Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
File: INaBg9YBj1BMXm-uIo4bNQxvD-8.mft (raw, json)
Hash identifier: jvjjrIsj7pvMDw4Ejfs6GNvcJR0JrGmjiIE2WvsrZVQ=
Subject key identifier: 75:2B:21:D2:13:BF:38:BB:81:0A:D2:59:0C:2B:F8:2F:B3:B6:F5:86
Authority key identifier: 20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
Certificate issuer: /CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Certificate serial: 0197B7B3391C02889257E7B49034CECF45BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
Manifest number: 03A9
Signing time: Sat 28 Jun 2025 18:01:05 +0000
Manifest this update: Sat 28 Jun 2025 18:01:05 +0000
Manifest next update: Sun 29 Jun 2025 18:01:05 +0000
Files and hashes: 1: INaBg9YBj1BMXm-uIo4bNQxvD-8.crl (hash: HdjOGSIW+/smnO4LYF1XC6vx7slH50KN/XGJmX+LNDQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:39:1c:02:88:92:57:e7:b4:90:34:ce:cf:45:bc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20d68183d6018f504c5e6fae228e1b350c6f0fef
Validity
Not Before: Jun 28 18:01:05 2025 GMT
Not After : Jun 29 18:01:05 2025 GMT
Subject: CN=752b21d213bf38bb810ad2590c2bf82fb3b6f586
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:14:c5:cc:a4:7d:20:8e:8f:b6:85:10:8a:8d:
f8:87:c9:b5:34:8d:f3:68:ea:ab:24:2d:a8:b0:6a:
5b:71:22:76:c1:fd:c9:2e:74:c4:ff:df:14:0b:88:
40:ae:23:d6:85:f1:57:dc:b5:dc:5f:27:3d:88:6c:
95:c7:15:37:fd:9e:8a:79:8f:34:d0:cd:3f:46:63:
0d:07:1a:a9:2d:a2:55:e4:4e:bb:53:90:af:c3:5b:
91:a0:88:3f:a7:25:8f:b5:2b:35:d3:a1:80:3b:1e:
43:33:a3:f5:fc:2f:b7:81:24:17:34:1e:8a:e6:92:
e6:b9:30:66:af:06:81:ec:e4:ec:5d:f1:91:0d:88:
33:39:c0:63:16:17:83:da:aa:53:1a:2d:d6:cb:bf:
3a:36:3d:8d:50:e8:05:49:5d:5a:ac:86:de:00:40:
54:61:a4:65:42:c0:5e:a5:5c:8c:32:ce:cc:12:06:
dd:2b:cb:4b:f0:09:f9:e6:62:2d:a7:54:85:58:05:
08:21:c0:95:d5:1c:9c:ae:ab:66:5b:33:21:ba:ac:
35:eb:3e:da:79:d6:39:17:c7:ff:ab:f6:c2:96:c3:
91:3a:0a:41:40:a4:58:b0:af:75:27:f3:21:ca:fb:
6d:fb:26:ea:a1:cb:d8:d8:b4:78:fa:d3:b0:42:10:
ec:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:2B:21:D2:13:BF:38:BB:81:0A:D2:59:0C:2B:F8:2F:B3:B6:F5:86
X509v3 Authority Key Identifier:
keyid:20:D6:81:83:D6:01:8F:50:4C:5E:6F:AE:22:8E:1B:35:0C:6F:0F:EF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/INaBg9YBj1BMXm-uIo4bNQxvD-8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e0/6efd9c-64c3-42b6-92fd-ab7881b0df2b/1/INaBg9YBj1BMXm-uIo4bNQxvD-8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b0:2e:27:e0:0c:5a:67:79:b7:84:02:7e:d0:41:c4:98:a3:0e:
23:11:37:b9:bb:95:b3:0e:98:97:b7:f8:2e:d3:69:9b:d7:64:
19:26:5e:29:47:53:f2:4c:07:59:5d:fa:98:00:7f:77:bb:80:
78:2c:a9:6a:fd:3b:f3:e5:7d:82:83:16:3a:1e:c8:9e:ed:d7:
a8:a3:e8:96:97:bc:c9:02:46:61:64:a0:e8:a0:45:a2:e2:95:
a3:89:92:d8:ff:fd:6a:7c:49:3c:d3:81:0c:ac:49:cc:84:a2:
d1:aa:0d:be:a1:0c:78:bb:e0:77:2b:55:5c:57:93:fe:b2:30:
5e:7d:0b:e6:43:c1:00:45:fb:40:71:fc:d6:06:34:ed:74:43:
f7:c9:77:ce:c9:02:24:fa:89:7c:23:26:2d:e0:14:ad:46:d1:
a7:71:45:9b:bb:3a:27:71:1c:40:31:52:80:af:bb:75:71:d6:
b5:a1:75:39:b1:30:66:15:44:02:2d:da:8e:fe:2a:ac:4b:a6:
9c:24:df:2f:18:eb:89:2e:38:9f:28:1e:d3:1a:72:4c:0c:0c:
01:5b:7e:9f:12:1b:1d:40:36:28:08:df:b0:19:13:34:d3:f8:
4a:5a:a7:65:e8:d0:ec:f8:bd:ff:e9:09:39:61:9f:1e:d6:72:
58:ae:c2:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3szkcAoiSV+e0kDTOz0W8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwZDY4MTgzZDYwMThmNTA0YzVlNmZhZTIyOGUxYjM1MGM2
ZjBmZWYwHhcNMjUwNjI4MTgwMTA1WhcNMjUwNjI5MTgwMTA1WjAzMTEwLwYDVQQD
Eyg3NTJiMjFkMjEzYmYzOGJiODEwYWQyNTkwYzJiZjgyZmIzYjZmNTg2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0hTFzKR9II6PtoUQio34h8m1NI3z
aOqrJC2osGpbcSJ2wf3JLnTE/98UC4hAriPWhfFX3LXcXyc9iGyVxxU3/Z6KeY80
0M0/RmMNBxqpLaJV5E67U5Cvw1uRoIg/pyWPtSs106GAOx5DM6P1/C+3gSQXNB6K
5pLmuTBmrwaB7OTsXfGRDYgzOcBjFheD2qpTGi3Wy786Nj2NUOgFSV1arIbeAEBU
YaRlQsBepVyMMs7MEgbdK8tL8An55mItp1SFWAUIIcCV1RycrqtmWzMhuqw16z7a
edY5F8f/q/bClsOROgpBQKRYsK91J/Mhyvtt+ybqocvY2LR4+tOwQhDs9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHUrIdITvzi7gQrSWQwr+C+ztvWGMB8GA1UdIwQY
MBaAFCDWgYPWAY9QTF5vriKOGzUMbw/vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSU5hQmc5WUJqMUJNWG0tdUlvNGJOUXh2RC04LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMC82ZWZkOWMtNjRjMy00MmI2LTkyZmQt
YWI3ODgxYjBkZjJiLzEvSU5hQmc5WUJqMUJNWG0tdUlvNGJOUXh2RC04Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMC82ZWZkOWMtNjRjMy00MmI2LTkyZmQtYWI3ODgxYjBkZjJi
LzEvSU5hQmc5WUJqMUJNWG0tdUlvNGJOUXh2RC04LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsC4n4Axa
Z3m3hAJ+0EHEmKMOIxE3ubuVsw6Yl7f4LtNpm9dkGSZeKUdT8kwHWV36mAB/d7uA
eCypav078+V9goMWOh7Inu3XqKPolpe8yQJGYWSg6KBFouKVo4mS2P/9anxJPNOB
DKxJzISi0aoNvqEMeLvgdytVXFeT/rIwXn0L5kPBAEX7QHH81gY07XRD98l3zskC
JPqJfCMmLeAUrUbRp3FFm7s6J3EcQDFSgK+7dXHWtaF1ObEwZhVEAi3ajv4qrEum
nCTfLxjriS44nyge0xpyTAwMAVt+nxIbHUA2KAjfsBkTNNP4SlqnZejQ7Pi9/+kJ
OWGfHtZyWK7CTw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:46:39 2025 by rpki-client