Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
File: t3RSzSU14-k1ff-IGIXq2RSQpGM.mft (raw, json)
Hash identifier: 9ny5bbshnT6fPGmotX6FcM78fWc+QTHqPDhwgmzCXZg=
Subject key identifier: AB:F4:67:97:02:E7:1E:EE:66:1E:07:20:B4:FB:BD:04:73:36:CF:CC
Authority key identifier: B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63
Certificate issuer: /CN=b77452cd2535e3e9357dff881885ead91490a463
Certificate serial: 0198D4A7B570A80012D62427ACA6F5905AD3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
Manifest number: 05FE
Signing time: Sat 23 Aug 2025 02:00:17 +0000
Manifest this update: Sat 23 Aug 2025 02:00:17 +0000
Manifest next update: Sun 24 Aug 2025 02:00:17 +0000
Files and hashes: 1: t3RSzSU14-k1ff-IGIXq2RSQpGM.crl (hash: fGoexqvw6o3p9uiLebzdwqh95RP7mJscHLm2atFvuP4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:a7:b5:70:a8:00:12:d6:24:27:ac:a6:f5:90:5a:d3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b77452cd2535e3e9357dff881885ead91490a463
Validity
Not Before: Aug 23 02:00:17 2025 GMT
Not After : Aug 24 02:00:17 2025 GMT
Subject: CN=abf4679702e71eee661e0720b4fbbd047336cfcc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:92:a1:e3:64:1a:75:76:df:88:2b:bf:86:27:
d7:62:27:aa:fb:83:85:1d:8e:0a:8b:c6:c1:5e:29:
f5:0a:0f:54:7f:b2:93:d5:d9:42:d0:48:00:ed:1c:
56:75:8e:0c:fd:b1:d4:aa:22:a0:a0:50:b2:06:10:
9a:d9:f6:5f:a0:a3:fc:ee:05:21:20:53:a9:66:10:
d1:e2:fc:3c:22:e7:88:86:f8:55:51:7a:1b:2c:f5:
85:9e:92:e7:50:47:f0:7b:2e:6a:82:cd:07:ba:49:
44:68:6b:d2:f1:b8:49:c3:08:d6:23:03:db:88:86:
e2:1b:b2:20:b0:b2:ff:8a:7c:0b:af:e5:8c:92:03:
86:67:d0:91:94:45:52:49:08:c5:84:a7:e0:91:7f:
ba:21:17:95:58:e5:98:71:d6:56:d3:44:e4:12:5e:
07:c5:3f:85:4e:48:8b:0b:c0:27:d9:d9:de:e2:02:
4c:fd:16:19:dc:f0:a5:5d:3c:a5:23:d3:0e:e1:e2:
d2:d6:ef:7c:a0:86:46:b8:ac:85:b0:4a:29:e6:84:
f3:37:9c:9e:0c:44:0a:d5:76:c2:97:d5:98:5c:03:
73:d8:46:66:c1:c0:f8:a6:ef:6a:f0:3e:c5:18:20:
60:61:a3:77:f3:2b:66:1c:dc:ee:5a:85:5d:4d:1d:
10:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:F4:67:97:02:E7:1E:EE:66:1E:07:20:B4:FB:BD:04:73:36:CF:CC
X509v3 Authority Key Identifier:
keyid:B7:74:52:CD:25:35:E3:E9:35:7D:FF:88:18:85:EA:D9:14:90:A4:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t3RSzSU14-k1ff-IGIXq2RSQpGM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/f6c71c-2d40-4c41-bbbb-c75759af2fcf/1/t3RSzSU14-k1ff-IGIXq2RSQpGM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:2b:47:aa:f3:70:2c:a8:38:a1:a5:50:f0:38:67:fb:b8:37:
91:c4:43:fb:a6:16:a1:82:14:86:da:8f:e4:22:2b:ea:03:11:
7d:34:d8:c2:98:07:f5:1b:d4:79:36:fe:2e:c4:55:ea:74:71:
4f:4a:35:6f:e2:7f:f9:3d:2c:4d:88:ad:56:7a:77:f9:62:64:
04:a4:c2:bc:db:66:49:ce:ba:31:1c:d7:a5:db:a7:28:83:4b:
51:b8:dd:e6:d4:70:d9:4a:09:40:62:ee:ad:bc:98:98:6b:bc:
a8:c8:2c:bb:5d:16:cf:56:44:c2:b8:04:4b:72:35:d5:fc:3d:
37:be:46:5b:9c:ab:29:e3:d7:3f:e1:8f:e9:e5:59:b3:eb:81:
21:33:34:ae:e2:bb:e9:25:ab:0b:5f:d0:d7:83:17:df:cf:1f:
64:7f:a3:2f:f1:a8:51:e4:90:be:63:a2:8b:e3:ac:05:88:92:
0f:a9:5c:21:32:8c:dd:1b:26:00:5c:d4:26:08:7a:55:f5:81:
44:c4:b9:bc:91:dc:49:87:dc:51:a2:ff:ba:27:cd:e3:78:28:
ba:e6:f9:29:4c:e3:36:24:c8:76:3c:3e:09:73:d9:ab:93:3b:
86:0c:3e:ab:59:74:2c:c4:e7:ba:94:04:37:ec:c3:2c:ed:10:
7b:8c:26:9d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjUp7VwqAAS1iQnrKb1kFrTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3NzQ1MmNkMjUzNWUzZTkzNTdkZmY4ODE4ODVlYWQ5MTQ5
MGE0NjMwHhcNMjUwODIzMDIwMDE3WhcNMjUwODI0MDIwMDE3WjAzMTEwLwYDVQQD
EyhhYmY0Njc5NzAyZTcxZWVlNjYxZTA3MjBiNGZiYmQwNDczMzZjZmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnJKh42QadXbfiCu/hifXYieq+4OF
HY4Ki8bBXin1Cg9Uf7KT1dlC0EgA7RxWdY4M/bHUqiKgoFCyBhCa2fZfoKP87gUh
IFOpZhDR4vw8IueIhvhVUXobLPWFnpLnUEfwey5qgs0HuklEaGvS8bhJwwjWIwPb
iIbiG7IgsLL/inwLr+WMkgOGZ9CRlEVSSQjFhKfgkX+6IReVWOWYcdZW00TkEl4H
xT+FTkiLC8An2dne4gJM/RYZ3PClXTylI9MO4eLS1u98oIZGuKyFsEop5oTzN5ye
DEQK1XbCl9WYXANz2EZmwcD4pu9q8D7FGCBgYaN38ytmHNzuWoVdTR0Q7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKv0Z5cC5x7uZh4HILT7vQRzNs/MMB8GA1UdIwQY
MBaAFLd0Us0lNePpNX3/iBiF6tkUkKRjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDNSU3pTVTE0LWsxZmYtSUdJWHEyUlNRcEdNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC9mNmM3MWMtMmQ0MC00YzQxLWJiYmIt
Yzc1NzU5YWYyZmNmLzEvdDNSU3pTVTE0LWsxZmYtSUdJWHEyUlNRcEdNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC9mNmM3MWMtMmQ0MC00YzQxLWJiYmItYzc1NzU5YWYyZmNm
LzEvdDNSU3pTVTE0LWsxZmYtSUdJWHEyUlNRcEdNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACitHqvNw
LKg4oaVQ8Dhn+7g3kcRD+6YWoYIUhtqP5CIr6gMRfTTYwpgH9RvUeTb+LsRV6nRx
T0o1b+J/+T0sTYitVnp3+WJkBKTCvNtmSc66MRzXpdunKINLUbjd5tRw2UoJQGLu
rbyYmGu8qMgsu10Wz1ZEwrgES3I11fw9N75GW5yrKePXP+GP6eVZs+uBITM0ruK7
6SWrC1/Q14MX388fZH+jL/GoUeSQvmOii+OsBYiSD6lcITKM3RsmAFzUJgh6VfWB
RMS5vJHcSYfcUaL/uifN43gouub5KUzjNiTIdjw+CXPZq5M7hgw+q1l0LMTnupQE
N+zDLO0Qe4wmnQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 11:36:18 2025 by rpki-client