Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
File: RzLsDpHbv5TdodZQRH0miXbWIJo.mft (raw, json)
Hash identifier: mWtGYTU49wUFi4ej1oPAJeFj9OWDY7oExUoxVJDXzGE=
Subject key identifier: CA:D3:29:4D:A6:AA:BE:99:F0:9B:B8:2C:38:C1:D2:5E:9C:9F:94:F9
Authority key identifier: 47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
Certificate issuer: /CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Certificate serial: 01976C98A11731E766E9C8ED844E6A307F63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
Manifest number: 0A45
Signing time: Sat 14 Jun 2025 04:00:31 +0000
Manifest this update: Sat 14 Jun 2025 04:00:31 +0000
Manifest next update: Sun 15 Jun 2025 04:00:31 +0000
Files and hashes: 1: RzLsDpHbv5TdodZQRH0miXbWIJo.crl (hash: SzSEX5ecHiu7ebJ31qIwyk1Cxny2O2KJk1tBMXCmWpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:a1:17:31:e7:66:e9:c8:ed:84:4e:6a:30:7f:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4732ec0e91dbbf94dda1d650447d268976d6209a
Validity
Not Before: Jun 14 04:00:31 2025 GMT
Not After : Jun 15 04:00:31 2025 GMT
Subject: CN=cad3294da6aabe99f09bb82c38c1d25e9c9f94f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:38:46:72:3a:8b:65:88:12:59:e3:66:a4:4f:
81:70:b6:78:37:a9:ef:aa:90:bf:c2:3f:2d:b6:e9:
ed:74:88:f0:04:80:24:88:26:8e:0f:26:c3:28:da:
ee:7a:60:11:9f:ab:55:a5:1e:42:93:43:f3:31:86:
47:ed:78:73:23:38:34:e7:e6:af:46:42:5e:8e:64:
10:e7:10:4f:0c:fb:da:cb:94:f9:22:9e:99:f7:46:
19:ad:dc:41:b6:ce:98:63:45:5f:fd:dd:ec:26:eb:
f1:d5:fa:9c:45:a5:1d:73:73:5e:17:a2:87:36:2c:
63:6c:c6:af:55:81:55:c1:0c:6d:03:27:73:53:fa:
1e:9b:0b:96:86:d6:dc:e6:bf:2b:35:e4:ff:44:e7:
b6:51:11:fe:2e:27:aa:8f:f8:ed:9e:89:52:73:37:
35:14:6d:77:e3:b4:ea:7b:3a:47:ac:65:8f:09:3c:
b5:33:ce:b4:48:d1:2b:d3:5c:5d:a8:d6:c3:d9:54:
b9:9a:7c:f7:73:dc:26:f9:fa:dd:be:1d:bf:81:38:
55:c3:a2:5d:1b:4a:2f:fd:e1:f2:9a:20:f7:ab:61:
9b:0b:ee:45:10:4a:14:84:95:20:39:bf:7b:f3:fb:
95:d4:00:dc:cc:da:ba:4d:b2:36:63:e8:bc:f4:94:
d5:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:D3:29:4D:A6:AA:BE:99:F0:9B:B8:2C:38:C1:D2:5E:9C:9F:94:F9
X509v3 Authority Key Identifier:
keyid:47:32:EC:0E:91:DB:BF:94:DD:A1:D6:50:44:7D:26:89:76:D6:20:9A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RzLsDpHbv5TdodZQRH0miXbWIJo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/7e1b1c-f963-4e29-b8ec-788db09d0fe6/1/RzLsDpHbv5TdodZQRH0miXbWIJo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9b:01:e0:d0:0d:23:ea:67:e0:50:50:ad:91:86:9f:a1:46:53:
ac:15:79:b0:c7:3c:16:14:9d:e8:48:b6:95:36:61:b8:c6:23:
9f:54:7e:aa:f5:e8:e9:80:b1:72:42:42:89:40:94:2e:32:80:
5d:03:af:da:cd:58:24:0e:61:42:eb:0c:d4:e8:5b:ad:d9:8e:
bf:bf:2c:c7:0e:2a:ee:a8:28:c6:bd:88:3d:79:7b:96:86:d6:
ed:62:cf:66:89:04:02:86:64:58:e0:6f:c7:f1:39:85:dc:73:
d8:1b:f2:83:8d:9c:af:9e:cf:0c:29:b2:c3:79:2c:04:d7:2f:
03:39:21:a0:f8:3d:99:3a:35:1b:04:3f:9d:c6:2e:16:ee:3f:
aa:09:43:b1:99:41:d2:02:17:28:4d:3a:ae:94:f5:1e:0b:2c:
e9:94:c2:57:09:d9:22:d6:73:ca:e7:cb:ee:49:35:52:df:30:
c3:61:67:17:62:c5:f4:02:36:8a:b6:a7:1a:04:47:13:16:64:
71:8e:16:5c:5e:9e:56:e0:29:39:b0:24:ae:37:1b:5a:59:45:
ea:d6:3c:26:28:f8:7c:0d:9b:92:98:12:b9:97:4f:aa:f9:a9:
46:65:40:67:0d:04:c1:d6:4f:c4:5f:e4:a7:48:cd:e3:5a:e9:
0c:73:a5:31
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmKEXMedm6cjthE5qMH9jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MzJlYzBlOTFkYmJmOTRkZGExZDY1MDQ0N2QyNjg5NzZk
NjIwOWEwHhcNMjUwNjE0MDQwMDMxWhcNMjUwNjE1MDQwMDMxWjAzMTEwLwYDVQQD
EyhjYWQzMjk0ZGE2YWFiZTk5ZjA5YmI4MmMzOGMxZDI1ZTljOWY5NGY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwThGcjqLZYgSWeNmpE+BcLZ4N6nv
qpC/wj8ttuntdIjwBIAkiCaODybDKNruemARn6tVpR5Ck0PzMYZH7XhzIzg05+av
RkJejmQQ5xBPDPvay5T5Ip6Z90YZrdxBts6YY0Vf/d3sJuvx1fqcRaUdc3NeF6KH
NixjbMavVYFVwQxtAydzU/oemwuWhtbc5r8rNeT/ROe2URH+Lieqj/jtnolSczc1
FG1347TqezpHrGWPCTy1M860SNEr01xdqNbD2VS5mnz3c9wm+frdvh2/gThVw6Jd
G0ov/eHymiD3q2GbC+5FEEoUhJUgOb978/uV1ADczNq6TbI2Y+i89JTVOQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrTKU2mqr6Z8Ju4LDjB0l6cn5T5MB8GA1UdIwQY
MBaAFEcy7A6R27+U3aHWUER9Jol21iCaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnpMc0RwSGJ2NVRkb2RaUVJIMG1pWGJXSUpvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy83ZTFiMWMtZjk2My00ZTI5LWI4ZWMt
Nzg4ZGIwOWQwZmU2LzEvUnpMc0RwSGJ2NVRkb2RaUVJIMG1pWGJXSUpvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy83ZTFiMWMtZjk2My00ZTI5LWI4ZWMtNzg4ZGIwOWQwZmU2
LzEvUnpMc0RwSGJ2NVRkb2RaUVJIMG1pWGJXSUpvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmwHg0A0j
6mfgUFCtkYafoUZTrBV5sMc8FhSd6Ei2lTZhuMYjn1R+qvXo6YCxckJCiUCULjKA
XQOv2s1YJA5hQusM1OhbrdmOv78sxw4q7qgoxr2IPXl7lobW7WLPZokEAoZkWOBv
x/E5hdxz2Bvyg42cr57PDCmyw3ksBNcvAzkhoPg9mTo1GwQ/ncYuFu4/qglDsZlB
0gIXKE06rpT1Hgss6ZTCVwnZItZzyufL7kk1Ut8ww2FnF2LF9AI2iranGgRHExZk
cY4WXF6eVuApObAkrjcbWllF6tY8Jij4fA2bkpgSuZdPqvmpRmVAZw0EwdZPxF/k
p0jN41rpDHOlMQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:09:16 2025 by rpki-client