Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
File: fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft (raw, json)
Hash identifier: wfnVtxsaUyIber/IgbZhHTGv8iBz3ygLeVQEpYZseYo=
Subject key identifier: 71:B3:60:EE:9E:5D:74:F4:06:D5:0C:62:1A:2F:80:08:41:15:06:53
Authority key identifier: 7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
Certificate issuer: /CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Certificate serial: 0196AFFC24900C15E12B3C583C7AF912619E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
Manifest number: 04BC
Signing time: Thu 08 May 2025 13:00:59 +0000
Manifest this update: Thu 08 May 2025 13:00:59 +0000
Manifest next update: Fri 09 May 2025 13:00:59 +0000
Files and hashes: 1: fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl (hash: ef6HCZ7XOZdhqf6anirvuJ6iy9h7qPjzIDMHcaYCJLk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 09 May 2025 13:00:59 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:af:fc:24:90:0c:15:e1:2b:3c:58:3c:7a:f9:12:61:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c823028aeffc599aeffa5de5b90ccad33497db9
Validity
Not Before: May 8 13:00:59 2025 GMT
Not After : May 9 13:00:59 2025 GMT
Subject: CN=71b360ee9e5d74f406d50c621a2f800841150653
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b3:cc:bc:30:c0:0a:4e:a3:e2:f1:cc:3a:0f:
c0:f4:f2:ce:0b:da:8c:0c:9d:4e:0d:3c:e1:bf:8d:
9c:af:b5:62:95:0e:4d:40:8b:ec:ed:f4:1e:22:15:
1c:5d:5c:57:2a:fd:e2:00:dd:a1:c0:d7:5b:19:bc:
3a:11:bf:f2:2f:bf:01:9d:5e:6c:e4:3c:ca:90:ef:
3d:97:b4:2e:20:df:ed:c9:16:9e:e5:92:8e:34:43:
58:d4:ba:c5:e0:cb:ef:8e:da:6c:98:90:b6:35:1d:
8f:90:15:72:9a:ff:f5:4e:84:c6:28:52:20:19:b0:
72:63:a0:3f:ca:40:a0:93:3c:cd:4e:e8:15:6f:52:
6b:88:45:ab:2c:48:02:cb:04:00:a1:45:23:97:ac:
60:7b:8c:26:f1:61:25:dd:ea:8d:b3:a7:16:be:59:
86:30:89:63:d4:c5:3c:86:92:f0:a3:51:0d:87:01:
55:59:c1:44:8d:5e:d6:76:d3:d2:8b:27:7d:f1:c1:
e2:1b:b0:94:8e:83:66:be:b4:87:89:90:53:4d:32:
c5:86:85:32:ac:c5:8d:a6:21:ec:58:14:6d:61:27:
b5:5f:6b:4a:0c:fe:7e:09:0b:0f:c7:fc:e8:fa:9a:
a7:6c:d1:5c:39:30:ec:1d:0a:c5:e8:fc:77:a2:dc:
14:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
71:B3:60:EE:9E:5D:74:F4:06:D5:0C:62:1A:2F:80:08:41:15:06:53
X509v3 Authority Key Identifier:
keyid:7C:82:30:28:AE:FF:C5:99:AE:FF:A5:DE:5B:90:CC:AD:33:49:7D:B9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fIIwKK7_xZmu_6XeW5DMrTNJfbk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a8/e2b95d-0b26-402d-96ec-68691dabbdf3/1/fIIwKK7_xZmu_6XeW5DMrTNJfbk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:73:b9:18:ec:3c:7a:b7:43:b8:da:22:cf:4e:5f:fd:f1:22:
7d:34:2b:90:6d:22:73:f9:56:e6:89:3d:31:53:3d:84:8c:db:
cf:48:57:29:19:ca:3d:f8:42:af:0c:47:5e:a4:a1:ec:7c:a9:
46:6b:41:80:75:ba:8f:1a:e5:2e:7c:57:2b:e1:41:fa:64:18:
a6:81:89:a2:f7:3d:60:fe:93:ce:d1:07:96:a5:b3:ac:a1:23:
30:b4:4e:83:46:c9:b8:60:f4:78:22:ad:64:17:6b:5d:e5:95:
0b:96:65:7c:9e:38:03:5b:1b:e5:c1:a5:3e:de:3a:a5:df:49:
40:c3:2b:12:78:b3:ba:ce:7e:7d:83:9d:06:a0:90:0e:6c:fb:
c0:d9:fd:2c:dd:1d:c9:18:86:ae:e4:04:19:1a:89:c8:30:52:
42:28:69:19:0b:28:36:60:a1:91:95:f1:7d:b4:e9:ff:00:22:
68:86:5f:24:d3:27:3f:7f:d4:0c:1f:7b:8c:93:d6:20:16:ec:
52:f9:f1:63:2a:a6:b4:49:62:ee:0e:51:ea:db:24:65:93:ec:
07:ed:4a:ae:09:c3:83:a4:8b:3c:76:d0:d2:d7:d0:8d:5c:79:
8a:6b:ba:09:89:f4:ca:c3:a9:a3:06:45:1f:d6:2f:75:7f:02:
dc:73:b4:2b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZav/CSQDBXhKzxYPHr5EmGeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjODIzMDI4YWVmZmM1OTlhZWZmYTVkZTViOTBjY2FkMzM0
OTdkYjkwHhcNMjUwNTA4MTMwMDU5WhcNMjUwNTA5MTMwMDU5WjAzMTEwLwYDVQQD
Eyg3MWIzNjBlZTllNWQ3NGY0MDZkNTBjNjIxYTJmODAwODQxMTUwNjUzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbPMvDDACk6j4vHMOg/A9PLOC9qM
DJ1ODTzhv42cr7VilQ5NQIvs7fQeIhUcXVxXKv3iAN2hwNdbGbw6Eb/yL78BnV5s
5DzKkO89l7QuIN/tyRae5ZKONENY1LrF4MvvjtpsmJC2NR2PkBVymv/1ToTGKFIg
GbByY6A/ykCgkzzNTugVb1JriEWrLEgCywQAoUUjl6xge4wm8WEl3eqNs6cWvlmG
MIlj1MU8hpLwo1ENhwFVWcFEjV7WdtPSiyd98cHiG7CUjoNmvrSHiZBTTTLFhoUy
rMWNpiHsWBRtYSe1X2tKDP5+CQsPx/zo+pqnbNFcOTDsHQrF6Px3otwU+QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHGzYO6eXXT0BtUMYhovgAhBFQZTMB8GA1UdIwQY
MBaAFHyCMCiu/8WZrv+l3luQzK0zSX25MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZklJd0tLN194Wm11XzZYZVc1RE1yVE5KZmJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hOC9lMmI5NWQtMGIyNi00MDJkLTk2ZWMt
Njg2OTFkYWJiZGYzLzEvZklJd0tLN194Wm11XzZYZVc1RE1yVE5KZmJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hOC9lMmI5NWQtMGIyNi00MDJkLTk2ZWMtNjg2OTFkYWJiZGYz
LzEvZklJd0tLN194Wm11XzZYZVc1RE1yVE5KZmJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnHO5GOw8
erdDuNoiz05f/fEifTQrkG0ic/lW5ok9MVM9hIzbz0hXKRnKPfhCrwxHXqSh7Hyp
RmtBgHW6jxrlLnxXK+FB+mQYpoGJovc9YP6TztEHlqWzrKEjMLROg0bJuGD0eCKt
ZBdrXeWVC5ZlfJ44A1sb5cGlPt46pd9JQMMrEnizus5+fYOdBqCQDmz7wNn9LN0d
yRiGruQEGRqJyDBSQihpGQsoNmChkZXxfbTp/wAiaIZfJNMnP3/UDB97jJPWIBbs
UvnxYyqmtEli7g5R6tskZZPsB+1KrgnDg6SLPHbQ0tfQjVx5imu6CYn0ysOpowZF
H9YvdX8C3HO0Kw==
-----END CERTIFICATE-----
Generated at Thu May 8 20:44:26 2025 by rpki-client