Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
File: d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft (raw, json)
Hash identifier: ccbwCJ+asEpfiZl8HEwnHDPvhkiaympdhCrWTZo/TGY=
Subject key identifier: CD:C3:B4:B5:13:89:E6:FF:95:70:32:E7:81:DC:4C:03:80:76:75:8A
Authority key identifier: 77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
Certificate issuer: /CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Certificate serial: 0196BDEE0C96897F2092BA5AAC4D15FD39F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
Manifest number: 01CF
Signing time: Sun 11 May 2025 06:00:16 +0000
Manifest this update: Sun 11 May 2025 06:00:16 +0000
Manifest next update: Mon 12 May 2025 06:00:16 +0000
Files and hashes: 1: d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl (hash: sEGpxNvHkeaV2NmfJVxQ2zgTu2mfI4puLzItSxpsy7U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 22:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:bd:ee:0c:96:89:7f:20:92:ba:5a:ac:4d:15:fd:39:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77fe97184da82a36d7ebe3f85840315b8ab2214c
Validity
Not Before: May 11 06:00:16 2025 GMT
Not After : May 12 06:00:16 2025 GMT
Subject: CN=cdc3b4b51389e6ff957032e781dc4c038076758a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e0:a6:5e:8a:49:a2:b1:b7:e6:3d:43:07:fa:
a8:5b:57:47:27:53:5b:7e:68:13:1f:1f:5b:9e:f8:
ff:f3:a3:f0:c0:da:ee:f0:5f:41:2d:d6:d3:6f:69:
52:ec:b3:52:9c:44:55:0c:29:65:6b:b6:46:a6:14:
20:6d:6f:fd:ef:d2:8f:00:6b:3a:25:51:d0:b4:3f:
48:c6:e9:01:ba:bc:0a:a0:72:3b:d0:90:17:23:7d:
f0:0d:0f:b7:d7:ae:30:e8:0b:ba:e2:bd:d6:bb:cb:
9d:1e:9b:b8:4b:a5:11:92:b4:1b:eb:fe:b3:47:06:
d9:f2:67:9b:fc:33:8d:93:6a:d4:76:00:fa:98:2f:
65:80:06:3f:90:5b:65:c0:a4:61:9b:7e:81:f3:3b:
a7:59:a8:54:86:ea:6c:5c:1c:79:5b:38:ee:13:40:
3a:aa:78:cc:ce:64:f5:08:32:9b:e6:a3:88:2e:a8:
30:de:d1:62:cd:11:c2:cf:93:d2:71:3c:31:3c:62:
0f:cd:7e:43:f3:8b:39:13:17:5c:08:f4:aa:b0:37:
ff:34:b5:74:ca:fb:d7:cb:5a:c8:d3:35:40:42:11:
05:07:1d:52:fe:d2:20:e7:5a:92:21:c5:1f:bb:31:
a2:98:16:e1:99:ec:6b:8a:1b:a1:31:0b:cd:37:ef:
8a:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CD:C3:B4:B5:13:89:E6:FF:95:70:32:E7:81:DC:4C:03:80:76:75:8A
X509v3 Authority Key Identifier:
keyid:77:FE:97:18:4D:A8:2A:36:D7:EB:E3:F8:58:40:31:5B:8A:B2:21:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d_6XGE2oKjbX6-P4WEAxW4qyIUw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8d/143b40-583a-4a64-bdb1-a5e97cf3502d/1/d_6XGE2oKjbX6-P4WEAxW4qyIUw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
e1:2d:b9:31:47:6f:a1:3c:50:c2:c0:2e:d5:cf:50:e6:a2:e7:
1b:82:a8:0d:67:f4:14:bd:ec:d0:f6:ee:60:c1:60:09:38:4e:
61:97:ba:0c:74:d9:1f:24:1e:90:db:dc:52:68:f6:46:bc:33:
df:c7:8e:34:a1:a1:88:79:18:24:90:5c:c0:79:67:73:a4:5a:
1e:4a:36:93:f2:46:a4:35:bb:29:20:fb:10:4d:24:77:ea:90:
15:cf:ec:fc:ec:aa:7b:25:ec:7c:10:c9:d4:fd:cc:6f:7d:da:
93:5d:97:49:c7:33:55:b5:f4:09:c0:f8:67:63:89:86:d5:1c:
90:61:6d:4a:44:9f:5f:81:f5:8a:66:0e:81:20:81:f4:57:3b:
88:f5:95:88:cf:aa:c0:34:a2:4c:9a:93:af:09:f6:48:8e:5b:
78:0c:f8:04:76:bc:46:15:06:f7:4b:a3:a7:96:67:58:37:d4:
ea:da:b0:cd:fc:c9:6b:ef:01:6a:64:0b:ca:49:e8:e7:1b:11:
31:88:61:6c:58:ba:f9:80:a8:97:12:89:77:36:0a:a6:bb:98:
64:cd:ef:96:07:54:2e:b9:79:59:44:64:c3:7b:0a:49:3b:c1:
a2:c4:21:84:e6:81:58:c9:ee:f8:74:4d:43:0d:c6:92:ae:cc:
ad:bb:65:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa97gyWiX8gkrparE0V/Tn3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZmU5NzE4NGRhODJhMzZkN2ViZTNmODU4NDAzMTViOGFi
MjIxNGMwHhcNMjUwNTExMDYwMDE2WhcNMjUwNTEyMDYwMDE2WjAzMTEwLwYDVQQD
EyhjZGMzYjRiNTEzODllNmZmOTU3MDMyZTc4MWRjNGMwMzgwNzY3NThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseCmXopJorG35j1DB/qoW1dHJ1Nb
fmgTHx9bnvj/86PwwNru8F9BLdbTb2lS7LNSnERVDClla7ZGphQgbW/979KPAGs6
JVHQtD9IxukBurwKoHI70JAXI33wDQ+3164w6Au64r3Wu8udHpu4S6URkrQb6/6z
RwbZ8meb/DONk2rUdgD6mC9lgAY/kFtlwKRhm36B8zunWahUhupsXBx5WzjuE0A6
qnjMzmT1CDKb5qOILqgw3tFizRHCz5PScTwxPGIPzX5D84s5ExdcCPSqsDf/NLV0
yvvXy1rI0zVAQhEFBx1S/tIg51qSIcUfuzGimBbhmexrihuhMQvNN++KPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM3DtLUTieb/lXAy54HcTAOAdnWKMB8GA1UdIwQY
MBaAFHf+lxhNqCo21+vj+FhAMVuKsiFMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZF82WEdFMm9LamJYNi1QNFdFQXhXNHF5SVV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZC8xNDNiNDAtNTgzYS00YTY0LWJkYjEt
YTVlOTdjZjM1MDJkLzEvZF82WEdFMm9LamJYNi1QNFdFQXhXNHF5SVV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZC8xNDNiNDAtNTgzYS00YTY0LWJkYjEtYTVlOTdjZjM1MDJk
LzEvZF82WEdFMm9LamJYNi1QNFdFQXhXNHF5SVV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEA4S25MUdv
oTxQwsAu1c9Q5qLnG4KoDWf0FL3s0PbuYMFgCThOYZe6DHTZHyQekNvcUmj2Rrwz
38eONKGhiHkYJJBcwHlnc6RaHko2k/JGpDW7KSD7EE0kd+qQFc/s/OyqeyXsfBDJ
1P3Mb33ak12XScczVbX0CcD4Z2OJhtUckGFtSkSfX4H1imYOgSCB9Fc7iPWViM+q
wDSiTJqTrwn2SI5beAz4BHa8RhUG90ujp5ZnWDfU6tqwzfzJa+8BamQLykno5xsR
MYhhbFi6+YColxKJdzYKpruYZM3vlgdULrl5WURkw3sKSTvBosQhhOaBWMnu+HRN
Qw3Gkq7Mrbtl+Q==
-----END CERTIFICATE-----
Generated at Sun May 11 08:32:28 2025 by rpki-client