Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
File: N28vTtsjIwxkt5O0GVfvSjI-PFM.mft (raw, json)
Hash identifier: SZzQWvlmtFk+57S7QQotvPTMqrbO8zsZIXWRflI6OCo=
Subject key identifier: D1:0B:DE:CE:FE:6D:F0:5D:7A:C3:1E:23:93:52:4E:B3:1F:06:78:25
Authority key identifier: 37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
Certificate issuer: /CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Certificate serial: 019768BC06267B0EEF8AB2A610561DD1767A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
Manifest number: 1038
Signing time: Fri 13 Jun 2025 10:00:42 +0000
Manifest this update: Fri 13 Jun 2025 10:00:42 +0000
Manifest next update: Sat 14 Jun 2025 10:00:42 +0000
Files and hashes: 1: N28vTtsjIwxkt5O0GVfvSjI-PFM.crl (hash: bQNrOiEPDKXsNFcQOl+S4O61QGrq1iYtBcrNJ8/cJqA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:06:26:7b:0e:ef:8a:b2:a6:10:56:1d:d1:76:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=376f2f4edb23230c64b793b41957ef4a323e3c53
Validity
Not Before: Jun 13 10:00:42 2025 GMT
Not After : Jun 14 10:00:42 2025 GMT
Subject: CN=d10bdecefe6df05d7ac31e2393524eb31f067825
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:df:1c:8e:d7:92:03:75:8c:c0:ce:b3:0c:68:
66:7e:0a:52:62:a9:24:34:1a:86:bd:35:4e:01:c0:
de:9e:aa:f0:7f:9d:11:16:72:26:3f:6e:1e:70:61:
91:a6:44:c3:19:23:78:fd:9d:28:d4:65:61:cf:10:
ab:bb:b7:ef:eb:db:a7:58:90:df:44:98:de:b2:82:
41:3b:c1:c8:9b:4c:37:59:f1:28:33:76:bb:12:8c:
ed:85:06:93:cb:a7:5f:6a:90:5f:90:e7:88:4d:18:
9f:5e:f8:55:e6:45:72:50:0c:8a:3e:5d:eb:ca:71:
a1:6c:f6:7e:b0:75:8f:e1:d5:6d:1c:bf:92:30:c2:
25:5e:3a:ab:9c:f4:83:ff:72:50:2d:bf:28:d0:a0:
3c:bf:74:b7:c9:8b:94:2f:93:47:0a:29:dd:71:fd:
a2:a4:92:97:cf:c3:a2:dd:71:63:ba:8d:3d:a0:48:
e3:30:60:c1:21:b9:97:83:d1:03:92:9d:6c:ce:62:
14:50:06:a5:00:15:df:64:58:8b:46:72:af:60:6c:
4f:0a:c9:81:f6:8a:7e:d4:f2:3e:c4:87:10:c5:cb:
91:eb:d8:93:40:26:20:1a:0a:a0:b6:7f:83:7a:83:
dc:aa:e7:0d:6f:d4:f6:4d:2f:a2:a0:a3:b1:a0:35:
d3:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:0B:DE:CE:FE:6D:F0:5D:7A:C3:1E:23:93:52:4E:B3:1F:06:78:25
X509v3 Authority Key Identifier:
keyid:37:6F:2F:4E:DB:23:23:0C:64:B7:93:B4:19:57:EF:4A:32:3E:3C:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/N28vTtsjIwxkt5O0GVfvSjI-PFM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/399d34-e4d0-4b80-8ecd-b7892f76e8c5/1/N28vTtsjIwxkt5O0GVfvSjI-PFM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:d1:62:a4:a1:06:da:c4:9c:d1:86:9f:9a:08:33:7a:70:95:
95:b0:06:8c:07:0d:0a:39:c8:e1:9c:61:45:5b:ec:7c:c7:65:
f2:11:11:b7:1d:6a:fc:d3:0e:c8:e5:c8:7d:2c:b0:c7:ab:98:
a2:e0:52:b0:95:d8:f7:48:53:7b:ac:74:6f:74:82:f6:7c:52:
f7:10:e1:cd:7d:04:89:cd:5b:d5:d0:5f:1a:5c:1e:16:ab:78:
0b:25:17:4d:e1:98:f6:57:69:57:f1:22:42:bb:e0:32:c7:a4:
b4:f1:60:3a:d8:30:21:a1:48:cd:26:26:55:f1:73:7a:3c:4c:
e0:9f:0f:fd:33:1a:d8:aa:8c:62:9c:95:bb:83:e8:89:c0:7a:
5f:57:c1:f5:05:18:c3:c1:86:7c:42:ee:4f:fe:c7:c4:15:37:
be:73:00:fb:41:5b:5d:0d:de:b1:4e:ff:f6:30:25:6d:89:ef:
50:09:dc:26:78:a9:b3:c6:75:53:0e:c5:0f:be:ac:8f:f8:4f:
10:9f:0c:d7:87:c7:a9:e5:67:01:92:2b:ad:95:a6:fb:46:8e:
88:66:39:0f:48:02:46:11:f4:13:14:c1:97:47:18:80:36:83:
b7:92:cf:90:0a:50:10:89:10:38:3a:c5:99:5c:03:9f:0a:25:
01:43:75:6c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovAYmew7virKmEFYd0XZ6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDM3NmYyZjRlZGIyMzIzMGM2NGI3OTNiNDE5NTdlZjRhMzIz
ZTNjNTMwHhcNMjUwNjEzMTAwMDQyWhcNMjUwNjE0MTAwMDQyWjAzMTEwLwYDVQQD
EyhkMTBiZGVjZWZlNmRmMDVkN2FjMzFlMjM5MzUyNGViMzFmMDY3ODI1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt98cjteSA3WMwM6zDGhmfgpSYqkk
NBqGvTVOAcDenqrwf50RFnImP24ecGGRpkTDGSN4/Z0o1GVhzxCru7fv69unWJDf
RJjesoJBO8HIm0w3WfEoM3a7EozthQaTy6dfapBfkOeITRifXvhV5kVyUAyKPl3r
ynGhbPZ+sHWP4dVtHL+SMMIlXjqrnPSD/3JQLb8o0KA8v3S3yYuUL5NHCindcf2i
pJKXz8Oi3XFjuo09oEjjMGDBIbmXg9EDkp1szmIUUAalABXfZFiLRnKvYGxPCsmB
9op+1PI+xIcQxcuR69iTQCYgGgqgtn+DeoPcqucNb9T2TS+ioKOxoDXTOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNEL3s7+bfBdesMeI5NSTrMfBnglMB8GA1UdIwQY
MBaAFDdvL07bIyMMZLeTtBlX70oyPjxTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTjI4dlR0c2pJd3hrdDVPMEdWZnZTakktUEZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zOTlkMzQtZTRkMC00YjgwLThlY2Qt
Yjc4OTJmNzZlOGM1LzEvTjI4dlR0c2pJd3hrdDVPMEdWZnZTakktUEZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zOTlkMzQtZTRkMC00YjgwLThlY2QtYjc4OTJmNzZlOGM1
LzEvTjI4dlR0c2pJd3hrdDVPMEdWZnZTakktUEZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT9FipKEG
2sSc0YafmggzenCVlbAGjAcNCjnI4ZxhRVvsfMdl8hERtx1q/NMOyOXIfSywx6uY
ouBSsJXY90hTe6x0b3SC9nxS9xDhzX0Eic1b1dBfGlweFqt4CyUXTeGY9ldpV/Ei
QrvgMsektPFgOtgwIaFIzSYmVfFzejxM4J8P/TMa2KqMYpyVu4PoicB6X1fB9QUY
w8GGfELuT/7HxBU3vnMA+0FbXQ3esU7/9jAlbYnvUAncJnips8Z1Uw7FD76sj/hP
EJ8M14fHqeVnAZIrrZWm+0aOiGY5D0gCRhH0ExTBl0cYgDaDt5LPkApQEIkQODrF
mVwDnwolAUN1bA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:23:24 2025 by rpki-client