Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
File: mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft (raw, json)
Hash identifier: lHSr7uKi0EyOaZisYjqBX3xMa8yKiD2iaHe4GtRZ47I=
Subject key identifier: E5:02:B9:91:D5:3E:58:1B:9F:2B:4C:21:9A:B7:B6:F7:75:EF:47:21
Authority key identifier: 9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
Certificate issuer: /CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Certificate serial: 01977CB0AC3CDEF11D66EC5B140B639F881E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
Manifest number: 0489
Signing time: Tue 17 Jun 2025 07:00:42 +0000
Manifest this update: Tue 17 Jun 2025 07:00:42 +0000
Manifest next update: Wed 18 Jun 2025 07:00:42 +0000
Files and hashes: 1: mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl (hash: 23OpjPPXmiyiH1uyTCexT5LPR87exuz3lqfFgs46nHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:b0:ac:3c:de:f1:1d:66:ec:5b:14:0b:63:9f:88:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9a95f152cca2411d40b1f520591be3b3a11bcdf0
Validity
Not Before: Jun 17 07:00:42 2025 GMT
Not After : Jun 18 07:00:42 2025 GMT
Subject: CN=e502b991d53e581b9f2b4c219ab7b6f775ef4721
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:23:47:de:17:77:e6:af:e6:9f:bb:05:93:7b:
f0:aa:e5:43:18:a2:96:27:18:e5:f5:c9:b3:a6:d1:
66:14:d3:0d:55:2e:9f:d8:8f:37:fb:5b:b5:4f:06:
e0:22:37:24:c6:f7:54:d5:6d:fb:67:6e:da:de:d6:
f8:ce:5f:fb:4c:d0:86:71:2d:f5:a5:a9:0b:0e:7b:
2f:8b:36:c1:9a:18:ff:36:27:07:a1:81:d4:8f:7f:
ec:26:09:ca:1c:6d:13:85:8f:7c:fd:82:88:5e:88:
72:7c:e2:be:0c:2e:6c:62:62:7c:dd:59:cc:a9:0a:
db:6f:45:cb:89:b6:8b:6c:59:61:66:29:25:dc:78:
4f:09:3b:bf:43:a9:3c:9f:d1:fc:f6:7b:f4:69:9a:
85:06:72:e7:58:95:99:1b:e9:a0:fa:2e:74:86:f4:
40:8e:2e:26:a7:6f:39:f0:d5:2e:52:14:2e:37:a4:
62:63:b3:e2:9f:ca:9f:fc:4f:93:ba:95:20:6b:14:
e2:52:4c:c7:de:1f:ad:be:ea:ca:40:39:45:b6:97:
80:63:bd:18:f5:1a:8c:b3:f1:2c:c2:d2:b5:bd:e0:
bd:5f:89:db:88:94:b3:de:aa:e1:05:84:5b:5e:66:
d5:90:ad:df:31:7e:c8:29:70:e3:f3:a0:f8:91:71:
51:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E5:02:B9:91:D5:3E:58:1B:9F:2B:4C:21:9A:B7:B6:F7:75:EF:47:21
X509v3 Authority Key Identifier:
keyid:9A:95:F1:52:CC:A2:41:1D:40:B1:F5:20:59:1B:E3:B3:A1:1B:CD:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mpXxUsyiQR1AsfUgWRvjs6EbzfA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/eb68d6-f6c3-4318-9e83-b3b6c8fecc64/1/mpXxUsyiQR1AsfUgWRvjs6EbzfA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6a:be:5a:80:e6:21:c5:cc:e6:8b:e9:28:30:47:9a:11:70:2c:
ca:6b:17:4b:84:52:9f:af:77:a0:55:ea:76:53:d5:97:48:78:
10:6f:b5:6a:7b:74:40:a1:97:1c:f2:25:45:b5:a0:c9:24:14:
26:c0:1f:2a:55:79:c2:66:03:11:d7:3e:3e:95:a2:c2:92:fc:
47:3c:41:ba:bc:01:85:02:cd:34:c6:b1:8e:96:44:be:73:37:
19:e0:5e:66:27:d5:a6:95:05:74:15:b8:61:64:0a:55:cd:93:
c4:7c:34:92:ba:4c:24:04:43:32:47:b5:97:b1:48:24:e3:92:
f5:b7:35:4b:2e:c8:ea:91:50:2c:69:c1:f0:3d:db:33:70:a4:
fd:ac:5d:34:94:18:61:55:12:0f:b0:bf:7a:8c:75:bc:68:c3:
ba:15:12:3e:40:f5:b5:47:d2:d7:1c:d9:6e:bb:85:12:32:c5:
a6:72:ae:dc:92:33:60:6d:10:10:42:cf:95:a7:d9:48:7d:72:
1f:1b:55:6e:ee:6b:67:af:cc:c1:a2:b1:10:fa:21:56:a4:2f:
75:85:f8:f2:92:9e:a3:a9:0e:84:c8:09:02:97:1e:4e:fb:db:
29:c3:17:bc:43:b5:2c:5e:d5:11:06:d6:8d:09:ed:f9:a7:d0:
09:bf:b3:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd8sKw83vEdZuxbFAtjn4geMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlhOTVmMTUyY2NhMjQxMWQ0MGIxZjUyMDU5MWJlM2IzYTEx
YmNkZjAwHhcNMjUwNjE3MDcwMDQyWhcNMjUwNjE4MDcwMDQyWjAzMTEwLwYDVQQD
EyhlNTAyYjk5MWQ1M2U1ODFiOWYyYjRjMjE5YWI3YjZmNzc1ZWY0NzIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvyNH3hd35q/mn7sFk3vwquVDGKKW
Jxjl9cmzptFmFNMNVS6f2I83+1u1TwbgIjckxvdU1W37Z27a3tb4zl/7TNCGcS31
pakLDnsvizbBmhj/NicHoYHUj3/sJgnKHG0ThY98/YKIXohyfOK+DC5sYmJ83VnM
qQrbb0XLibaLbFlhZikl3HhPCTu/Q6k8n9H89nv0aZqFBnLnWJWZG+mg+i50hvRA
ji4mp2858NUuUhQuN6RiY7Pin8qf/E+TupUgaxTiUkzH3h+tvurKQDlFtpeAY70Y
9RqMs/EswtK1veC9X4nbiJSz3qrhBYRbXmbVkK3fMX7IKXDj86D4kXFRowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOUCuZHVPlgbnytMIZq3tvd170chMB8GA1UdIwQY
MBaAFJqV8VLMokEdQLH1IFkb47OhG83wMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbXBYeFVzeWlRUjFBc2ZVZ1dSdmpzNkViemZBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni9lYjY4ZDYtZjZjMy00MzE4LTllODMt
YjNiNmM4ZmVjYzY0LzEvbXBYeFVzeWlRUjFBc2ZVZ1dSdmpzNkViemZBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni9lYjY4ZDYtZjZjMy00MzE4LTllODMtYjNiNmM4ZmVjYzY0
LzEvbXBYeFVzeWlRUjFBc2ZVZ1dSdmpzNkViemZBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAar5agOYh
xczmi+koMEeaEXAsymsXS4RSn693oFXqdlPVl0h4EG+1ant0QKGXHPIlRbWgySQU
JsAfKlV5wmYDEdc+PpWiwpL8RzxBurwBhQLNNMaxjpZEvnM3GeBeZifVppUFdBW4
YWQKVc2TxHw0krpMJARDMke1l7FIJOOS9bc1Sy7I6pFQLGnB8D3bM3Ck/axdNJQY
YVUSD7C/eox1vGjDuhUSPkD1tUfS1xzZbruFEjLFpnKu3JIzYG0QEELPlafZSH1y
HxtVbu5rZ6/MwaKxEPohVqQvdYX48pKeo6kOhMgJApceTvvbKcMXvEO1LF7VEQbW
jQnt+afQCb+zTQ==
-----END CERTIFICATE-----
Generated at Tue Jun 17 11:08:03 2025 by rpki-client