Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
File: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft (raw, json)
Hash identifier: csvlvXB6RKWBt2T5iVWwV90k40rU8IyZ+ZvvfppFkgE=
Subject key identifier: 65:C7:55:9E:6B:99:9D:AD:4D:93:BA:62:54:FA:37:CE:28:66:5A:09
Authority key identifier: F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
Certificate issuer: /CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Certificate serial: 0197B77C15E9A0DFDE8840248B73AE08C892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
Manifest number: 1187
Signing time: Sat 28 Jun 2025 17:00:51 +0000
Manifest this update: Sat 28 Jun 2025 17:00:51 +0000
Manifest next update: Sun 29 Jun 2025 17:00:51 +0000
Files and hashes: 1: 9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl (hash: /952rIO21ToVS2DxJyUHbVS3mkhz+inwz3kR47q8njw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:15:e9:a0:df:de:88:40:24:8b:73:ae:08:c8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f57e4b1c9587727133c7ee00bbba8ec56eae641d
Validity
Not Before: Jun 28 17:00:51 2025 GMT
Not After : Jun 29 17:00:51 2025 GMT
Subject: CN=65c7559e6b999dad4d93ba6254fa37ce28665a09
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:2b:e8:df:65:b9:7c:58:35:39:ac:7e:3d:30:
86:30:38:89:17:4c:75:ed:bb:49:ea:72:94:73:12:
e3:2e:d4:b1:b0:0e:8a:ef:c6:a0:ae:54:b7:8c:15:
73:c4:71:c5:fd:c7:d3:86:68:eb:dc:c5:57:b3:53:
35:36:77:a2:cb:39:3e:01:a8:2d:50:ca:5f:49:06:
fd:8f:b0:4e:b1:9f:b6:05:39:18:22:fd:32:61:c3:
5b:f0:43:24:7c:e6:48:b8:66:95:c8:93:0e:03:96:
bf:17:c2:a8:39:56:9c:c4:a5:18:bd:63:d2:97:56:
2a:b2:47:6d:fa:d4:10:39:e1:88:e9:f4:d2:53:74:
2c:e8:9d:ca:96:a7:1b:28:68:c5:68:12:7d:2a:c6:
97:c3:05:b9:3b:35:d2:ca:ea:68:d7:46:b3:f0:56:
27:93:c0:7c:34:d2:bc:fe:1b:21:c7:12:8b:f1:b2:
0d:36:e0:10:c3:89:42:74:03:60:4d:73:0b:16:72:
cf:78:85:e1:80:f3:d7:8d:bb:af:43:3b:f8:45:ac:
ec:07:0d:97:4c:a3:53:84:34:d9:42:ee:e3:8b:2c:
73:1d:82:fc:cf:ab:01:d8:9d:5e:17:91:e3:73:4d:
ab:4a:3d:74:50:b0:9e:d4:c7:0a:6f:f3:48:ea:07:
00:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:C7:55:9E:6B:99:9D:AD:4D:93:BA:62:54:FA:37:CE:28:66:5A:09
X509v3 Authority Key Identifier:
keyid:F5:7E:4B:1C:95:87:72:71:33:C7:EE:00:BB:BA:8E:C5:6E:AE:64:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9X5LHJWHcnEzx-4Au7qOxW6uZB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e3/9e9119-e5e6-404a-b58a-188b91a9e990/1/9X5LHJWHcnEzx-4Au7qOxW6uZB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:96:77:b8:f3:e0:50:e2:77:f9:02:7b:c4:2a:7f:ce:59:d8:
55:7d:60:a9:56:c0:d9:ef:ba:0a:4d:27:f6:ee:8a:76:04:69:
a2:be:c8:10:3d:8d:c2:66:95:77:b8:49:25:6b:3e:7d:7c:05:
0a:12:28:88:78:1e:a2:bc:8c:97:85:51:7a:9b:11:b2:35:43:
5c:20:fd:a9:89:d6:27:e9:3b:8f:f6:42:12:9b:7a:df:d0:ab:
b8:9e:94:26:6f:f6:82:8e:36:41:86:e8:cf:3c:68:99:ed:f7:
c9:b9:41:6f:ad:e5:d8:f2:9a:7a:1e:2d:fd:0a:7f:51:4f:a0:
7a:db:45:45:76:66:ff:36:3d:03:4a:4d:aa:14:35:60:ec:2a:
a4:82:9d:b8:7a:62:da:9b:5d:d2:44:18:a9:00:1f:c7:1c:0c:
fa:bb:58:53:0c:d0:3d:07:c7:e4:87:49:4c:fa:9b:07:98:8f:
2a:ae:48:fc:a6:84:ca:bf:27:9f:02:0e:7c:f5:d1:f0:45:bc:
29:f4:91:a3:be:35:05:c7:70:f6:9a:85:d3:6e:71:c7:68:aa:
87:bb:9a:22:4a:2a:f0:5d:9d:bf:ec:b3:00:ff:f1:b2:1e:aa:
0d:c2:9a:c0:d9:fe:00:cf:81:c8:a7:b1:19:6f:04:e3:94:44:
a9:8d:de:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fBXpoN/eiEAki3OuCMiSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1N2U0YjFjOTU4NzcyNzEzM2M3ZWUwMGJiYmE4ZWM1NmVh
ZTY0MWQwHhcNMjUwNjI4MTcwMDUxWhcNMjUwNjI5MTcwMDUxWjAzMTEwLwYDVQQD
Eyg2NWM3NTU5ZTZiOTk5ZGFkNGQ5M2JhNjI1NGZhMzdjZTI4NjY1YTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzCvo32W5fFg1Oax+PTCGMDiJF0x1
7btJ6nKUcxLjLtSxsA6K78agrlS3jBVzxHHF/cfThmjr3MVXs1M1Nneiyzk+Aagt
UMpfSQb9j7BOsZ+2BTkYIv0yYcNb8EMkfOZIuGaVyJMOA5a/F8KoOVacxKUYvWPS
l1Yqskdt+tQQOeGI6fTSU3Qs6J3KlqcbKGjFaBJ9KsaXwwW5OzXSyupo10az8FYn
k8B8NNK8/hshxxKL8bINNuAQw4lCdANgTXMLFnLPeIXhgPPXjbuvQzv4RazsBw2X
TKNThDTZQu7jiyxzHYL8z6sB2J1eF5Hjc02rSj10ULCe1McKb/NI6gcAPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGXHVZ5rmZ2tTZO6YlT6N84oZloJMB8GA1UdIwQY
MBaAFPV+SxyVh3JxM8fuALu6jsVurmQdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMy85ZTkxMTktZTVlNi00MDRhLWI1OGEt
MTg4YjkxYTllOTkwLzEvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMy85ZTkxMTktZTVlNi00MDRhLWI1OGEtMTg4YjkxYTllOTkw
LzEvOVg1TEhKV0hjbkV6eC00QXU3cU94VzZ1WkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArJZ3uPPg
UOJ3+QJ7xCp/zlnYVX1gqVbA2e+6Ck0n9u6KdgRpor7IED2NwmaVd7hJJWs+fXwF
ChIoiHgeoryMl4VRepsRsjVDXCD9qYnWJ+k7j/ZCEpt639CruJ6UJm/2go42QYbo
zzxome33yblBb63l2PKaeh4t/Qp/UU+gettFRXZm/zY9A0pNqhQ1YOwqpIKduHpi
2ptd0kQYqQAfxxwM+rtYUwzQPQfH5IdJTPqbB5iPKq5I/KaEyr8nnwIOfPXR8EW8
KfSRo741Bcdw9pqF025xx2iqh7uaIkoq8F2dv+yzAP/xsh6qDcKawNn+AM+ByKex
GW8E45REqY3e0Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:54:26 2025 by rpki-client