Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
File: by4eTgnsEV2nA2tkpRnSSNUtuFg.mft (raw, json)
Hash identifier: 9g23gbxYJleRpPQWzkbibgOjLTFs2iQQjUfealgs4zk=
Subject key identifier: 19:A5:6C:6C:16:B3:FC:49:95:2B:E8:C9:AD:EE:45:E7:23:0E:22:F1
Authority key identifier: 6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
Certificate issuer: /CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Certificate serial: 019769613726F92B4EC24B3D4DF2C19B721B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
Manifest number: 1589
Signing time: Fri 13 Jun 2025 13:01:08 +0000
Manifest this update: Fri 13 Jun 2025 13:01:08 +0000
Manifest next update: Sat 14 Jun 2025 13:01:08 +0000
Files and hashes: 1: by4eTgnsEV2nA2tkpRnSSNUtuFg.crl (hash: PA0LeqNrW7i+Fqep4hwMPZF2jO49LV1n8lQlBmCL3DU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:37:26:f9:2b:4e:c2:4b:3d:4d:f2:c1:9b:72:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f2e1e4e09ec115da7036b64a519d248d52db858
Validity
Not Before: Jun 13 13:01:08 2025 GMT
Not After : Jun 14 13:01:08 2025 GMT
Subject: CN=19a56c6c16b3fc49952be8c9adee45e7230e22f1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:0d:49:b7:03:f8:50:3e:e2:f2:87:21:53:23:
b3:22:42:9a:fc:01:8f:cb:74:45:a0:59:48:0a:2d:
72:00:36:55:72:6e:2a:df:20:e3:d7:dd:da:df:e0:
82:83:3a:ac:62:0a:e0:89:af:b4:db:4d:17:d3:f6:
c2:6d:d9:c6:08:bc:14:2f:f2:7c:5d:9c:b1:76:37:
e6:81:12:61:6d:06:b1:90:93:6a:b9:a4:14:04:1c:
ff:b5:55:0a:76:e3:f4:bb:75:ab:e5:fc:97:43:fa:
63:e7:38:74:4d:14:28:68:e1:58:27:b2:82:2e:1a:
cc:1c:ee:fb:12:40:02:6c:c9:e6:95:7c:6f:82:cb:
ad:fb:87:8f:bc:68:ba:40:8c:db:27:56:6a:5d:b6:
12:8b:9f:66:ca:54:25:13:43:6c:9e:c0:90:a6:4a:
5e:5c:dd:20:66:43:68:ea:e0:0d:a3:62:8b:45:5c:
b3:67:e9:66:8a:45:b7:b6:4e:58:83:89:7e:da:95:
03:fa:4b:a3:ea:83:23:e1:2f:02:f9:53:cc:d4:8d:
2c:95:7d:ca:3e:4c:78:e8:f8:d6:a0:32:db:95:f3:
60:65:1f:c8:23:98:2e:c1:b8:78:8a:22:15:fc:ef:
ba:d6:1e:55:27:ab:87:e8:9a:a7:3f:a1:bf:b0:de:
9c:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:A5:6C:6C:16:B3:FC:49:95:2B:E8:C9:AD:EE:45:E7:23:0E:22:F1
X509v3 Authority Key Identifier:
keyid:6F:2E:1E:4E:09:EC:11:5D:A7:03:6B:64:A5:19:D2:48:D5:2D:B8:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/by4eTgnsEV2nA2tkpRnSSNUtuFg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/1e3548-4baa-491b-bcaf-aac16c4d59cc/1/by4eTgnsEV2nA2tkpRnSSNUtuFg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:51:c8:49:e2:89:99:be:80:df:5a:38:43:0e:0a:13:a6:27:
18:3d:57:fd:52:b8:b4:bd:0f:6c:2c:01:8a:5d:09:9a:bc:f7:
30:f8:fc:56:dd:f6:cf:78:2b:a3:8a:05:b6:52:2d:60:22:62:
c3:ff:fe:95:bd:e6:59:e5:8b:0d:f1:55:09:9a:68:12:0b:b7:
c1:9b:99:ac:f3:5d:f8:97:00:d9:ad:34:8d:40:ed:35:c8:32:
a3:fb:f0:de:2e:01:58:32:35:92:8d:be:b0:f9:b5:36:f8:2c:
be:7a:07:8f:f4:27:75:4e:30:5f:9b:98:dc:7a:98:3b:f0:e2:
80:cc:e3:d6:4c:6f:99:20:8e:fa:46:7a:29:32:7b:2d:c3:5e:
b0:6b:da:73:a7:b7:ac:f8:86:1b:75:f3:67:4e:7e:b4:1f:3c:
da:fc:eb:18:79:c6:cd:fb:3c:68:a8:65:38:7a:54:d3:12:13:
50:39:02:f4:09:b8:33:1d:d9:95:67:38:7f:55:0d:27:18:62:
22:31:4b:ca:cc:73:8e:47:ae:05:ca:a8:f4:16:3f:cb:d9:2f:
c5:50:29:e4:fe:a4:8c:f5:3d:3a:57:f6:9c:ac:78:c0:58:13:
b7:2e:01:9f:cd:fc:fe:2c:fa:62:09:04:48:05:9c:0e:75:8e:
e3:9c:60:6d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYTcm+StOwks9TfLBm3IbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMmUxZTRlMDllYzExNWRhNzAzNmI2NGE1MTlkMjQ4ZDUy
ZGI4NTgwHhcNMjUwNjEzMTMwMTA4WhcNMjUwNjE0MTMwMTA4WjAzMTEwLwYDVQQD
EygxOWE1NmM2YzE2YjNmYzQ5OTUyYmU4YzlhZGVlNDVlNzIzMGUyMmYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuA1JtwP4UD7i8ochUyOzIkKa/AGP
y3RFoFlICi1yADZVcm4q3yDj193a3+CCgzqsYgrgia+0200X0/bCbdnGCLwUL/J8
XZyxdjfmgRJhbQaxkJNquaQUBBz/tVUKduP0u3Wr5fyXQ/pj5zh0TRQoaOFYJ7KC
LhrMHO77EkACbMnmlXxvgsut+4ePvGi6QIzbJ1ZqXbYSi59mylQlE0NsnsCQpkpe
XN0gZkNo6uANo2KLRVyzZ+lmikW3tk5Yg4l+2pUD+kuj6oMj4S8C+VPM1I0slX3K
Pkx46PjWoDLblfNgZR/II5guwbh4iiIV/O+61h5VJ6uH6JqnP6G/sN6cEQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBmlbGwWs/xJlSvoya3uRecjDiLxMB8GA1UdIwQY
MBaAFG8uHk4J7BFdpwNrZKUZ0kjVLbhYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnk0ZVRnbnNFVjJuQTJ0a3BSblNTTlV0dUZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8xZTM1NDgtNGJhYS00OTFiLWJjYWYt
YWFjMTZjNGQ1OWNjLzEvYnk0ZVRnbnNFVjJuQTJ0a3BSblNTTlV0dUZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8xZTM1NDgtNGJhYS00OTFiLWJjYWYtYWFjMTZjNGQ1OWNj
LzEvYnk0ZVRnbnNFVjJuQTJ0a3BSblNTTlV0dUZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGFHISeKJ
mb6A31o4Qw4KE6YnGD1X/VK4tL0PbCwBil0Jmrz3MPj8Vt32z3gro4oFtlItYCJi
w//+lb3mWeWLDfFVCZpoEgu3wZuZrPNd+JcA2a00jUDtNcgyo/vw3i4BWDI1ko2+
sPm1NvgsvnoHj/QndU4wX5uY3HqYO/DigMzj1kxvmSCO+kZ6KTJ7LcNesGvac6e3
rPiGG3XzZ05+tB882vzrGHnGzfs8aKhlOHpU0xITUDkC9Am4Mx3ZlWc4f1UNJxhi
IjFLysxzjkeuBcqo9BY/y9kvxVAp5P6kjPU9Olf2nKx4wFgTty4Bn838/iz6YgkE
SAWcDnWO45xgbQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:34:11 2025 by rpki-client