Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
File: INW4SDsXErcCNUEFbnMIU2bSk0Y.mft (raw, json)
Hash identifier: KNj4LOAFzyzNyrNG711upceCefYEAsS6qxY0WJEimA8=
Subject key identifier: 04:DD:05:76:95:BB:5C:11:1B:F1:58:B8:FD:9C:E7:31:B1:B1:D3:CF
Authority key identifier: 20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
Certificate issuer: /CN=20d5b8483b1712b7023541056e73085366d29346
Certificate serial: 0197B77C09E7B789DF5A20BF1D157548B892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
Manifest number: 0AFC
Signing time: Sat 28 Jun 2025 17:00:48 +0000
Manifest this update: Sat 28 Jun 2025 17:00:48 +0000
Manifest next update: Sun 29 Jun 2025 17:00:48 +0000
Files and hashes: 1: INW4SDsXErcCNUEFbnMIU2bSk0Y.crl (hash: hOj57htTJwpksBnhNHqkJ0CcCBD4I5LLSz1cBhWsNAA=)
2: ttJJaBUZDaYcQDBtp6etg0tHOcw.roa (hash: eyDaETbBTLM6QaTgVh4ZT2/g+b+CTdUyos3+nCYyg/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:09:e7:b7:89:df:5a:20:bf:1d:15:75:48:b8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d5b8483b1712b7023541056e73085366d29346
Validity
Not Before: Jun 28 17:00:48 2025 GMT
Not After : Jun 29 17:00:48 2025 GMT
Subject: CN=04dd057695bb5c111bf158b8fd9ce731b1b1d3cf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:bc:6d:6e:9e:32:f0:de:17:9e:1c:8a:5a:91:
7c:7d:25:bd:26:85:0d:44:15:ec:b1:b6:fa:dc:6d:
f3:ac:92:2a:b9:dc:44:e6:7d:6b:97:57:4f:1f:f8:
b3:c8:d8:07:08:71:cd:0c:dc:22:5d:14:9f:52:7b:
84:e9:a7:46:92:9d:22:ca:cd:93:29:b1:9b:90:3a:
1d:c8:89:22:30:d1:69:46:33:95:c6:25:56:8e:f1:
fb:ac:01:3f:00:67:99:3c:08:fc:83:46:be:6b:bb:
34:56:9c:2a:87:07:05:3f:95:5f:b3:21:43:68:e2:
c7:f9:9e:53:98:9d:4b:7a:6f:b6:6e:e0:fc:14:70:
2c:05:81:98:ff:b9:e4:6a:8d:d0:4a:6a:a7:ca:54:
a7:5e:09:6e:e8:be:e8:57:6d:90:eb:f6:55:ac:8d:
4b:a0:f3:00:e9:58:61:dc:66:3a:17:14:3a:d2:d3:
91:2f:18:8d:09:16:e0:a2:1c:2f:1d:9a:90:dd:e5:
53:2b:c2:d2:38:41:f7:d2:d8:d1:f7:3b:8a:d5:7f:
a1:8b:16:ab:35:ba:1a:6e:3c:1f:43:53:63:d3:5c:
44:8a:69:1e:7f:29:03:72:f8:8e:91:b6:07:87:b6:
18:9e:1a:86:54:1d:94:7a:f6:e6:06:01:d9:d8:2c:
5a:bd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
04:DD:05:76:95:BB:5C:11:1B:F1:58:B8:FD:9C:E7:31:B1:B1:D3:CF
X509v3 Authority Key Identifier:
keyid:20:D5:B8:48:3B:17:12:B7:02:35:41:05:6E:73:08:53:66:D2:93:46
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INW4SDsXErcCNUEFbnMIU2bSk0Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/a0735a-511c-48c9-a61a-0c2ff7937e6f/1/INW4SDsXErcCNUEFbnMIU2bSk0Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:00:1a:9b:0a:6d:a2:64:7b:81:78:df:2f:f9:34:d1:ee:63:
9a:73:4d:93:83:be:f8:0d:f8:80:87:7f:9d:e6:e7:b6:4e:30:
0b:ec:62:73:33:1c:3d:e4:67:6d:a9:30:60:85:2f:e1:31:3b:
6f:a0:e0:dc:34:43:3b:e4:6e:40:35:c0:0f:6f:32:53:3e:60:
bb:90:20:70:50:c4:52:35:c3:69:d1:af:c7:57:6c:cf:25:12:
ac:a1:7e:fa:ec:c9:21:29:e9:50:4b:94:f6:d8:55:81:3d:7e:
33:56:94:af:e8:72:c1:12:c8:31:f8:bd:67:36:dd:8e:6d:5f:
36:73:a0:9f:78:8e:09:63:0f:48:60:ae:f6:1d:78:5d:f2:39:
06:0d:41:f6:df:f9:e1:75:f4:b6:d8:2b:c9:bb:24:21:7c:8c:
36:10:17:1e:8b:9a:98:a5:63:a0:c0:f3:e9:d4:0d:6c:3e:d6:
2e:c5:f3:2d:93:e3:93:5a:73:3d:1d:3e:38:0a:80:84:3b:46:
b0:38:72:50:bd:c2:27:eb:e6:fc:1e:2d:ff:e9:7d:7e:93:30:
d7:11:26:a0:ea:7c:3f:4e:03:4f:5b:4b:60:17:22:56:75:d5:
30:28:2d:53:15:f9:a4:00:56:d9:e6:50:5c:5b:51:73:0a:e4:
6a:08:43:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fAnnt4nfWiC/HRV1SLiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDViODQ4M2IxNzEyYjcwMjM1NDEwNTZlNzMwODUzNjZk
MjkzNDYwHhcNMjUwNjI4MTcwMDQ4WhcNMjUwNjI5MTcwMDQ4WjAzMTEwLwYDVQQD
EygwNGRkMDU3Njk1YmI1YzExMWJmMTU4YjhmZDljZTczMWIxYjFkM2NmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtbxtbp4y8N4XnhyKWpF8fSW9JoUN
RBXssbb63G3zrJIqudxE5n1rl1dPH/izyNgHCHHNDNwiXRSfUnuE6adGkp0iys2T
KbGbkDodyIkiMNFpRjOVxiVWjvH7rAE/AGeZPAj8g0a+a7s0VpwqhwcFP5VfsyFD
aOLH+Z5TmJ1Lem+2buD8FHAsBYGY/7nkao3QSmqnylSnXglu6L7oV22Q6/ZVrI1L
oPMA6Vhh3GY6FxQ60tORLxiNCRbgohwvHZqQ3eVTK8LSOEH30tjR9zuK1X+hixar
NboabjwfQ1Nj01xEimkefykDcviOkbYHh7YYnhqGVB2UevbmBgHZ2CxavQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFATdBXaVu1wRG/FYuP2c5zGxsdPPMB8GA1UdIwQY
MBaAFCDVuEg7FxK3AjVBBW5zCFNm0pNGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEt
MGMyZmY3OTM3ZTZmLzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS9hMDczNWEtNTExYy00OGM5LWE2MWEtMGMyZmY3OTM3ZTZm
LzEvSU5XNFNEc1hFcmNDTlVFRmJuTUlVMmJTazBZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwAamwpt
omR7gXjfL/k00e5jmnNNk4O++A34gId/nebntk4wC+xiczMcPeRnbakwYIUv4TE7
b6Dg3DRDO+RuQDXAD28yUz5gu5AgcFDEUjXDadGvx1dszyUSrKF++uzJISnpUEuU
9thVgT1+M1aUr+hywRLIMfi9Zzbdjm1fNnOgn3iOCWMPSGCu9h14XfI5Bg1B9t/5
4XX0ttgrybskIXyMNhAXHouamKVjoMDz6dQNbD7WLsXzLZPjk1pzPR0+OAqAhDtG
sDhyUL3CJ+vm/B4t/+l9fpMw1xEmoOp8P04DT1tLYBciVnXVMCgtUxX5pABW2eZQ
XFtRcwrkaghD2g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:07:20 2025 by rpki-client