Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
File: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft (raw, json)
Hash identifier: Ft2JbD18Y+KUHUk+xVVdgfM27HoqK4BOylh//aioKxI=
Subject key identifier: 4D:9C:62:C9:B9:CD:B0:F7:57:DC:27:9A:49:23:E5:F0:86:45:C4:87
Authority key identifier: 07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
Certificate issuer: /CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Certificate serial: 019770758651BA3E24B388EAE650C63F2DFD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
Manifest number: 11DC
Signing time: Sat 14 Jun 2025 22:00:39 +0000
Manifest this update: Sat 14 Jun 2025 22:00:39 +0000
Manifest next update: Sun 15 Jun 2025 22:00:39 +0000
Files and hashes: 1: Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl (hash: faBs+DQEj4UP2xW6fYZPZjFEKtpVjAshqY2XatWQcy0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:86:51:ba:3e:24:b3:88:ea:e6:50:c6:3f:2d:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=071d639c1e02eda2538d34b0c8b45213c64d6a3c
Validity
Not Before: Jun 14 22:00:39 2025 GMT
Not After : Jun 15 22:00:39 2025 GMT
Subject: CN=4d9c62c9b9cdb0f757dc279a4923e5f08645c487
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:f9:f9:88:c1:59:b0:0e:95:a9:60:5c:e5:8d:
9c:52:e3:18:55:12:df:40:27:61:d2:40:67:01:0f:
39:3f:c6:b0:65:f9:cd:c5:db:a4:7f:62:cd:08:47:
73:51:00:b2:10:fc:06:89:fb:69:05:6e:3a:8a:f4:
f1:a5:ec:6d:67:83:a9:96:b0:e9:59:fc:ba:97:fb:
cc:73:24:f5:1e:9a:ee:47:d2:30:30:3d:87:d2:64:
12:c9:13:54:81:ec:05:fe:a5:b1:2b:c2:fd:90:4f:
d0:da:04:c1:7e:4d:45:ac:d8:f7:47:69:8b:f9:d4:
76:af:2c:05:27:86:10:03:09:e8:a1:f2:89:13:63:
24:01:68:ad:d5:f6:8e:55:04:d0:22:b3:19:4d:74:
84:39:29:43:d8:5b:82:f2:f6:0d:2a:cb:d3:aa:5d:
cd:6c:0d:8b:02:4d:b4:dc:97:d0:c3:d6:81:1d:3a:
a0:6e:3c:55:17:47:10:08:52:0b:10:ad:0e:0b:bd:
0e:22:2f:44:72:6a:09:40:5e:eb:ef:2a:76:22:ab:
4b:12:9b:3d:35:8f:d4:23:20:55:d3:2f:96:db:4c:
d2:55:d8:72:d0:76:4b:d3:5d:33:94:a0:2a:97:67:
13:d4:46:a9:74:70:75:94:49:1a:ae:31:f1:b5:65:
42:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4D:9C:62:C9:B9:CD:B0:F7:57:DC:27:9A:49:23:E5:F0:86:45:C4:87
X509v3 Authority Key Identifier:
keyid:07:1D:63:9C:1E:02:ED:A2:53:8D:34:B0:C8:B4:52:13:C6:4D:6A:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/d12a5f-dd5b-4201-9819-813726ced7d1/1/Bx1jnB4C7aJTjTSwyLRSE8ZNajw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e4:12:32:8e:a0:9c:00:c9:ac:c9:1c:f5:8a:8f:5e:23:77:
99:a6:57:c3:b7:c7:dc:0c:18:e4:46:6d:41:a9:17:49:81:b5:
2e:7d:87:88:d2:8b:b3:bf:90:a5:6c:e3:54:a1:65:a1:b2:4f:
f5:a1:36:bb:aa:9b:05:7a:c6:f8:45:e2:81:93:01:a2:31:0e:
f3:a5:ec:f1:15:9d:4b:4c:8c:4e:9a:2e:4a:de:70:47:f2:58:
11:a3:2f:d5:cf:3e:30:00:ea:1d:65:27:92:b6:07:e7:34:2b:
4f:51:0c:96:6e:3c:6b:d4:c0:d9:cf:bf:92:9a:c1:c9:b4:2a:
a6:23:fd:6b:74:34:1b:a0:8d:ba:95:dc:b0:dc:8c:7c:18:2a:
ca:46:f5:5e:d9:d8:4d:4a:a9:49:b5:78:34:10:bf:1a:92:8c:
e9:10:19:c3:47:06:4e:f3:a6:45:6c:c5:51:b1:74:ed:17:80:
fe:f9:ba:8d:23:fb:50:ef:02:b9:d8:f9:cb:53:e2:92:9a:90:
74:a1:c9:d6:5a:5c:16:26:4d:da:cf:6a:c7:8e:5c:4c:ec:3e:
84:28:25:02:40:57:be:62:75:91:2b:c2:fe:85:70:8c:39:a4:
74:a6:93:3a:77:0b:d7:9c:6f:e8:b4:16:0a:50:71:fd:bb:74:
e2:5c:cf:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdYZRuj4ks4jq5lDGPy39MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA3MWQ2MzljMWUwMmVkYTI1MzhkMzRiMGM4YjQ1MjEzYzY0
ZDZhM2MwHhcNMjUwNjE0MjIwMDM5WhcNMjUwNjE1MjIwMDM5WjAzMTEwLwYDVQQD
Eyg0ZDljNjJjOWI5Y2RiMGY3NTdkYzI3OWE0OTIzZTVmMDg2NDVjNDg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh/n5iMFZsA6VqWBc5Y2cUuMYVRLf
QCdh0kBnAQ85P8awZfnNxdukf2LNCEdzUQCyEPwGiftpBW46ivTxpextZ4OplrDp
Wfy6l/vMcyT1HpruR9IwMD2H0mQSyRNUgewF/qWxK8L9kE/Q2gTBfk1FrNj3R2mL
+dR2rywFJ4YQAwnoofKJE2MkAWit1faOVQTQIrMZTXSEOSlD2FuC8vYNKsvTql3N
bA2LAk203JfQw9aBHTqgbjxVF0cQCFILEK0OC70OIi9EcmoJQF7r7yp2IqtLEps9
NY/UIyBV0y+W20zSVdhy0HZL010zlKAql2cT1EapdHB1lEkarjHxtWVCowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE2cYsm5zbD3V9wnmkkj5fCGRcSHMB8GA1UdIwQY
MBaAFAcdY5weAu2iU400sMi0UhPGTWo8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQngxam5CNEM3YUpUalRTd3lMUlNFOFpOYWp3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni9kMTJhNWYtZGQ1Yi00MjAxLTk4MTkt
ODEzNzI2Y2VkN2QxLzEvQngxam5CNEM3YUpUalRTd3lMUlNFOFpOYWp3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni9kMTJhNWYtZGQ1Yi00MjAxLTk4MTktODEzNzI2Y2VkN2Qx
LzEvQngxam5CNEM3YUpUalRTd3lMUlNFOFpOYWp3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOQSMo6g
nADJrMkc9YqPXiN3maZXw7fH3AwY5EZtQakXSYG1Ln2HiNKLs7+QpWzjVKFlobJP
9aE2u6qbBXrG+EXigZMBojEO86Xs8RWdS0yMTpouSt5wR/JYEaMv1c8+MADqHWUn
krYH5zQrT1EMlm48a9TA2c+/kprBybQqpiP9a3Q0G6CNupXcsNyMfBgqykb1XtnY
TUqpSbV4NBC/GpKM6RAZw0cGTvOmRWzFUbF07ReA/vm6jSP7UO8Cudj5y1PikpqQ
dKHJ1lpcFiZN2s9qx45cTOw+hCglAkBXvmJ1kSvC/oVwjDmkdKaTOncL15xv6LQW
ClBx/bt04lzPgg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 03:04:32 2025 by rpki-client