Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
File: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft (raw, json)
Hash identifier: WOmWUDabKQF90NY4hqGQ4XwJS055XsmSQ3DbhBLPSlo=
Subject key identifier: CA:23:4A:E6:66:B6:10:56:33:5F:E5:F5:F4:A6:E4:E9:DD:08:F9:BC
Authority key identifier: AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
Certificate issuer: /CN=adec58a002495d03ad5d9d11dd1421f195128524
Certificate serial: 0197B77CD4BBAD2838FB30F05A2C10C8973C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
Manifest number: 04AF
Signing time: Sat 28 Jun 2025 17:01:40 +0000
Manifest this update: Sat 28 Jun 2025 17:01:40 +0000
Manifest next update: Sun 29 Jun 2025 17:01:40 +0000
Files and hashes: 1: rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl (hash: iC+dMBHLDO9IHc0OrGxGglymXzqjg2CES5IeJCUV8Rw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:d4:bb:ad:28:38:fb:30:f0:5a:2c:10:c8:97:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=adec58a002495d03ad5d9d11dd1421f195128524
Validity
Not Before: Jun 28 17:01:40 2025 GMT
Not After : Jun 29 17:01:40 2025 GMT
Subject: CN=ca234ae666b61056335fe5f5f4a6e4e9dd08f9bc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:6f:ef:8b:4e:88:d8:44:92:82:45:cc:75:cd:
90:82:64:bb:b8:9a:d2:b4:61:a8:7d:3f:75:a4:4b:
22:26:be:e8:62:54:7a:70:f2:83:e3:05:c4:d2:fa:
e4:95:82:3a:95:f5:94:2c:7c:dd:b1:30:13:65:e4:
9f:fd:32:ee:65:0a:0f:7a:7f:f7:ee:a9:2d:60:c0:
7e:0a:73:ff:6f:dd:2f:57:eb:9d:81:7b:d6:c4:f0:
44:7e:ba:4e:9b:5a:69:b0:67:82:dc:c8:0e:a0:08:
e5:f1:5f:ec:ec:91:7c:70:47:4a:d7:70:52:0d:ed:
44:cd:5e:44:70:0d:66:5d:15:27:e4:87:04:27:17:
e9:f0:8d:28:b2:00:19:78:ef:2b:d4:18:b8:91:fe:
e0:11:c2:86:b2:dc:f8:97:77:56:f0:22:dc:76:64:
64:56:6f:74:6c:be:c9:54:08:ed:4e:2f:c3:e0:69:
a5:a6:69:30:91:a9:e0:0a:3f:22:4b:30:29:6a:43:
b0:b0:7a:31:01:1d:85:72:cf:fa:af:76:e3:fd:97:
8d:b8:93:4c:20:14:ae:91:9c:13:d0:36:c6:dd:10:
ca:eb:40:49:91:40:d1:76:29:59:06:6b:bd:34:47:
ce:4b:d0:ac:e4:62:fa:4f:96:b1:80:aa:04:fe:99:
05:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:23:4A:E6:66:B6:10:56:33:5F:E5:F5:F4:A6:E4:E9:DD:08:F9:BC
X509v3 Authority Key Identifier:
keyid:AD:EC:58:A0:02:49:5D:03:AD:5D:9D:11:DD:14:21:F1:95:12:85:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/edd551-baf0-4a57-97a8-745e500d8fcf/1/rexYoAJJXQOtXZ0R3RQh8ZUShSQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
66:78:0d:1b:9b:94:d8:11:04:d4:b8:0d:70:cc:9a:59:93:5b:
91:a7:a2:a4:5e:1b:ab:5f:96:0b:84:c7:53:a5:9c:68:b7:75:
ff:d8:1c:72:bb:00:ce:47:1c:62:42:84:ba:cb:6c:19:32:be:
71:93:30:74:54:b4:d9:59:dc:34:60:fc:0e:00:52:30:0c:3d:
7a:72:03:6f:95:c1:19:93:34:20:eb:8f:01:a1:a3:e8:fc:93:
42:26:5f:66:4e:72:82:5b:01:3e:29:ce:a6:1f:5e:44:b0:ee:
fa:df:1e:80:4e:ca:8d:f0:a5:3b:0d:78:28:34:7b:27:ad:24:
43:37:af:7b:83:24:63:ca:e4:75:69:94:33:71:bd:9b:1c:00:
ab:d0:ed:99:43:c3:b4:64:f8:b8:28:fa:4c:98:4c:49:1c:24:
09:b0:c0:8f:eb:03:c0:71:f0:11:36:38:f0:28:1d:73:d4:45:
ef:58:49:a2:86:40:2b:e3:5c:9a:42:87:83:b0:11:16:2d:2d:
6b:28:de:e1:69:99:b3:da:9b:28:68:67:ce:55:ce:23:c6:58:
ec:6c:be:f4:ca:74:4d:c3:4b:81:12:cd:a6:8d:2f:89:54:4f:
dd:61:e3:00:2d:26:e5:80:c8:15:32:4e:1f:a6:cb:64:3f:fc:
b1:2a:31:9f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fNS7rSg4+zDwWiwQyJc8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkZWM1OGEwMDI0OTVkMDNhZDVkOWQxMWRkMTQyMWYxOTUx
Mjg1MjQwHhcNMjUwNjI4MTcwMTQwWhcNMjUwNjI5MTcwMTQwWjAzMTEwLwYDVQQD
EyhjYTIzNGFlNjY2YjYxMDU2MzM1ZmU1ZjVmNGE2ZTRlOWRkMDhmOWJjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArG/vi06I2ESSgkXMdc2QgmS7uJrS
tGGofT91pEsiJr7oYlR6cPKD4wXE0vrklYI6lfWULHzdsTATZeSf/TLuZQoPen/3
7qktYMB+CnP/b90vV+udgXvWxPBEfrpOm1ppsGeC3MgOoAjl8V/s7JF8cEdK13BS
De1EzV5EcA1mXRUn5IcEJxfp8I0osgAZeO8r1Bi4kf7gEcKGstz4l3dW8CLcdmRk
Vm90bL7JVAjtTi/D4GmlpmkwkangCj8iSzApakOwsHoxAR2Fcs/6r3bj/ZeNuJNM
IBSukZwT0DbG3RDK60BJkUDRdilZBmu9NEfOS9Cs5GL6T5axgKoE/pkFyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMojSuZmthBWM1/l9fSm5OndCPm8MB8GA1UdIwQY
MBaAFK3sWKACSV0DrV2dEd0UIfGVEoUkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9lZGQ1NTEtYmFmMC00YTU3LTk3YTgt
NzQ1ZTUwMGQ4ZmNmLzEvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9lZGQ1NTEtYmFmMC00YTU3LTk3YTgtNzQ1ZTUwMGQ4ZmNm
LzEvcmV4WW9BSkpYUU90WFowUjNSUWg4WlVTaFNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZngNG5uU
2BEE1LgNcMyaWZNbkaeipF4bq1+WC4THU6WcaLd1/9gccrsAzkccYkKEustsGTK+
cZMwdFS02VncNGD8DgBSMAw9enIDb5XBGZM0IOuPAaGj6PyTQiZfZk5yglsBPinO
ph9eRLDu+t8egE7KjfClOw14KDR7J60kQzeve4MkY8rkdWmUM3G9mxwAq9DtmUPD
tGT4uCj6TJhMSRwkCbDAj+sDwHHwETY48Cgdc9RF71hJooZAK+NcmkKHg7ARFi0t
ayje4WmZs9qbKGhnzlXOI8ZY7Gy+9Mp0TcNLgRLNpo0viVRP3WHjAC0m5YDIFTJO
H6bLZD/8sSoxnw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:51:24 2025 by rpki-client