Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
File: R7cYcu1kXJZm1VEavHjwfE06uKw.mft (raw, json)
Hash identifier: +HJwIiMOB8VhKgCzRx6Xxf12hY3mKDc+2L+SilSc5HY=
Subject key identifier: 32:B0:CB:2B:B5:B5:D3:B1:9B:2D:54:5B:46:4B:D5:68:50:3A:C5:B1
Authority key identifier: 47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
Certificate issuer: /CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Certificate serial: 0197786620108AE6546544306FE3ED6816BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
Manifest number: 0239
Signing time: Mon 16 Jun 2025 11:00:48 +0000
Manifest this update: Mon 16 Jun 2025 11:00:48 +0000
Manifest next update: Tue 17 Jun 2025 11:00:48 +0000
Files and hashes: 1: R7cYcu1kXJZm1VEavHjwfE06uKw.crl (hash: geEWMmcA0YCY4L3B1OujICfK4O52XHyw8klua4ifnJQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:78:66:20:10:8a:e6:54:65:44:30:6f:e3:ed:68:16:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47b71872ed645c9666d5511abc78f07c4d3ab8ac
Validity
Not Before: Jun 16 11:00:48 2025 GMT
Not After : Jun 17 11:00:48 2025 GMT
Subject: CN=32b0cb2bb5b5d3b19b2d545b464bd568503ac5b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:f9:a0:f8:5e:a5:db:cd:a2:e6:16:f1:de:33:
1a:7c:47:3b:3f:69:6a:ea:40:7d:77:7a:6c:ec:98:
90:22:93:8f:a6:96:4b:4f:f9:49:7f:c3:b3:24:c7:
d2:ea:8a:f3:50:c6:64:85:35:00:02:e9:9d:40:c4:
d5:bf:fe:ab:b2:10:e8:28:b8:b0:c6:ce:29:4a:9b:
22:e5:b0:3a:43:70:6e:18:17:53:77:31:62:1f:3f:
24:19:e2:df:d9:a2:7e:9c:f3:4b:ff:ea:79:46:1f:
50:5a:fe:92:89:1d:64:a2:d4:29:4e:3a:a4:b8:ef:
53:1b:ea:2e:9f:9f:1a:08:68:57:c5:57:16:a1:52:
e9:10:cc:5e:b1:76:64:ac:ac:8d:fc:3e:ec:f8:71:
c5:ad:38:32:90:10:b5:e1:16:f7:73:ed:07:e0:17:
5b:af:77:a2:d7:3a:75:58:ff:ea:09:d2:99:79:6c:
34:45:ce:ca:d5:fe:70:d6:2c:54:cf:72:e5:db:ab:
91:5f:9e:ea:48:08:2a:de:9f:d6:33:d4:6f:6c:97:
f4:23:d8:f0:21:ef:30:ea:7d:dd:7b:95:a6:1f:9a:
da:c3:60:0e:ca:0d:ef:19:40:9a:e4:40:ee:17:0c:
c9:90:ad:30:d8:e5:c9:d2:72:19:13:89:5d:c6:4d:
97:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:B0:CB:2B:B5:B5:D3:B1:9B:2D:54:5B:46:4B:D5:68:50:3A:C5:B1
X509v3 Authority Key Identifier:
keyid:47:B7:18:72:ED:64:5C:96:66:D5:51:1A:BC:78:F0:7C:4D:3A:B8:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R7cYcu1kXJZm1VEavHjwfE06uKw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ca/909b7b-d413-42e1-a60a-ec84dd5c69bf/1/R7cYcu1kXJZm1VEavHjwfE06uKw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:87:a7:f3:ca:96:64:d6:02:2b:f7:25:32:fe:ae:55:21:f1:
1f:3d:77:fb:6d:81:6e:fc:ee:74:10:58:18:67:75:de:43:51:
2b:c8:9e:ee:ec:45:fd:60:ac:1c:75:77:3d:04:40:c9:cc:9e:
a4:72:d2:c1:3d:8c:68:76:e2:3c:4e:38:b5:48:76:77:61:7b:
f2:82:d8:f3:f2:8e:cb:f2:f2:e6:7f:74:d1:27:4c:0d:f4:b7:
5c:ce:fa:e8:60:70:94:ae:df:cb:d0:b4:6b:85:9c:81:f6:97:
eb:be:0d:5a:ae:e7:35:af:f9:46:9a:81:49:f6:39:eb:4b:3d:
d1:37:a5:af:a4:00:25:78:aa:fe:11:0a:f9:54:b3:cf:be:ee:
90:1c:54:3f:91:39:22:00:2b:0c:5e:35:fc:30:83:3c:ab:21:
8c:b8:6f:8a:45:67:44:67:77:8d:d0:8b:e5:59:cc:3e:a2:44:
c6:0f:ab:54:6b:88:af:06:70:99:71:88:e2:02:b4:1d:02:1a:
5a:ef:a9:5e:b0:8c:f2:dc:ae:bc:d7:22:f9:2d:8a:be:be:b7:
f4:01:46:4b:2f:86:70:67:a0:13:54:a3:ec:dd:00:97:bb:3c:
ec:93:ce:88:35:a5:00:8d:15:e4:2d:91:50:c5:14:c5:18:55:
a3:bf:5d:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd4ZiAQiuZUZUQwb+PtaBa9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3YjcxODcyZWQ2NDVjOTY2NmQ1NTExYWJjNzhmMDdjNGQz
YWI4YWMwHhcNMjUwNjE2MTEwMDQ4WhcNMjUwNjE3MTEwMDQ4WjAzMTEwLwYDVQQD
EygzMmIwY2IyYmI1YjVkM2IxOWIyZDU0NWI0NjRiZDU2ODUwM2FjNWIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsfmg+F6l282i5hbx3jMafEc7P2lq
6kB9d3ps7JiQIpOPppZLT/lJf8OzJMfS6orzUMZkhTUAAumdQMTVv/6rshDoKLiw
xs4pSpsi5bA6Q3BuGBdTdzFiHz8kGeLf2aJ+nPNL/+p5Rh9QWv6SiR1kotQpTjqk
uO9TG+oun58aCGhXxVcWoVLpEMxesXZkrKyN/D7s+HHFrTgykBC14Rb3c+0H4Bdb
r3ei1zp1WP/qCdKZeWw0Rc7K1f5w1ixUz3Ll26uRX57qSAgq3p/WM9RvbJf0I9jw
Ie8w6n3de5WmH5raw2AOyg3vGUCa5EDuFwzJkK0w2OXJ0nIZE4ldxk2X7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDKwyyu1tdOxmy1UW0ZL1WhQOsWxMB8GA1UdIwQY
MBaAFEe3GHLtZFyWZtVRGrx48HxNOrisMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjdjWWN1MWtYSlptMVZFYXZIandmRTA2dUt3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYS85MDliN2ItZDQxMy00MmUxLWE2MGEt
ZWM4NGRkNWM2OWJmLzEvUjdjWWN1MWtYSlptMVZFYXZIandmRTA2dUt3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYS85MDliN2ItZDQxMy00MmUxLWE2MGEtZWM4NGRkNWM2OWJm
LzEvUjdjWWN1MWtYSlptMVZFYXZIandmRTA2dUt3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC4en88qW
ZNYCK/clMv6uVSHxHz13+22BbvzudBBYGGd13kNRK8ie7uxF/WCsHHV3PQRAycye
pHLSwT2MaHbiPE44tUh2d2F78oLY8/KOy/Ly5n900SdMDfS3XM766GBwlK7fy9C0
a4WcgfaX674NWq7nNa/5RpqBSfY560s90Telr6QAJXiq/hEK+VSzz77ukBxUP5E5
IgArDF41/DCDPKshjLhvikVnRGd3jdCL5VnMPqJExg+rVGuIrwZwmXGI4gK0HQIa
Wu+pXrCM8tyuvNci+S2Kvr639AFGSy+GcGegE1Sj7N0Al7s87JPOiDWlAI0V5C2R
UMUUxRhVo79dSA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:05:39 2025 by rpki-client