Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
File: eRmmrv08qPUPyPNKs9FHklbbnXg.mft (raw, json)
Hash identifier: L1+inxZ75ji8WZc13f4vWH4/Scml9nHwfG/9HmAEDM4=
Subject key identifier: 30:30:19:E2:FE:70:AE:F6:87:DB:03:19:F6:58:CE:86:CB:B9:11:F3
Authority key identifier: 79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
Certificate issuer: /CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Certificate serial: 01976D3DABC2EE12408B3E4E8927B9E7A104
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
Manifest number: 151D
Signing time: Sat 14 Jun 2025 07:00:47 +0000
Manifest this update: Sat 14 Jun 2025 07:00:47 +0000
Manifest next update: Sun 15 Jun 2025 07:00:47 +0000
Files and hashes: 1: eRmmrv08qPUPyPNKs9FHklbbnXg.crl (hash: pToE5A+bWkkNMzrnVIINi+yOyj5z3CrNZYe7DOvWIVg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:ab:c2:ee:12:40:8b:3e:4e:89:27:b9:e7:a1:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7919a6aefd3ca8f50fc8f34ab3d1479256db9d78
Validity
Not Before: Jun 14 07:00:47 2025 GMT
Not After : Jun 15 07:00:47 2025 GMT
Subject: CN=303019e2fe70aef687db0319f658ce86cbb911f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:20:ac:8f:22:f1:38:b9:9f:ed:c0:a2:50:06:
3a:e0:36:b6:3b:fc:59:15:44:db:9b:09:58:4b:2f:
b5:63:62:ae:0a:6e:bb:dc:e9:e4:44:40:a8:74:07:
69:61:ac:e3:5c:dd:aa:08:99:c2:3c:26:d7:2e:f8:
d9:df:87:dd:72:0b:89:fb:b1:1b:f2:34:37:c9:75:
f8:88:1a:87:d1:61:90:52:ef:36:32:fb:b0:25:d4:
cd:fd:5e:0a:1c:d2:d2:2f:48:25:ed:73:ee:d2:3a:
1b:ec:8d:1f:2e:4f:b9:60:38:0c:07:07:4b:ad:89:
df:1f:a5:24:75:3f:6a:45:ed:55:36:07:b9:c0:99:
74:fc:22:71:2f:c1:37:ab:c6:99:63:09:ed:fe:5f:
62:7f:e9:3f:ca:98:6b:e4:c6:c4:94:f5:be:45:87:
53:dc:83:51:00:ff:c5:aa:68:57:19:e6:ac:db:a0:
0f:61:7f:2e:b1:d5:fd:c7:4b:fe:30:06:6e:be:02:
a6:8f:1c:6b:84:4e:2b:d9:54:95:63:e2:fc:d2:59:
79:75:91:59:6f:cc:4a:55:7d:87:49:d9:65:94:70:
43:8b:2a:3c:23:82:9b:67:2a:22:3d:23:0b:3a:56:
3e:39:e6:5e:e1:ae:5e:df:40:bc:38:9b:bf:2c:4d:
03:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
30:30:19:E2:FE:70:AE:F6:87:DB:03:19:F6:58:CE:86:CB:B9:11:F3
X509v3 Authority Key Identifier:
keyid:79:19:A6:AE:FD:3C:A8:F5:0F:C8:F3:4A:B3:D1:47:92:56:DB:9D:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/eRmmrv08qPUPyPNKs9FHklbbnXg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/150a36-e59e-48da-ac60-911e83904ca1/1/eRmmrv08qPUPyPNKs9FHklbbnXg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:5d:87:87:a8:f0:11:21:96:a0:17:23:f7:12:eb:4c:6c:42:
bd:f0:f6:76:7b:40:50:dc:47:a1:ec:3a:bb:69:97:e2:20:e2:
bd:05:08:42:3c:af:d6:70:57:79:cd:7b:54:03:23:12:bc:ca:
ac:0a:da:b9:b3:b6:84:4e:8d:2f:88:74:88:db:ff:42:2a:60:
c0:3e:c5:7f:9e:9a:ff:58:d7:59:11:e9:b5:e1:7a:89:7b:c1:
a0:ed:4d:d6:04:4c:59:7c:64:ee:e6:fa:40:13:ef:c9:75:39:
b8:c2:15:ef:02:20:01:d8:31:b9:f4:82:b8:71:ad:4a:92:91:
2d:aa:bc:18:94:a4:cf:87:7c:24:ec:73:5e:25:4a:51:69:bb:
f0:26:4d:aa:4c:61:ea:1a:b8:29:91:6a:e8:c5:72:66:d2:4f:
f4:10:cc:4f:50:57:2e:f5:ea:49:e4:93:4e:b3:df:ea:1f:69:
c5:55:39:3d:fb:92:44:08:21:64:ce:eb:b6:04:83:40:ad:09:
25:c8:91:6e:22:0e:12:73:ec:6f:90:62:56:8d:a3:72:11:79:
aa:89:58:e5:7f:e2:8a:fb:a6:c8:f9:39:ce:0c:57:21:e9:a3:
28:48:c2:2a:48:b6:c7:d6:55:c0:72:fc:9c:c9:54:aa:3a:ba:
a5:40:b5:0f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPavC7hJAiz5OiSe556EEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc5MTlhNmFlZmQzY2E4ZjUwZmM4ZjM0YWIzZDE0NzkyNTZk
YjlkNzgwHhcNMjUwNjE0MDcwMDQ3WhcNMjUwNjE1MDcwMDQ3WjAzMTEwLwYDVQQD
EygzMDMwMTllMmZlNzBhZWY2ODdkYjAzMTlmNjU4Y2U4NmNiYjkxMWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmCCsjyLxOLmf7cCiUAY64Da2O/xZ
FUTbmwlYSy+1Y2KuCm673OnkRECodAdpYazjXN2qCJnCPCbXLvjZ34fdcguJ+7Eb
8jQ3yXX4iBqH0WGQUu82MvuwJdTN/V4KHNLSL0gl7XPu0job7I0fLk+5YDgMBwdL
rYnfH6UkdT9qRe1VNge5wJl0/CJxL8E3q8aZYwnt/l9if+k/yphr5MbElPW+RYdT
3INRAP/FqmhXGeas26APYX8usdX9x0v+MAZuvgKmjxxrhE4r2VSVY+L80ll5dZFZ
b8xKVX2HSdlllHBDiyo8I4KbZyoiPSMLOlY+OeZe4a5e30C8OJu/LE0DJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDAwGeL+cK72h9sDGfZYzobLuRHzMB8GA1UdIwQY
MBaAFHkZpq79PKj1D8jzSrPRR5JW2514MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAt
OTExZTgzOTA0Y2ExLzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82MC8xNTBhMzYtZTU5ZS00OGRhLWFjNjAtOTExZTgzOTA0Y2Ex
LzEvZVJtbXJ2MDhxUFVQeVBOS3M5RkhrbGJiblhnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtF2Hh6jw
ESGWoBcj9xLrTGxCvfD2dntAUNxHoew6u2mX4iDivQUIQjyv1nBXec17VAMjErzK
rAraubO2hE6NL4h0iNv/QipgwD7Ff56a/1jXWRHpteF6iXvBoO1N1gRMWXxk7ub6
QBPvyXU5uMIV7wIgAdgxufSCuHGtSpKRLaq8GJSkz4d8JOxzXiVKUWm78CZNqkxh
6hq4KZFq6MVyZtJP9BDMT1BXLvXqSeSTTrPf6h9pxVU5PfuSRAghZM7rtgSDQK0J
JciRbiIOEnPsb5BiVo2jchF5qolY5X/iivumyPk5zgxXIemjKEjCKki2x9ZVwHL8
nMlUqjq6pUC1Dw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:30:12 2025 by rpki-client