Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
File: V9wqO2671XpOSCmt0_KgKnbld4k.mft (raw, json)
Hash identifier: I+LPu3XeXTAV4WNVSMUzbiTG22G9HlE2vHvPqmhbaN8=
Subject key identifier: 29:D1:56:56:14:5D:50:76:11:AE:C2:A7:D1:FA:DC:2F:06:81:14:97
Authority key identifier: 57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89
Certificate issuer: /CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789
Certificate serial: 0197B7B314F0F0635184A89448F7E9C34333
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
Manifest number: 02AC
Signing time: Sat 28 Jun 2025 18:00:56 +0000
Manifest this update: Sat 28 Jun 2025 18:00:56 +0000
Manifest next update: Sun 29 Jun 2025 18:00:56 +0000
Files and hashes: 1: V9wqO2671XpOSCmt0_KgKnbld4k.crl (hash: Tin5HyOSYqyu5AsMuhpYTKvvCeI+Z1qxElFsT42mL6I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:14:f0:f0:63:51:84:a8:94:48:f7:e9:c3:43:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57dc2a3b6ebbd57a4e4829add3f2a02a76e57789
Validity
Not Before: Jun 28 18:00:56 2025 GMT
Not After : Jun 29 18:00:56 2025 GMT
Subject: CN=29d15656145d507611aec2a7d1fadc2f06811497
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:16:1e:49:56:19:67:51:c6:54:27:56:da:2d:
a0:5d:6b:4f:8a:ef:c0:90:cb:79:43:13:a0:f2:b3:
1e:2c:29:a1:a0:b7:c1:9b:74:b7:5a:7d:41:e8:4b:
06:bd:57:29:a1:96:99:29:4b:96:49:b6:b6:46:09:
13:3b:f6:1b:44:a1:e7:c2:a5:75:59:67:fe:e4:7c:
c1:5d:7b:a6:de:3c:96:6c:cc:ca:1c:c2:2d:9e:28:
78:27:49:7d:1e:d3:b2:11:4e:f5:fc:24:0b:f4:ed:
8e:6a:50:05:88:4d:46:1a:c2:90:d9:12:55:61:5a:
72:55:79:06:19:cd:a8:89:4e:dc:57:f3:6e:aa:ec:
68:02:3b:e0:b0:bf:2f:26:f6:bf:70:a0:94:55:06:
a7:50:84:3c:a6:cb:fa:aa:8a:c2:83:7c:28:e4:eb:
f1:44:b7:b7:4b:77:9c:3a:22:bf:2c:e5:f2:dd:70:
f0:da:02:c6:20:bf:e2:47:6e:be:bd:25:70:f5:e9:
21:39:f4:7a:75:fa:2d:c3:5d:d1:54:c8:f8:4f:0c:
23:3b:47:1b:df:00:68:2c:08:31:ae:40:f4:ae:7e:
7d:6e:78:e8:cd:d8:68:0b:b7:d4:30:c1:2b:54:e5:
70:38:78:06:07:28:f0:ec:c2:57:b7:36:92:c7:35:
48:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:D1:56:56:14:5D:50:76:11:AE:C2:A7:D1:FA:DC:2F:06:81:14:97
X509v3 Authority Key Identifier:
keyid:57:DC:2A:3B:6E:BB:D5:7A:4E:48:29:AD:D3:F2:A0:2A:76:E5:77:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V9wqO2671XpOSCmt0_KgKnbld4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/71/654504-54e1-4502-ab22-40459d6934ae/1/V9wqO2671XpOSCmt0_KgKnbld4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:c9:e7:01:8a:f0:2b:6c:7a:6e:50:b9:70:16:47:0c:a3:3d:
6d:80:59:14:31:d1:24:8b:de:3a:c3:78:f9:db:c5:5f:2b:4a:
b0:05:b5:7a:a5:58:54:d8:87:e9:43:c6:68:02:df:e2:2f:ad:
b0:6d:f7:08:1b:a8:ed:6e:5e:b7:0b:c8:be:c5:8f:9b:40:4b:
d4:ae:c7:6d:19:5e:02:75:81:fb:ae:3e:24:8f:7a:eb:0b:ef:
f3:b2:04:22:b4:ed:38:a5:bb:ff:a1:8c:04:6f:c1:6c:75:59:
10:75:9d:63:df:06:c6:76:14:13:56:56:f2:1d:85:88:5e:8c:
30:95:f8:59:de:ba:00:09:a9:84:1b:cb:33:90:95:ee:b7:c9:
50:1e:82:5c:13:b0:a1:59:75:35:71:86:c4:02:07:41:8b:be:
e7:ac:a0:a1:c1:29:51:a1:68:27:9f:79:85:dc:1b:2c:33:53:
a7:52:ad:95:2e:13:0e:3a:8a:01:aa:ce:59:cd:0d:46:cf:a5:
50:1e:91:83:f1:6a:a3:4e:89:6a:d6:41:c4:42:09:d3:97:42:
61:d0:8b:b4:58:0e:14:48:35:90:46:6d:df:49:9f:b7:9a:4b:
03:c6:6b:04:64:d2:ba:27:d9:77:82:4c:cf:2e:ac:55:73:3d:
87:b7:de:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sxTw8GNRhKiUSPfpw0MzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3ZGMyYTNiNmViYmQ1N2E0ZTQ4MjlhZGQzZjJhMDJhNzZl
NTc3ODkwHhcNMjUwNjI4MTgwMDU2WhcNMjUwNjI5MTgwMDU2WjAzMTEwLwYDVQQD
EygyOWQxNTY1NjE0NWQ1MDc2MTFhZWMyYTdkMWZhZGMyZjA2ODExNDk3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuRYeSVYZZ1HGVCdW2i2gXWtPiu/A
kMt5QxOg8rMeLCmhoLfBm3S3Wn1B6EsGvVcpoZaZKUuWSba2RgkTO/YbRKHnwqV1
WWf+5HzBXXum3jyWbMzKHMItnih4J0l9HtOyEU71/CQL9O2OalAFiE1GGsKQ2RJV
YVpyVXkGGc2oiU7cV/NuquxoAjvgsL8vJva/cKCUVQanUIQ8psv6qorCg3wo5Ovx
RLe3S3ecOiK/LOXy3XDw2gLGIL/iR26+vSVw9ekhOfR6dfotw13RVMj4TwwjO0cb
3wBoLAgxrkD0rn59bnjozdhoC7fUMMErVOVwOHgGByjw7MJXtzaSxzVIQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCnRVlYUXVB2Ea7Cp9H63C8GgRSXMB8GA1UdIwQY
MBaAFFfcKjtuu9V6TkgprdPyoCp25XeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83MS82NTQ1MDQtNTRlMS00NTAyLWFiMjIt
NDA0NTlkNjkzNGFlLzEvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83MS82NTQ1MDQtNTRlMS00NTAyLWFiMjItNDA0NTlkNjkzNGFl
LzEvVjl3cU8yNjcxWHBPU0NtdDBfS2dLbmJsZDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABcnnAYrw
K2x6blC5cBZHDKM9bYBZFDHRJIveOsN4+dvFXytKsAW1eqVYVNiH6UPGaALf4i+t
sG33CBuo7W5etwvIvsWPm0BL1K7HbRleAnWB+64+JI966wvv87IEIrTtOKW7/6GM
BG/BbHVZEHWdY98GxnYUE1ZW8h2FiF6MMJX4Wd66AAmphBvLM5CV7rfJUB6CXBOw
oVl1NXGGxAIHQYu+56ygocEpUaFoJ595hdwbLDNTp1KtlS4TDjqKAarOWc0NRs+l
UB6Rg/Fqo06JatZBxEIJ05dCYdCLtFgOFEg1kEZt30mft5pLA8ZrBGTSuifZd4JM
zy6sVXM9h7feAw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:21 2025 by rpki-client