Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
File: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft (raw, json)
Hash identifier: HHXIoYvLmBfKn+EnJXRxY0ZY8bU1H/BKnN9rHlXd0Xk=
Subject key identifier: 16:EF:F4:B5:D4:B2:C0:61:87:DC:53:E1:78:FE:BF:74:A3:2B:A9:21
Authority key identifier: E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
Certificate issuer: /CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Certificate serial: 0197B7B305BCE19660E23D8461F847BE11DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
Manifest number: 0234
Signing time: Sat 28 Jun 2025 18:00:52 +0000
Manifest this update: Sat 28 Jun 2025 18:00:52 +0000
Manifest next update: Sun 29 Jun 2025 18:00:52 +0000
Files and hashes: 1: 4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl (hash: zaeSROS1SJ2m2iSOkXg2Zq503NDOgflYGBECkrNuudE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:05:bc:e1:96:60:e2:3d:84:61:f8:47:be:11:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e24be29d4fe0c4c84350172a8a3496cc667c13f6
Validity
Not Before: Jun 28 18:00:52 2025 GMT
Not After : Jun 29 18:00:52 2025 GMT
Subject: CN=16eff4b5d4b2c06187dc53e178febf74a32ba921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b1:76:4a:58:9f:43:0c:9e:bc:61:64:7c:4e:
83:8b:c8:13:e0:0a:35:77:7c:17:7f:8c:93:54:27:
dc:a0:0c:aa:ae:70:90:9a:75:04:14:6e:86:69:63:
ef:25:86:c6:af:5b:d1:ac:5e:53:30:97:f6:43:25:
23:91:09:30:1c:b0:a4:63:5d:a2:5a:2b:2c:64:97:
8c:c0:b4:9b:a3:4a:95:81:28:a9:1e:5f:58:cb:14:
b5:9d:97:e8:82:10:21:97:e5:0e:fc:a4:7c:12:8d:
17:8e:8a:e1:c5:40:c5:58:b1:e6:e5:88:09:38:ff:
82:17:c3:0f:3a:04:7d:e3:18:82:75:83:5c:7f:31:
51:d5:a6:b6:8c:52:f7:48:af:2c:29:20:ee:25:5b:
59:aa:f2:2a:d7:44:84:ec:46:f8:e5:86:d7:37:31:
ad:95:16:ea:bc:78:37:2f:f2:1b:09:4a:b1:ee:94:
70:dd:c5:3c:94:4c:6a:9d:c9:dd:47:5a:55:64:5c:
87:ef:6b:3f:c6:7f:10:34:58:e7:44:97:77:c8:67:
9d:1b:d2:74:51:0b:66:1d:a0:bf:86:b0:88:65:c4:
05:51:d1:e8:54:45:ab:06:0a:c7:22:14:6a:be:e5:
53:58:43:57:26:fd:f3:50:2e:b7:e7:cf:76:7d:df:
a2:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:EF:F4:B5:D4:B2:C0:61:87:DC:53:E1:78:FE:BF:74:A3:2B:A9:21
X509v3 Authority Key Identifier:
keyid:E2:4B:E2:9D:4F:E0:C4:C8:43:50:17:2A:8A:34:96:CC:66:7C:13:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4kvinU_gxMhDUBcqijSWzGZ8E_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc2fa-d4aa-485e-acb7-d8feccbd658c/1/4kvinU_gxMhDUBcqijSWzGZ8E_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:36:d2:42:d0:a4:88:d0:b5:11:5f:1c:ce:0a:f3:a5:37:79:
a0:a2:a8:89:9a:37:68:d9:43:a8:7b:db:1d:97:93:4e:61:fe:
13:71:a8:24:d5:52:62:98:11:b4:dc:e0:82:1e:4e:f8:b9:ac:
ba:12:21:e5:22:0b:db:10:c0:7c:d1:40:56:aa:b8:9d:3d:ce:
27:e7:b7:81:3f:d0:cb:94:cb:7f:d4:78:79:1d:b2:2b:80:0a:
8d:a2:b8:6c:80:4b:14:75:0b:9d:d1:a1:35:7a:a1:8b:4c:98:
38:6f:57:58:e7:f2:56:cc:ef:ce:e0:2a:7c:8b:27:ae:a2:e4:
b2:64:91:29:b3:a4:c3:18:63:47:f1:5d:17:e5:3b:17:c1:f6:
41:80:32:78:3c:86:0b:4f:a3:af:b1:06:3b:83:b5:14:56:2a:
9d:e6:27:fd:37:38:30:d6:85:c6:9a:f5:6f:d3:c4:d9:44:ab:
e4:ab:71:41:1d:e0:5a:11:33:61:00:47:9e:4f:53:8c:e4:c7:
89:fc:61:69:ef:84:fc:d1:04:00:42:cf:49:3c:13:35:6e:aa:
cd:5f:28:b2:eb:f8:6c:26:a3:5d:67:07:4a:f2:8b:26:00:61:
f3:b8:82:bd:66:52:8c:1f:dc:40:de:82:63:88:10:f2:c7:23:
30:a7:dd:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3swW84ZZg4j2EYfhHvhHcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyNGJlMjlkNGZlMGM0Yzg0MzUwMTcyYThhMzQ5NmNjNjY3
YzEzZjYwHhcNMjUwNjI4MTgwMDUyWhcNMjUwNjI5MTgwMDUyWjAzMTEwLwYDVQQD
EygxNmVmZjRiNWQ0YjJjMDYxODdkYzUzZTE3OGZlYmY3NGEzMmJhOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLF2SlifQwyevGFkfE6Di8gT4Ao1
d3wXf4yTVCfcoAyqrnCQmnUEFG6GaWPvJYbGr1vRrF5TMJf2QyUjkQkwHLCkY12i
WissZJeMwLSbo0qVgSipHl9YyxS1nZfoghAhl+UO/KR8Eo0XjorhxUDFWLHm5YgJ
OP+CF8MPOgR94xiCdYNcfzFR1aa2jFL3SK8sKSDuJVtZqvIq10SE7Eb45YbXNzGt
lRbqvHg3L/IbCUqx7pRw3cU8lExqncndR1pVZFyH72s/xn8QNFjnRJd3yGedG9J0
UQtmHaC/hrCIZcQFUdHoVEWrBgrHIhRqvuVTWENXJv3zUC635892fd+iIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBbv9LXUssBhh9xT4Xj+v3SjK6khMB8GA1UdIwQY
MBaAFOJL4p1P4MTIQ1AXKoo0lsxmfBP2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNGt2aW5VX2d4TWhEVUJjcWlqU1d6R1o4RV9ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yZmMyZmEtZDRhYS00ODVlLWFjYjct
ZDhmZWNjYmQ2NThjLzEvNGt2aW5VX2d4TWhEVUJjcWlqU1d6R1o4RV9ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yZmMyZmEtZDRhYS00ODVlLWFjYjctZDhmZWNjYmQ2NThj
LzEvNGt2aW5VX2d4TWhEVUJjcWlqU1d6R1o4RV9ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhDbSQtCk
iNC1EV8czgrzpTd5oKKoiZo3aNlDqHvbHZeTTmH+E3GoJNVSYpgRtNzggh5O+Lms
uhIh5SIL2xDAfNFAVqq4nT3OJ+e3gT/Qy5TLf9R4eR2yK4AKjaK4bIBLFHULndGh
NXqhi0yYOG9XWOfyVszvzuAqfIsnrqLksmSRKbOkwxhjR/FdF+U7F8H2QYAyeDyG
C0+jr7EGO4O1FFYqneYn/Tc4MNaFxpr1b9PE2USr5KtxQR3gWhEzYQBHnk9TjOTH
ifxhae+E/NEEAELPSTwTNW6qzV8osuv4bCajXWcHSvKLJgBh87iCvWZSjB/cQN6C
Y4gQ8scjMKfdlg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:08:00 2025 by rpki-client