Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
File: c-9b03Yu9g-njtVfVE-joFE_2EI.mft (raw, json)
Hash identifier: n2PEoLLGX6w4raM6OGc3wwFEre+vrksZQBUvLTmvjIY=
Subject key identifier: 3A:83:2E:C1:1E:E7:C6:03:6A:A5:4C:77:23:AF:15:73:F5:4B:E8:02
Authority key identifier: 73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
Certificate issuer: /CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Certificate serial: 0197B6A15AD4B6A6CF91D57CF4CCD3C28E48
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
Manifest number: 10BB
Signing time: Sat 28 Jun 2025 13:01:57 +0000
Manifest this update: Sat 28 Jun 2025 13:01:57 +0000
Manifest next update: Sun 29 Jun 2025 13:01:57 +0000
Files and hashes: 1: c-9b03Yu9g-njtVfVE-joFE_2EI.crl (hash: kXp3HNoVTEvJ+pwrTgpjZ31gevU36zA8FWbTdJQrPv4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:5a:d4:b6:a6:cf:91:d5:7c:f4:cc:d3:c2:8e:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73ef5bd3762ef60fa78ed55f544fa3a0513fd842
Validity
Not Before: Jun 28 13:01:57 2025 GMT
Not After : Jun 29 13:01:57 2025 GMT
Subject: CN=3a832ec11ee7c6036aa54c7723af1573f54be802
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:1e:cd:87:07:72:90:12:3e:f9:21:67:aa:d9:
d2:7b:93:4e:d9:dc:4e:30:c5:75:cf:91:8f:f8:16:
02:38:6a:06:6d:cd:0f:09:c9:1e:19:34:5d:06:50:
f7:ad:40:6d:0c:c3:90:fd:ff:cb:1a:e3:87:29:a6:
e6:71:83:bb:da:3d:a0:29:f9:52:49:62:51:a6:47:
8d:c4:b1:33:17:e1:06:9d:e5:a5:fb:a8:a0:b8:b6:
c0:fc:34:70:3e:8f:bb:fe:b1:39:39:38:ab:67:bf:
f5:38:95:80:d0:2a:75:29:54:9f:96:1f:a7:cf:09:
24:6b:00:3e:5b:d3:c9:f6:22:8c:74:fe:4d:cf:a1:
ca:a3:1d:0f:5d:c8:50:d6:4b:3e:c4:12:12:aa:0b:
e1:39:ca:88:7b:18:4c:4e:ce:4b:95:46:fe:4c:6f:
b4:76:21:ff:d7:03:4c:d9:49:0b:ef:ed:65:00:a1:
ff:fb:f5:bb:b7:a7:01:56:01:4d:8c:ce:dc:e5:c9:
00:37:72:ca:65:27:f4:16:d5:77:a2:d1:56:df:97:
cb:75:6a:da:cc:eb:08:a0:c1:c6:e8:45:e5:ee:ea:
79:a7:52:07:dd:72:2c:e0:38:e7:ca:19:62:2e:d1:
54:67:0c:27:00:df:28:b6:84:bb:fd:10:fd:d9:af:
81:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3A:83:2E:C1:1E:E7:C6:03:6A:A5:4C:77:23:AF:15:73:F5:4B:E8:02
X509v3 Authority Key Identifier:
keyid:73:EF:5B:D3:76:2E:F6:0F:A7:8E:D5:5F:54:4F:A3:A0:51:3F:D8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c-9b03Yu9g-njtVfVE-joFE_2EI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/66/a13cbc-1db4-4b22-baf4-b546a2d208f2/1/c-9b03Yu9g-njtVfVE-joFE_2EI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
80:48:91:ff:41:6c:f4:b7:e6:f4:68:12:68:ab:fc:d2:8a:4e:
04:69:5a:9a:1c:38:ad:71:b3:c3:2b:10:a2:04:29:89:46:da:
ab:23:72:1a:af:8d:2e:d0:53:37:f6:02:55:6e:dd:dd:5e:69:
55:7b:a1:0e:03:ef:88:68:00:6d:72:04:28:61:28:a6:3b:3d:
c5:b6:95:d4:cf:95:0b:73:08:1f:f2:40:de:f0:22:58:a7:9e:
fb:f1:b9:58:27:4c:21:85:de:5b:a3:2f:b9:71:d8:df:eb:a2:
78:d7:87:25:1c:f5:6f:3d:bd:7c:81:28:41:4c:90:99:ea:84:
18:f4:e0:8e:c5:5d:c5:25:aa:ce:4a:fb:ab:a8:8b:f0:4f:14:
98:f2:b5:5e:13:15:05:72:2f:41:76:63:42:5f:e2:28:c7:bb:
c9:23:07:e5:8c:18:71:38:97:21:60:7b:c0:14:6b:e9:1f:f2:
8c:0a:38:15:39:9c:a3:d3:79:bd:42:41:76:69:e0:72:c6:c6:
0a:63:13:cb:df:20:d9:fb:79:b3:44:31:df:f2:89:48:4b:1a:
13:a6:cb:c0:9a:cb:6f:aa:55:c7:bc:53:47:8e:b6:c0:6c:48:
41:6e:71:49:49:14:e0:f2:47:dd:0a:93:f8:d6:88:b3:2a:6e:
29:96:a9:37
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oVrUtqbPkdV89MzTwo5IMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczZWY1YmQzNzYyZWY2MGZhNzhlZDU1ZjU0NGZhM2EwNTEz
ZmQ4NDIwHhcNMjUwNjI4MTMwMTU3WhcNMjUwNjI5MTMwMTU3WjAzMTEwLwYDVQQD
EygzYTgzMmVjMTFlZTdjNjAzNmFhNTRjNzcyM2FmMTU3M2Y1NGJlODAyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwx7NhwdykBI++SFnqtnSe5NO2dxO
MMV1z5GP+BYCOGoGbc0PCckeGTRdBlD3rUBtDMOQ/f/LGuOHKabmcYO72j2gKflS
SWJRpkeNxLEzF+EGneWl+6iguLbA/DRwPo+7/rE5OTirZ7/1OJWA0Cp1KVSflh+n
zwkkawA+W9PJ9iKMdP5Nz6HKox0PXchQ1ks+xBISqgvhOcqIexhMTs5LlUb+TG+0
diH/1wNM2UkL7+1lAKH/+/W7t6cBVgFNjM7c5ckAN3LKZSf0FtV3otFW35fLdWra
zOsIoMHG6EXl7up5p1IH3XIs4DjnyhliLtFUZwwnAN8otoS7/RD92a+BMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDqDLsEe58YDaqVMdyOvFXP1S+gCMB8GA1UdIwQY
MBaAFHPvW9N2LvYPp47VX1RPo6BRP9hCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYy05YjAzWXU5Zy1uanRWZlZFLWpvRkVfMkVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ni9hMTNjYmMtMWRiNC00YjIyLWJhZjQt
YjU0NmEyZDIwOGYyLzEvYy05YjAzWXU5Zy1uanRWZlZFLWpvRkVfMkVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ni9hMTNjYmMtMWRiNC00YjIyLWJhZjQtYjU0NmEyZDIwOGYy
LzEvYy05YjAzWXU5Zy1uanRWZlZFLWpvRkVfMkVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgEiR/0Fs
9Lfm9GgSaKv80opOBGlamhw4rXGzwysQogQpiUbaqyNyGq+NLtBTN/YCVW7d3V5p
VXuhDgPviGgAbXIEKGEopjs9xbaV1M+VC3MIH/JA3vAiWKee+/G5WCdMIYXeW6Mv
uXHY3+uieNeHJRz1bz29fIEoQUyQmeqEGPTgjsVdxSWqzkr7q6iL8E8UmPK1XhMV
BXIvQXZjQl/iKMe7ySMH5YwYcTiXIWB7wBRr6R/yjAo4FTmco9N5vUJBdmngcsbG
CmMTy98g2ft5s0Qx3/KJSEsaE6bLwJrLb6pVx7xTR462wGxIQW5xSUkU4PJH3QqT
+NaIsypuKZapNw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:39:39 2025 by rpki-client