Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
File: 52px9rqT9s9H6zF7K_0EnVzDl2A.mft (raw, json)
Hash identifier: mwiQsrDw/ZkY1hjy7iL5KW9dnErWmWMez1O7SKHGfFo=
Subject key identifier: 93:12:CD:14:EC:2D:39:30:C4:51:1D:C1:C6:A6:01:78:8D:BC:7F:F2
Authority key identifier: E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
Certificate issuer: /CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Certificate serial: 0198D66021EC27112B33B997DB597DBF9C31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
Manifest number: 0A56
Signing time: Sat 23 Aug 2025 10:01:21 +0000
Manifest this update: Sat 23 Aug 2025 10:01:21 +0000
Manifest next update: Sun 24 Aug 2025 10:01:21 +0000
Files and hashes: 1: 52px9rqT9s9H6zF7K_0EnVzDl2A.crl (hash: VhQ5FgXCp/YSZbYO1gbA2zcO7JsY/tFDGxxsJ0yMBsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d6:60:21:ec:27:11:2b:33:b9:97:db:59:7d:bf:9c:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e76a71f6ba93f6cf47eb317b2bfd049d5cc39760
Validity
Not Before: Aug 23 10:01:21 2025 GMT
Not After : Aug 24 10:01:21 2025 GMT
Subject: CN=9312cd14ec2d3930c4511dc1c6a601788dbc7ff2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:36:b0:2d:6a:11:8e:b7:09:55:aa:48:e9:a5:
ca:21:27:33:a8:0e:12:e1:cd:cb:b0:c8:b6:df:01:
0c:f9:05:fb:bf:81:fb:48:b3:ae:f6:a5:4b:b4:4a:
6b:c2:80:07:f9:27:94:68:b9:eb:5f:4e:38:b4:7e:
43:6a:e7:b5:8a:9f:b6:f6:59:6b:1b:34:9f:57:a6:
4b:25:18:5d:93:13:fb:01:b3:86:26:b4:ad:c7:9e:
ae:f8:c6:d7:c0:e8:28:03:9e:a7:14:4e:05:dc:17:
a0:43:26:88:88:cf:1d:3b:c3:1a:7c:c6:ff:a1:e5:
99:aa:0c:1d:d0:cb:c7:6f:e8:d3:44:a4:27:ae:1e:
a0:1b:8e:05:65:e0:9a:f6:8c:5e:0e:f3:a1:34:68:
af:2c:bc:e0:12:e5:38:f0:b0:53:f8:8d:da:d3:4d:
e2:f5:cb:87:a5:bd:05:6b:1e:1d:fa:38:c0:42:5e:
99:47:2d:e1:68:6d:84:d9:ae:66:c8:98:9d:01:f2:
2f:d5:e7:8c:c9:12:d9:b0:2d:6c:e7:fd:8a:b4:51:
ac:32:b4:16:00:37:fd:95:ed:53:c0:7a:fb:c2:2f:
a9:52:df:ad:6e:29:9b:d7:5e:55:17:12:ec:4c:11:
d0:32:06:0a:11:b4:e6:23:dc:05:40:ad:eb:50:cb:
23:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:12:CD:14:EC:2D:39:30:C4:51:1D:C1:C6:A6:01:78:8D:BC:7F:F2
X509v3 Authority Key Identifier:
keyid:E7:6A:71:F6:BA:93:F6:CF:47:EB:31:7B:2B:FD:04:9D:5C:C3:97:60
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/52px9rqT9s9H6zF7K_0EnVzDl2A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b1/2f6944-b1f7-49bb-bfe7-a390f3ce3a56/1/52px9rqT9s9H6zF7K_0EnVzDl2A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:75:63:6b:8b:e7:a0:bb:5d:7b:76:ed:d3:20:dd:39:94:ed:
a5:08:dd:13:d7:63:ea:29:1a:0a:70:e8:e3:30:47:41:f9:44:
d4:d2:3a:22:62:ec:2b:44:da:ae:c9:ea:4a:95:63:33:8b:b0:
70:85:c0:cc:55:67:40:27:c4:81:6d:08:9a:fe:ac:d5:7e:0e:
9e:3f:75:c8:f7:e7:23:d2:2b:75:02:93:18:6b:20:0f:13:e5:
cc:c9:ab:b1:7c:b5:c6:af:1f:f6:89:e1:d0:31:e6:19:7f:8d:
18:b8:86:2a:20:a2:5e:48:25:6b:77:ef:ee:b9:f5:0b:c9:fb:
9c:2e:88:33:18:7a:6b:ec:ce:aa:ae:de:f3:fc:bc:02:d6:58:
1a:b9:44:2d:6a:2c:d8:a0:4a:e0:3f:f0:5b:dc:96:af:fa:ef:
45:9c:eb:22:ac:67:a0:b0:35:89:d5:83:ac:e5:ca:e0:cd:c2:
8c:ec:3e:da:87:b8:ea:c0:3e:31:1a:e1:be:ae:5c:d1:c4:b8:
c7:59:ab:81:a8:c8:8f:55:5b:dc:a3:b9:5e:89:dc:56:09:49:
00:5b:57:cc:9d:09:d3:c7:46:1f:15:bb:36:32:40:69:d9:cf:
2d:16:ce:11:60:f0:46:52:34:b0:85:04:d3:1e:09:8f:ca:ee:
76:3e:17:a5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjWYCHsJxErM7mX21l9v5wxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGU3NmE3MWY2YmE5M2Y2Y2Y0N2ViMzE3YjJiZmQwNDlkNWNj
Mzk3NjAwHhcNMjUwODIzMTAwMTIxWhcNMjUwODI0MTAwMTIxWjAzMTEwLwYDVQQD
Eyg5MzEyY2QxNGVjMmQzOTMwYzQ1MTFkYzFjNmE2MDE3ODhkYmM3ZmYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0TawLWoRjrcJVapI6aXKISczqA4S
4c3LsMi23wEM+QX7v4H7SLOu9qVLtEprwoAH+SeUaLnrX044tH5Daue1ip+29llr
GzSfV6ZLJRhdkxP7AbOGJrStx56u+MbXwOgoA56nFE4F3BegQyaIiM8dO8MafMb/
oeWZqgwd0MvHb+jTRKQnrh6gG44FZeCa9oxeDvOhNGivLLzgEuU48LBT+I3a003i
9cuHpb0Fax4d+jjAQl6ZRy3haG2E2a5myJidAfIv1eeMyRLZsC1s5/2KtFGsMrQW
ADf9le1TwHr7wi+pUt+tbimb115VFxLsTBHQMgYKEbTmI9wFQK3rUMsjVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJMSzRTsLTkwxFEdwcamAXiNvH/yMB8GA1UdIwQY
MBaAFOdqcfa6k/bPR+sxeyv9BJ1cw5dgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMS8yZjY5NDQtYjFmNy00OWJiLWJmZTct
YTM5MGYzY2UzYTU2LzEvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMS8yZjY5NDQtYjFmNy00OWJiLWJmZTctYTM5MGYzY2UzYTU2
LzEvNTJweDlycVQ5czlINnpGN0tfMEVuVnpEbDJBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbHVja4vn
oLtde3bt0yDdOZTtpQjdE9dj6ikaCnDo4zBHQflE1NI6ImLsK0TarsnqSpVjM4uw
cIXAzFVnQCfEgW0Imv6s1X4Onj91yPfnI9IrdQKTGGsgDxPlzMmrsXy1xq8f9onh
0DHmGX+NGLiGKiCiXkgla3fv7rn1C8n7nC6IMxh6a+zOqq7e8/y8AtZYGrlELWos
2KBK4D/wW9yWr/rvRZzrIqxnoLA1idWDrOXK4M3CjOw+2oe46sA+MRrhvq5c0cS4
x1mrgajIj1Vb3KO5XoncVglJAFtXzJ0J08dGHxW7NjJAadnPLRbOEWDwRlI0sIUE
0x4Jj8rudj4XpQ==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:29:39 2025 by rpki-client