Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
File: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft (raw, json)
Hash identifier: HF2LMaX8UxFzElFMRNxenGplgByeeW4Y6Ao1/T6EPxI=
Subject key identifier: E7:62:62:D4:1B:B0:2E:49:EB:D5:DD:A4:F4:42:4D:38:6E:5A:5D:75
Authority key identifier: D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
Certificate issuer: /CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Certificate serial: 0197B6A1A9B20DCF4D167209924C6FA691C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
Manifest number: 1270
Signing time: Sat 28 Jun 2025 13:02:17 +0000
Manifest this update: Sat 28 Jun 2025 13:02:17 +0000
Manifest next update: Sun 29 Jun 2025 13:02:17 +0000
Files and hashes: 1: 0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl (hash: NJaykw9ZeZbJank+IDpCGlC3TJkiSuVNq5ChtjPi58g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a9:b2:0d:cf:4d:16:72:09:92:4c:6f:a6:91:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d12f29fc07ed4b5218cd127da2ac57fa063452d9
Validity
Not Before: Jun 28 13:02:17 2025 GMT
Not After : Jun 29 13:02:17 2025 GMT
Subject: CN=e76262d41bb02e49ebd5dda4f4424d386e5a5d75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:03:dd:f6:81:05:59:d9:b7:be:9c:d8:71:db:
cf:d0:eb:01:65:ac:24:0b:5d:a5:e3:11:bb:42:6c:
0e:16:fa:cc:ad:a0:ab:e0:1c:05:f8:f3:b8:93:30:
92:77:ba:87:f0:3a:2d:33:47:4a:63:87:40:fd:b0:
37:32:64:06:29:11:9c:60:f6:8b:cf:a6:df:27:35:
6f:83:56:2c:cd:3d:18:da:1e:86:22:76:81:03:26:
bc:c5:09:5b:b8:a6:5d:c4:9e:33:4d:e9:a5:06:e0:
86:92:1b:37:a3:f9:43:93:ce:b8:f8:bc:40:9b:60:
a2:4e:7c:81:4e:e2:bc:71:7f:15:bf:ff:3a:12:d2:
cc:77:44:9d:e0:41:03:b0:45:6d:16:70:02:23:d4:
f1:ee:37:3c:0c:ba:a4:26:3e:14:2f:24:56:de:b7:
a1:7f:ac:aa:8f:08:e4:5c:96:9e:06:35:2c:09:ed:
b8:69:30:83:16:47:ed:1c:ae:93:d3:e6:ff:02:37:
2b:0b:05:ec:16:82:50:e3:67:66:74:9d:62:38:dd:
19:6b:52:14:73:83:df:60:82:db:1b:33:78:08:4c:
5c:34:3f:dc:62:f1:26:b9:43:14:c3:32:13:ce:c2:
c4:32:7d:cf:65:54:5d:7c:65:b1:21:01:a9:8e:8a:
7c:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:62:62:D4:1B:B0:2E:49:EB:D5:DD:A4:F4:42:4D:38:6E:5A:5D:75
X509v3 Authority Key Identifier:
keyid:D1:2F:29:FC:07:ED:4B:52:18:CD:12:7D:A2:AC:57:FA:06:34:52:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0S8p_AftS1IYzRJ9oqxX-gY0Utk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/c945b9-4bef-4713-a88a-e0d821e45ffc/1/0S8p_AftS1IYzRJ9oqxX-gY0Utk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:32:b9:e0:78:24:23:19:08:1e:f3:91:74:b3:2f:bf:bb:3a:
5a:e4:87:5b:65:08:53:86:9a:29:fc:e0:b5:9a:84:d3:39:65:
85:8e:ab:81:2e:3d:86:04:a1:fb:0a:36:89:83:43:79:e1:7d:
31:a5:32:bd:19:0f:22:95:98:1c:91:c7:73:51:c3:b3:55:16:
e5:91:67:74:b6:33:f0:a3:b7:e1:09:9d:c5:b0:a9:b3:8a:92:
77:eb:15:2d:19:b4:50:2d:9e:1f:18:71:72:38:1b:42:52:61:
f9:53:9d:c8:ae:c9:0d:32:94:a7:5e:6e:6b:7e:75:94:be:bd:
a8:33:8c:ab:fb:41:c9:0d:de:72:71:4b:dd:8e:62:21:a1:6d:
a7:ad:6c:1c:3d:ce:4f:43:5f:53:c2:4a:d1:70:26:32:a5:8c:
6f:91:6a:63:56:3b:90:43:ab:38:b8:83:c4:4d:3b:ce:de:92:
42:72:fc:7c:0f:36:ee:4a:a4:ac:96:1f:dd:d1:68:fd:5a:c5:
22:95:0a:2a:df:33:ef:37:68:40:df:81:eb:70:5a:32:6e:11:
5e:1c:c4:5f:ee:90:d6:60:8f:47:06:63:9c:6b:12:e3:da:9f:
07:54:80:5f:6b:6c:7c:25:06:5a:67:a7:30:9d:1a:33:2b:04:
a2:a5:01:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oamyDc9NFnIJkkxvppHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxMmYyOWZjMDdlZDRiNTIxOGNkMTI3ZGEyYWM1N2ZhMDYz
NDUyZDkwHhcNMjUwNjI4MTMwMjE3WhcNMjUwNjI5MTMwMjE3WjAzMTEwLwYDVQQD
EyhlNzYyNjJkNDFiYjAyZTQ5ZWJkNWRkYTRmNDQyNGQzODZlNWE1ZDc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvQPd9oEFWdm3vpzYcdvP0OsBZawk
C12l4xG7QmwOFvrMraCr4BwF+PO4kzCSd7qH8DotM0dKY4dA/bA3MmQGKRGcYPaL
z6bfJzVvg1YszT0Y2h6GInaBAya8xQlbuKZdxJ4zTemlBuCGkhs3o/lDk864+LxA
m2CiTnyBTuK8cX8Vv/86EtLMd0Sd4EEDsEVtFnACI9Tx7jc8DLqkJj4ULyRW3reh
f6yqjwjkXJaeBjUsCe24aTCDFkftHK6T0+b/AjcrCwXsFoJQ42dmdJ1iON0Za1IU
c4PfYILbGzN4CExcND/cYvEmuUMUwzITzsLEMn3PZVRdfGWxIQGpjop8UwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOdiYtQbsC5J69XdpPRCTThuWl11MB8GA1UdIwQY
MBaAFNEvKfwH7UtSGM0SfaKsV/oGNFLZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEt
ZTBkODIxZTQ1ZmZjLzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jOTQ1YjktNGJlZi00NzEzLWE4OGEtZTBkODIxZTQ1ZmZj
LzEvMFM4cF9BZnRTMUlZelJKOW9xeFgtZ1kwVXRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPTK54Hgk
IxkIHvORdLMvv7s6WuSHW2UIU4aaKfzgtZqE0zllhY6rgS49hgSh+wo2iYNDeeF9
MaUyvRkPIpWYHJHHc1HDs1UW5ZFndLYz8KO34QmdxbCps4qSd+sVLRm0UC2eHxhx
cjgbQlJh+VOdyK7JDTKUp15ua351lL69qDOMq/tByQ3ecnFL3Y5iIaFtp61sHD3O
T0NfU8JK0XAmMqWMb5FqY1Y7kEOrOLiDxE07zt6SQnL8fA827kqkrJYf3dFo/VrF
IpUKKt8z7zdoQN+B63BaMm4RXhzEX+6Q1mCPRwZjnGsS49qfB1SAX2tsfCUGWmen
MJ0aMysEoqUBMA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 18:58:28 2025 by rpki-client