Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
File: elBBBN9nzv6N7h0YqWhQqaZMLJU.mft (raw, json)
Hash identifier: 37ZZxYYYD2p0JPx/KYY5QHEQkBzS8+2nelRQ+qKROsw=
Subject key identifier: BD:4E:AD:28:6C:1E:1D:50:FD:A3:17:44:A3:80:D0:B6:F0:34:9D:B0
Authority key identifier: 7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
Certificate issuer: /CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Certificate serial: 01977DC35422BD1DABFEE5A4ABCF01DDADC8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
Manifest number: 0596
Signing time: Tue 17 Jun 2025 12:00:42 +0000
Manifest this update: Tue 17 Jun 2025 12:00:42 +0000
Manifest next update: Wed 18 Jun 2025 12:00:42 +0000
Files and hashes: 1: elBBBN9nzv6N7h0YqWhQqaZMLJU.crl (hash: EzxPVGcYZhTtUi5hO93g5uZ3XNjzaRyuTmlbbCdE6Cc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 12:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7d:c3:54:22:bd:1d:ab:fe:e5:a4:ab:cf:01:dd:ad:c8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7a504104df67cefe8dee1d18a96850a9a64c2c95
Validity
Not Before: Jun 17 12:00:42 2025 GMT
Not After : Jun 18 12:00:42 2025 GMT
Subject: CN=bd4ead286c1e1d50fda31744a380d0b6f0349db0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:3c:f7:05:02:90:84:48:00:56:22:7a:21:35:
59:0f:3b:38:a6:8c:f9:fe:4d:02:97:bf:e4:e3:87:
40:e3:b9:8d:d9:88:43:91:8b:ca:6a:d6:30:8c:e1:
98:27:68:5d:62:30:6c:41:cf:88:b4:fa:e0:2c:0b:
ff:30:6d:2a:e2:75:1d:c0:cf:04:fe:1c:3a:3e:2c:
1c:67:9a:ed:74:05:ef:33:41:45:6a:c1:05:47:53:
7b:fb:21:0f:a7:6d:78:4d:48:4c:9b:2c:02:88:2f:
0e:0d:0d:7e:76:ed:6a:d1:eb:e1:95:d1:08:f1:b1:
f8:99:60:42:13:d9:d9:ca:1c:e3:0d:1f:73:eb:1d:
09:81:d9:ac:c7:2b:21:87:24:3f:04:35:eb:85:c5:
fa:2c:72:ed:bb:f2:1b:d0:1f:00:21:61:a1:6c:82:
82:7c:02:51:e7:62:13:c0:6f:51:de:74:c2:51:38:
2a:d0:c6:2a:6d:73:63:72:b2:19:9d:c7:73:41:f6:
69:a9:c8:65:b1:0b:cd:ab:18:e1:84:62:13:eb:dd:
a3:d6:85:0e:61:79:8b:fe:e6:72:c8:ac:50:d2:4b:
fa:d9:6f:13:7b:6f:4c:06:23:11:e5:ef:bc:59:6f:
0e:02:0c:85:db:b8:a7:c1:f8:d8:15:e6:1a:8d:56:
0e:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BD:4E:AD:28:6C:1E:1D:50:FD:A3:17:44:A3:80:D0:B6:F0:34:9D:B0
X509v3 Authority Key Identifier:
keyid:7A:50:41:04:DF:67:CE:FE:8D:EE:1D:18:A9:68:50:A9:A6:4C:2C:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/elBBBN9nzv6N7h0YqWhQqaZMLJU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/5b87db-c763-489a-b18f-5f409364997b/1/elBBBN9nzv6N7h0YqWhQqaZMLJU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:b0:91:33:24:c1:7e:1a:ab:ee:64:67:ae:88:97:a3:c0:1b:
74:2b:bd:87:82:93:a5:61:16:42:e3:b1:98:6b:dc:9b:7b:f1:
30:65:aa:a3:19:5b:52:8a:da:66:14:f7:d0:33:9d:41:bd:86:
6c:81:4b:77:0a:d6:9a:3f:dc:9f:e3:33:9b:ce:b9:f6:ad:a6:
75:90:7b:44:07:8a:ea:68:9d:e7:73:42:a5:52:b8:8f:fd:14:
d4:c7:05:d5:39:ec:29:2e:bd:92:e3:16:bd:ed:d7:d5:f3:98:
4e:5f:2d:aa:00:e5:31:1e:25:39:56:42:bf:cd:10:28:88:49:
39:99:22:d1:2c:a9:e4:84:ef:7b:94:e7:04:f5:01:c9:24:7b:
dc:e8:83:d9:06:e3:0c:9b:b6:d5:d7:18:30:94:fb:03:aa:c0:
06:b4:54:c5:66:5c:19:a8:f7:47:c0:df:79:44:63:fd:ce:69:
ef:87:6e:f2:f1:31:17:8b:08:54:8c:4f:0f:17:66:d0:83:33:
d6:36:87:95:54:31:d7:1a:fc:03:5c:41:0b:8d:cb:5d:9b:16:
8e:d7:ab:a0:62:e5:65:04:87:7a:0b:7d:29:f3:86:d5:e4:45:
d2:b7:f5:60:ae:d2:fd:3b:42:36:f3:1e:6d:37:27:50:52:d6:
a8:23:54:e6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd9w1QivR2r/uWkq88B3a3IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdhNTA0MTA0ZGY2N2NlZmU4ZGVlMWQxOGE5Njg1MGE5YTY0
YzJjOTUwHhcNMjUwNjE3MTIwMDQyWhcNMjUwNjE4MTIwMDQyWjAzMTEwLwYDVQQD
EyhiZDRlYWQyODZjMWUxZDUwZmRhMzE3NDRhMzgwZDBiNmYwMzQ5ZGIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2jz3BQKQhEgAViJ6ITVZDzs4poz5
/k0Cl7/k44dA47mN2YhDkYvKatYwjOGYJ2hdYjBsQc+ItPrgLAv/MG0q4nUdwM8E
/hw6PiwcZ5rtdAXvM0FFasEFR1N7+yEPp214TUhMmywCiC8ODQ1+du1q0evhldEI
8bH4mWBCE9nZyhzjDR9z6x0JgdmsxyshhyQ/BDXrhcX6LHLtu/Ib0B8AIWGhbIKC
fAJR52ITwG9R3nTCUTgq0MYqbXNjcrIZncdzQfZpqchlsQvNqxjhhGIT692j1oUO
YXmL/uZyyKxQ0kv62W8Te29MBiMR5e+8WW8OAgyF27inwfjYFeYajVYOVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL1OrShsHh1Q/aMXRKOA0LbwNJ2wMB8GA1UdIwQY
MBaAFHpQQQTfZ87+je4dGKloUKmmTCyVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZWxCQkJOOW56djZON2gwWXFXaFFxYVpNTEpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS81Yjg3ZGItYzc2My00ODlhLWIxOGYt
NWY0MDkzNjQ5OTdiLzEvZWxCQkJOOW56djZON2gwWXFXaFFxYVpNTEpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS81Yjg3ZGItYzc2My00ODlhLWIxOGYtNWY0MDkzNjQ5OTdi
LzEvZWxCQkJOOW56djZON2gwWXFXaFFxYVpNTEpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB7CRMyTB
fhqr7mRnroiXo8AbdCu9h4KTpWEWQuOxmGvcm3vxMGWqoxlbUoraZhT30DOdQb2G
bIFLdwrWmj/cn+Mzm8659q2mdZB7RAeK6mid53NCpVK4j/0U1McF1TnsKS69kuMW
ve3X1fOYTl8tqgDlMR4lOVZCv80QKIhJOZki0Syp5ITve5TnBPUBySR73OiD2Qbj
DJu21dcYMJT7A6rABrRUxWZcGaj3R8DfeURj/c5p74du8vExF4sIVIxPDxdm0IMz
1jaHlVQx1xr8A1xBC43LXZsWjteroGLlZQSHegt9KfOG1eRF0rf1YK7S/TtCNvMe
bTcnUFLWqCNU5g==
-----END CERTIFICATE-----
Generated at Tue Jun 17 22:24:55 2025 by rpki-client