Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
File: rakwWHtP0v73KPBW7KhohCLDuXw.mft (raw, json)
Hash identifier: d7izsjVVoPwnd+1f7os3bUbv76KCV34bnhnCBezn9rA=
Subject key identifier: 73:20:DA:05:1C:4A:43:3D:7B:D7:43:4F:8C:D8:1B:35:D5:04:59:60
Authority key identifier: AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
Certificate issuer: /CN=ada930587b4fd2fef728f056eca8688422c3b97c
Certificate serial: 019776E631889EA6D0038D1C4926E9A1F57B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
Manifest number: 0A62
Signing time: Mon 16 Jun 2025 04:01:26 +0000
Manifest this update: Mon 16 Jun 2025 04:01:26 +0000
Manifest next update: Tue 17 Jun 2025 04:01:26 +0000
Files and hashes: 1: rakwWHtP0v73KPBW7KhohCLDuXw.crl (hash: exrRpSaUFhwEStV47d3DDRieQr0D8EW74+68imXOp38=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 04:01:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:e6:31:88:9e:a6:d0:03:8d:1c:49:26:e9:a1:f5:7b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ada930587b4fd2fef728f056eca8688422c3b97c
Validity
Not Before: Jun 16 04:01:26 2025 GMT
Not After : Jun 17 04:01:26 2025 GMT
Subject: CN=7320da051c4a433d7bd7434f8cd81b35d5045960
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:6f:24:02:0e:3a:f8:c8:66:6e:3d:75:7c:e9:
58:4a:b3:10:1f:3b:35:92:ef:4e:8a:de:59:aa:3a:
8b:c4:11:ae:3a:c2:4d:45:9f:e8:f4:d0:11:82:0a:
60:05:08:a5:de:13:fc:47:08:99:4f:7c:95:d4:0e:
5b:fb:0e:40:ff:ed:80:65:b5:f7:37:1c:3b:5c:3d:
a4:03:b3:5d:07:f8:5a:6b:fc:1e:03:39:f1:62:e0:
49:db:85:77:fd:45:bf:9b:5a:d6:2b:88:59:0d:d6:
78:55:c5:cb:e5:20:ff:cf:bb:a0:d2:23:a1:3c:b4:
e4:ff:a5:22:1b:0f:b4:26:aa:4b:18:84:e8:d4:56:
dc:00:32:0a:c0:df:e4:33:68:a4:b3:fc:54:cc:63:
57:40:16:bb:09:b5:8c:2a:21:23:08:aa:cf:f5:40:
a5:f8:cf:d5:5c:fe:11:4f:e0:18:c3:20:51:95:1b:
2f:37:b0:83:96:51:4f:2e:11:c0:a0:51:22:10:7b:
e9:d2:75:48:38:02:91:4d:cd:d8:65:0a:ec:d7:a4:
2f:0e:ce:17:e1:85:87:b9:06:74:6f:15:c3:a4:d8:
4b:1a:92:e7:a6:f4:ca:06:41:23:fe:33:75:d3:70:
0e:95:2c:b6:59:e7:6f:57:77:17:95:da:d5:2c:e0:
35:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
73:20:DA:05:1C:4A:43:3D:7B:D7:43:4F:8C:D8:1B:35:D5:04:59:60
X509v3 Authority Key Identifier:
keyid:AD:A9:30:58:7B:4F:D2:FE:F7:28:F0:56:EC:A8:68:84:22:C3:B9:7C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rakwWHtP0v73KPBW7KhohCLDuXw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/33c6ea-0aa2-4581-9418-3891e6fefea4/1/rakwWHtP0v73KPBW7KhohCLDuXw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:73:ab:c3:c8:5c:63:b4:a4:96:dc:a2:82:41:0c:91:d7:e4:
ef:ea:bd:ed:c0:41:b2:d1:9f:37:41:5e:e1:8d:cd:2b:0a:d8:
cd:91:b8:e8:f2:f1:97:f1:dd:3a:fa:75:c3:54:50:9b:de:27:
b7:f9:b9:6e:37:2e:a8:60:9c:7b:d6:68:b4:81:2c:c1:61:68:
a7:31:57:bd:7f:98:47:42:3b:4c:f2:f1:38:6d:93:c5:0b:3c:
e2:27:36:94:6c:41:de:a1:96:47:5e:2c:31:e9:96:1d:8e:14:
80:2d:d4:a8:33:5c:39:b3:a2:d2:1f:a6:60:f2:e1:bb:dd:51:
27:0c:a5:78:85:aa:f1:89:56:25:39:c6:91:b5:73:df:1f:59:
32:7f:84:fd:a1:9d:0b:db:de:58:c9:69:16:6b:d3:1b:33:1a:
fb:92:0d:09:3f:be:99:a9:38:03:42:a8:5e:7e:91:04:90:6e:
3d:0b:91:9f:7e:a9:72:bb:cb:84:9b:0a:d4:aa:d6:e5:88:fd:
21:18:19:43:85:01:a5:5a:66:d4:fd:0a:2e:6a:02:97:87:d4:
29:02:38:ef:94:ff:ac:38:d8:67:79:2d:e2:85:cc:23:fe:c2:
f8:dc:cb:1e:9f:b2:56:40:f9:19:b1:60:ef:1d:d9:4a:50:d9:
dc:49:ca:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd25jGInqbQA40cSSbpofV7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkYTkzMDU4N2I0ZmQyZmVmNzI4ZjA1NmVjYTg2ODg0MjJj
M2I5N2MwHhcNMjUwNjE2MDQwMTI2WhcNMjUwNjE3MDQwMTI2WjAzMTEwLwYDVQQD
Eyg3MzIwZGEwNTFjNGE0MzNkN2JkNzQzNGY4Y2Q4MWIzNWQ1MDQ1OTYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxG8kAg46+Mhmbj11fOlYSrMQHzs1
ku9Oit5ZqjqLxBGuOsJNRZ/o9NARggpgBQil3hP8RwiZT3yV1A5b+w5A/+2AZbX3
Nxw7XD2kA7NdB/haa/weAznxYuBJ24V3/UW/m1rWK4hZDdZ4VcXL5SD/z7ug0iOh
PLTk/6UiGw+0JqpLGITo1FbcADIKwN/kM2iks/xUzGNXQBa7CbWMKiEjCKrP9UCl
+M/VXP4RT+AYwyBRlRsvN7CDllFPLhHAoFEiEHvp0nVIOAKRTc3YZQrs16QvDs4X
4YWHuQZ0bxXDpNhLGpLnpvTKBkEj/jN103AOlSy2WedvV3cXldrVLOA1GQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHMg2gUcSkM9e9dDT4zYGzXVBFlgMB8GA1UdIwQY
MBaAFK2pMFh7T9L+9yjwVuyoaIQiw7l8MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy8zM2M2ZWEtMGFhMi00NTgxLTk0MTgt
Mzg5MWU2ZmVmZWE0LzEvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy8zM2M2ZWEtMGFhMi00NTgxLTk0MTgtMzg5MWU2ZmVmZWE0
LzEvcmFrd1dIdFAwdjczS1BCVzdLaG9oQ0xEdVh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg3Orw8hc
Y7SkltyigkEMkdfk7+q97cBBstGfN0Fe4Y3NKwrYzZG46PLxl/HdOvp1w1RQm94n
t/m5bjcuqGCce9ZotIEswWFopzFXvX+YR0I7TPLxOG2TxQs84ic2lGxB3qGWR14s
MemWHY4UgC3UqDNcObOi0h+mYPLhu91RJwyleIWq8YlWJTnGkbVz3x9ZMn+E/aGd
C9veWMlpFmvTGzMa+5INCT++mak4A0KoXn6RBJBuPQuRn36pcrvLhJsK1KrW5Yj9
IRgZQ4UBpVpm1P0KLmoCl4fUKQI475T/rDjYZ3kt4oXMI/7C+NzLHp+yVkD5GbFg
7x3ZSlDZ3EnKuw==
-----END CERTIFICATE-----
Generated at Mon Jun 16 13:33:24 2025 by rpki-client