Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
File: dEMndQQU00na3gIjNJfPR2Vc0-Q.mft (raw, json)
Hash identifier: LA+VP9bGjcVlJBy3pMV3dhXOeXzvpaUAdvVZ8UFL+ag=
Subject key identifier: 28:82:8F:05:41:61:1C:CC:05:E7:B2:62:A7:28:1E:6C:1A:E4:0C:90
Authority key identifier: 74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
Certificate issuer: /CN=744327750414d349dade02233497cf47655cd3e4
Certificate serial: 01977C0BCCA151D6D5416030D3D9EF911BE4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
Manifest number: 0F68
Signing time: Tue 17 Jun 2025 04:00:37 +0000
Manifest this update: Tue 17 Jun 2025 04:00:37 +0000
Manifest next update: Wed 18 Jun 2025 04:00:37 +0000
Files and hashes: 1: dEMndQQU00na3gIjNJfPR2Vc0-Q.crl (hash: 8ijWTQ+HxShaUSXeJyH6f7TT0JIgokP4pRIPTfg5CM0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 04:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7c:0b:cc:a1:51:d6:d5:41:60:30:d3:d9:ef:91:1b:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=744327750414d349dade02233497cf47655cd3e4
Validity
Not Before: Jun 17 04:00:37 2025 GMT
Not After : Jun 18 04:00:37 2025 GMT
Subject: CN=28828f0541611ccc05e7b262a7281e6c1ae40c90
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:9a:04:f8:81:c3:ad:a9:bf:5e:3a:35:c6:62:
5f:11:cf:f6:d7:e2:cb:cc:80:49:cc:2c:bc:f5:d0:
d1:e8:b6:04:1d:19:0c:b3:8e:39:0f:08:7a:dc:e0:
2e:fe:81:63:f3:b6:9a:24:74:15:87:2a:64:38:9d:
73:36:4d:6a:af:41:b9:88:a9:71:3d:ed:b9:ad:25:
95:75:ff:55:63:6f:fd:8b:95:fb:8d:0a:a0:96:0d:
43:be:8d:73:27:cc:f9:fd:e7:ad:37:6b:ea:d7:46:
49:dd:ab:3a:87:5c:27:da:91:57:ad:11:b0:52:45:
b1:df:f1:21:94:d5:5c:38:ae:0e:73:5c:de:7e:13:
fb:f5:ba:29:29:ff:17:f2:e3:3f:1b:b6:1d:ca:9f:
a5:0d:8b:ac:72:10:15:27:fd:f0:ae:e5:c6:68:c1:
c3:1f:76:28:44:7b:c0:36:85:42:7e:1d:53:6c:8e:
fc:34:9d:ad:e2:af:94:d2:1c:d9:b0:76:ff:44:ea:
ec:9e:4c:65:6a:ad:de:5d:74:9e:da:3c:53:99:7e:
4e:8e:9b:d0:7f:89:07:1c:99:86:69:5c:f6:f1:01:
8f:ff:ae:f0:e1:c8:f8:99:e1:9f:b7:0c:70:32:10:
5e:ac:b3:d9:25:30:d2:7e:b0:14:af:85:56:28:e4:
62:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:82:8F:05:41:61:1C:CC:05:E7:B2:62:A7:28:1E:6C:1A:E4:0C:90
X509v3 Authority Key Identifier:
keyid:74:43:27:75:04:14:D3:49:DA:DE:02:23:34:97:CF:47:65:5C:D3:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dEMndQQU00na3gIjNJfPR2Vc0-Q.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/610872-b5b5-442f-b630-e5d1af59dea6/1/dEMndQQU00na3gIjNJfPR2Vc0-Q.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:95:35:b0:b1:bf:16:4b:3e:06:97:a2:6d:94:87:39:7c:8b:
c9:24:66:e6:2a:29:d5:be:ae:2c:94:e4:d7:53:ca:38:ca:01:
09:39:2c:08:12:74:f9:4c:ea:17:71:17:f5:98:f8:76:5c:cb:
f2:39:ed:48:e5:25:bc:a7:94:48:c3:92:a8:a9:30:31:85:a7:
53:d5:58:94:6c:34:62:59:4e:f5:57:54:4f:bb:13:fd:ff:a5:
30:56:ec:35:70:9b:f6:03:e2:2f:26:61:ab:0b:22:14:74:6c:
1f:10:b7:b4:4b:41:05:19:37:15:81:78:a7:0a:80:28:cb:41:
79:d8:24:0b:62:57:6f:26:3d:cf:62:f8:62:77:bd:28:5a:f3:
7d:4d:d2:9e:58:85:86:28:fb:c9:6b:6d:4a:5b:63:b5:3c:bc:
02:bd:81:2f:3a:4f:1e:e1:87:9e:00:c2:60:42:57:00:b5:cc:
72:22:9b:77:7c:17:6c:8a:55:e2:f8:9d:56:77:aa:43:44:9d:
68:7f:b4:5e:53:76:d6:41:c1:36:b5:64:2e:60:14:af:17:47:
85:51:44:8d:5c:07:64:fd:1a:35:6e:f1:22:93:90:bd:56:f9:
ee:79:4d:2e:59:f1:7e:13:70:d1:4b:ac:a1:8b:98:f8:d0:01:
ce:e7:0b:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd8C8yhUdbVQWAw09nvkRvkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0NDMyNzc1MDQxNGQzNDlkYWRlMDIyMzM0OTdjZjQ3NjU1
Y2QzZTQwHhcNMjUwNjE3MDQwMDM3WhcNMjUwNjE4MDQwMDM3WjAzMTEwLwYDVQQD
EygyODgyOGYwNTQxNjExY2NjMDVlN2IyNjJhNzI4MWU2YzFhZTQwYzkwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAiJoE+IHDram/Xjo1xmJfEc/21+LL
zIBJzCy89dDR6LYEHRkMs445Dwh63OAu/oFj87aaJHQVhypkOJ1zNk1qr0G5iKlx
Pe25rSWVdf9VY2/9i5X7jQqglg1Dvo1zJ8z5/eetN2vq10ZJ3as6h1wn2pFXrRGw
UkWx3/EhlNVcOK4Oc1zefhP79bopKf8X8uM/G7Ydyp+lDYuschAVJ/3wruXGaMHD
H3YoRHvANoVCfh1TbI78NJ2t4q+U0hzZsHb/ROrsnkxlaq3eXXSe2jxTmX5OjpvQ
f4kHHJmGaVz28QGP/67w4cj4meGftwxwMhBerLPZJTDSfrAUr4VWKORi2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCiCjwVBYRzMBeeyYqcoHmwa5AyQMB8GA1UdIwQY
MBaAFHRDJ3UEFNNJ2t4CIzSXz0dlXNPkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEVNbmRRUVUwMG5hM2dJak5KZlBSMlZjMC1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi82MTA4NzItYjViNS00NDJmLWI2MzAt
ZTVkMWFmNTlkZWE2LzEvZEVNbmRRUVUwMG5hM2dJak5KZlBSMlZjMC1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi82MTA4NzItYjViNS00NDJmLWI2MzAtZTVkMWFmNTlkZWE2
LzEvZEVNbmRRUVUwMG5hM2dJak5KZlBSMlZjMC1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZZU1sLG/
Fks+BpeibZSHOXyLySRm5iop1b6uLJTk11PKOMoBCTksCBJ0+UzqF3EX9Zj4dlzL
8jntSOUlvKeUSMOSqKkwMYWnU9VYlGw0YllO9VdUT7sT/f+lMFbsNXCb9gPiLyZh
qwsiFHRsHxC3tEtBBRk3FYF4pwqAKMtBedgkC2JXbyY9z2L4Yne9KFrzfU3SnliF
hij7yWttSltjtTy8Ar2BLzpPHuGHngDCYEJXALXMciKbd3wXbIpV4vidVneqQ0Sd
aH+0XlN21kHBNrVkLmAUrxdHhVFEjVwHZP0aNW7xIpOQvVb57nlNLlnxfhNw0Uus
oYuY+NABzucL8Q==
-----END CERTIFICATE-----
Generated at Tue Jun 17 14:29:46 2025 by rpki-client