Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
File: G3esnt9lAaus5fStroTZyv4HkI0.mft (raw, json)
Hash identifier: jWO2+CSjbH7qCbgSYVboGQPhX6TY50SctZMVGvB3/ps=
Subject key identifier: 94:BF:E8:EC:B8:7E:42:CF:EC:EB:33:8B:D1:3A:40:1D:F3:DD:22:BB
Authority key identifier: 1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D
Certificate issuer: /CN=1b77ac9edf6501abace5f4adae84d9cafe07908d
Certificate serial: 019769615310FBE1CC1E8F01800CC20C5E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 13:01:15 +0000
Manifest this update: Fri 13 Jun 2025 13:01:15 +0000
Manifest next update: Sat 14 Jun 2025 13:01:15 +0000
Files and hashes: 1: G3esnt9lAaus5fStroTZyv4HkI0.crl (hash: 8L2LCK0W0ABfjEwI4Jvbktqw6nkTS/aRXsn2CEbEErM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:15 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:53:10:fb:e1:cc:1e:8f:01:80:0c:c2:0c:5e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1b77ac9edf6501abace5f4adae84d9cafe07908d
Validity
Not Before: Jun 13 13:01:15 2025 GMT
Not After : Jun 14 13:01:15 2025 GMT
Subject: CN=94bfe8ecb87e42cfeceb338bd13a401df3dd22bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:26:ba:ff:e0:49:1b:a4:28:b1:0f:98:97:08:
ef:39:07:e5:e3:84:bf:04:f5:8a:de:40:db:00:d3:
3c:73:48:a9:2c:7c:96:eb:26:00:c3:fb:2c:12:fb:
fe:66:57:b4:88:ba:9b:1c:d9:fa:b5:a2:e6:11:59:
9c:ab:8d:87:6e:81:6a:77:61:f1:5e:f4:a7:57:4a:
04:41:39:7a:af:bd:f8:01:7a:c4:1f:ab:bc:82:27:
5a:18:38:8b:6d:ea:60:2d:0e:74:68:4c:7e:9f:df:
dc:8d:08:b4:49:67:24:3e:ca:9f:cb:f3:f6:6f:3e:
86:62:0a:2f:85:b1:e4:7c:8b:d8:41:a0:06:34:b2:
34:ee:21:d4:f1:77:f9:8d:96:79:c5:02:8b:d9:aa:
a6:db:4e:7a:e0:62:ed:56:5b:f1:38:e9:6a:76:f4:
64:f9:48:29:70:29:67:7f:84:28:87:67:df:3f:a5:
95:53:0d:6b:ff:3f:01:e8:35:29:fa:0f:3d:ac:1f:
be:48:14:cf:7f:f8:42:a2:1a:30:44:23:93:ac:a8:
f6:a0:15:0e:cb:87:e9:4a:8a:ef:17:86:d5:48:93:
1e:1b:b3:d8:44:94:93:99:85:99:f0:7c:05:d6:e5:
4f:fe:b2:fd:80:17:ba:c2:76:ff:0f:53:46:34:a7:
67:b9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:BF:E8:EC:B8:7E:42:CF:EC:EB:33:8B:D1:3A:40:1D:F3:DD:22:BB
X509v3 Authority Key Identifier:
keyid:1B:77:AC:9E:DF:65:01:AB:AC:E5:F4:AD:AE:84:D9:CA:FE:07:90:8D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/G3esnt9lAaus5fStroTZyv4HkI0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/71be76-564f-4294-9c24-d158d5c5cbcc/1/G3esnt9lAaus5fStroTZyv4HkI0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:56:65:36:18:e9:4a:0a:5f:22:7c:17:7f:d2:b6:80:4d:bc:
c4:24:92:72:92:4a:7c:a0:a9:b7:c9:69:89:58:74:5b:4a:90:
09:ef:a0:26:5c:5a:35:3c:70:0e:0c:9f:cb:6a:6f:26:fe:86:
cd:43:15:25:79:f3:37:d5:45:ec:e5:69:21:2b:d9:91:5e:45:
1d:f3:54:17:f5:9c:ca:44:b6:5f:88:7a:05:78:a6:f6:27:a9:
7f:f6:a4:f1:1d:bb:37:76:0c:1f:83:ec:8b:60:79:69:d5:f3:
49:77:87:c0:ee:56:c1:dc:2f:c2:ee:81:70:bf:d9:87:2b:54:
32:80:5e:0a:a5:05:56:a8:81:1c:f9:49:10:71:c5:64:d2:9d:
2f:e4:10:a5:81:8f:fa:a1:08:1a:b0:0f:d9:93:b2:7e:e3:97:
34:54:94:46:c2:6e:fd:13:b4:72:eb:98:11:66:8b:b1:dd:50:
f3:59:76:82:f2:9c:6d:c6:1e:72:20:7a:bc:be:a8:f4:10:2d:
35:ab:b8:86:dd:06:d8:8d:22:84:33:9d:29:23:34:d1:3d:14:
4c:44:9c:e5:3e:10:70:83:d8:a3:0d:6e:eb:b6:07:fd:29:bd:
1f:cf:4a:c3:f0:25:ed:04:69:da:50:8a:73:4a:59:9a:b7:62:
99:e0:0f:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYVMQ++HMHo8BgAzCDF5IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFiNzdhYzllZGY2NTAxYWJhY2U1ZjRhZGFlODRkOWNhZmUw
NzkwOGQwHhcNMjUwNjEzMTMwMTE1WhcNMjUwNjE0MTMwMTE1WjAzMTEwLwYDVQQD
Eyg5NGJmZThlY2I4N2U0MmNmZWNlYjMzOGJkMTNhNDAxZGYzZGQyMmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsCa6/+BJG6QosQ+YlwjvOQfl44S/
BPWK3kDbANM8c0ipLHyW6yYAw/ssEvv+Zle0iLqbHNn6taLmEVmcq42HboFqd2Hx
XvSnV0oEQTl6r734AXrEH6u8gidaGDiLbepgLQ50aEx+n9/cjQi0SWckPsqfy/P2
bz6GYgovhbHkfIvYQaAGNLI07iHU8Xf5jZZ5xQKL2aqm20564GLtVlvxOOlqdvRk
+UgpcClnf4Qoh2ffP6WVUw1r/z8B6DUp+g89rB++SBTPf/hCohowRCOTrKj2oBUO
y4fpSorvF4bVSJMeG7PYRJSTmYWZ8HwF1uVP/rL9gBe6wnb/D1NGNKdnuQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJS/6Oy4fkLP7Oszi9E6QB3z3SK7MB8GA1UdIwQY
MBaAFBt3rJ7fZQGrrOX0ra6E2cr+B5CNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRzNlc250OWxBYXVzNWZTdHJvVFp5djRIa0kwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS83MWJlNzYtNTY0Zi00Mjk0LTljMjQt
ZDE1OGQ1YzVjYmNjLzEvRzNlc250OWxBYXVzNWZTdHJvVFp5djRIa0kwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS83MWJlNzYtNTY0Zi00Mjk0LTljMjQtZDE1OGQ1YzVjYmNj
LzEvRzNlc250OWxBYXVzNWZTdHJvVFp5djRIa0kwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANFZlNhjp
SgpfInwXf9K2gE28xCSScpJKfKCpt8lpiVh0W0qQCe+gJlxaNTxwDgyfy2pvJv6G
zUMVJXnzN9VF7OVpISvZkV5FHfNUF/WcykS2X4h6BXim9iepf/ak8R27N3YMH4Ps
i2B5adXzSXeHwO5Wwdwvwu6BcL/ZhytUMoBeCqUFVqiBHPlJEHHFZNKdL+QQpYGP
+qEIGrAP2ZOyfuOXNFSURsJu/RO0cuuYEWaLsd1Q81l2gvKcbcYeciB6vL6o9BAt
Nau4ht0G2I0ihDOdKSM00T0UTESc5T4QcIPYow1u67YH/Sm9H89Kw/Al7QRp2lCK
c0pZmrdimeAPnw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:27:32 2025 by rpki-client