Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
File: 41wFcLO3dz0eEYgufdLGJVN-sJw.mft (raw, json)
Hash identifier: cq3mH3EhSmJU+DGI3G8I0CjDOMULpgMYsm8kQWiuNs0=
Subject key identifier: D3:51:4F:F6:3D:A8:70:92:02:E1:CE:03:B5:7C:EE:63:44:44:08:9D
Authority key identifier: E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
Certificate issuer: /CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Certificate serial: 0197846A3D88BAFFC4E30A6859C65D7374A6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
Manifest number: 12D3
Signing time: Wed 18 Jun 2025 19:00:44 +0000
Manifest this update: Wed 18 Jun 2025 19:00:44 +0000
Manifest next update: Thu 19 Jun 2025 19:00:44 +0000
Files and hashes: 1: 41wFcLO3dz0eEYgufdLGJVN-sJw.crl (hash: zjfxYX9XfcYthR/sG9NC/T00BWQSXz5c4zOM1xM+UZk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:84:6a:3d:88:ba:ff:c4:e3:0a:68:59:c6:5d:73:74:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e35c0570b3b7773d1e11882e7dd2c625537eb09c
Validity
Not Before: Jun 18 19:00:44 2025 GMT
Not After : Jun 19 19:00:44 2025 GMT
Subject: CN=d3514ff63da8709202e1ce03b57cee634444089d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:58:21:19:66:96:6a:e9:64:a4:bd:39:a2:62:
cc:6b:79:8e:64:09:c0:0f:8c:30:f1:39:44:ef:9e:
f5:c2:52:64:c2:18:2d:c9:ca:cf:2a:bd:28:91:ad:
dc:a3:28:7c:65:20:16:27:7c:d1:ca:c2:ae:dd:5f:
d9:60:0e:da:33:40:93:01:95:2e:80:9b:54:aa:10:
20:cd:63:34:ff:0a:ba:52:4f:8c:be:1f:00:1d:83:
af:24:7d:a3:23:1d:36:0f:3a:0d:79:55:f7:44:3f:
c9:7e:43:36:39:e3:ef:cb:01:79:4f:40:8f:42:85:
bc:01:92:64:d6:4e:39:40:51:51:68:7a:65:c7:1b:
12:6c:c2:cd:ac:54:f5:91:d2:37:09:7b:28:93:98:
ab:bc:77:c9:19:bd:9b:98:40:62:1d:51:5c:f3:9e:
db:47:b6:7b:d6:e5:05:98:23:1e:41:9f:8c:e8:14:
4e:bb:a5:d2:19:af:2d:fa:99:d0:c9:2a:f7:e6:4b:
a4:a3:d4:79:9f:8c:36:ba:63:00:0d:12:61:8b:cc:
0d:9a:24:32:dc:f2:8b:ff:fe:58:61:7e:d8:3a:52:
e0:1f:9d:9f:ec:98:f3:44:f7:d1:c6:a8:58:07:8b:
1c:a2:1a:c0:54:22:b2:44:65:44:68:70:44:2f:9b:
58:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D3:51:4F:F6:3D:A8:70:92:02:E1:CE:03:B5:7C:EE:63:44:44:08:9D
X509v3 Authority Key Identifier:
keyid:E3:5C:05:70:B3:B7:77:3D:1E:11:88:2E:7D:D2:C6:25:53:7E:B0:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/41wFcLO3dz0eEYgufdLGJVN-sJw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/c2f579-7501-4a5b-8dd7-f69128a91983/1/41wFcLO3dz0eEYgufdLGJVN-sJw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:08:0b:22:3d:e7:c6:9b:89:a0:38:0e:26:b3:67:f7:8a:ab:
d8:28:12:9d:1a:57:b0:53:0c:ab:76:b4:29:57:8b:9b:51:4e:
f0:e3:5b:89:fb:bd:b6:79:7a:96:58:7c:39:dc:21:56:3c:14:
d7:19:17:ae:6e:68:4e:81:3c:66:19:82:af:6f:84:f4:14:ed:
44:04:bd:1c:63:f7:69:c4:63:db:5b:ff:1a:03:e6:c6:2c:a3:
78:64:78:ee:a5:8e:66:ad:2c:f6:44:70:4c:7d:77:3d:18:e8:
71:31:6f:87:2c:54:71:5c:82:1d:a9:d4:50:cb:a9:7f:49:95:
43:49:f0:f1:08:7b:05:0f:8e:43:0b:c7:5e:58:64:0d:01:d5:
c2:a5:ef:7d:a3:8d:09:5e:49:68:77:84:e9:1d:4a:d6:c5:3b:
27:cd:e9:36:c7:83:27:42:40:84:c0:1e:11:c6:74:39:e6:af:
33:f1:e7:bc:64:11:0e:df:d6:4e:d6:9e:5a:b9:4b:5c:f4:06:
ef:ed:03:50:97:ca:6b:2a:1a:63:3c:eb:8c:9f:78:56:03:c1:
2a:11:14:65:6c:f1:39:1d:fc:62:14:0a:f6:75:e1:ef:98:b1:
17:f1:46:80:0c:a5:0b:f7:45:49:14:f7:de:34:f6:32:97:67:
12:ae:24:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeEaj2Iuv/E4wpoWcZdc3SmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzNWMwNTcwYjNiNzc3M2QxZTExODgyZTdkZDJjNjI1NTM3
ZWIwOWMwHhcNMjUwNjE4MTkwMDQ0WhcNMjUwNjE5MTkwMDQ0WjAzMTEwLwYDVQQD
EyhkMzUxNGZmNjNkYTg3MDkyMDJlMWNlMDNiNTdjZWU2MzQ0NDQwODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuVghGWaWaulkpL05omLMa3mOZAnA
D4ww8TlE7571wlJkwhgtycrPKr0oka3coyh8ZSAWJ3zRysKu3V/ZYA7aM0CTAZUu
gJtUqhAgzWM0/wq6Uk+Mvh8AHYOvJH2jIx02DzoNeVX3RD/JfkM2OePvywF5T0CP
QoW8AZJk1k45QFFRaHplxxsSbMLNrFT1kdI3CXsok5irvHfJGb2bmEBiHVFc857b
R7Z71uUFmCMeQZ+M6BROu6XSGa8t+pnQySr35kuko9R5n4w2umMADRJhi8wNmiQy
3PKL//5YYX7YOlLgH52f7JjzRPfRxqhYB4scohrAVCKyRGVEaHBEL5tYZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNNRT/Y9qHCSAuHOA7V87mNERAidMB8GA1UdIwQY
MBaAFONcBXCzt3c9HhGILn3SxiVTfrCcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDF3RmNMTzNkejBlRVlndWZkTEdKVk4tc0p3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni9jMmY1NzktNzUwMS00YTViLThkZDct
ZjY5MTI4YTkxOTgzLzEvNDF3RmNMTzNkejBlRVlndWZkTEdKVk4tc0p3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni9jMmY1NzktNzUwMS00YTViLThkZDctZjY5MTI4YTkxOTgz
LzEvNDF3RmNMTzNkejBlRVlndWZkTEdKVk4tc0p3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtAgLIj3n
xpuJoDgOJrNn94qr2CgSnRpXsFMMq3a0KVeLm1FO8ONbifu9tnl6llh8OdwhVjwU
1xkXrm5oToE8ZhmCr2+E9BTtRAS9HGP3acRj21v/GgPmxiyjeGR47qWOZq0s9kRw
TH13PRjocTFvhyxUcVyCHanUUMupf0mVQ0nw8Qh7BQ+OQwvHXlhkDQHVwqXvfaON
CV5JaHeE6R1K1sU7J83pNseDJ0JAhMAeEcZ0OeavM/HnvGQRDt/WTtaeWrlLXPQG
7+0DUJfKayoaYzzrjJ94VgPBKhEUZWzxOR38YhQK9nXh75ixF/FGgAylC/dFSRT3
3jT2MpdnEq4kJA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 00:20:48 2025 by rpki-client