Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
File: IaqfF_jMpH37krSQLSwrMgPb7aY.mft (raw, json)
Hash identifier: 5ysdyhIulJQ5dP73MKTGMaA/+vM0kdi7gsOdCn7cemw=
Subject key identifier: 9E:CC:BB:B9:B3:7C:B3:15:5A:6E:3E:73:13:1D:E3:72:08:84:6E:C8
Authority key identifier: 21:AA:9F:17:F8:CC:A4:7D:FB:92:B4:90:2D:2C:2B:32:03:DB:ED:A6
Certificate issuer: /CN=21aa9f17f8cca47dfb92b4902d2c2b3203dbeda6
Certificate serial: 0197696158D98CE57F0C8CA4BA5C0F8402D9
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
Manifest number: 0629
Signing time: Fri 13 Jun 2025 13:01:16 +0000
Manifest this update: Fri 13 Jun 2025 13:01:16 +0000
Manifest next update: Sat 14 Jun 2025 13:01:16 +0000
Files and hashes: 1: IaqfF_jMpH37krSQLSwrMgPb7aY.crl (hash: YtHOtCt5AuEqj3Ni0pwGxruW987HfBh2LnB9ZKzz5sA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.crl
rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:16 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:58:d9:8c:e5:7f:0c:8c:a4:ba:5c:0f:84:02:d9
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21aa9f17f8cca47dfb92b4902d2c2b3203dbeda6
Validity
Not Before: Jun 13 13:01:16 2025 GMT
Not After : Jun 14 13:01:16 2025 GMT
Subject: CN=9eccbbb9b37cb3155a6e3e73131de37208846ec8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:cc:b2:8a:77:54:66:5f:95:1b:45:96:2d:e4:
b9:80:98:fd:a7:a2:00:b6:b1:e9:ae:3c:80:25:ea:
56:3e:5b:7b:b3:5f:2c:bb:a9:27:c2:7c:69:4c:20:
1e:27:eb:e3:55:ce:20:32:92:0c:ea:55:a8:8b:c7:
69:9e:e9:0c:26:16:ad:b5:36:32:c2:0f:97:75:c1:
82:85:0e:db:48:44:3b:c2:4d:95:79:e3:9b:ac:c2:
a1:8b:8a:6f:87:b5:1a:ee:6a:1d:76:b6:63:3e:53:
a9:4d:1f:7c:ca:81:41:23:59:4a:6d:48:43:8a:1a:
ca:1a:d7:d8:d1:40:20:d3:78:18:86:7a:78:62:8f:
08:2a:ab:fb:d0:d7:be:b0:9d:d8:b4:24:61:f3:30:
2b:f8:f9:3f:3d:6c:67:50:ef:f2:95:22:5e:bb:14:
a5:fb:a9:fc:29:15:80:86:87:29:8a:4e:a2:03:17:
87:7d:72:df:67:29:23:f2:91:44:59:fb:bc:fe:99:
26:99:eb:35:af:5c:5b:ad:c0:74:1f:2a:50:52:fc:
8c:ee:64:54:82:72:fd:13:d6:da:6d:e2:09:62:49:
0e:6b:2b:55:ea:45:7d:51:46:a7:b4:33:d2:58:99:
fb:30:a8:f4:f3:8d:bb:04:9c:52:25:39:0c:65:5d:
72:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:CC:BB:B9:B3:7C:B3:15:5A:6E:3E:73:13:1D:E3:72:08:84:6E:C8
X509v3 Authority Key Identifier:
keyid:21:AA:9F:17:F8:CC:A4:7D:FB:92:B4:90:2D:2C:2B:32:03:DB:ED:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IaqfF_jMpH37krSQLSwrMgPb7aY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/26/d68dff-95e1-4c90-9ec6-55029280fec1/1/IaqfF_jMpH37krSQLSwrMgPb7aY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
50:43:50:5b:24:f8:a6:22:42:dc:e1:e7:6a:ad:e3:01:0c:38:
0e:dc:14:e7:30:a9:af:ad:35:e8:d6:62:64:28:6c:63:21:4e:
96:ea:ae:e9:8b:b5:f4:0e:d1:b7:18:2e:3c:67:16:06:ac:73:
06:86:3b:6c:27:61:86:59:29:94:f5:99:0b:36:7a:84:ac:19:
bb:cb:23:9c:0c:ae:be:fc:3e:08:d2:b2:07:f2:d6:e4:eb:2e:
40:ed:68:e9:33:38:af:54:cd:39:f9:de:23:90:f1:65:16:48:
6d:68:fa:e6:89:f8:60:35:09:9b:64:4b:69:38:39:ef:b9:6e:
07:0d:0a:72:6f:d9:72:c5:76:1a:36:47:3a:0b:af:76:51:54:
90:d8:4a:de:91:97:80:97:46:fd:d0:7d:7f:96:eb:76:1b:4f:
94:b8:57:fa:f8:0e:b7:06:b5:80:88:12:b7:81:98:b3:0c:ec:
3f:c3:72:b4:04:a8:57:4a:17:80:ad:39:90:89:4f:dd:d1:a8:
a0:40:0f:eb:e2:08:8f:7a:8f:8a:3e:77:ad:97:0f:65:97:eb:
fb:e5:6b:c8:29:c6:3d:d1:96:84:c4:07:99:54:a7:a5:87:39:
be:9c:c3:25:34:4b:08:fc:08:c4:2f:28:4c:af:32:71:86:6a:
ac:92:4a:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYVjZjOV/DIykulwPhALZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxYWE5ZjE3ZjhjY2E0N2RmYjkyYjQ5MDJkMmMyYjMyMDNk
YmVkYTYwHhcNMjUwNjEzMTMwMTE2WhcNMjUwNjE0MTMwMTE2WjAzMTEwLwYDVQQD
Eyg5ZWNjYmJiOWIzN2NiMzE1NWE2ZTNlNzMxMzFkZTM3MjA4ODQ2ZWM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArMyyindUZl+VG0WWLeS5gJj9p6IA
trHprjyAJepWPlt7s18su6knwnxpTCAeJ+vjVc4gMpIM6lWoi8dpnukMJhattTYy
wg+XdcGChQ7bSEQ7wk2VeeObrMKhi4pvh7Ua7moddrZjPlOpTR98yoFBI1lKbUhD
ihrKGtfY0UAg03gYhnp4Yo8IKqv70Ne+sJ3YtCRh8zAr+Pk/PWxnUO/ylSJeuxSl
+6n8KRWAhocpik6iAxeHfXLfZykj8pFEWfu8/pkmmes1r1xbrcB0HypQUvyM7mRU
gnL9E9babeIJYkkOaytV6kV9UUantDPSWJn7MKj08427BJxSJTkMZV1ySQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ7Mu7mzfLMVWm4+cxMd43IIhG7IMB8GA1UdIwQY
MBaAFCGqnxf4zKR9+5K0kC0sKzID2+2mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWFxZkZfak1wSDM3a3JTUUxTd3JNZ1BiN2FZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNi9kNjhkZmYtOTVlMS00YzkwLTllYzYt
NTUwMjkyODBmZWMxLzEvSWFxZkZfak1wSDM3a3JTUUxTd3JNZ1BiN2FZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNi9kNjhkZmYtOTVlMS00YzkwLTllYzYtNTUwMjkyODBmZWMx
LzEvSWFxZkZfak1wSDM3a3JTUUxTd3JNZ1BiN2FZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUENQWyT4
piJC3OHnaq3jAQw4DtwU5zCpr6016NZiZChsYyFOluqu6Yu19A7RtxguPGcWBqxz
BoY7bCdhhlkplPWZCzZ6hKwZu8sjnAyuvvw+CNKyB/LW5OsuQO1o6TM4r1TNOfne
I5DxZRZIbWj65on4YDUJm2RLaTg577luBw0Kcm/ZcsV2GjZHOguvdlFUkNhK3pGX
gJdG/dB9f5brdhtPlLhX+vgOtwa1gIgSt4GYswzsP8NytASoV0oXgK05kIlP3dGo
oEAP6+IIj3qPij53rZcPZZfr++VryCnGPdGWhMQHmVSnpYc5vpzDJTRLCPwIxC8o
TK8ycYZqrJJKnQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:58:09 2025 by rpki-client