Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
File: hTq7t9e8xKXFbpEu76wbC7BFUCE.mft (raw, json)
Hash identifier: ZtKgYX5vavyvCwfn776d38tQrqh75t56wuvlFk5wd/4=
Subject key identifier: AD:45:8B:94:69:04:8D:35:01:D0:95:7B:33:51:6D:95:7C:2F:84:0D
Authority key identifier: 85:3A:BB:B7:D7:BC:C4:A5:C5:6E:91:2E:EF:AC:1B:0B:B0:45:50:21
Certificate issuer: /CN=853abbb7d7bcc4a5c56e912eefac1b0bb0455021
Certificate serial: 0197B9A1E7BB6AB3CDD2AF1B898A85E97BAA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hTq7t9e8xKXFbpEu76wbC7BFUCE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
Manifest number: 0502
Signing time: Sun 29 Jun 2025 03:01:24 +0000
Manifest this update: Sun 29 Jun 2025 03:01:24 +0000
Manifest next update: Mon 30 Jun 2025 03:01:24 +0000
Files and hashes: 1: hTq7t9e8xKXFbpEu76wbC7BFUCE.crl (hash: 6pCbyOFx2e7TcP6gLZ4wDtXvlBVVBIXJrwd/eYA9ygM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
rsync://rpki.ripe.net/repository/DEFAULT/hTq7t9e8xKXFbpEu76wbC7BFUCE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:e7:bb:6a:b3:cd:d2:af:1b:89:8a:85:e9:7b:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=853abbb7d7bcc4a5c56e912eefac1b0bb0455021
Validity
Not Before: Jun 29 03:01:24 2025 GMT
Not After : Jun 30 03:01:24 2025 GMT
Subject: CN=ad458b9469048d3501d0957b33516d957c2f840d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:a5:dc:67:8c:a9:91:30:48:67:c0:a1:8f:fd:
b7:a1:89:37:ce:e6:52:f8:05:a1:1d:72:77:1b:40:
33:e2:7e:36:72:8a:b2:cd:2f:6f:ad:ef:90:a1:e0:
c9:0a:10:23:e1:a2:88:ce:01:79:36:32:54:e9:a6:
93:82:08:5f:a6:bc:72:cf:6b:a2:b7:0e:78:0c:4e:
53:da:06:29:c0:f3:5f:f6:d2:91:22:c0:99:7f:18:
ca:d5:ef:17:55:37:bd:ac:21:ad:f7:99:c3:09:02:
6c:84:59:62:6b:37:d3:28:31:c7:da:f0:0c:b9:15:
c2:1c:47:45:48:ef:11:68:3d:67:bb:7e:1d:63:06:
ff:76:18:f5:80:be:95:57:6b:12:95:22:d4:b4:67:
9f:41:f7:3c:61:17:d9:2d:6b:e4:f5:9b:a3:35:8f:
55:13:69:9d:21:0e:3e:ee:79:19:8e:c8:80:13:d7:
a4:5b:ae:10:7d:87:ab:68:19:f0:5b:3e:d5:a9:ab:
37:08:19:52:9f:53:f1:88:49:f1:64:b7:07:6c:3a:
b9:24:a2:ee:3b:b7:5d:7c:03:b4:74:24:0c:c1:5f:
f8:6a:ea:86:5a:07:07:7e:ff:0f:f5:3b:5c:02:bf:
4c:12:20:59:52:5d:93:d1:88:f2:5e:97:46:f4:2d:
f8:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:45:8B:94:69:04:8D:35:01:D0:95:7B:33:51:6D:95:7C:2F:84:0D
X509v3 Authority Key Identifier:
keyid:85:3A:BB:B7:D7:BC:C4:A5:C5:6E:91:2E:EF:AC:1B:0B:B0:45:50:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hTq7t9e8xKXFbpEu76wbC7BFUCE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/4238ae-a72f-471c-a9a9-5823f870141b/1/hTq7t9e8xKXFbpEu76wbC7BFUCE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
10:07:f0:0f:64:69:e9:10:c9:37:bc:98:0e:f8:dc:79:ab:ba:
8b:9a:49:ce:f8:7b:d9:72:f2:91:2a:24:0a:4d:93:d7:3f:20:
a5:d7:ed:22:49:27:ac:1d:4f:f5:0b:c5:07:af:c5:23:cb:bf:
fb:62:c8:15:41:cd:4b:0f:df:75:1d:42:5a:0d:0a:5b:a8:44:
41:29:ff:52:42:8c:19:28:4f:a6:9a:36:bd:8b:cd:25:f5:64:
4f:0a:ff:93:2b:9e:14:94:dc:33:37:1a:82:df:af:5b:45:bd:
15:10:51:0e:ec:37:ec:aa:b0:a4:d6:aa:f7:73:e4:ec:78:30:
f6:70:d2:d6:63:22:3f:29:ec:85:57:78:05:d5:c2:2f:63:7c:
e9:ed:8e:91:0e:42:5b:31:12:64:a5:3f:d3:62:0b:eb:5b:7c:
29:21:38:e7:3b:6a:91:91:64:ca:c3:de:44:cb:a2:5d:c7:dc:
2a:be:f3:10:f2:c0:fa:e5:93:be:fc:18:4e:ed:77:88:df:e6:
91:bd:62:25:72:1a:40:76:37:b1:26:72:d5:ae:52:60:38:4d:
61:89:48:b3:84:1a:43:d2:2d:84:60:a9:4d:f4:3c:82:fc:c4:
b8:c1:1a:aa:6d:7e:8e:af:87:85:cb:44:aa:99:c1:d3:ef:98:
48:d5:3d:65
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5oee7arPN0q8biYqF6XuqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg1M2FiYmI3ZDdiY2M0YTVjNTZlOTEyZWVmYWMxYjBiYjA0
NTUwMjEwHhcNMjUwNjI5MDMwMTI0WhcNMjUwNjMwMDMwMTI0WjAzMTEwLwYDVQQD
EyhhZDQ1OGI5NDY5MDQ4ZDM1MDFkMDk1N2IzMzUxNmQ5NTdjMmY4NDBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw6XcZ4ypkTBIZ8Chj/23oYk3zuZS
+AWhHXJ3G0Az4n42coqyzS9vre+QoeDJChAj4aKIzgF5NjJU6aaTgghfprxyz2ui
tw54DE5T2gYpwPNf9tKRIsCZfxjK1e8XVTe9rCGt95nDCQJshFliazfTKDHH2vAM
uRXCHEdFSO8RaD1nu34dYwb/dhj1gL6VV2sSlSLUtGefQfc8YRfZLWvk9ZujNY9V
E2mdIQ4+7nkZjsiAE9ekW64QfYeraBnwWz7Vqas3CBlSn1PxiEnxZLcHbDq5JKLu
O7ddfAO0dCQMwV/4auqGWgcHfv8P9TtcAr9MEiBZUl2T0YjyXpdG9C34mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK1Fi5RpBI01AdCVezNRbZV8L4QNMB8GA1UdIwQY
MBaAFIU6u7fXvMSlxW6RLu+sGwuwRVAhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFRxN3Q5ZTh4S1hGYnBFdTc2d2JDN0JGVUNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZS80MjM4YWUtYTcyZi00NzFjLWE5YTkt
NTgyM2Y4NzAxNDFiLzEvaFRxN3Q5ZTh4S1hGYnBFdTc2d2JDN0JGVUNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZS80MjM4YWUtYTcyZi00NzFjLWE5YTktNTgyM2Y4NzAxNDFi
LzEvaFRxN3Q5ZTh4S1hGYnBFdTc2d2JDN0JGVUNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEAfwD2Rp
6RDJN7yYDvjceau6i5pJzvh72XLykSokCk2T1z8gpdftIkknrB1P9QvFB6/FI8u/
+2LIFUHNSw/fdR1CWg0KW6hEQSn/UkKMGShPppo2vYvNJfVkTwr/kyueFJTcMzca
gt+vW0W9FRBRDuw37KqwpNaq93Pk7Hgw9nDS1mMiPynshVd4BdXCL2N86e2OkQ5C
WzESZKU/02IL61t8KSE45ztqkZFkysPeRMuiXcfcKr7zEPLA+uWTvvwYTu13iN/m
kb1iJXIaQHY3sSZy1a5SYDhNYYlIs4QaQ9IthGCpTfQ8gvzEuMEaqm1+jq+HhctE
qpnB0++YSNU9ZQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 07:03:24 2025 by rpki-client