0000
Manifest next update: Sun 08 Jun 2025 08:00:30 +0000
Files and hashes: 1: tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl (hash: 7SNxjxz89mnz0eJBGxhjXFxzKxSwzZuhbKnbG/lHwBs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:d4:c4:04:5d:81:a7:5d:d0:71:7b:f9:30:d8:bb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b53aca36846d2d3023648eac581c7d9b6317eedc
Validity
Not Before: Jun 7 08:00:30 2025 GMT
Not After : Jun 8 08:00:30 2025 GMT
Subject: CN=9f1ba581a84a54b2f02672f7e147f51b1c1b5db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:1e:02:8a:cd:29:e2:fa:3e:5a:12:5d:45:78:
1e:ec:e4:8b:f0:0a:74:44:3b:f1:3d:0e:3b:4b:f5:
04:d6:8a:87:22:f5:84:1c:44:ec:2e:47:54:8b:84:
ef:84:c5:50:45:97:b3:de:4f:be:ac:2f:4c:4d:ba:
61:da:86:b5:2d:a5:e9:53:ab:36:58:e8:99:6a:f2:
bd:4c:cb:16:39:bf:2f:56:20:09:86:ac:b0:bb:4e:
83:80:be:17:54:16:96:02:54:19:44:fc:e6:a8:d0:
2e:02:7a:43:99:0c:82:50:22:47:a0:31:2d:34:7e:
d1:43:d8:f4:b1:77:a8:b3:e9:77:bd:e2:e1:1f:d3:
20:28:5f:99:33:e2:87:12:42:34:90:93:60:33:a8:
34:5c:e4:2d:f7:2d:f0:6d:fe:0b:65:48:e6:d1:9c:
6f:b4:d4:40:16:ba:af:76:b7:cf:da:e8:f9:99:47:
52:ed:62:26:07:66:d9:31:96:ad:e4:75:d6:3e:e0:
06:84:35:fe:33:d2:48:5b:95:1b:45:1b:7d:20:db:
ed:a3:3d:61:19:cb:25:1d:a0:cd:25:0c:d3:41:54:
22:bc:5c:fd:7d:3a:17:e6:a5:95:b2:2b:f4:b5:b2:
ea:02:11:70:c7:a5:e1:3d:f3:57:94:1d:a0:3b:e6:
87:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9F:1B:A5:81:A8:4A:54:B2:F0:26:72:F7:E1:47:F5:1B:1C:1B:5D:B0
X509v3 Authority Key Identifier:
keyid:B5:3A:CA:36:84:6D:2D:30:23:64:8E:AC:58:1C:7D:9B:63:17:EE:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTrKNoRtLTAjZI6sWBx9m2MX7tw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/aaf36c-666d-4ac4-b0f3-4bb37b18b9fe/1/tTrKNoRtLTAjZI6sWBx9m2MX7tw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:20:a1:fd:84:5c:65:26:36:f5:82:c0:c1:39:6c:ab:78:d2:
23:c6:fd:fe:0f:a8:44:d1:aa:84:50:42:6b:37:6d:71:ab:de:
59:bd:47:fb:73:d1:ca:55:3b:d7:ca:7f:3e:f9:55:e3:cf:78:
33:15:b8:33:be:cb:72:47:37:8d:60:57:8a:5f:06:41:43:0d:
49:2f:6d:97:f3:e9:02:1c:fd:b1:94:15:6e:5a:2d:36:48:43:
c1:ae:c7:46:6e:59:d0:05:d4:d4:af:b0:ae:e9:46:a9:85:52:
b9:f2:73:69:e1:39:80:41:e3:21:2a:f8:d6:b7:9b:89:2f:4e:
9d:d3:e6:00:ff:7f:9d:23:4b:04:cc:12:04:5a:77:1d:5e:4e:
ab:58:f5:8c:1a:27:06:b1:46:65:e5:c5:bd:4f:05:47:c0:e2:
81:bc:47:bb:a9:86:2c:36:9d:52:38:16:30:ad:41:5d:d0:07:
be:3f:f4:c0:9a:28:eb:b8:0d:ea:0f:f4:b7:87:d9:87:65:26:
fd:4e:24:02:f0:93:75:c5:a9:7c:84:7d:88:c6:a0:70:15:5e:
b2:99:01:16:6b:1b:4f:86:3f:ec:6a:d8:28:69:02:03:73:9e:
e8:6f:9c:61:bc:21:9a:2b:c6:bc:41:72:08:23:89:37:68:8f:
7d:bc:88:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ9TEBF2Bp13QcXv5MNi7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1M2FjYTM2ODQ2ZDJkMzAyMzY0OGVhYzU4MWM3ZDliNjMx
N2VlZGMwHhcNMjUwNjA3MDgwMDMwWhcNMjUwNjA4MDgwMDMwWjAzMTEwLwYDVQQD
Eyg5ZjFiYTU4MWE4NGE1NGIyZjAyNjcyZjdlMTQ3ZjUxYjFjMWI1ZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArx4Cis0p4vo+WhJdRXge7OSL8Ap0
RDvxPQ47S/UE1oqHIvWEHETsLkdUi4TvhMVQRZez3k++rC9MTbph2oa1LaXpU6s2
WOiZavK9TMsWOb8vViAJhqywu06DgL4XVBaWAlQZRPzmqNAuAnpDmQyCUCJHoDEt
NH7RQ9j0sXeos+l3veLhH9MgKF+ZM+KHEkI0kJNgM6g0XOQt9y3wbf4LZUjm0Zxv
tNRAFrqvdrfP2uj5mUdS7WImB2bZMZat5HXWPuAGhDX+M9JIW5UbRRt9INvtoz1h
GcslHaDNJQzTQVQivFz9fToX5qWVsiv0tbLqAhFwx6XhPfNXlB2gO+aHrwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ8bpYGoSlSy8CZy9+FH9RscG12wMB8GA1UdIwQY
MBaAFLU6yjaEbS0wI2SOrFgcfZtjF+7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRyS05vUnRMVEFqWkk2c1dCeDltMk1YN3R3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9hYWYzNmMtNjY2ZC00YWM0LWIwZjMt
NGJiMzdiMThiOWZlLzEvdFRyS05vUnRMVEFqWkk2c1dCeDltMk1YN3R3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9hYWYzNmMtNjY2ZC00YWM0LWIwZjMtNGJiMzdiMThiOWZl
LzEvdFRyS05vUnRMVEFqWkk2c1dCeDltMk1YN3R3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEiCh/YRc
ZSY29YLAwTlsq3jSI8b9/g+oRNGqhFBCazdtcaveWb1H+3PRylU718p/PvlV4894
MxW4M77Lckc3jWBXil8GQUMNSS9tl/PpAhz9sZQVblotNkhDwa7HRm5Z0AXU1K+w
rulGqYVSufJzaeE5gEHjISr41rebiS9OndPmAP9/nSNLBMwSBFp3HV5Oq1j1jBon
BrFGZeXFvU8FR8DigbxHu6mGLDadUjgWMK1BXdAHvj/0wJoo67gN6g/0t4fZh2Um
/U4kAvCTdcWpfIR9iMagcBVespkBFmsbT4Y/7GrYKGkCA3Oe6G+cYbwhmivGvEFy
CCOJN2iPfbyIkw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:54:55 2025 by rpki-client