Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
File: bDg245a8UGRDYGuf1zN6kg5x3tE.mft (raw, json)
Hash identifier: lLfMo4f7D5FDrYascqmAsY9FLgi+7uWSxPgy3qmNQD8=
Subject key identifier: 98:AC:14:15:D3:6C:7E:0E:A0:CE:57:07:3A:E7:B0:9A:C6:E2:05:AF
Authority key identifier: 6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
Certificate issuer: /CN=6c3836e396bc506443606b9fd7337a920e71ded1
Certificate serial: 01976BF439155D4D2ED5D65D205F166B62A0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
Manifest number: 1410
Signing time: Sat 14 Jun 2025 01:00:56 +0000
Manifest this update: Sat 14 Jun 2025 01:00:56 +0000
Manifest next update: Sun 15 Jun 2025 01:00:56 +0000
Files and hashes: 1: bDg245a8UGRDYGuf1zN6kg5x3tE.crl (hash: grnq9824ZNDK95rrpv2PFnX59clwxt6UlEV/SB2XskU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:f4:39:15:5d:4d:2e:d5:d6:5d:20:5f:16:6b:62:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6c3836e396bc506443606b9fd7337a920e71ded1
Validity
Not Before: Jun 14 01:00:56 2025 GMT
Not After : Jun 15 01:00:56 2025 GMT
Subject: CN=98ac1415d36c7e0ea0ce57073ae7b09ac6e205af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:2e:84:af:ac:2d:54:af:59:43:cb:48:ed:7c:
b6:d8:33:20:00:00:23:bf:c6:5d:1e:0c:56:bf:ab:
90:9b:dd:c9:61:35:22:cd:d2:14:e4:95:1d:fc:da:
de:3d:1c:cf:2f:07:23:b1:72:dc:1d:de:6b:ec:fd:
d9:80:0f:90:dc:34:e7:da:f8:6c:2c:04:49:5a:ba:
95:a6:81:bb:09:8d:0c:bb:b7:4a:fe:4a:ae:06:d8:
f1:82:a6:0e:8f:87:bf:0c:3e:df:93:17:ad:f3:fe:
d5:4f:36:5f:ca:41:6f:19:59:00:f1:5e:9d:f9:28:
62:1e:04:a9:ac:1a:cc:61:5f:d0:db:38:a2:e4:24:
73:44:5a:b5:3a:40:06:8d:f5:a1:42:4b:82:0c:29:
29:2b:56:ed:9c:d2:b1:bc:68:56:dd:a9:92:c3:ab:
fd:03:27:a1:08:70:0c:96:17:bc:81:96:73:5e:06:
29:7a:86:d5:6e:a6:6f:71:e3:51:11:4a:ca:2c:1d:
fe:f3:eb:55:7c:8f:0d:03:49:ab:84:a3:8f:05:3a:
82:b0:a2:35:80:e7:a8:6b:37:ba:ec:91:9c:91:43:
10:cc:91:35:e4:c3:c2:63:51:3b:cc:9a:62:7d:8e:
26:23:9a:bc:3d:80:55:17:2f:ce:c7:cf:66:57:b2:
c4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:AC:14:15:D3:6C:7E:0E:A0:CE:57:07:3A:E7:B0:9A:C6:E2:05:AF
X509v3 Authority Key Identifier:
keyid:6C:38:36:E3:96:BC:50:64:43:60:6B:9F:D7:33:7A:92:0E:71:DE:D1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bDg245a8UGRDYGuf1zN6kg5x3tE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/f3994e-0b10-4383-b34c-eb6b13c5e268/1/bDg245a8UGRDYGuf1zN6kg5x3tE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:e8:a3:5d:eb:65:3c:40:8b:08:fa:28:a1:e4:ea:97:75:df:
19:4a:86:8d:81:23:c1:ed:d2:82:12:07:cb:67:50:0f:ec:c8:
b0:93:0f:bd:25:a9:86:45:7d:4e:8c:8d:02:d5:b9:b0:84:4e:
78:0e:c1:ac:aa:19:1e:86:7b:4b:39:99:31:4d:0e:91:ab:cc:
c9:09:f0:07:b2:d8:6b:87:de:84:de:a4:84:9d:0d:75:eb:a4:
db:02:a9:a5:79:71:52:ae:49:6e:a0:78:5d:83:6b:4c:3d:32:
c1:82:36:8d:fc:90:ad:9d:06:56:77:be:4e:9b:96:72:93:f4:
64:87:cc:fb:52:be:b5:1a:04:f7:d8:dd:1e:e2:82:4b:6c:36:
54:2e:11:20:43:41:49:79:35:fa:c5:a0:45:83:ce:58:84:d7:
6c:c7:b9:2c:d9:5c:9b:7a:24:ca:43:08:c8:57:f7:5c:4b:dc:
9f:1e:3c:cf:ad:23:39:05:78:e7:50:ee:9a:43:56:c1:fa:7f:
b1:ac:62:4f:6a:3a:b9:75:cf:39:fd:c5:d1:a7:9a:58:74:1d:
c2:a6:72:62:2b:2f:36:c9:16:f5:15:8b:26:c9:e4:96:0d:17:
60:c0:f6:14:d4:fe:d0:a0:ed:d2:33:e5:91:8b:37:1c:70:de:
81:ce:5c:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdr9DkVXU0u1dZdIF8Wa2KgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZjMzgzNmUzOTZiYzUwNjQ0MzYwNmI5ZmQ3MzM3YTkyMGU3
MWRlZDEwHhcNMjUwNjE0MDEwMDU2WhcNMjUwNjE1MDEwMDU2WjAzMTEwLwYDVQQD
Eyg5OGFjMTQxNWQzNmM3ZTBlYTBjZTU3MDczYWU3YjA5YWM2ZTIwNWFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxy6Er6wtVK9ZQ8tI7Xy22DMgAAAj
v8ZdHgxWv6uQm93JYTUizdIU5JUd/NrePRzPLwcjsXLcHd5r7P3ZgA+Q3DTn2vhs
LARJWrqVpoG7CY0Mu7dK/kquBtjxgqYOj4e/DD7fkxet8/7VTzZfykFvGVkA8V6d
+ShiHgSprBrMYV/Q2zii5CRzRFq1OkAGjfWhQkuCDCkpK1btnNKxvGhW3amSw6v9
AyehCHAMlhe8gZZzXgYpeobVbqZvceNREUrKLB3+8+tVfI8NA0mrhKOPBTqCsKI1
gOeoaze67JGckUMQzJE15MPCY1E7zJpifY4mI5q8PYBVFy/Ox89mV7LE4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJisFBXTbH4OoM5XBzrnsJrG4gWvMB8GA1UdIwQY
MBaAFGw4NuOWvFBkQ2Brn9czepIOcd7RMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYkRnMjQ1YThVR1JEWUd1ZjF6TjZrZzV4M3RFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy9mMzk5NGUtMGIxMC00MzgzLWIzNGMt
ZWI2YjEzYzVlMjY4LzEvYkRnMjQ1YThVR1JEWUd1ZjF6TjZrZzV4M3RFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy9mMzk5NGUtMGIxMC00MzgzLWIzNGMtZWI2YjEzYzVlMjY4
LzEvYkRnMjQ1YThVR1JEWUd1ZjF6TjZrZzV4M3RFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH+ijXetl
PECLCPoooeTql3XfGUqGjYEjwe3SghIHy2dQD+zIsJMPvSWphkV9ToyNAtW5sIRO
eA7BrKoZHoZ7SzmZMU0OkavMyQnwB7LYa4fehN6khJ0Ndeuk2wKppXlxUq5JbqB4
XYNrTD0ywYI2jfyQrZ0GVne+TpuWcpP0ZIfM+1K+tRoE99jdHuKCS2w2VC4RIENB
SXk1+sWgRYPOWITXbMe5LNlcm3okykMIyFf3XEvcnx48z60jOQV451DumkNWwfp/
saxiT2o6uXXPOf3F0aeaWHQdwqZyYisvNskW9RWLJsnklg0XYMD2FNT+0KDt0jPl
kYs3HHDegc5caQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:46:51 2025 by rpki-client