Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
File: c-9b03Yu9g-njtVfVE-joFE_2EI.mft (raw, json)
Hash identifier: vTRaRVsS1GpwmaeBP+WMojYzh5Zp871MGd06g8O5oyg=
Subject key identifier: 85:73:40:7C:C0:3F:92:E3:1D:87:D8:C4:DB:8D:A3:12:19:14:6E:0F
Authority key identifier: 73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
Certificate issuer: /CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Certificate serial: 01976D3DA9521FAEF931C033025F31B15B94
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
Manifest number: 1095
Signing time: Sat 14 Jun 2025 07:00:46 +0000
Manifest this update: Sat 14 Jun 2025 07:00:46 +0000
Manifest next update: Sun 15 Jun 2025 07:00:46 +0000
Files and hashes: 1: c-9b03Yu9g-njtVfVE-joFE_2EI.crl (hash: Vnwo1c1faEa2XvkLUKveIYCK0cq5PbNawLqefY3kAVM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:a9:52:1f:ae:f9:31:c0:33:02:5f:31:b1:5b:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Validity
Not Before: Jun 14 07:00:46 2025 GMT
Not After : Jun 15 07:00:46 2025 GMT
Subject: CN=8573407cc03f92e31d87d8c4db8da31219146e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:d5:9e:1f:dd:00:12:37:06:6f:cf:4d:a9:2b:
09:e6:c2:6a:44:db:0c:89:69:27:a3:f9:f0:37:84:
6c:84:3f:4a:17:c3:65:d1:d4:e8:ec:5d:23:9f:48:
c8:dd:96:cb:81:fd:e5:f6:d6:d5:34:f7:2f:36:ef:
e0:e2:70:68:83:24:0f:62:f1:3b:ce:74:25:ca:fa:
2d:3a:be:f0:b5:c0:a2:f3:12:ec:52:8e:34:fd:02:
d7:7d:4e:50:0e:78:f7:60:10:5e:ab:de:18:f0:59:
14:e4:38:f0:86:6e:a0:b4:f1:20:4c:33:cb:fe:bd:
ea:a8:80:63:9e:b5:60:b1:f9:2a:4f:03:30:23:e3:
c7:26:7e:20:b5:f6:6e:b8:0e:c2:72:68:0e:a4:db:
0f:43:a8:28:b8:e4:1f:53:cd:e0:d3:e6:0f:46:cc:
2c:e6:9e:fc:0b:ca:04:04:ec:27:91:f1:b5:9c:07:
3a:80:fc:1e:1f:39:af:1e:67:58:68:4f:d0:2f:9c:
05:2c:ad:bb:f7:2e:aa:f7:63:bf:01:7d:71:90:2b:
7d:8a:7d:61:91:5e:ad:6d:c0:38:80:ec:e5:c7:bc:
58:4b:be:77:ee:4c:bc:69:dc:83:bf:ef:ac:ab:f9:
a7:d8:2b:97:b4:da:48:3e:67:eb:d9:4a:0c:b4:73:
a1:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:73:40:7C:C0:3F:92:E3:1D:87:D8:C4:DB:8D:A3:12:19:14:6E:0F
X509v3 Authority Key Identifier:
keyid:73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:f0:98:c0:72:97:42:ba:f1:db:83:07:e6:b7:e5:fd:73:86:
ba:42:5a:c7:fe:75:fd:b6:e1:6f:6c:62:a6:62:11:d1:0e:13:
8e:4a:9f:1f:b4:05:d8:fe:4f:9b:ea:17:83:ec:a6:db:3a:dc:
3a:c4:67:8a:e5:fc:2f:ef:46:3c:ac:d1:83:0b:6b:79:f9:11:
1c:72:59:79:78:90:73:e8:00:8a:93:a4:bf:8d:8d:28:c5:65:
45:3f:23:1e:e3:b8:57:7d:23:c0:15:46:c6:a1:12:fe:d5:86:
e9:5f:fa:bf:90:15:5b:1a:ff:e4:5a:c1:d0:ef:73:e3:de:8e:
c7:b5:b2:20:04:40:a5:98:ec:d8:2c:b5:3c:80:2d:cd:e0:42:
61:9a:11:b9:76:40:46:9d:b3:36:d2:16:d2:f6:62:96:37:03:
62:7d:ab:40:12:e1:cc:0c:b3:e4:b2:d7:b2:67:18:6d:6f:87:
3c:0a:45:ac:a8:17:dd:d2:2d:4f:ea:47:7d:8a:25:5e:54:d1:
60:af:71:9c:27:0b:a2:e1:1d:f6:ea:02:5a:41:18:c0:1e:a6:
72:88:d8:a5:71:c3:15:37:f3:52:3a:19:de:30:03:d3:61:fe:
d5:cd:ab:c2:8c:40:07:29:94:2e:91:95:46:70:aa:c2:d7:a3:
2d:12:9f:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPalSH675McAzAl8xsVuUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZWY1YmQzNzYyZWY2MGZhNzhlZDU1ZjU0NGZhM2EwNTEz
ZmQ4NDIwHhcNMjUwNjE0MDcwMDQ2WhcNMjUwNjE1MDcwMDQ2WjAzMTEwLwYDVQQD
Eyg4NTczNDA3Y2MwM2Y5MmUzMWQ4N2Q4YzRkYjhkYTMxMjE5MTQ2ZTBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApNWeH90AEjcGb89NqSsJ5sJqRNsM
iWkno/nwN4RshD9KF8Nl0dTo7F0jn0jI3ZbLgf3l9tbVNPcvNu/g4nBogyQPYvE7
znQlyvotOr7wtcCi8xLsUo40/QLXfU5QDnj3YBBeq94Y8FkU5Djwhm6gtPEgTDPL
/r3qqIBjnrVgsfkqTwMwI+PHJn4gtfZuuA7CcmgOpNsPQ6gouOQfU83g0+YPRsws
5p78C8oEBOwnkfG1nAc6gPweHzmvHmdYaE/QL5wFLK279y6q92O/AX1xkCt9in1h
kV6tbcA4gOzlx7xYS7537ky8adyDv++sq/mn2CuXtNpIPmfr2UoMtHOhDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVzQHzAP5LjHYfYxNuNoxIZFG4PMB8GA1UdIwQY
MBaAFHPvW9N2LvYPp47VX1RPo6BRP9hCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYy05YjAzWXU5Zy1uanRWZlZFLWpvRkVfMkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hMTNjYmMtMWRiNC00YjIyLWJhZjQt
YjU0NmEyZDIwOGYyLzEvYy05YjAzWXU5Zy1uanRWZlZFLWpvRkVfMkVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hMTNjYmMtMWRiNC00YjIyLWJhZjQtYjU0NmEyZDIwOGYy
LzEvYy05YjAzWXU5Zy1uanRWZlZFLWpvRkVfMkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmfCYwHKX
Qrrx24MH5rfl/XOGukJax/51/bbhb2xipmIR0Q4TjkqfH7QF2P5Pm+oXg+ym2zrc
OsRniuX8L+9GPKzRgwtrefkRHHJZeXiQc+gAipOkv42NKMVlRT8jHuO4V30jwBVG
xqES/tWG6V/6v5AVWxr/5FrB0O9z496Ox7WyIARApZjs2Cy1PIAtzeBCYZoRuXZA
Rp2zNtIW0vZiljcDYn2rQBLhzAyz5LLXsmcYbW+HPApFrKgX3dItT+pHfYolXlTR
YK9xnCcLouEd9uoCWkEYwB6mcojYpXHDFTfzUjoZ3jAD02H+1c2rwoxABymULpGV
RnCqwtejLRKfsg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:50:06 2025 by rpki-client