Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
File: _kK02grqV4yifyXesM_tYagLnqI.mft (raw, json)
Hash identifier: G79bIiy2YSeNWMYn6LhlFDI3TwH2DYOonRdKFFyqjf8=
Subject key identifier: AC:3D:43:D3:FD:F8:FF:C6:CB:41:74:D4:DF:A7:E9:F2:9C:CE:32:D5
Authority key identifier: FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
Certificate issuer: /CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Certificate serial: 01976DABBBF140B3AAA8CB6E877813A6E787
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
Manifest number: 08CC
Signing time: Sat 14 Jun 2025 09:01:00 +0000
Manifest this update: Sat 14 Jun 2025 09:01:00 +0000
Manifest next update: Sun 15 Jun 2025 09:01:00 +0000
Files and hashes: 1: _kK02grqV4yifyXesM_tYagLnqI.crl (hash: fvwMOrLbk/NuTGAxe3T9bZkdd+RReNhPrZnwWGbpQpE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 09:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:bb:f1:40:b3:aa:a8:cb:6e:87:78:13:a6:e7:87
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe42b4da0aea578ca27f25deb0cfed61a80b9ea2
Validity
Not Before: Jun 14 09:01:00 2025 GMT
Not After : Jun 15 09:01:00 2025 GMT
Subject: CN=ac3d43d3fdf8ffc6cb4174d4dfa7e9f29cce32d5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:3d:b5:7e:df:fa:5a:f2:ee:88:d4:71:87:15:
3f:ce:be:cb:2a:df:8a:a4:8d:d3:b3:72:9d:23:87:
ea:02:60:d3:ed:27:0b:b9:99:96:08:2c:bd:45:15:
26:e7:ee:2c:6d:e6:74:66:fc:fe:f7:70:55:a5:62:
4a:9b:61:cf:3a:fb:2e:07:20:0c:06:1a:00:7d:1f:
9a:26:40:39:18:48:8f:08:37:d1:c2:6e:1a:9d:f2:
95:9a:e8:34:78:94:96:0d:84:24:ae:40:a0:82:d4:
7e:11:ab:e6:d2:59:1d:80:04:fa:76:b3:e2:e1:23:
1c:ae:de:1f:39:b8:f4:3d:5f:37:29:d5:e4:31:ad:
d3:4f:03:10:5c:e9:40:07:cf:dd:0c:d6:27:5b:5b:
52:6b:77:fe:8d:84:00:34:42:94:54:03:7f:d6:5a:
49:f4:b7:42:0a:55:a5:12:3c:a5:0d:fa:cb:80:99:
19:f0:bd:3b:49:17:c8:ea:c8:54:59:32:48:5f:b9:
b0:b1:2e:bd:3a:fc:14:e8:47:65:b9:c9:db:8a:85:
02:d5:9f:7b:10:e5:15:7e:56:b1:03:62:da:bf:8f:
4f:09:93:a7:61:77:46:b3:77:3c:13:98:95:26:b2:
8d:b7:f3:10:f4:8b:e4:38:1d:d4:57:fb:0a:ef:78:
a7:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:3D:43:D3:FD:F8:FF:C6:CB:41:74:D4:DF:A7:E9:F2:9C:CE:32:D5
X509v3 Authority Key Identifier:
keyid:FE:42:B4:DA:0A:EA:57:8C:A2:7F:25:DE:B0:CF:ED:61:A8:0B:9E:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_kK02grqV4yifyXesM_tYagLnqI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0c/cc0750-f461-4d63-8ef2-68f32ea9f0a7/1/_kK02grqV4yifyXesM_tYagLnqI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:f8:f8:23:8c:df:4d:f6:16:dd:f7:5f:ad:2e:9c:19:ee:6e:
f5:52:93:69:07:09:c9:aa:7b:f7:96:ac:58:43:ac:8b:b5:18:
a1:7b:0d:8a:e1:2d:a6:89:05:8c:20:a1:03:32:db:b9:0d:f3:
d6:3c:10:d8:0b:98:09:22:ce:39:36:1f:c2:89:5c:86:e1:9b:
62:be:19:01:40:9f:bb:f2:76:1e:ca:53:e0:cb:7b:ac:1e:d4:
df:82:6a:7b:29:4b:5f:a9:99:fc:a3:c4:42:f1:87:93:e1:a8:
88:06:ab:50:05:ee:8d:b4:16:fa:d2:eb:b2:26:4d:44:d9:ac:
5a:51:0b:ee:29:16:df:85:88:af:d2:60:5a:0f:ae:36:d6:cb:
4c:fe:05:a7:39:5c:a8:22:81:e3:43:73:53:62:8a:51:51:fd:
85:a1:70:3b:0f:ca:6b:0b:9b:a9:a5:6f:57:2d:46:74:9c:9f:
30:66:77:e2:bd:3d:59:05:4b:e5:4a:6c:e7:9c:d3:27:c0:e6:
8a:10:0c:67:a5:08:eb:09:40:16:09:9d:2f:11:1d:68:ea:ed:
82:c2:cd:d7:09:e8:b6:bd:51:9b:56:8f:d5:2c:a6:a5:e6:5c:
8e:c1:33:e6:04:13:b0:54:93:ad:f2:da:7a:d1:9d:fa:ca:06:
ee:71:05:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtq7vxQLOqqMtuh3gTpueHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNDJiNGRhMGFlYTU3OGNhMjdmMjVkZWIwY2ZlZDYxYTgw
YjllYTIwHhcNMjUwNjE0MDkwMTAwWhcNMjUwNjE1MDkwMTAwWjAzMTEwLwYDVQQD
EyhhYzNkNDNkM2ZkZjhmZmM2Y2I0MTc0ZDRkZmE3ZTlmMjljY2UzMmQ1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkz21ft/6WvLuiNRxhxU/zr7LKt+K
pI3Ts3KdI4fqAmDT7ScLuZmWCCy9RRUm5+4sbeZ0Zvz+93BVpWJKm2HPOvsuByAM
BhoAfR+aJkA5GEiPCDfRwm4anfKVmug0eJSWDYQkrkCggtR+Eavm0lkdgAT6drPi
4SMcrt4fObj0PV83KdXkMa3TTwMQXOlAB8/dDNYnW1tSa3f+jYQANEKUVAN/1lpJ
9LdCClWlEjylDfrLgJkZ8L07SRfI6shUWTJIX7mwsS69OvwU6EdlucnbioUC1Z97
EOUVflaxA2Lav49PCZOnYXdGs3c8E5iVJrKNt/MQ9IvkOB3UV/sK73inzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKw9Q9P9+P/Gy0F01N+n6fKczjLVMB8GA1UdIwQY
MBaAFP5CtNoK6leMon8l3rDP7WGoC56iMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2tLMDJncnFWNHlpZnlYZXNNX3RZYWdMbnFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYy9jYzA3NTAtZjQ2MS00ZDYzLThlZjIt
NjhmMzJlYTlmMGE3LzEvX2tLMDJncnFWNHlpZnlYZXNNX3RZYWdMbnFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYy9jYzA3NTAtZjQ2MS00ZDYzLThlZjItNjhmMzJlYTlmMGE3
LzEvX2tLMDJncnFWNHlpZnlYZXNNX3RZYWdMbnFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALfj4I4zf
TfYW3fdfrS6cGe5u9VKTaQcJyap795asWEOsi7UYoXsNiuEtpokFjCChAzLbuQ3z
1jwQ2AuYCSLOOTYfwolchuGbYr4ZAUCfu/J2HspT4Mt7rB7U34JqeylLX6mZ/KPE
QvGHk+GoiAarUAXujbQW+tLrsiZNRNmsWlEL7ikW34WIr9JgWg+uNtbLTP4Fpzlc
qCKB40NzU2KKUVH9haFwOw/KawubqaVvVy1GdJyfMGZ34r09WQVL5Ups55zTJ8Dm
ihAMZ6UI6wlAFgmdLxEdaOrtgsLN1wnotr1Rm1aP1SympeZcjsEz5gQTsFSTrfLa
etGd+soG7nEF6A==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:50:30 2025 by rpki-client