Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
File: CDcIEWsEvCt2dT4aQwt8vuCc26U.mft (raw, json)
Hash identifier: J3GCw82pVYgREFJj4fvQiCc344LN0SgxDodiS4kRdu0=
Subject key identifier: 34:63:12:43:29:9B:4D:B9:B6:AF:15:B6:C6:97:D2:1E:73:94:A7:81
Authority key identifier: 08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
Certificate issuer: /CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Certificate serial: 0197B5FC44F2D5948FE686A46BDE5D3F5C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
Manifest number: 099D
Signing time: Sat 28 Jun 2025 10:01:38 +0000
Manifest this update: Sat 28 Jun 2025 10:01:38 +0000
Manifest next update: Sun 29 Jun 2025 10:01:38 +0000
Files and hashes: 1: CDcIEWsEvCt2dT4aQwt8vuCc26U.crl (hash: QFIDBkOMd1Kls7Gy5J9ZXjkb3YQ5fZ4iLss9q3mvOX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:44:f2:d5:94:8f:e6:86:a4:6b:de:5d:3f:5c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=083708116b04bc2b76753e1a430b7cbee09cdba5
Validity
Not Before: Jun 28 10:01:38 2025 GMT
Not After : Jun 29 10:01:38 2025 GMT
Subject: CN=34631243299b4db9b6af15b6c697d21e7394a781
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:72:15:64:8f:83:e0:dd:22:9d:a3:18:b5:5f:
6a:ab:9b:e6:fe:2d:af:b9:e0:92:26:f0:f3:7a:3d:
92:c1:fb:ad:3f:ff:4e:58:d2:e0:0d:c8:c1:65:dd:
c3:fb:2c:d8:69:a5:b2:28:dd:c7:72:dc:09:ad:fb:
eb:e7:28:43:0e:83:30:18:bc:d3:03:20:8d:ae:4c:
f9:0b:d4:33:52:22:9a:59:2a:3c:0c:a6:f1:01:c2:
a6:13:ab:87:0e:c4:10:af:4d:5a:b6:89:70:90:ef:
a1:22:2b:1e:8b:b0:8a:9d:c0:64:04:7f:15:3d:bb:
ad:42:54:6a:5d:0c:16:c5:67:a6:43:7b:d3:c6:9e:
a2:87:3e:1d:33:25:3c:57:13:9d:dc:e2:64:45:26:
da:fa:f1:d8:5f:25:83:67:9e:ec:33:97:02:a3:93:
e9:c3:f8:82:85:3a:06:10:1e:6e:83:7d:49:50:79:
cd:fa:3d:ca:19:c2:fe:87:48:8d:ef:aa:eb:67:db:
05:af:23:b2:4e:d3:99:94:60:f4:82:ac:9a:ea:b8:
f6:26:a1:3c:9d:02:d1:89:36:b9:a6:2e:23:ee:e4:
d6:62:c7:c8:d9:7b:e0:cf:b1:09:61:d9:38:c2:69:
38:f5:ed:3b:c5:1d:c3:98:26:82:09:d3:52:05:f9:
7d:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:63:12:43:29:9B:4D:B9:B6:AF:15:B6:C6:97:D2:1E:73:94:A7:81
X509v3 Authority Key Identifier:
keyid:08:37:08:11:6B:04:BC:2B:76:75:3E:1A:43:0B:7C:BE:E0:9C:DB:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CDcIEWsEvCt2dT4aQwt8vuCc26U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/e8cb29-8f3e-4e2c-8505-0f292996f86c/1/CDcIEWsEvCt2dT4aQwt8vuCc26U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:b2:08:bc:ab:33:1e:cc:58:81:04:a6:83:04:49:40:a0:5a:
8d:39:9a:ab:05:6b:35:da:03:86:54:0c:c3:56:c9:59:4f:55:
f0:7f:58:13:29:42:2b:98:b2:0e:5b:16:82:87:12:2b:71:5b:
3b:e3:81:15:b1:49:0c:6b:84:45:dc:7d:e7:e5:c4:02:b6:9d:
ba:f2:cc:3c:8d:dd:8c:32:d2:c9:58:30:34:0d:f3:dc:6f:98:
17:8d:7c:f8:1b:9b:3a:9f:ed:56:b2:a2:1d:c9:4b:33:cd:8c:
df:d0:ca:61:27:cd:12:21:67:ae:7d:1b:52:6d:69:46:ce:a2:
1a:e8:99:be:64:34:46:0e:f0:df:ac:2f:53:34:0c:61:02:4f:
9d:c8:c7:13:c8:39:94:12:f9:1d:82:aa:67:ef:48:07:43:41:
b6:d9:4c:46:5d:18:8a:86:57:27:7d:ed:65:50:76:5b:a6:c6:
4e:a4:eb:d8:e2:33:0b:67:3f:17:fc:8a:8a:14:58:39:58:76:
d8:89:1e:43:1c:1f:c4:d2:18:63:0f:94:74:ab:23:2b:c0:dd:
b3:92:f2:37:c7:f7:f9:11:eb:8b:41:88:91:eb:77:21:8b:28:
c7:84:4c:46:bf:63:6d:22:5e:e4:55:a9:db:60:4b:4d:f8:9c:
55:d6:5a:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/ETy1ZSP5oaka95dP1w5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4MzcwODExNmIwNGJjMmI3Njc1M2UxYTQzMGI3Y2JlZTA5
Y2RiYTUwHhcNMjUwNjI4MTAwMTM4WhcNMjUwNjI5MTAwMTM4WjAzMTEwLwYDVQQD
EygzNDYzMTI0MzI5OWI0ZGI5YjZhZjE1YjZjNjk3ZDIxZTczOTRhNzgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2HIVZI+D4N0inaMYtV9qq5vm/i2v
ueCSJvDzej2SwfutP/9OWNLgDcjBZd3D+yzYaaWyKN3HctwJrfvr5yhDDoMwGLzT
AyCNrkz5C9QzUiKaWSo8DKbxAcKmE6uHDsQQr01atolwkO+hIisei7CKncBkBH8V
PbutQlRqXQwWxWemQ3vTxp6ihz4dMyU8VxOd3OJkRSba+vHYXyWDZ57sM5cCo5Pp
w/iChToGEB5ug31JUHnN+j3KGcL+h0iN76rrZ9sFryOyTtOZlGD0gqya6rj2JqE8
nQLRiTa5pi4j7uTWYsfI2Xvgz7EJYdk4wmk49e07xR3DmCaCCdNSBfl9hQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDRjEkMpm025tq8VtsaX0h5zlKeBMB8GA1UdIwQY
MBaAFAg3CBFrBLwrdnU+GkMLfL7gnNulMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0RjSUVXc0V2Q3QyZFQ0YVF3dDh2dUNjMjZVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS9lOGNiMjktOGYzZS00ZTJjLTg1MDUt
MGYyOTI5OTZmODZjLzEvQ0RjSUVXc0V2Q3QyZFQ0YVF3dDh2dUNjMjZVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS9lOGNiMjktOGYzZS00ZTJjLTg1MDUtMGYyOTI5OTZmODZj
LzEvQ0RjSUVXc0V2Q3QyZFQ0YVF3dDh2dUNjMjZVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACLIIvKsz
HsxYgQSmgwRJQKBajTmaqwVrNdoDhlQMw1bJWU9V8H9YEylCK5iyDlsWgocSK3Fb
O+OBFbFJDGuERdx95+XEAraduvLMPI3djDLSyVgwNA3z3G+YF418+BubOp/tVrKi
HclLM82M39DKYSfNEiFnrn0bUm1pRs6iGuiZvmQ0Rg7w36wvUzQMYQJPncjHE8g5
lBL5HYKqZ+9IB0NBttlMRl0YioZXJ33tZVB2W6bGTqTr2OIzC2c/F/yKihRYOVh2
2IkeQxwfxNIYYw+UdKsjK8Dds5LyN8f3+RHri0GIket3IYsox4RMRr9jbSJe5FWp
22BLTficVdZaTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:22:04 2025 by rpki-client