Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
File: 1-75t-tXrSOmB5A0KS8VatHGuXdk.mft (raw, json)
Hash identifier: iByJ7+bld8ESSjW9zH+n7+bHUhTaJYFqeegJ0KqJlRo=
Subject key identifier: 68:D8:8E:38:E1:22:07:55:68:4F:FF:29:97:81:78:3E:9C:C9:71:C0
Authority key identifier: FB:BE:6D:FA:D5:EB:48:E9:81:E4:0D:0A:4B:C5:5A:B4:71:AE:5D:D9
Certificate issuer: /CN=fbbe6dfad5eb48e981e40d0a4bc55ab471ae5dd9
Certificate serial: 019770759AC71D75153DEF4DB6918C8407CD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
Manifest number: 0818
Signing time: Sat 14 Jun 2025 22:00:44 +0000
Manifest this update: Sat 14 Jun 2025 22:00:44 +0000
Manifest next update: Sun 15 Jun 2025 22:00:44 +0000
Files and hashes: 1: 1-75t-tXrSOmB5A0KS8VatHGuXdk.crl (hash: rEzHJ6L9b6JOgmP/2VJzDXxRAwPrKW3N6HyTYwn/P5c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:44 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:9a:c7:1d:75:15:3d:ef:4d:b6:91:8c:84:07:cd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fbbe6dfad5eb48e981e40d0a4bc55ab471ae5dd9
Validity
Not Before: Jun 14 22:00:44 2025 GMT
Not After : Jun 15 22:00:44 2025 GMT
Subject: CN=68d88e38e1220755684fff299781783e9cc971c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d4:92:85:3a:d2:d1:11:53:32:af:95:c3:ef:fa:
95:b7:c9:f0:92:79:42:31:18:0b:71:3e:97:75:f5:
17:85:52:37:8f:da:c4:5d:5d:cf:9c:34:55:e0:f7:
b8:39:93:a0:94:ff:dd:ab:24:c4:c3:2e:18:19:06:
a3:e6:c1:62:b5:a7:74:00:58:2f:e5:c6:be:7b:79:
99:aa:ac:8e:7e:f4:b5:45:13:c8:bd:6f:89:2e:64:
b0:cb:c8:c0:c7:3a:1f:cf:69:e4:04:5e:bd:3c:15:
86:71:82:e3:ef:46:c5:b9:49:2e:ca:a9:ac:1e:cc:
be:86:99:b8:37:b0:f3:dd:07:d8:9b:41:b0:b4:11:
63:e8:a5:2c:aa:4e:8b:3c:4e:eb:33:1c:84:01:21:
79:5d:3e:95:99:e8:8e:f7:52:79:a3:61:47:9f:b9:
5b:7c:ad:fe:d3:6f:9d:10:67:78:1d:0b:92:2a:c3:
05:25:99:ae:71:17:c7:b1:e2:9d:53:a2:73:43:b6:
7e:98:0c:6c:35:ef:2b:a5:73:2a:b0:20:82:e6:72:
87:90:18:2d:1b:f4:e8:ee:07:15:d7:46:97:47:7e:
46:ca:53:8b:bd:c6:6d:3d:2b:58:89:9c:83:5b:01:
1d:52:8a:de:cb:bb:64:da:0c:10:4f:f1:cd:4f:df:
29:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:D8:8E:38:E1:22:07:55:68:4F:FF:29:97:81:78:3E:9C:C9:71:C0
X509v3 Authority Key Identifier:
keyid:FB:BE:6D:FA:D5:EB:48:E9:81:E4:0D:0A:4B:C5:5A:B4:71:AE:5D:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-75t-tXrSOmB5A0KS8VatHGuXdk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/07c50a-73ba-4879-8dc6-0fc7f510fce8/1/1-75t-tXrSOmB5A0KS8VatHGuXdk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:6c:55:ff:db:d6:2b:d7:a9:4c:97:12:9c:33:e0:d2:9f:5f:
1d:aa:be:72:a7:71:de:61:51:77:04:ee:52:59:fd:3c:76:86:
cf:8c:78:6f:5a:dd:9f:82:4b:69:4a:86:39:7f:f3:ae:d8:f9:
dd:86:08:09:f7:43:4b:71:15:f1:4f:76:07:6b:06:f3:dd:8e:
d5:7b:4c:a6:e7:26:e8:eb:2d:61:de:84:30:43:4c:70:80:6b:
6c:15:d4:4b:03:2f:67:51:5c:6a:0d:28:5c:c5:f0:ae:54:30:
87:cb:0a:83:59:1e:52:52:fe:1f:4f:87:91:2c:44:4d:a4:16:
58:4d:8a:ca:db:6d:2d:97:9e:e8:81:96:20:a6:b7:d2:92:0b:
68:a2:09:68:98:6c:91:32:ed:11:2a:18:7c:e0:c2:49:b6:6f:
9c:23:e1:fe:0d:cc:36:7e:3a:25:6a:61:ed:34:ca:a1:d9:88:
1c:24:c2:05:77:38:fb:2a:6b:36:80:4e:57:2f:a9:72:af:06:
27:82:bf:01:4f:2c:63:e9:0f:ca:98:bc:69:25:16:b5:49:44:
61:80:a3:a4:ed:a0:24:1f:85:29:ee:92:f2:e9:a5:a1:81:09:
eb:c5:b6:a5:0d:76:86:c8:f0:f7:4f:ab:b4:b4:0b:a8:81:56:
b7:50:13:43
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdwdZrHHXUVPe9NtpGMhAfNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiYmU2ZGZhZDVlYjQ4ZTk4MWU0MGQwYTRiYzU1YWI0NzFh
ZTVkZDkwHhcNMjUwNjE0MjIwMDQ0WhcNMjUwNjE1MjIwMDQ0WjAzMTEwLwYDVQQD
Eyg2OGQ4OGUzOGUxMjIwNzU1Njg0ZmZmMjk5NzgxNzgzZTljYzk3MWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1JKFOtLREVMyr5XD7/qVt8nwknlC
MRgLcT6XdfUXhVI3j9rEXV3PnDRV4Pe4OZOglP/dqyTEwy4YGQaj5sFitad0AFgv
5ca+e3mZqqyOfvS1RRPIvW+JLmSwy8jAxzofz2nkBF69PBWGcYLj70bFuUkuyqms
Hsy+hpm4N7Dz3QfYm0GwtBFj6KUsqk6LPE7rMxyEASF5XT6VmeiO91J5o2FHn7lb
fK3+02+dEGd4HQuSKsMFJZmucRfHseKdU6JzQ7Z+mAxsNe8rpXMqsCCC5nKHkBgt
G/To7gcV10aXR35GylOLvcZtPStYiZyDWwEdUorey7tk2gwQT/HNT98pJwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFGjYjjjhIgdVaE//KZeBeD6cyXHAMB8GA1UdIwQY
MBaAFPu+bfrV60jpgeQNCkvFWrRxrl3ZMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS03NXQtdFhyU09tQjVBMEtTOFZhdEhHdVhkay5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZWYvMDdjNTBhLTczYmEtNDg3OS04ZGM2
LTBmYzdmNTEwZmNlOC8xLzEtNzV0LXRYclNPbUI1QTBLUzhWYXRIR3VYZGsubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2VmLzA3YzUwYS03M2JhLTQ4NzktOGRjNi0wZmM3ZjUxMGZj
ZTgvMS8xLTc1dC10WHJTT21CNUEwS1M4VmF0SEd1WGRrLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkGxV
/9vWK9epTJcSnDPg0p9fHaq+cqdx3mFRdwTuUln9PHaGz4x4b1rdn4JLaUqGOX/z
rtj53YYICfdDS3EV8U92B2sG892O1XtMpucm6OstYd6EMENMcIBrbBXUSwMvZ1Fc
ag0oXMXwrlQwh8sKg1keUlL+H0+HkSxETaQWWE2KytttLZee6IGWIKa30pILaKIJ
aJhskTLtESoYfODCSbZvnCPh/g3MNn46JWph7TTKodmIHCTCBXc4+yprNoBOVy+p
cq8GJ4K/AU8sY+kPypi8aSUWtUlEYYCjpO2gJB+FKe6S8umloYEJ68W2pQ12hsjw
90+rtLQLqIFWt1ATQw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:32:49 2025 by rpki-client