Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
File: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft (raw, json)
Hash identifier: tzbpN50iGfApUMrbFWZzegnRqWRieFyy5TKowUZz3Io=
Subject key identifier: 3F:EC:D0:75:98:14:30:E6:68:4F:30:46:D3:DB:59:35:FB:45:8E:A8
Authority key identifier: 52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16
Certificate issuer: /CN=52b8d3d330bd6620bb17d487e4055d95b274af16
Certificate serial: 0197B6A0904C0D7F0CF3D414D5AF098377DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
Manifest number: 0F9B
Signing time: Sat 28 Jun 2025 13:01:05 +0000
Manifest this update: Sat 28 Jun 2025 13:01:05 +0000
Manifest next update: Sun 29 Jun 2025 13:01:05 +0000
Files and hashes: 1: UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl (hash: HaBqHztq0pHLQSXZHK960u4gIok0k+Nv6HI5+dJmLOc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:90:4c:0d:7f:0c:f3:d4:14:d5:af:09:83:77:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52b8d3d330bd6620bb17d487e4055d95b274af16
Validity
Not Before: Jun 28 13:01:05 2025 GMT
Not After : Jun 29 13:01:05 2025 GMT
Subject: CN=3fecd075981430e6684f3046d3db5935fb458ea8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ed:08:10:ca:ea:e5:43:e1:00:85:ad:95:4e:b1:
7c:fd:77:de:5d:3e:79:1d:9d:46:67:a5:22:88:29:
45:ef:ac:d2:34:59:84:41:44:ca:4c:bc:89:ed:75:
36:6a:7f:7a:98:0d:81:f7:1b:7e:de:0e:64:45:a4:
e6:d9:24:bb:10:39:50:1d:96:61:56:2b:53:60:35:
47:5b:fc:7a:57:25:3f:89:fd:22:13:5d:b2:38:4c:
73:df:34:3d:4b:fa:97:6d:65:c5:9e:e3:10:17:a7:
c8:5c:64:0a:79:f9:ef:05:ec:6e:dd:d4:1f:df:38:
df:1b:29:ff:66:8a:9f:e5:68:0b:f7:cc:70:24:10:
ec:09:02:60:84:6b:dd:1b:56:6c:fa:17:f1:a3:02:
c7:7b:b1:77:80:15:a0:25:9f:52:b0:07:bb:a6:e1:
74:30:c1:b2:25:c8:33:66:86:b8:8c:68:8e:0e:18:
38:3b:1d:90:0d:ce:aa:28:dc:31:e5:dd:71:a0:44:
19:1c:cb:4d:04:c3:0d:13:50:75:31:db:d8:a5:02:
ed:a9:e8:6f:a9:50:4c:28:0e:ae:84:99:60:a5:e6:
77:eb:f1:42:37:f7:f1:a6:0a:fc:6e:38:8e:4f:b3:
37:c7:66:d2:ff:c1:8f:dd:94:de:b8:a9:e1:82:16:
84:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:EC:D0:75:98:14:30:E6:68:4F:30:46:D3:DB:59:35:FB:45:8E:A8
X509v3 Authority Key Identifier:
keyid:52:B8:D3:D3:30:BD:66:20:BB:17:D4:87:E4:05:5D:95:B2:74:AF:16
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/4ca8fa-6c15-4b47-ab93-bbbeb6090521/1/UrjT0zC9ZiC7F9SH5AVdlbJ0rxY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
47:fa:3a:3a:ae:6a:46:95:e7:02:79:fd:53:dd:2e:59:c1:89:
eb:61:34:49:d4:f5:71:a2:22:ca:28:b0:b6:0c:bf:47:1f:e7:
46:de:99:49:a5:81:fd:1d:33:69:cc:aa:fe:f4:93:e4:74:b3:
9d:bf:49:bf:1d:4b:b1:d7:30:be:35:a6:d9:16:39:c8:5e:ce:
67:bf:28:05:c5:68:ef:55:23:3e:2b:be:9c:15:8d:a8:5e:55:
f5:ce:18:2f:52:9f:57:92:53:75:03:26:89:26:38:ea:ef:a7:
09:6e:2d:2a:1f:77:ab:8b:58:e1:75:3d:e4:20:40:b5:da:04:
f9:c1:44:75:89:a9:9a:82:b9:bd:02:5f:e8:89:dc:6d:6c:c1:
73:fb:49:60:dc:e6:16:cd:99:68:a1:3a:36:24:5e:9a:98:6e:
13:79:18:c2:a8:c4:f5:d9:d2:77:08:d1:f2:35:4c:9e:3a:f8:
8c:a8:89:81:36:0e:fc:c7:cd:61:e4:dd:21:1c:8b:9d:61:64:
42:95:55:a5:bf:f8:a6:fc:d4:f8:c8:26:fc:fc:7b:bf:5d:79:
c0:b7:9e:cd:ec:54:26:aa:ec:71:65:00:e1:c9:49:7b:38:23:
73:0d:e0:2a:28:a2:3d:66:af:fc:9d:70:a4:8b:ec:89:f7:68:
a4:3c:10:46
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oJBMDX8M89QU1a8Jg3feMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyYjhkM2QzMzBiZDY2MjBiYjE3ZDQ4N2U0MDU1ZDk1YjI3
NGFmMTYwHhcNMjUwNjI4MTMwMTA1WhcNMjUwNjI5MTMwMTA1WjAzMTEwLwYDVQQD
EygzZmVjZDA3NTk4MTQzMGU2Njg0ZjMwNDZkM2RiNTkzNWZiNDU4ZWE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7QgQyurlQ+EAha2VTrF8/XfeXT55
HZ1GZ6UiiClF76zSNFmEQUTKTLyJ7XU2an96mA2B9xt+3g5kRaTm2SS7EDlQHZZh
VitTYDVHW/x6VyU/if0iE12yOExz3zQ9S/qXbWXFnuMQF6fIXGQKefnvBexu3dQf
3zjfGyn/Zoqf5WgL98xwJBDsCQJghGvdG1Zs+hfxowLHe7F3gBWgJZ9SsAe7puF0
MMGyJcgzZoa4jGiODhg4Ox2QDc6qKNwx5d1xoEQZHMtNBMMNE1B1MdvYpQLtqehv
qVBMKA6uhJlgpeZ36/FCN/fxpgr8bjiOT7M3x2bS/8GP3ZTeuKnhghaEtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/s0HWYFDDmaE8wRtPbWTX7RY6oMB8GA1UdIwQY
MBaAFFK409MwvWYguxfUh+QFXZWydK8WMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXJqVDB6QzlaaUM3RjlTSDVBVmRsYkowcnhZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi80Y2E4ZmEtNmMxNS00YjQ3LWFiOTMt
YmJiZWI2MDkwNTIxLzEvVXJqVDB6QzlaaUM3RjlTSDVBVmRsYkowcnhZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi80Y2E4ZmEtNmMxNS00YjQ3LWFiOTMtYmJiZWI2MDkwNTIx
LzEvVXJqVDB6QzlaaUM3RjlTSDVBVmRsYkowcnhZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAR/o6Oq5q
RpXnAnn9U90uWcGJ62E0SdT1caIiyiiwtgy/Rx/nRt6ZSaWB/R0zacyq/vST5HSz
nb9Jvx1LsdcwvjWm2RY5yF7OZ78oBcVo71UjPiu+nBWNqF5V9c4YL1KfV5JTdQMm
iSY46u+nCW4tKh93q4tY4XU95CBAtdoE+cFEdYmpmoK5vQJf6IncbWzBc/tJYNzm
Fs2ZaKE6NiRemphuE3kYwqjE9dnSdwjR8jVMnjr4jKiJgTYO/MfNYeTdIRyLnWFk
QpVVpb/4pvzU+Mgm/Px7v115wLeezexUJqrscWUA4clJezgjcw3gKiiiPWav/J1w
pIvsifdopDwQRg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:34:51 2025 by rpki-client