Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
File: U9L19sohYsiL85oPnekm9CPlMQQ.mft (raw, json)
Hash identifier: 3OL+7GIPvXYc6MQwou+FdnLNJ2/RAS+A7LjwZc8gncA=
Subject key identifier: 81:FC:7B:53:A5:DE:1B:B5:46:AD:96:D5:B7:84:29:E6:37:36:8B:35
Authority key identifier: 53:D2:F5:F6:CA:21:62:C8:8B:F3:9A:0F:9D:E9:26:F4:23:E5:31:04
Certificate issuer: /CN=53d2f5f6ca2162c88bf39a0f9de926f423e53104
Certificate serial: 019774F81E37AFB703174B3329AC2DB84DC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
Manifest number: 0EFA
Signing time: Sun 15 Jun 2025 19:01:46 +0000
Manifest this update: Sun 15 Jun 2025 19:01:46 +0000
Manifest next update: Mon 16 Jun 2025 19:01:46 +0000
Files and hashes: 1: U9L19sohYsiL85oPnekm9CPlMQQ.crl (hash: VlSvu50zWt/+h8uaJNisBFr6oWBmTRLdXPPpyUBayw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 19:01:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:f8:1e:37:af:b7:03:17:4b:33:29:ac:2d:b8:4d:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53d2f5f6ca2162c88bf39a0f9de926f423e53104
Validity
Not Before: Jun 15 19:01:46 2025 GMT
Not After : Jun 16 19:01:46 2025 GMT
Subject: CN=81fc7b53a5de1bb546ad96d5b78429e637368b35
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:41:22:eb:c0:9f:fa:f3:c1:61:6f:81:3e:74:
88:1b:92:e9:e4:b1:2b:db:a1:3f:6e:db:62:07:86:
75:ff:40:86:69:8f:b1:ad:9f:78:49:6b:24:35:15:
a4:d4:83:30:c1:b9:a1:9c:45:0d:7e:8b:66:39:4f:
cf:02:ac:f9:0b:eb:74:73:ea:c8:96:2e:2e:04:58:
be:80:95:d5:28:51:54:63:46:9f:cc:55:86:08:eb:
e7:5c:82:05:be:3b:a5:53:6a:6a:f3:a4:bd:69:77:
5e:fb:6d:66:f2:57:6a:70:2d:75:7f:04:73:f4:72:
38:32:c5:2f:6f:1b:8c:45:08:88:da:bb:ac:af:62:
f9:30:a4:47:63:70:34:ad:64:88:a9:74:5a:3c:e1:
04:2e:a6:04:39:08:b0:3d:9e:92:45:fe:85:11:ea:
25:e4:07:2c:41:e4:f2:d1:ca:a3:d3:06:54:fa:08:
8a:03:c2:ec:82:49:64:97:6d:6b:33:f2:5d:d1:7d:
7a:f7:21:be:84:40:3c:f9:14:a2:47:45:96:54:30:
6a:f0:ec:89:a6:e4:27:92:dd:14:a0:9e:7b:61:57:
4c:a0:0c:4a:10:3c:cd:5e:f5:d4:1a:d5:4a:f7:f4:
8f:2c:11:6b:94:64:8d:b5:0d:8a:b5:f2:39:87:35:
a4:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
81:FC:7B:53:A5:DE:1B:B5:46:AD:96:D5:B7:84:29:E6:37:36:8B:35
X509v3 Authority Key Identifier:
keyid:53:D2:F5:F6:CA:21:62:C8:8B:F3:9A:0F:9D:E9:26:F4:23:E5:31:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U9L19sohYsiL85oPnekm9CPlMQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/a5ca0b-9425-4c1e-8ef6-a6fcad19aef2/1/U9L19sohYsiL85oPnekm9CPlMQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:47:00:e2:00:8b:9c:6e:55:d0:b6:8d:26:90:4d:14:83:72:
98:b3:ea:c8:f0:96:92:4c:b6:f4:1d:8b:cb:14:08:01:6e:39:
61:a2:03:37:10:9f:9d:86:a4:66:2a:61:e4:bf:ae:39:0b:d6:
6a:59:f9:91:6c:58:99:fc:b2:c5:75:c7:7c:36:58:1f:d4:09:
e2:6a:fe:0c:02:55:a1:f2:9b:dd:43:81:9a:3b:e4:04:35:2b:
b8:c3:c3:7c:0c:7e:d2:0f:4a:1d:8a:47:48:44:cc:da:f9:b5:
f6:ee:1d:73:28:40:d7:c7:02:9d:2f:7e:de:f9:15:a9:2e:cd:
4a:5c:77:d0:8e:8c:1c:c4:81:0c:3d:a1:9d:de:a7:fa:da:27:
06:92:77:d9:3f:7f:23:fd:d4:89:dc:4b:d7:14:f6:ce:d5:75:
c3:b7:75:d5:75:12:a1:25:7e:d2:58:1c:51:88:70:1b:be:8a:
27:a2:7e:0b:10:05:7d:b9:5d:72:3c:66:f2:d3:1e:83:30:0d:
8e:45:f8:9d:9f:24:1c:48:48:c8:a8:83:5d:cf:7a:a1:15:18:
e5:74:cd:f0:cd:3d:f6:82:b5:cd:ed:47:0f:c9:52:17:3d:97:
00:48:95:7c:44:12:fb:20:97:85:0a:f7:16:44:9a:e3:1d:5b:
2d:70:77:21
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0+B43r7cDF0szKawtuE3CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZDJmNWY2Y2EyMTYyYzg4YmYzOWEwZjlkZTkyNmY0MjNl
NTMxMDQwHhcNMjUwNjE1MTkwMTQ2WhcNMjUwNjE2MTkwMTQ2WjAzMTEwLwYDVQQD
Eyg4MWZjN2I1M2E1ZGUxYmI1NDZhZDk2ZDViNzg0MjllNjM3MzY4YjM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA40Ei68Cf+vPBYW+BPnSIG5Lp5LEr
26E/bttiB4Z1/0CGaY+xrZ94SWskNRWk1IMwwbmhnEUNfotmOU/PAqz5C+t0c+rI
li4uBFi+gJXVKFFUY0afzFWGCOvnXIIFvjulU2pq86S9aXde+21m8ldqcC11fwRz
9HI4MsUvbxuMRQiI2rusr2L5MKRHY3A0rWSIqXRaPOEELqYEOQiwPZ6SRf6FEeol
5AcsQeTy0cqj0wZU+giKA8Lsgklkl21rM/Jd0X169yG+hEA8+RSiR0WWVDBq8OyJ
puQnkt0UoJ57YVdMoAxKEDzNXvXUGtVK9/SPLBFrlGSNtQ2KtfI5hzWk8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIH8e1Ol3hu1Rq2W1beEKeY3Nos1MB8GA1UdIwQY
MBaAFFPS9fbKIWLIi/OaD53pJvQj5TEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTlMMTlzb2hZc2lMODVvUG5la205Q1BsTVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC9hNWNhMGItOTQyNS00YzFlLThlZjYt
YTZmY2FkMTlhZWYyLzEvVTlMMTlzb2hZc2lMODVvUG5la205Q1BsTVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC9hNWNhMGItOTQyNS00YzFlLThlZjYtYTZmY2FkMTlhZWYy
LzEvVTlMMTlzb2hZc2lMODVvUG5la205Q1BsTVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZEcA4gCL
nG5V0LaNJpBNFINymLPqyPCWkky29B2LyxQIAW45YaIDNxCfnYakZiph5L+uOQvW
aln5kWxYmfyyxXXHfDZYH9QJ4mr+DAJVofKb3UOBmjvkBDUruMPDfAx+0g9KHYpH
SETM2vm19u4dcyhA18cCnS9+3vkVqS7NSlx30I6MHMSBDD2hnd6n+tonBpJ32T9/
I/3UidxL1xT2ztV1w7d11XUSoSV+0lgcUYhwG76KJ6J+CxAFfbldcjxm8tMegzAN
jkX4nZ8kHEhIyKiDXc96oRUY5XTN8M099oK1ze1HD8lSFz2XAEiVfEQS+yCXhQr3
FkSa4x1bLXB3IQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:28:44 2025 by rpki-client