Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
File: M7chLm_l_PDueNzQRA32ngCq1Nw.mft (raw, json)
Hash identifier: LF5HOW61gjbpc4Nwf/s2azUDU8RnP97iK9eYiDsjlwI=
Subject key identifier: 3F:63:2E:75:10:24:7B:94:15:45:D6:B3:A2:D1:55:C5:EF:F6:F9:71
Authority key identifier: 33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
Certificate issuer: /CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Certificate serial: 01976A058A6DEB09AD328204EF82283975F5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
Manifest number: 12D2
Signing time: Fri 13 Jun 2025 16:00:37 +0000
Manifest this update: Fri 13 Jun 2025 16:00:37 +0000
Manifest next update: Sat 14 Jun 2025 16:00:37 +0000
Files and hashes: 1: M7chLm_l_PDueNzQRA32ngCq1Nw.crl (hash: 32AMWaaR9eBch8KLZjyvs3K/qfFg4dQ9ia5B1Tz14m4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:8a:6d:eb:09:ad:32:82:04:ef:82:28:39:75:f5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33b7212e6fe5fcf0ee78dcd0440df69e00aad4dc
Validity
Not Before: Jun 13 16:00:37 2025 GMT
Not After : Jun 14 16:00:37 2025 GMT
Subject: CN=3f632e7510247b941545d6b3a2d155c5eff6f971
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:70:44:de:05:e0:ce:cf:42:dd:cd:5f:bf:27:
d4:d5:6d:55:f7:f9:63:4a:c9:14:6d:ba:c8:3c:56:
2a:b2:e7:2e:a3:2c:61:62:69:04:5c:73:27:81:8a:
4c:0c:26:d4:66:07:bd:8a:f9:a4:69:d2:98:bb:7d:
6c:3f:37:73:17:a5:0f:33:dd:ad:44:cb:7f:23:a8:
e0:1d:90:41:fb:77:c3:6f:c8:1d:eb:ef:c9:03:0b:
70:c6:8e:c8:db:4e:2b:04:c6:79:e9:10:a7:df:1c:
dc:ad:cc:e2:a5:19:7d:08:4c:72:88:c5:05:1e:ad:
2c:f8:fa:f2:98:11:14:c0:03:e2:c7:73:6f:76:e9:
62:93:ad:d3:fe:e0:60:e1:47:2a:a7:26:2b:c9:37:
ea:05:f6:d2:37:2d:57:96:82:85:f6:a2:f2:d5:3f:
a2:15:23:13:60:19:d9:af:c0:ec:5e:b4:1b:5f:f0:
5d:d2:c7:32:a4:83:8d:e6:6f:4c:67:ac:82:a7:b8:
14:d7:31:fb:14:f1:e0:eb:46:11:7b:6c:00:1f:52:
4b:27:ef:dd:0e:ac:d6:0d:db:59:14:01:27:4c:ce:
e6:9e:03:d3:91:8c:0c:ba:03:3a:3c:35:71:8e:85:
6a:c3:fc:bf:1a:40:70:fd:47:65:af:1f:b2:cb:93:
b2:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:63:2E:75:10:24:7B:94:15:45:D6:B3:A2:D1:55:C5:EF:F6:F9:71
X509v3 Authority Key Identifier:
keyid:33:B7:21:2E:6F:E5:FC:F0:EE:78:DC:D0:44:0D:F6:9E:00:AA:D4:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M7chLm_l_PDueNzQRA32ngCq1Nw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/3d59e8-d4f7-4b08-9f78-bdfee35af2b8/1/M7chLm_l_PDueNzQRA32ngCq1Nw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
94:b9:63:30:26:ba:1c:c9:c5:f9:d7:2d:88:38:78:3a:5d:f5:
b9:30:b2:77:83:43:18:d3:d6:c2:0b:80:75:36:14:71:9b:8c:
80:c2:6e:19:41:b6:25:bf:4a:2d:49:9e:34:03:1c:30:2d:79:
d4:f6:d9:de:44:3a:ab:ee:4c:8f:33:9f:4b:ca:41:be:c0:f2:
0f:5d:3b:73:de:91:5d:df:57:74:74:79:32:26:a2:39:1f:8e:
a4:30:de:35:02:37:c8:f6:99:49:c6:be:9a:a1:fd:c7:4f:1e:
d4:49:b5:05:28:75:bd:37:a0:f3:26:c4:e9:21:67:1c:c8:00:
55:7c:19:23:78:39:f2:1b:61:98:55:05:e5:57:19:68:75:8c:
35:89:04:b0:1f:bd:08:9d:c7:0d:11:9e:6e:2c:68:92:98:00:
a2:e4:a9:be:e7:c7:8e:6a:03:45:1e:6a:39:8a:1c:35:31:27:
88:b4:48:3f:86:c4:da:30:3a:d8:92:72:b4:77:9a:7b:e3:a5:
a5:a5:b5:65:8b:c3:95:b0:9b:a6:8e:02:76:c5:69:65:c1:eb:
89:09:25:7e:f2:e4:47:86:80:ad:29:75:dc:86:51:77:b6:2c:
30:02:51:d6:53:54:96:10:bd:4f:a4:44:52:0c:58:5e:73:43:
f3:1c:d3:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBYpt6wmtMoIE74IoOXX1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYjcyMTJlNmZlNWZjZjBlZTc4ZGNkMDQ0MGRmNjllMDBh
YWQ0ZGMwHhcNMjUwNjEzMTYwMDM3WhcNMjUwNjE0MTYwMDM3WjAzMTEwLwYDVQQD
EygzZjYzMmU3NTEwMjQ3Yjk0MTU0NWQ2YjNhMmQxNTVjNWVmZjZmOTcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArnBE3gXgzs9C3c1fvyfU1W1V9/lj
SskUbbrIPFYqsucuoyxhYmkEXHMngYpMDCbUZge9ivmkadKYu31sPzdzF6UPM92t
RMt/I6jgHZBB+3fDb8gd6+/JAwtwxo7I204rBMZ56RCn3xzcrczipRl9CExyiMUF
Hq0s+PrymBEUwAPix3Nvdulik63T/uBg4UcqpyYryTfqBfbSNy1XloKF9qLy1T+i
FSMTYBnZr8DsXrQbX/Bd0scypION5m9MZ6yCp7gU1zH7FPHg60YRe2wAH1JLJ+/d
DqzWDdtZFAEnTM7mngPTkYwMugM6PDVxjoVqw/y/GkBw/Udlrx+yy5OySQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD9jLnUQJHuUFUXWs6LRVcXv9vlxMB8GA1UdIwQY
MBaAFDO3IS5v5fzw7njc0EQN9p4AqtTcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTdjaExtX2xfUER1ZU56UVJBMzJuZ0NxMU53LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS8zZDU5ZTgtZDRmNy00YjA4LTlmNzgt
YmRmZWUzNWFmMmI4LzEvTTdjaExtX2xfUER1ZU56UVJBMzJuZ0NxMU53Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS8zZDU5ZTgtZDRmNy00YjA4LTlmNzgtYmRmZWUzNWFmMmI4
LzEvTTdjaExtX2xfUER1ZU56UVJBMzJuZ0NxMU53LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlLljMCa6
HMnF+dctiDh4Ol31uTCyd4NDGNPWwguAdTYUcZuMgMJuGUG2Jb9KLUmeNAMcMC15
1PbZ3kQ6q+5MjzOfS8pBvsDyD107c96RXd9XdHR5MiaiOR+OpDDeNQI3yPaZSca+
mqH9x08e1Em1BSh1vTeg8ybE6SFnHMgAVXwZI3g58hthmFUF5VcZaHWMNYkEsB+9
CJ3HDRGebixokpgAouSpvufHjmoDRR5qOYocNTEniLRIP4bE2jA62JJytHeae+Ol
paW1ZYvDlbCbpo4CdsVpZcHriQklfvLkR4aArSl13IZRd7YsMAJR1lNUlhC9T6RE
UgxYXnND8xzTrA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:02 2025 by rpki-client