Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft
File: IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft (raw, json)
Hash identifier: Wyyi6Q30pRGLYV7fzTn9XiZpaX0+UtibhVssD7U9r5s=
Subject key identifier: 3C:74:A3:B7:14:F4:A3:94:72:81:71:96:D7:B2:2B:93:73:E3:D2:F2
Authority key identifier: 23:07:65:21:44:C9:12:7D:D6:26:79:60:56:C9:EC:29:32:A4:F2:05
Certificate issuer: /CN=2307652144c9127dd626796056c9ec2932a4f205
Certificate serial: 0197B6A0A558AC511BDFF3AB2D1EE2C45079
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/IwdlIUTJEn3WJnlgVsnsKTKk8gU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft
Manifest number: 94
Signing time: Sat 28 Jun 2025 13:01:10 +0000
Manifest this update: Sat 28 Jun 2025 13:01:10 +0000
Manifest next update: Sun 29 Jun 2025 13:01:10 +0000
Files and hashes: 1: IwdlIUTJEn3WJnlgVsnsKTKk8gU.crl (hash: hZHTXvByF+Ds6R0W7SVnG01fIMLOs6N2fOczVDa6Lqg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft
rsync://rpki.ripe.net/repository/DEFAULT/IwdlIUTJEn3WJnlgVsnsKTKk8gU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:a5:58:ac:51:1b:df:f3:ab:2d:1e:e2:c4:50:79
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=2307652144c9127dd626796056c9ec2932a4f205
Validity
Not Before: Jun 28 13:01:10 2025 GMT
Not After : Jun 29 13:01:10 2025 GMT
Subject: CN=3c74a3b714f4a39472817196d7b22b9373e3d2f2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:ab:54:77:b6:da:53:1c:11:5d:da:0a:65:10:
72:1f:cf:57:44:b9:03:53:af:67:2f:c9:45:14:c5:
f0:68:b9:c4:63:0d:eb:ac:6f:c3:f1:cc:9e:6f:78:
90:6b:1d:cc:bc:96:66:68:fc:19:e6:5c:43:10:6d:
5f:80:1b:24:de:94:8f:d4:80:b5:d5:6c:24:7f:c0:
3c:74:9e:68:df:43:a0:f1:b6:56:76:04:6f:59:ef:
51:26:c6:e2:e8:e9:9a:2e:41:73:eb:89:99:d1:09:
6d:10:e1:d9:89:f4:7c:c3:c9:f4:81:de:de:07:f1:
1a:c1:a7:a1:fe:a9:9d:ac:59:2e:81:03:ba:6e:b3:
75:b8:19:2f:f5:0c:05:f7:ed:e9:8c:6a:78:e9:cc:
ad:e3:f3:8c:86:92:a7:b8:0e:36:cf:f9:0f:50:a1:
4a:dc:b9:e0:cf:12:1b:b5:3c:b3:a3:7b:b4:60:04:
55:c5:32:79:d3:22:9f:0f:d0:c7:c4:42:a4:ac:7a:
b2:b0:79:bd:e7:e4:49:d3:f5:a9:d3:6e:cd:7b:ac:
fe:33:ca:d3:fd:c8:ea:63:92:4a:2d:fd:d2:da:06:
be:06:5b:2a:0e:df:f9:d1:bb:86:81:06:75:27:5d:
13:14:f9:6c:2e:04:75:69:16:4f:22:4f:8d:89:f4:
fe:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:74:A3:B7:14:F4:A3:94:72:81:71:96:D7:B2:2B:93:73:E3:D2:F2
X509v3 Authority Key Identifier:
keyid:23:07:65:21:44:C9:12:7D:D6:26:79:60:56:C9:EC:29:32:A4:F2:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/IwdlIUTJEn3WJnlgVsnsKTKk8gU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/99d177-8c03-498f-b202-7a78ae054b4c/1/IwdlIUTJEn3WJnlgVsnsKTKk8gU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:5b:75:91:0d:bb:7a:3f:d0:54:3e:b8:f4:11:e3:20:b7:7e:
d7:b8:74:61:c2:23:1b:cf:11:7f:7c:6c:6b:2a:91:e4:9b:af:
33:87:ab:50:76:ef:52:57:94:21:24:f1:c3:79:e7:bf:c6:c1:
c5:86:56:86:4c:54:ee:0d:3b:37:46:55:90:30:4c:a4:75:70:
cf:6d:1e:b4:a0:8b:11:49:f5:f1:4e:8c:e9:97:c1:a9:cc:0f:
e7:9b:2b:56:01:12:2c:65:01:ca:80:7c:5b:c1:97:bd:b3:43:
93:f6:82:8e:d2:7a:63:92:fd:c9:89:dc:76:b3:d5:a3:57:3a:
f7:12:55:2c:66:a2:49:e6:25:78:22:55:3a:31:6e:d5:a7:3b:
a0:25:da:be:3f:5a:ea:54:d4:e7:28:75:5c:47:a6:c8:0a:98:
6b:7c:01:ba:f4:b5:fd:09:78:d4:9b:dd:d7:ab:89:aa:1c:5b:
01:94:e6:ed:77:ca:7a:70:fc:c7:9f:e3:f0:c9:ff:e1:9d:e2:
a8:a5:ee:a7:ab:76:92:3f:33:08:52:5f:e5:9e:34:89:94:57:
fa:8b:76:a5:24:fc:7f:59:0d:9b:6c:86:79:7d:2b:b2:f3:99:
fb:b0:5b:e1:79:06:14:de:6d:38:3f:88:12:8b:8c:3d:e7:11:
6a:e5:41:81
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oKVYrFEb3/OrLR7ixFB5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzMDc2NTIxNDRjOTEyN2RkNjI2Nzk2MDU2YzllYzI5MzJh
NGYyMDUwHhcNMjUwNjI4MTMwMTEwWhcNMjUwNjI5MTMwMTEwWjAzMTEwLwYDVQQD
EygzYzc0YTNiNzE0ZjRhMzk0NzI4MTcxOTZkN2IyMmI5MzczZTNkMmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz6tUd7baUxwRXdoKZRByH89XRLkD
U69nL8lFFMXwaLnEYw3rrG/D8cyeb3iQax3MvJZmaPwZ5lxDEG1fgBsk3pSP1IC1
1Wwkf8A8dJ5o30Og8bZWdgRvWe9RJsbi6OmaLkFz64mZ0QltEOHZifR8w8n0gd7e
B/Eawaeh/qmdrFkugQO6brN1uBkv9QwF9+3pjGp46cyt4/OMhpKnuA42z/kPUKFK
3LngzxIbtTyzo3u0YARVxTJ50yKfD9DHxEKkrHqysHm95+RJ0/Wp027Ne6z+M8rT
/cjqY5JKLf3S2ga+BlsqDt/50buGgQZ1J10TFPlsLgR1aRZPIk+NifT+UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDx0o7cU9KOUcoFxlteyK5Nz49LyMB8GA1UdIwQY
MBaAFCMHZSFEyRJ91iZ5YFbJ7CkypPIFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSXdkbElVVEpFbjNXSm5sZ1ZzbnNLVEtrOGdVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC85OWQxNzctOGMwMy00OThmLWIyMDIt
N2E3OGFlMDU0YjRjLzEvSXdkbElVVEpFbjNXSm5sZ1ZzbnNLVEtrOGdVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC85OWQxNzctOGMwMy00OThmLWIyMDItN2E3OGFlMDU0YjRj
LzEvSXdkbElVVEpFbjNXSm5sZ1ZzbnNLVEtrOGdVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKlt1kQ27
ej/QVD649BHjILd+17h0YcIjG88Rf3xsayqR5JuvM4erUHbvUleUISTxw3nnv8bB
xYZWhkxU7g07N0ZVkDBMpHVwz20etKCLEUn18U6M6ZfBqcwP55srVgESLGUByoB8
W8GXvbNDk/aCjtJ6Y5L9yYncdrPVo1c69xJVLGaiSeYleCJVOjFu1ac7oCXavj9a
6lTU5yh1XEemyAqYa3wBuvS1/Ql41Jvd16uJqhxbAZTm7XfKenD8x5/j8Mn/4Z3i
qKXup6t2kj8zCFJf5Z40iZRX+ot2pST8f1kNm2yGeX0rsvOZ+7Bb4XkGFN5tOD+I
EouMPecRauVBgQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:54:22 2025 by rpki-client