Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
File: EXdPipmODyrxj3UnnjJlSBNpRIg.mft (raw, json)
Hash identifier: ppKV3D8P6F47tVRXTXq2/UmwO8RLxIvzKVzUgbCVZxs=
Subject key identifier: C9:D0:51:35:37:85:16:42:C9:B6:00:04:E1:CB:87:CC:E6:0A:8A:21
Authority key identifier: 11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
Certificate issuer: /CN=11774f8a998e0f2af18f75279e32654813694488
Certificate serial: 01976DAC013C31F7D2EB6B43B8CDCD0182E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
Manifest number: 03D3
Signing time: Sat 14 Jun 2025 09:01:18 +0000
Manifest this update: Sat 14 Jun 2025 09:01:18 +0000
Manifest next update: Sun 15 Jun 2025 09:01:18 +0000
Files and hashes: 1: EXdPipmODyrxj3UnnjJlSBNpRIg.crl (hash: l2kaCzNf7sxk7+tByQZ6Hh1+3jifGeRRNub+wI4qvFI=)
2: lEOnyeTSrhVKx1TLByVlPzDKz8w.roa (hash: n8RWZqmzmommBj8oDYR9O53K32j7DKyp4tQyqLf5eY0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ac:01:3c:31:f7:d2:eb:6b:43:b8:cd:cd:01:82:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=11774f8a998e0f2af18f75279e32654813694488
Validity
Not Before: Jun 14 09:01:18 2025 GMT
Not After : Jun 15 09:01:18 2025 GMT
Subject: CN=c9d0513537851642c9b60004e1cb87cce60a8a21
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:3b:39:60:8e:6d:99:6f:06:26:58:d7:b2:46:
99:8d:3d:68:3b:19:2c:0e:22:80:80:6a:2f:37:09:
45:69:14:d9:0b:5e:aa:68:46:1f:bb:a0:c5:ac:65:
35:8c:a4:84:88:fd:3a:80:6c:a5:8c:5b:cd:aa:5a:
aa:23:a1:1a:16:56:aa:7e:9a:92:13:df:c5:fc:b2:
55:f0:16:e7:8f:44:dc:36:50:6f:4b:9c:55:69:54:
66:b8:7b:de:2b:b4:d7:b9:ee:54:24:81:e6:05:9a:
b7:a6:2e:80:ad:22:f3:90:9a:9e:df:01:10:83:2c:
67:7e:e4:8e:6b:73:06:c2:81:9d:f7:58:b7:1a:63:
bf:6f:00:99:8f:70:24:13:b5:28:b0:79:6d:ab:39:
55:66:37:88:50:09:93:c0:2a:1f:64:6a:ce:6a:88:
a1:aa:54:6d:d8:7e:9a:bd:0b:9f:a9:ab:4a:d4:97:
e2:47:ea:f2:f5:c5:5c:40:3c:79:c5:3c:d5:1c:f5:
d2:28:82:3c:62:0f:a7:0d:6d:f7:35:97:82:c8:fd:
97:c7:51:0d:15:b2:7c:c5:c3:8e:8b:17:83:b6:ba:
e7:1a:4c:33:25:66:d4:71:c7:c4:66:c1:b9:8c:93:
7e:2b:f7:20:39:34:2a:d6:2d:05:1f:74:9f:c9:f2:
1e:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C9:D0:51:35:37:85:16:42:C9:B6:00:04:E1:CB:87:CC:E6:0A:8A:21
X509v3 Authority Key Identifier:
keyid:11:77:4F:8A:99:8E:0F:2A:F1:8F:75:27:9E:32:65:48:13:69:44:88
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXdPipmODyrxj3UnnjJlSBNpRIg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b6/241c18-78da-4b3d-a440-0802d4c7d96d/1/EXdPipmODyrxj3UnnjJlSBNpRIg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:61:f7:c0:cd:1a:e8:4c:f3:b2:6d:b9:c5:b9:d3:8b:41:bf:
43:3d:48:d1:a3:ec:3e:b6:a7:4c:f6:29:55:0d:81:57:df:ef:
71:d2:a0:bd:d8:36:e8:89:cb:f4:6c:ad:e2:0c:ba:3e:43:7b:
e6:fb:83:06:b4:01:21:e5:10:c4:49:97:6b:11:a9:cf:cd:6b:
f5:36:d6:41:99:4f:33:79:1b:b6:04:db:8d:45:1e:64:28:f6:
07:43:f1:3c:94:ea:6b:52:85:d0:05:31:1f:70:55:12:42:f1:
af:06:7b:04:ee:c0:ef:90:16:90:0d:d0:94:7d:54:9d:38:cc:
f4:41:0c:c1:cc:b1:dd:be:bf:1e:37:50:14:4a:ef:12:63:88:
d8:94:d8:25:73:56:12:bd:0b:20:97:e8:63:30:71:eb:1d:03:
14:af:76:a2:51:c4:b6:24:87:64:de:4f:16:08:a1:ab:d5:92:
c9:91:56:30:f0:13:86:14:50:37:49:ec:e2:e0:a5:3b:47:dc:
e4:76:1e:0e:8c:dd:ab:62:b6:0c:75:df:35:ca:56:e4:f4:46:
ea:72:69:da:08:1f:a3:62:c4:46:20:3a:04:fe:a3:e0:f8:2c:
52:a5:41:2d:0c:6e:51:69:36:23:51:db:c9:8d:04:04:c5:a6:
ca:5e:40:cb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtrAE8MffS62tDuM3NAYLkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNzc0ZjhhOTk4ZTBmMmFmMThmNzUyNzllMzI2NTQ4MTM2
OTQ0ODgwHhcNMjUwNjE0MDkwMTE4WhcNMjUwNjE1MDkwMTE4WjAzMTEwLwYDVQQD
EyhjOWQwNTEzNTM3ODUxNjQyYzliNjAwMDRlMWNiODdjY2U2MGE4YTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtDs5YI5tmW8GJljXskaZjT1oOxks
DiKAgGovNwlFaRTZC16qaEYfu6DFrGU1jKSEiP06gGyljFvNqlqqI6EaFlaqfpqS
E9/F/LJV8Bbnj0TcNlBvS5xVaVRmuHveK7TXue5UJIHmBZq3pi6ArSLzkJqe3wEQ
gyxnfuSOa3MGwoGd91i3GmO/bwCZj3AkE7UosHltqzlVZjeIUAmTwCofZGrOaoih
qlRt2H6avQufqatK1JfiR+ry9cVcQDx5xTzVHPXSKII8Yg+nDW33NZeCyP2Xx1EN
FbJ8xcOOixeDtrrnGkwzJWbUccfEZsG5jJN+K/cgOTQq1i0FH3SfyfIeUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMnQUTU3hRZCybYABOHLh8zmCoohMB8GA1UdIwQY
MBaAFBF3T4qZjg8q8Y91J54yZUgTaUSIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVhkUGlwbU9EeXJ4ajNVbm5qSmxTQk5wUklnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNi8yNDFjMTgtNzhkYS00YjNkLWE0NDAt
MDgwMmQ0YzdkOTZkLzEvRVhkUGlwbU9EeXJ4ajNVbm5qSmxTQk5wUklnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNi8yNDFjMTgtNzhkYS00YjNkLWE0NDAtMDgwMmQ0YzdkOTZk
LzEvRVhkUGlwbU9EeXJ4ajNVbm5qSmxTQk5wUklnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAH2H3wM0a
6Ezzsm25xbnTi0G/Qz1I0aPsPranTPYpVQ2BV9/vcdKgvdg26InL9Gyt4gy6PkN7
5vuDBrQBIeUQxEmXaxGpz81r9TbWQZlPM3kbtgTbjUUeZCj2B0PxPJTqa1KF0AUx
H3BVEkLxrwZ7BO7A75AWkA3QlH1UnTjM9EEMwcyx3b6/HjdQFErvEmOI2JTYJXNW
Er0LIJfoYzBx6x0DFK92olHEtiSHZN5PFgihq9WSyZFWMPAThhRQN0ns4uClO0fc
5HYeDozdq2K2DHXfNcpW5PRG6nJp2ggfo2LERiA6BP6j4PgsUqVBLQxuUWk2I1Hb
yY0EBMWmyl5Ayw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:00:44 2025 by rpki-client