Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
File: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft (raw, json)
Hash identifier: 8VI+T5QoTEpdyF4BdjuN6bCfpjPdHtM9Ze1fQXi6J30=
Subject key identifier: BF:C7:A7:5C:AF:76:B3:38:DE:33:6B:17:01:49:C4:C9:A8:14:49:DC
Authority key identifier: D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
Certificate issuer: /CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
Certificate serial: 0198D660F53C2AB188BC042AAEFFDBAC13E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
Manifest number: 1646
Signing time: Sat 23 Aug 2025 10:02:15 +0000
Manifest this update: Sat 23 Aug 2025 10:02:15 +0000
Manifest next update: Sun 24 Aug 2025 10:02:15 +0000
Files and hashes: 1: 11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl (hash: /q7BdURA+9EPr1ciKJHCm7qKsbSkMsJOmy1FJAArnvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:f5:3c:2a:b1:88:bc:04:2a:ae:ff:db:ac:13:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d75671cdc14a37fbcb9f0150ccf918db15c2326f
Validity
Not Before: Aug 23 10:02:15 2025 GMT
Not After : Aug 24 10:02:15 2025 GMT
Subject: CN=bfc7a75caf76b338de336b170149c4c9a81449dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:95:36:c0:94:68:09:cc:95:ad:40:89:e2:61:
48:7a:67:9b:48:cd:ba:4b:b7:aa:33:fd:db:ec:61:
d7:b1:1b:ad:e5:c2:66:a6:7e:e9:da:da:f3:c3:ee:
74:51:4d:2b:b4:dd:70:19:5d:35:34:94:c9:f0:0f:
55:94:fc:28:b4:14:c6:f4:90:a5:82:41:d6:64:2c:
d0:7e:62:2a:e3:3a:e4:cb:75:26:41:14:93:8b:25:
97:73:e8:90:8f:a5:0b:d3:31:61:29:f7:4b:29:b3:
03:80:a8:dc:01:5a:21:db:15:de:28:c2:ab:48:55:
ce:0f:a0:d3:ea:0b:f4:6f:4a:74:28:9e:09:1b:07:
5e:a4:8d:03:93:53:15:6d:eb:13:b3:bb:af:8e:56:
37:d0:15:03:f8:9d:77:e2:c2:36:eb:af:b5:5f:bd:
41:8c:5e:b3:6f:07:a9:f9:2b:6c:f0:4e:95:8b:9d:
57:a7:83:0e:69:e5:cc:35:98:9b:7e:1a:3a:3f:e6:
16:c8:b6:07:74:67:97:66:ff:90:a3:73:29:22:1e:
01:37:d3:0d:78:bb:90:8d:1e:85:5e:ba:50:50:44:
78:7a:de:9d:b6:c4:8b:ae:0e:17:51:fa:1f:f4:b3:
1f:53:48:4c:4e:1f:64:bd:31:ca:de:29:f8:4f:bd:
45:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:C7:A7:5C:AF:76:B3:38:DE:33:6B:17:01:49:C4:C9:A8:14:49:DC
X509v3 Authority Key Identifier:
keyid:D7:56:71:CD:C1:4A:37:FB:CB:9F:01:50:CC:F9:18:DB:15:C2:32:6F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/11ZxzcFKN_vLnwFQzPkY2xXCMm8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/bbd9e3-8a1f-4e06-9653-7d4673b7e185/1/11ZxzcFKN_vLnwFQzPkY2xXCMm8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:a5:e5:f2:8f:01:4a:41:aa:4a:20:ac:a0:1a:06:7f:0c:90:
e4:f7:0b:d5:e3:b8:0d:df:61:be:5a:9d:97:65:91:57:ab:f2:
ec:6a:15:e2:33:77:e1:87:d0:bb:59:07:8b:f8:d3:e3:0e:a0:
45:cd:33:43:b1:f9:ba:9c:07:cd:cf:df:16:76:80:af:02:11:
1e:39:f5:60:3d:d9:c7:48:63:48:f6:52:90:7a:14:ed:6c:8f:
87:7a:3e:fe:f8:35:e1:2a:76:7d:a4:67:24:38:24:d5:18:17:
88:5d:1f:30:c4:bf:23:e1:e8:cf:08:c0:29:96:83:6c:cf:a8:
80:b2:b1:38:27:1f:2a:18:5e:29:01:7e:f2:8d:db:30:fb:67:
cb:f9:dc:44:18:da:e3:b2:fb:28:f0:f6:88:69:18:75:8b:de:
16:fc:98:9d:a1:b2:8e:3e:40:68:72:1a:49:0d:d9:6c:72:3b:
80:49:2b:d0:af:eb:9f:84:85:af:c3:3b:b3:b3:65:5d:5e:6f:
45:09:81:4c:19:bb:09:1e:1b:58:23:5e:d5:a7:65:bf:c9:8e:
f9:a2:24:41:02:c3:bc:cf:58:bf:a7:34:2a:aa:e1:bd:5f:82:
fd:d2:d7:bc:2d:93:0b:1d:8b:eb:a8:73:c8:4d:bb:17:0d:db:
0c:5b:29:fd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYPU8KrGIvAQqrv/brBPkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3NTY3MWNkYzE0YTM3ZmJjYjlmMDE1MGNjZjkxOGRiMTVj
MjMyNmYwHhcNMjUwODIzMTAwMjE1WhcNMjUwODI0MTAwMjE1WjAzMTEwLwYDVQQD
EyhiZmM3YTc1Y2FmNzZiMzM4ZGUzMzZiMTcwMTQ5YzRjOWE4MTQ0OWRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqpU2wJRoCcyVrUCJ4mFIemebSM26
S7eqM/3b7GHXsRut5cJmpn7p2trzw+50UU0rtN1wGV01NJTJ8A9VlPwotBTG9JCl
gkHWZCzQfmIq4zrky3UmQRSTiyWXc+iQj6UL0zFhKfdLKbMDgKjcAVoh2xXeKMKr
SFXOD6DT6gv0b0p0KJ4JGwdepI0Dk1MVbesTs7uvjlY30BUD+J134sI266+1X71B
jF6zbwep+Sts8E6Vi51Xp4MOaeXMNZibfho6P+YWyLYHdGeXZv+Qo3MpIh4BN9MN
eLuQjR6FXrpQUER4et6dtsSLrg4XUfof9LMfU0hMTh9kvTHK3in4T71FRQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL/Hp1yvdrM43jNrFwFJxMmoFEncMB8GA1UdIwQY
MBaAFNdWcc3BSjf7y58BUMz5GNsVwjJvMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTFaeHpjRktOX3ZMbndGUXpQa1kyeFhDTW04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC9iYmQ5ZTMtOGExZi00ZTA2LTk2NTMt
N2Q0NjczYjdlMTg1LzEvMTFaeHpjRktOX3ZMbndGUXpQa1kyeFhDTW04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC9iYmQ5ZTMtOGExZi00ZTA2LTk2NTMtN2Q0NjczYjdlMTg1
LzEvMTFaeHpjRktOX3ZMbndGUXpQa1kyeFhDTW04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFaXl8o8B
SkGqSiCsoBoGfwyQ5PcL1eO4Dd9hvlqdl2WRV6vy7GoV4jN34YfQu1kHi/jT4w6g
Rc0zQ7H5upwHzc/fFnaArwIRHjn1YD3Zx0hjSPZSkHoU7WyPh3o+/vg14Sp2faRn
JDgk1RgXiF0fMMS/I+HozwjAKZaDbM+ogLKxOCcfKhheKQF+8o3bMPtny/ncRBja
47L7KPD2iGkYdYveFvyYnaGyjj5AaHIaSQ3ZbHI7gEkr0K/rn4SFr8M7s7NlXV5v
RQmBTBm7CR4bWCNe1adlv8mO+aIkQQLDvM9Yv6c0KqrhvV+C/dLXvC2TCx2L66hz
yE27Fw3bDFsp/Q==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:12:17 2025 by rpki-client