Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
File: cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft (raw, json)
Hash identifier: geLa6dmn+NqE1hoFAvkCq3bAs2cUZ7pXkbDcGpgOpHM=
Subject key identifier: E9:33:22:AA:FD:94:6E:E7:38:16:C7:3A:F2:C8:5F:5B:38:73:D9:32
Authority key identifier: 70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
Certificate issuer: /CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Certificate serial: 019771BF530F0A3E27B4FB2C8E4657BB21F8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
Manifest number: 0901
Signing time: Sun 15 Jun 2025 04:00:53 +0000
Manifest this update: Sun 15 Jun 2025 04:00:53 +0000
Manifest next update: Mon 16 Jun 2025 04:00:53 +0000
Files and hashes: 1: cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl (hash: 26/ZMHRpyfGMCFBmY85qBclVz7GM4iyZSpdpmrASxXQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:53:0f:0a:3e:27:b4:fb:2c:8e:46:57:bb:21:f8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70e27a1ce77bcd4c6497e285bf2ba6f324439eb8
Validity
Not Before: Jun 15 04:00:53 2025 GMT
Not After : Jun 16 04:00:53 2025 GMT
Subject: CN=e93322aafd946ee73816c73af2c85f5b3873d932
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:ce:97:b7:f2:3b:c2:da:34:cd:08:27:db:58:
ec:65:fd:3f:90:13:a7:0e:67:4b:b4:b8:14:3e:35:
60:7c:82:8a:30:a4:91:24:88:49:81:3c:06:0e:c6:
44:61:7d:ba:3a:42:c4:3a:d5:a6:bb:8d:9a:26:43:
3f:04:38:aa:b8:f5:1c:1c:67:2c:28:d9:6d:c2:e6:
1f:73:58:54:bc:f9:c8:60:f1:43:ca:e4:8f:08:f1:
54:3a:cd:6c:32:9b:f2:86:70:e7:ae:25:41:0e:1f:
d7:3e:0d:3e:ea:be:31:56:b6:95:81:d2:92:a2:8f:
8d:db:7c:ab:c6:1e:ce:32:b7:a1:ab:29:3c:32:2d:
95:6d:6b:89:0e:c3:07:12:19:24:1a:c8:e8:8d:ae:
37:6f:0d:10:b2:83:16:5d:ed:fc:f2:a9:b8:2c:67:
9e:82:50:44:1e:2d:ea:42:84:d5:89:3e:4a:9f:96:
a6:bc:bc:0e:f6:22:6e:c0:a1:c4:d4:db:3f:33:50:
fa:b3:49:65:8d:3c:94:d6:23:7c:5d:7e:8a:c4:11:
24:c7:2a:29:b1:02:43:d8:e8:a0:ae:45:5a:48:a7:
8c:6f:c3:0b:ee:cf:11:3a:35:ce:18:22:3a:db:ac:
8d:b3:09:a8:02:fd:c8:c4:3e:8d:4c:64:64:21:03:
a7:f5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:33:22:AA:FD:94:6E:E7:38:16:C7:3A:F2:C8:5F:5B:38:73:D9:32
X509v3 Authority Key Identifier:
keyid:70:E2:7A:1C:E7:7B:CD:4C:64:97:E2:85:BF:2B:A6:F3:24:43:9E:B8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cOJ6HOd7zUxkl-KFvyum8yRDnrg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/b64040-98c9-4dbe-9dcc-0bec96787937/1/cOJ6HOd7zUxkl-KFvyum8yRDnrg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:c3:0c:0b:16:cb:46:61:ba:32:e4:23:7a:38:a3:e7:52:79:
36:41:ef:5a:85:95:c9:f8:b0:19:06:88:62:97:cf:38:42:bf:
62:c4:a4:94:2b:ae:c7:1e:65:e8:54:e0:e9:ee:53:1a:51:fd:
51:3b:c8:69:ae:12:97:b5:85:f9:56:99:cb:82:96:2b:e4:29:
c9:e4:b5:13:af:93:e0:f7:04:a2:87:f9:ce:15:2b:53:98:6a:
66:dc:65:4e:07:7f:67:56:70:37:c2:de:b6:89:75:98:9f:e9:
44:62:d2:b6:ad:01:e0:a2:77:23:06:13:0f:88:16:9e:bc:14:
37:70:f9:cf:3f:a8:74:8e:da:02:b2:ef:89:c9:5b:36:1f:a6:
0e:09:13:a2:2d:96:e1:af:a5:98:11:2c:55:10:a4:b8:f3:08:
fc:6a:7a:68:d9:dc:31:61:59:93:16:34:17:d7:c4:25:d4:b4:
bf:41:e6:c3:39:ea:15:ea:b3:bd:1d:84:5b:29:d0:c3:ca:f4:
1b:d3:3f:29:eb:5f:67:5f:0c:7b:d4:32:9d:37:93:db:a5:b3:
8a:30:43:b3:de:71:11:78:54:f2:a6:5f:b7:23:0e:c0:fb:c0:
57:61:29:cc:ec:2e:bb:70:27:06:2b:d8:47:cb:e1:16:d5:5e:
66:f5:eb:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxv1MPCj4ntPssjkZXuyH4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwZTI3YTFjZTc3YmNkNGM2NDk3ZTI4NWJmMmJhNmYzMjQ0
MzllYjgwHhcNMjUwNjE1MDQwMDUzWhcNMjUwNjE2MDQwMDUzWjAzMTEwLwYDVQQD
EyhlOTMzMjJhYWZkOTQ2ZWU3MzgxNmM3M2FmMmM4NWY1YjM4NzNkOTMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAps6Xt/I7wto0zQgn21jsZf0/kBOn
DmdLtLgUPjVgfIKKMKSRJIhJgTwGDsZEYX26OkLEOtWmu42aJkM/BDiquPUcHGcs
KNltwuYfc1hUvPnIYPFDyuSPCPFUOs1sMpvyhnDnriVBDh/XPg0+6r4xVraVgdKS
oo+N23yrxh7OMrehqyk8Mi2VbWuJDsMHEhkkGsjoja43bw0QsoMWXe388qm4LGee
glBEHi3qQoTViT5Kn5amvLwO9iJuwKHE1Ns/M1D6s0lljTyU1iN8XX6KxBEkxyop
sQJD2OigrkVaSKeMb8ML7s8ROjXOGCI626yNswmoAv3IxD6NTGRkIQOn9QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOkzIqr9lG7nOBbHOvLIX1s4c9kyMB8GA1UdIwQY
MBaAFHDiehzne81MZJfihb8rpvMkQ564MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2Mt
MGJlYzk2Nzg3OTM3LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni9iNjQwNDAtOThjOS00ZGJlLTlkY2MtMGJlYzk2Nzg3OTM3
LzEvY09KNkhPZDd6VXhrbC1LRnZ5dW04eVJEbnJnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsMMMCxbL
RmG6MuQjejij51J5NkHvWoWVyfiwGQaIYpfPOEK/YsSklCuuxx5l6FTg6e5TGlH9
UTvIaa4Sl7WF+VaZy4KWK+QpyeS1E6+T4PcEoof5zhUrU5hqZtxlTgd/Z1ZwN8Le
tol1mJ/pRGLStq0B4KJ3IwYTD4gWnrwUN3D5zz+odI7aArLviclbNh+mDgkToi2W
4a+lmBEsVRCkuPMI/Gp6aNncMWFZkxY0F9fEJdS0v0HmwznqFeqzvR2EWynQw8r0
G9M/KetfZ18Me9QynTeT26WzijBDs95xEXhU8qZftyMOwPvAV2EpzOwuu3AnBivY
R8vhFtVeZvXrnw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:33:57 2025 by rpki-client