Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
File: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft (raw, json)
Hash identifier: cXKcCK/EdUNBrBACMdHvnS7vHoOF4DMfvJ1DgPGUXlc=
Subject key identifier: EB:A9:63:48:62:B0:99:38:03:7F:AA:7C:15:85:0D:BD:2D:A4:F0:9D
Authority key identifier: 9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
Certificate issuer: /CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Certificate serial: 0197B88F8DDE2B4B02205BE868D399F5C88E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
Manifest number: 0AFA
Signing time: Sat 28 Jun 2025 22:01:45 +0000
Manifest this update: Sat 28 Jun 2025 22:01:45 +0000
Manifest next update: Sun 29 Jun 2025 22:01:45 +0000
Files and hashes: 1: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl (hash: FSCbsTm1JiPs1kIvkWrWYScf3aIDFTxefkIP/OioGc8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:8d:de:2b:4b:02:20:5b:e8:68:d3:99:f5:c8:8e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Validity
Not Before: Jun 28 22:01:45 2025 GMT
Not After : Jun 29 22:01:45 2025 GMT
Subject: CN=eba9634862b09938037faa7c15850dbd2da4f09d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:0e:96:6b:7b:db:0b:d4:05:79:d7:97:87:86:
a4:de:81:1c:23:be:0a:e4:6d:7e:db:42:ad:1c:df:
d5:98:07:82:34:07:81:5e:d4:ca:5f:fe:a1:e9:40:
a2:89:60:8d:54:d3:f5:67:cd:8e:79:33:ae:07:90:
2a:cc:28:f0:a7:87:e8:f2:66:ef:06:ea:f2:89:6b:
26:b0:b5:81:28:93:b5:93:0f:4e:a8:e0:cb:91:75:
36:a2:44:88:84:4f:f8:cc:c5:b2:41:0c:c1:72:2d:
1a:6b:12:b4:b2:5b:88:1f:7f:65:9f:82:4d:73:5a:
32:d4:d2:ad:a0:fe:6e:58:1e:05:39:91:79:8a:e0:
53:cd:d1:19:74:0c:5a:ff:93:8e:93:3b:3a:6e:40:
ed:01:ab:a8:f1:21:e1:7c:28:59:bd:9f:d8:07:5c:
ad:7e:73:87:0b:56:93:05:bb:e0:e7:7f:ca:3e:22:
80:a6:a9:39:59:63:7f:e7:b7:46:b7:33:76:09:f8:
47:3c:2e:82:b0:ff:8f:94:bb:64:c5:db:79:9d:d2:
64:6a:bb:c8:87:5f:c2:8a:14:60:ff:9b:d5:5d:c6:
68:0e:f8:31:49:45:02:fd:3a:23:b4:a8:13:0c:9c:
28:6b:a0:4b:a5:f8:00:3a:23:5e:bd:04:a2:bf:3c:
c6:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EB:A9:63:48:62:B0:99:38:03:7F:AA:7C:15:85:0D:BD:2D:A4:F0:9D
X509v3 Authority Key Identifier:
keyid:9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:8e:a2:17:49:11:47:87:d9:d5:5a:87:2a:da:f8:4f:e2:c2:
42:db:7c:d7:81:be:41:51:ce:ac:ad:9d:9a:fe:db:13:4b:b3:
5b:46:9d:70:39:2b:4c:cf:e7:b2:f4:aa:4c:1f:f3:26:f3:59:
c3:d6:95:99:f7:d1:15:a1:d0:ba:af:1b:57:74:d0:ef:63:6c:
6d:e8:37:39:d1:a9:26:bb:c8:a9:bd:da:a5:e2:42:d7:d5:73:
61:88:bd:1c:e7:67:b4:3a:8f:b9:68:a3:32:78:62:86:5b:ff:
b2:f3:67:80:30:01:80:3f:ff:f3:03:e7:63:21:ee:37:1e:7f:
68:03:a3:b5:b3:a8:b8:13:0a:69:92:9e:73:da:95:88:a3:7b:
c9:87:d2:8d:24:b0:72:b7:ed:34:e2:e3:66:54:5a:ba:1e:d4:
51:3c:8f:4f:0f:2f:02:c1:34:78:52:f2:c3:c0:3f:7d:b0:77:
07:55:ae:d0:8f:7e:97:0a:71:12:8b:ff:8f:74:4b:13:38:da:
3c:ff:51:6e:ec:e9:c2:ca:14:81:c8:ba:61:05:bf:30:61:4c:
1d:f8:76:b1:b5:a1:b6:2a:b2:14:f2:30:dd:79:24:ec:cf:15:
0c:d5:94:f8:89:6f:23:d8:b9:3e:46:7d:24:6b:e5:48:a6:14:
4f:1a:6b:f9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4j43eK0sCIFvoaNOZ9ciOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjA3ZjUwOWU5NDdiMjY3Zjg3YmEwYWRlODllYzRkM2Fl
NTZhM2UwHhcNMjUwNjI4MjIwMTQ1WhcNMjUwNjI5MjIwMTQ1WjAzMTEwLwYDVQQD
EyhlYmE5NjM0ODYyYjA5OTM4MDM3ZmFhN2MxNTg1MGRiZDJkYTRmMDlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApg6Wa3vbC9QFedeXh4ak3oEcI74K
5G1+20KtHN/VmAeCNAeBXtTKX/6h6UCiiWCNVNP1Z82OeTOuB5AqzCjwp4fo8mbv
BuryiWsmsLWBKJO1kw9OqODLkXU2okSIhE/4zMWyQQzBci0aaxK0sluIH39ln4JN
c1oy1NKtoP5uWB4FOZF5iuBTzdEZdAxa/5OOkzs6bkDtAauo8SHhfChZvZ/YB1yt
fnOHC1aTBbvg53/KPiKApqk5WWN/57dGtzN2CfhHPC6CsP+PlLtkxdt5ndJkarvI
h1/CihRg/5vVXcZoDvgxSUUC/TojtKgTDJwoa6BLpfgAOiNevQSivzzGVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOupY0hisJk4A3+qfBWFDb0tpPCdMB8GA1UdIwQY
MBaAFJ/wf1CelHsmf4e6Ct6J7E065Wo+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MTk1M2EtNzliYS00NDAyLWJjZGUt
ODk5OGFhYTdmMzE1LzEvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS80MTk1M2EtNzliYS00NDAyLWJjZGUtODk5OGFhYTdmMzE1
LzEvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFY6iF0kR
R4fZ1VqHKtr4T+LCQtt814G+QVHOrK2dmv7bE0uzW0adcDkrTM/nsvSqTB/zJvNZ
w9aVmffRFaHQuq8bV3TQ72Nsbeg3OdGpJrvIqb3apeJC19VzYYi9HOdntDqPuWij
Mnhihlv/svNngDABgD//8wPnYyHuNx5/aAOjtbOouBMKaZKec9qViKN7yYfSjSSw
crftNOLjZlRauh7UUTyPTw8vAsE0eFLyw8A/fbB3B1Wu0I9+lwpxEov/j3RLEzja
PP9RbuzpwsoUgci6YQW/MGFMHfh2sbWhtiqyFPIw3Xkk7M8VDNWU+IlvI9i5PkZ9
JGvlSKYUTxpr+Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:33:51 2025 by rpki-client