Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
File: 9M3Ux8i_hxhwMKZEcCColvQeSZM.mft (raw, json)
Hash identifier: PDE8FhULhC5PJcwT3yyJjJJ43SLUOznzWtHiXH99rgI=
Subject key identifier: F6:F7:FC:1A:F9:DB:1B:71:57:76:AC:FF:FD:63:3A:52:35:B7:E6:84
Authority key identifier: F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
Certificate issuer: /CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Certificate serial: 0197B88FE4DC77C82F8BEC9BB978D2841080
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
Manifest number: 1244
Signing time: Sat 28 Jun 2025 22:02:07 +0000
Manifest this update: Sat 28 Jun 2025 22:02:07 +0000
Manifest next update: Sun 29 Jun 2025 22:02:07 +0000
Files and hashes: 1: 9M3Ux8i_hxhwMKZEcCColvQeSZM.crl (hash: bRWoN/ok60JwgEKmz2YbYvaYQIyaEoqBzD57n8iFN8I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:e4:dc:77:c8:2f:8b:ec:9b:b9:78:d2:84:10:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4cdd4c7c8bf87187030a6447020a896f41e4993
Validity
Not Before: Jun 28 22:02:07 2025 GMT
Not After : Jun 29 22:02:07 2025 GMT
Subject: CN=f6f7fc1af9db1b715776acfffd633a5235b7e684
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:7e:82:e4:01:86:7d:e5:5b:da:a6:89:96:0a:
4a:17:99:b8:45:89:4b:b9:10:0c:20:c3:d7:ad:ac:
3d:ef:5a:44:b4:c4:1c:49:e2:4d:42:00:f3:13:0a:
0c:9d:fb:e8:12:c1:94:f5:1c:f6:86:27:29:84:09:
16:dc:5b:2c:de:19:9e:82:cc:82:e4:c9:87:83:88:
0e:7b:5c:f0:ce:89:a6:fb:a2:8d:1f:d7:f4:65:e8:
67:09:4b:11:28:4b:bb:65:84:b8:bf:aa:56:1d:25:
3b:7e:ce:e2:ae:7c:bb:2a:be:f9:d8:4a:88:99:84:
ae:83:8a:46:fe:64:f0:b6:06:d4:1c:50:b5:a5:1c:
0f:00:b5:56:b9:01:41:29:7c:50:26:84:48:b6:a4:
27:c6:86:7f:4b:4d:d4:5d:cc:15:15:d1:7e:5a:21:
79:d9:c0:9a:df:e6:bf:ec:4a:7b:e6:0e:9b:f5:88:
d8:b9:71:97:3e:ea:e9:5d:0f:2e:5f:61:17:d6:1c:
27:ba:9c:a5:73:98:9e:ae:04:c0:2f:57:d7:27:05:
0d:42:f7:8f:57:ac:ec:25:ce:91:46:73:5e:bc:b4:
9a:1f:60:fd:b6:9b:84:04:5a:db:60:83:ad:1a:39:
c3:76:7a:5f:30:6c:e7:f2:71:58:29:17:1c:fe:f6:
2f:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:F7:FC:1A:F9:DB:1B:71:57:76:AC:FF:FD:63:3A:52:35:B7:E6:84
X509v3 Authority Key Identifier:
keyid:F4:CD:D4:C7:C8:BF:87:18:70:30:A6:44:70:20:A8:96:F4:1E:49:93
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9M3Ux8i_hxhwMKZEcCColvQeSZM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/ecd8c8-13e1-40ea-98c0-f1e198a24dbf/1/9M3Ux8i_hxhwMKZEcCColvQeSZM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:97:c7:ab:3f:13:f5:c0:2a:9d:ac:71:32:f6:db:29:2c:a8:
8a:a7:b6:41:61:30:8e:63:96:d6:fa:7f:d6:b8:ec:6f:19:a7:
f9:47:bd:30:a4:7f:12:82:7d:cb:77:0e:17:d4:46:a2:4e:22:
e3:2e:3d:3b:66:4d:d2:18:14:be:7d:24:42:39:a3:dd:5c:f9:
39:98:e0:c4:40:30:a4:fc:84:05:8b:02:00:f3:52:32:4c:28:
56:15:f1:c8:83:c5:33:c4:cc:43:e3:54:47:83:ea:4c:2a:9e:
f5:e3:ac:dd:c8:20:52:31:db:59:32:40:40:01:79:6d:77:9c:
09:6d:7e:76:53:ff:52:aa:fa:fc:69:82:6c:db:c6:01:e2:8d:
19:87:33:c7:5b:4f:52:29:20:d1:5a:8d:2d:48:4e:0c:3a:85:
67:a5:d6:38:9b:64:76:9c:38:b8:d9:9d:0d:ab:b1:4c:2f:ab:
14:55:ac:c8:bd:11:f7:31:99:9e:5a:0d:ca:db:81:b0:c8:91:
bb:81:30:c8:fa:2a:9e:af:f0:8a:89:41:ab:96:73:20:31:c2:
8e:d4:f6:e7:26:12:0a:f2:c3:d1:34:11:d2:b6:a1:e2:b7:51:
cb:c3:06:77:88:01:ef:1c:ad:ef:09:1b:53:97:f0:59:00:c8:
61:fd:76:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j+Tcd8gvi+ybuXjShBCAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0Y2RkNGM3YzhiZjg3MTg3MDMwYTY0NDcwMjBhODk2ZjQx
ZTQ5OTMwHhcNMjUwNjI4MjIwMjA3WhcNMjUwNjI5MjIwMjA3WjAzMTEwLwYDVQQD
EyhmNmY3ZmMxYWY5ZGIxYjcxNTc3NmFjZmZmZDYzM2E1MjM1YjdlNjg0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy36C5AGGfeVb2qaJlgpKF5m4RYlL
uRAMIMPXraw971pEtMQcSeJNQgDzEwoMnfvoEsGU9Rz2hicphAkW3Fss3hmegsyC
5MmHg4gOe1zwzomm+6KNH9f0ZehnCUsRKEu7ZYS4v6pWHSU7fs7irny7Kr752EqI
mYSug4pG/mTwtgbUHFC1pRwPALVWuQFBKXxQJoRItqQnxoZ/S03UXcwVFdF+WiF5
2cCa3+a/7Ep75g6b9YjYuXGXPurpXQ8uX2EX1hwnupylc5iergTAL1fXJwUNQveP
V6zsJc6RRnNevLSaH2D9tpuEBFrbYIOtGjnDdnpfMGzn8nFYKRcc/vYvIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPb3/Br52xtxV3as//1jOlI1t+aEMB8GA1UdIwQY
MBaAFPTN1MfIv4cYcDCmRHAgqJb0HkmTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZS9lY2Q4YzgtMTNlMS00MGVhLTk4YzAt
ZjFlMTk4YTI0ZGJmLzEvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZS9lY2Q4YzgtMTNlMS00MGVhLTk4YzAtZjFlMTk4YTI0ZGJm
LzEvOU0zVXg4aV9oeGh3TUtaRWNDQ29sdlFlU1pNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHpfHqz8T
9cAqnaxxMvbbKSyoiqe2QWEwjmOW1vp/1rjsbxmn+Ue9MKR/EoJ9y3cOF9RGok4i
4y49O2ZN0hgUvn0kQjmj3Vz5OZjgxEAwpPyEBYsCAPNSMkwoVhXxyIPFM8TMQ+NU
R4PqTCqe9eOs3cggUjHbWTJAQAF5bXecCW1+dlP/Uqr6/GmCbNvGAeKNGYczx1tP
Uikg0VqNLUhODDqFZ6XWOJtkdpw4uNmdDauxTC+rFFWsyL0R9zGZnloNytuBsMiR
u4EwyPoqnq/wiolBq5ZzIDHCjtT25yYSCvLD0TQR0rah4rdRy8MGd4gB7xyt7wkb
U5fwWQDIYf12BA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:20:17 2025 by rpki-client