Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
File: 718cQVLEpGBV9yy-hmqI1QDfmD8.mft (raw, json)
Hash identifier: Zj1/ChI+vSKUFt2dlXUJlfyybPAajOAc8qgcuaICgsU=
Subject key identifier: 38:6E:29:E4:6C:F1:99:C2:3B:B5:C6:F4:8B:E0:6B:8B:5D:80:8D:E3
Authority key identifier: EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
Certificate issuer: /CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Certificate serial: 01976D3D881CD6621B128D8C6D822311386D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
Manifest number: 0F87
Signing time: Sat 14 Jun 2025 07:00:38 +0000
Manifest this update: Sat 14 Jun 2025 07:00:38 +0000
Manifest next update: Sun 15 Jun 2025 07:00:38 +0000
Files and hashes: 1: 718cQVLEpGBV9yy-hmqI1QDfmD8.crl (hash: wA5krOk10vuAiUuqGpGknr+GtKBdT0+HwGCAsaiRzkg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:88:1c:d6:62:1b:12:8d:8c:6d:82:23:11:38:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef5f1c4152c4a46055f72cbe866a88d500df983f
Validity
Not Before: Jun 14 07:00:38 2025 GMT
Not After : Jun 15 07:00:38 2025 GMT
Subject: CN=386e29e46cf199c23bb5c6f48be06b8b5d808de3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:81:6a:09:c6:4b:80:30:f4:b6:9f:2b:7b:0d:
b4:93:ee:2d:2d:e3:1c:c5:fe:29:b5:a6:b4:8d:21:
6a:3c:90:7a:cd:6a:a7:b0:c3:be:80:e5:87:f7:fc:
b7:2e:d0:97:b7:fd:fe:67:5e:82:00:35:06:36:23:
94:c4:49:b0:96:e7:66:a5:64:7c:05:24:04:ed:cc:
e0:76:5a:b0:79:bc:f1:0e:10:fd:29:7b:0b:ac:57:
3b:32:01:b6:b2:e7:07:67:83:a8:ce:3b:90:18:14:
34:3e:80:fc:8e:af:6e:83:94:e6:f1:09:27:ab:27:
a6:56:3c:9e:d7:02:84:ad:43:02:31:bb:6b:e3:43:
d8:ff:f5:d0:2d:ef:e7:6c:39:a2:1d:88:d1:83:77:
15:2d:4f:27:8f:eb:11:22:80:1e:91:2e:07:28:97:
b1:fd:2a:f2:91:a9:ab:ed:49:a9:18:a2:11:5e:dd:
38:ca:d6:47:c7:0e:f9:13:c7:94:85:1a:45:62:f3:
6b:9d:2c:1b:b1:1c:0e:24:b6:2c:fb:3f:57:b0:f1:
fb:c3:91:17:22:bc:3d:9a:13:d9:66:9a:7c:33:51:
c7:70:24:78:c0:75:62:72:32:0a:52:9e:d4:2d:7f:
1a:48:1c:42:79:4e:f5:b9:86:e4:70:78:84:17:15:
5c:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:6E:29:E4:6C:F1:99:C2:3B:B5:C6:F4:8B:E0:6B:8B:5D:80:8D:E3
X509v3 Authority Key Identifier:
keyid:EF:5F:1C:41:52:C4:A4:60:55:F7:2C:BE:86:6A:88:D5:00:DF:98:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/718cQVLEpGBV9yy-hmqI1QDfmD8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c2/85cf2e-c9da-4010-a093-e4446f2c12ec/1/718cQVLEpGBV9yy-hmqI1QDfmD8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:ef:cd:0e:9d:2d:50:f5:45:44:d6:2e:58:1b:09:54:43:65:
a0:91:cb:15:ce:38:18:6d:18:bc:52:98:c1:45:10:2d:9c:b8:
08:b3:d6:89:64:c2:2f:aa:49:0b:cb:52:66:d2:3a:8d:96:cf:
75:f7:9e:30:1e:19:f2:b1:51:27:bf:05:2d:49:ca:15:c7:0c:
bf:f8:20:c0:3c:d5:34:27:ab:c5:02:0a:5c:db:30:03:c9:08:
01:4a:c5:5c:78:98:94:f3:0c:39:f5:80:5c:f8:ab:f3:5b:ac:
76:01:9a:ef:75:5a:b4:41:36:86:11:9b:eb:ac:96:d7:5d:e5:
ed:c2:ed:8f:da:38:ca:26:df:e4:5f:5b:a5:03:d4:7e:a2:7f:
21:66:ef:c3:5f:0c:36:4a:92:99:2f:73:3d:d6:52:43:06:55:
b1:03:bf:d0:f7:35:3b:c7:22:83:77:44:52:d0:68:69:89:e2:
6b:9d:cd:4c:e0:df:cb:04:4b:1a:c4:91:47:54:65:50:d3:32:
28:5d:78:7a:99:83:c1:08:af:b3:de:1d:a8:5f:fd:9b:7d:83:
b7:8e:8c:e2:51:64:70:24:ed:3e:ff:3c:1b:db:44:21:cb:4e:
50:a0:11:c7:06:e9:43:9b:f2:23:bb:84:f1:a7:5b:61:ea:e6:
cf:51:d2:86
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPYgc1mIbEo2MbYIjEThtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNWYxYzQxNTJjNGE0NjA1NWY3MmNiZTg2NmE4OGQ1MDBk
Zjk4M2YwHhcNMjUwNjE0MDcwMDM4WhcNMjUwNjE1MDcwMDM4WjAzMTEwLwYDVQQD
EygzODZlMjllNDZjZjE5OWMyM2JiNWM2ZjQ4YmUwNmI4YjVkODA4ZGUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIFqCcZLgDD0tp8rew20k+4tLeMc
xf4ptaa0jSFqPJB6zWqnsMO+gOWH9/y3LtCXt/3+Z16CADUGNiOUxEmwludmpWR8
BSQE7czgdlqwebzxDhD9KXsLrFc7MgG2sucHZ4OozjuQGBQ0PoD8jq9ug5Tm8Qkn
qyemVjye1wKErUMCMbtr40PY//XQLe/nbDmiHYjRg3cVLU8nj+sRIoAekS4HKJex
/Srykamr7UmpGKIRXt04ytZHxw75E8eUhRpFYvNrnSwbsRwOJLYs+z9XsPH7w5EX
Irw9mhPZZpp8M1HHcCR4wHVicjIKUp7ULX8aSBxCeU71uYbkcHiEFxVcFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDhuKeRs8ZnCO7XG9Ivga4tdgI3jMB8GA1UdIwQY
MBaAFO9fHEFSxKRgVfcsvoZqiNUA35g/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzE4Y1FWTEVwR0JWOXl5LWhtcUkxUURmbUQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jMi84NWNmMmUtYzlkYS00MDEwLWEwOTMt
ZTQ0NDZmMmMxMmVjLzEvNzE4Y1FWTEVwR0JWOXl5LWhtcUkxUURmbUQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jMi84NWNmMmUtYzlkYS00MDEwLWEwOTMtZTQ0NDZmMmMxMmVj
LzEvNzE4Y1FWTEVwR0JWOXl5LWhtcUkxUURmbUQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhO/NDp0t
UPVFRNYuWBsJVENloJHLFc44GG0YvFKYwUUQLZy4CLPWiWTCL6pJC8tSZtI6jZbP
dfeeMB4Z8rFRJ78FLUnKFccMv/ggwDzVNCerxQIKXNswA8kIAUrFXHiYlPMMOfWA
XPir81usdgGa73VatEE2hhGb66yW113l7cLtj9o4yibf5F9bpQPUfqJ/IWbvw18M
NkqSmS9zPdZSQwZVsQO/0Pc1O8cig3dEUtBoaYnia53NTODfywRLGsSRR1RlUNMy
KF14epmDwQivs94dqF/9m32Dt46M4lFkcCTtPv88G9tEIctOUKARxwbpQ5vyI7uE
8adbYermz1HShg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:57:06 2025 by rpki-client