Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
File: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft (raw, json)
Hash identifier: z33cZzudkNES36WipCH79yARKvbWWO/4zN7pU6d4J2w=
Subject key identifier: 05:3A:12:C6:0E:92:E0:D0:A8:C3:DE:D6:23:D1:0F:13:E5:EF:4D:7F
Authority key identifier: 8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
Certificate issuer: /CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Certificate serial: 0197B77BF186F84F8150075BDEB2ABAA810C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
Manifest number: 1402
Signing time: Sat 28 Jun 2025 17:00:42 +0000
Manifest this update: Sat 28 Jun 2025 17:00:42 +0000
Manifest next update: Sun 29 Jun 2025 17:00:42 +0000
Files and hashes: 1: i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl (hash: Fc4d0MQADS5xveacx06Dc/cJPCbB4co98fWsydiwyTE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f1:86:f8:4f:81:50:07:5b:de:b2:ab:aa:81:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b995951fd027fc739b04513b8f8d6bc678418c0
Validity
Not Before: Jun 28 17:00:42 2025 GMT
Not After : Jun 29 17:00:42 2025 GMT
Subject: CN=053a12c60e92e0d0a8c3ded623d10f13e5ef4d7f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:bf:e7:21:58:65:34:f6:29:01:e7:d4:c7:0a:
dd:47:78:ac:c8:31:98:c4:32:be:5e:85:75:bd:2d:
4f:84:99:51:42:05:4e:44:57:6d:01:a7:a9:0f:12:
5e:d5:4b:92:e0:17:b0:d7:f6:5a:52:03:4e:08:a2:
5a:0f:72:6b:29:41:2f:a1:3b:c1:83:e6:26:16:1f:
f4:79:0e:0f:30:4d:25:c4:e6:18:31:94:5d:78:df:
70:06:ed:56:3d:5b:7a:d6:e0:b4:3f:df:b6:c6:a4:
f1:62:86:2e:0b:a3:64:74:b1:62:02:f0:8f:72:04:
81:c1:71:54:bf:67:8d:23:c0:0c:30:95:04:5b:8f:
a9:77:a2:9a:ca:3e:62:cd:25:ed:16:88:2f:b1:63:
71:a7:73:41:70:21:0f:d0:f6:4a:a0:1b:a2:46:f7:
ff:c4:7c:5d:13:63:8b:18:6c:92:34:28:a3:78:c5:
51:82:05:12:9f:89:4f:95:df:15:c2:b7:40:e0:76:
0a:a3:9a:f9:9d:ab:03:b9:94:48:95:ee:90:fc:f8:
e9:09:e5:ae:c7:4f:71:67:87:52:de:15:65:ab:cb:
d6:90:93:56:85:2a:83:0e:39:6f:0e:b5:c9:36:ca:
16:6c:2c:8c:7e:76:aa:2b:7b:e4:4b:18:f2:87:1c:
ff:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3A:12:C6:0E:92:E0:D0:A8:C3:DE:D6:23:D1:0F:13:E5:EF:4D:7F
X509v3 Authority Key Identifier:
keyid:8B:99:59:51:FD:02:7F:C7:39:B0:45:13:B8:F8:D6:BC:67:84:18:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/d50528-a020-43c6-8d06-5730efb58774/1/i5lZUf0Cf8c5sEUTuPjWvGeEGMA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:02:b7:37:76:f0:af:bd:b1:b2:27:20:d0:3b:b4:43:29:8f:
6c:04:a3:de:88:51:59:a2:c5:f9:44:91:e3:4a:0c:3b:d4:1f:
f0:0a:c3:e0:75:35:6c:60:aa:ac:d8:02:ae:b2:78:0a:83:84:
ac:14:76:0c:92:b4:7b:8c:0f:b5:45:16:54:e0:5f:ec:10:a8:
63:ba:4a:f3:04:54:90:07:b3:cb:9a:00:34:94:76:6f:e4:02:
d2:f5:a0:cf:97:f7:33:c0:c5:e2:c6:c9:5b:39:99:d1:be:58:
12:07:19:a2:52:d0:6f:51:3a:b8:2f:7e:5f:ae:17:ff:3e:b0:
b4:28:88:70:d7:fd:44:6c:85:57:47:5c:31:09:ed:04:50:b7:
1a:94:1f:e4:0e:b8:70:a4:0e:5c:0e:29:f4:8c:a2:81:de:c5:
a3:cc:8c:50:ee:26:cc:32:36:95:22:43:d2:08:b1:f6:a7:1c:
68:3c:cc:25:f9:65:81:4a:7e:ae:03:f9:db:44:56:2f:86:1c:
b5:fd:6f:e9:a5:59:ff:32:21:39:2a:1d:81:fa:01:1f:6c:07:
25:d1:c7:b4:7a:4f:bd:9d:37:de:11:73:dc:ac:b9:60:93:37:
26:d2:ac:1f:b3:70:3d:3c:02:1b:60:73:d1:56:c7:04:c0:f6:
fc:2a:04:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3e/GG+E+BUAdb3rKrqoEMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhiOTk1OTUxZmQwMjdmYzczOWIwNDUxM2I4ZjhkNmJjNjc4
NDE4YzAwHhcNMjUwNjI4MTcwMDQyWhcNMjUwNjI5MTcwMDQyWjAzMTEwLwYDVQQD
EygwNTNhMTJjNjBlOTJlMGQwYThjM2RlZDYyM2QxMGYxM2U1ZWY0ZDdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwr/nIVhlNPYpAefUxwrdR3isyDGY
xDK+XoV1vS1PhJlRQgVORFdtAaepDxJe1UuS4Bew1/ZaUgNOCKJaD3JrKUEvoTvB
g+YmFh/0eQ4PME0lxOYYMZRdeN9wBu1WPVt61uC0P9+2xqTxYoYuC6NkdLFiAvCP
cgSBwXFUv2eNI8AMMJUEW4+pd6Kayj5izSXtFogvsWNxp3NBcCEP0PZKoBuiRvf/
xHxdE2OLGGySNCijeMVRggUSn4lPld8VwrdA4HYKo5r5nasDuZRIle6Q/PjpCeWu
x09xZ4dS3hVlq8vWkJNWhSqDDjlvDrXJNsoWbCyMfnaqK3vkSxjyhxz/EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU6EsYOkuDQqMPe1iPRDxPl701/MB8GA1UdIwQY
MBaAFIuZWVH9An/HObBFE7j41rxnhBjAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9kNTA1MjgtYTAyMC00M2M2LThkMDYt
NTczMGVmYjU4Nzc0LzEvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9kNTA1MjgtYTAyMC00M2M2LThkMDYtNTczMGVmYjU4Nzc0
LzEvaTVsWlVmMENmOGM1c0VVVHVQald2R2VFR01BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKAK3N3bw
r72xsicg0Du0QymPbASj3ohRWaLF+USR40oMO9Qf8ArD4HU1bGCqrNgCrrJ4CoOE
rBR2DJK0e4wPtUUWVOBf7BCoY7pK8wRUkAezy5oANJR2b+QC0vWgz5f3M8DF4sbJ
WzmZ0b5YEgcZolLQb1E6uC9+X64X/z6wtCiIcNf9RGyFV0dcMQntBFC3GpQf5A64
cKQOXA4p9Iyigd7Fo8yMUO4mzDI2lSJD0gix9qccaDzMJfllgUp+rgP520RWL4Yc
tf1v6aVZ/zIhOSodgfoBH2wHJdHHtHpPvZ033hFz3Ky5YJM3JtKsH7NwPTwCG2Bz
0VbHBMD2/CoE6A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:51 2025 by rpki-client