Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
File: ije4wOFZfNHaZcmgf6wFrNhEzGo.mft (raw, json)
Hash identifier: L/rHm+dmNWLXTKQh2+yU7rGdOt1LubS5eVcQiNVmB98=
Subject key identifier: AC:22:6A:62:E6:7B:E9:F5:05:92:AA:06:CE:76:36:EF:3F:58:D3:AF
Authority key identifier: 8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
Certificate issuer: /CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Certificate serial: 0197B6A1B7F17F7EFAB10E35033C76123DB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
Manifest number: 10A1
Signing time: Sat 28 Jun 2025 13:02:21 +0000
Manifest this update: Sat 28 Jun 2025 13:02:21 +0000
Manifest next update: Sun 29 Jun 2025 13:02:21 +0000
Files and hashes: 1: ije4wOFZfNHaZcmgf6wFrNhEzGo.crl (hash: HQ3njDn1mA92eVexrBbVgvFY5hCsXFCyTQVIlvF/VHU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:b7:f1:7f:7e:fa:b1:0e:35:03:3c:76:12:3d:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a37b8c0e1597cd1da65c9a07fac05acd844cc6a
Validity
Not Before: Jun 28 13:02:21 2025 GMT
Not After : Jun 29 13:02:21 2025 GMT
Subject: CN=ac226a62e67be9f50592aa06ce7636ef3f58d3af
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:91:c5:e7:2f:3f:11:08:f8:6c:85:2e:4b:c0:
92:5e:77:b1:f6:46:92:a4:ac:d4:80:f2:df:62:13:
33:8a:55:96:ab:f8:fd:11:9a:1e:be:71:de:21:9a:
eb:d7:5e:fd:78:9f:19:1e:82:0f:6c:6f:f7:f1:93:
d2:14:fd:f0:ce:da:f6:32:e1:c8:95:c3:03:36:93:
b2:b6:16:10:04:cb:e5:87:54:ff:53:58:85:69:21:
1e:26:1b:92:ea:ee:10:32:77:26:16:0f:d8:e8:7d:
ed:80:29:bd:e9:53:fc:9d:f6:33:cd:34:88:c3:3e:
c0:af:62:1c:1f:c7:4b:e0:e8:f3:df:49:e4:84:66:
af:90:f8:47:87:ff:8d:56:7d:95:28:87:20:28:18:
80:44:5c:e2:6f:57:36:c3:ce:33:f8:de:c2:2e:2c:
2d:92:a2:0e:4e:87:55:7f:83:ab:6c:d1:11:92:3f:
dc:c0:f4:c8:df:ba:bf:b6:b6:16:df:79:ca:b9:6b:
8a:44:41:f1:ce:99:7c:e7:13:8a:fc:b8:31:1e:b0:
4e:9a:10:e4:9b:99:f7:9b:e4:03:d1:4e:a3:8d:ab:
5a:da:8d:3b:e0:df:3f:e9:03:a8:dc:03:40:47:c8:
fc:64:f5:01:94:48:46:0b:16:5a:43:bc:16:db:25:
96:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:22:6A:62:E6:7B:E9:F5:05:92:AA:06:CE:76:36:EF:3F:58:D3:AF
X509v3 Authority Key Identifier:
keyid:8A:37:B8:C0:E1:59:7C:D1:DA:65:C9:A0:7F:AC:05:AC:D8:44:CC:6A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ije4wOFZfNHaZcmgf6wFrNhEzGo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/bb/fd22ad-f792-475c-8bae-26024e2a5f3e/1/ije4wOFZfNHaZcmgf6wFrNhEzGo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5d:a6:04:21:bb:b3:28:64:ce:cf:a8:66:78:f8:e2:16:08:3d:
63:8e:a2:69:16:a7:e7:35:67:be:ba:67:20:f2:e8:7a:21:21:
f8:7d:d6:e1:6e:11:bd:c5:aa:28:18:ae:20:ae:3d:fa:3b:65:
17:ab:a3:16:9a:25:70:de:98:93:8d:9b:9d:25:da:29:d1:ea:
cd:d7:87:86:b5:8a:92:a9:3a:f2:8d:1f:e1:ca:89:ce:8d:50:
5c:9c:f6:a0:75:58:22:cc:52:ba:cc:22:e6:47:18:45:ee:f8:
32:30:ff:61:08:b9:69:bc:6c:66:2f:8a:76:98:81:02:86:19:
13:9b:ba:18:ae:94:82:14:4c:0c:38:77:19:4a:63:96:ec:7e:
7b:92:a6:ac:da:71:3e:4d:87:a8:60:d2:51:a0:18:bf:0d:c2:
2a:0e:76:38:cd:9a:85:d4:2a:82:2b:57:e5:08:05:94:b6:56:
5b:d2:7a:07:4b:7c:b0:e1:17:a4:2b:ec:44:3d:ed:32:ea:8d:
2c:20:d3:86:30:99:19:84:94:b9:d2:a4:fc:60:0f:9f:11:86:
66:9c:8e:64:bb:98:f2:9f:98:dc:a5:d6:61:40:a4:28:50:98:
70:51:92:b3:7f:b7:5e:95:80:c0:2f:26:8f:8a:a8:61:b0:db:
57:01:5f:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2obfxf376sQ41Azx2Ej2wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhMzdiOGMwZTE1OTdjZDFkYTY1YzlhMDdmYWMwNWFjZDg0
NGNjNmEwHhcNMjUwNjI4MTMwMjIxWhcNMjUwNjI5MTMwMjIxWjAzMTEwLwYDVQQD
EyhhYzIyNmE2MmU2N2JlOWY1MDU5MmFhMDZjZTc2MzZlZjNmNThkM2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy5HF5y8/EQj4bIUuS8CSXnex9kaS
pKzUgPLfYhMzilWWq/j9EZoevnHeIZrr1179eJ8ZHoIPbG/38ZPSFP3wztr2MuHI
lcMDNpOythYQBMvlh1T/U1iFaSEeJhuS6u4QMncmFg/Y6H3tgCm96VP8nfYzzTSI
wz7Ar2IcH8dL4Ojz30nkhGavkPhHh/+NVn2VKIcgKBiARFzib1c2w84z+N7CLiwt
kqIOTodVf4OrbNERkj/cwPTI37q/trYW33nKuWuKREHxzpl85xOK/LgxHrBOmhDk
m5n3m+QD0U6jjata2o074N8/6QOo3ANAR8j8ZPUBlEhGCxZaQ7wW2yWWYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKwiamLme+n1BZKqBs52Nu8/WNOvMB8GA1UdIwQY
MBaAFIo3uMDhWXzR2mXJoH+sBazYRMxqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iYi9mZDIyYWQtZjc5Mi00NzVjLThiYWUt
MjYwMjRlMmE1ZjNlLzEvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iYi9mZDIyYWQtZjc5Mi00NzVjLThiYWUtMjYwMjRlMmE1ZjNl
LzEvaWplNHdPRlpmTkhhWmNtZ2Y2d0ZyTmhFekdvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXaYEIbuz
KGTOz6hmePjiFgg9Y46iaRan5zVnvrpnIPLoeiEh+H3W4W4RvcWqKBiuIK49+jtl
F6ujFpolcN6Yk42bnSXaKdHqzdeHhrWKkqk68o0f4cqJzo1QXJz2oHVYIsxSuswi
5kcYRe74MjD/YQi5abxsZi+KdpiBAoYZE5u6GK6UghRMDDh3GUpjlux+e5KmrNpx
Pk2HqGDSUaAYvw3CKg52OM2ahdQqgitX5QgFlLZWW9J6B0t8sOEXpCvsRD3tMuqN
LCDThjCZGYSUudKk/GAPnxGGZpyOZLuY8p+Y3KXWYUCkKFCYcFGSs3+3XpWAwC8m
j4qoYbDbVwFfPA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:19:07 2025 by rpki-client