Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
File: _hEX6Xaz4zlTuTYbtLseui9Ane0.mft (raw, json)
Hash identifier: GEpcJ96i6vje5Qlnb1kdTWojDsydoXsnN4/9FeS1Crw=
Subject key identifier: 9B:5D:1D:16:9F:D5:AC:D2:D0:DD:D3:52:5E:9C:28:CD:76:10:4C:EE
Authority key identifier: FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED
Certificate issuer: /CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded
Certificate serial: 0197700785D87B1F8BC41B8FB53084AA0B01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
Manifest number: 06AD
Signing time: Sat 14 Jun 2025 20:00:30 +0000
Manifest this update: Sat 14 Jun 2025 20:00:30 +0000
Manifest next update: Sun 15 Jun 2025 20:00:30 +0000
Files and hashes: 1: _hEX6Xaz4zlTuTYbtLseui9Ane0.crl (hash: QfpBr2ztwDSiWxOr/VvvNkCTX0E/y5CB1FJl6wBtqqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:07:85:d8:7b:1f:8b:c4:1b:8f:b5:30:84:aa:0b:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe1117e976b3e33953b9361bb4bb1eba2f409ded
Validity
Not Before: Jun 14 20:00:30 2025 GMT
Not After : Jun 15 20:00:30 2025 GMT
Subject: CN=9b5d1d169fd5acd2d0ddd3525e9c28cd76104cee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:32:90:6d:0f:75:f5:cc:95:13:d0:a3:31:0a:
29:e4:6c:b6:45:b1:7d:96:ac:72:04:bc:3a:20:c4:
e5:af:ad:bd:c5:3e:fa:74:a6:fa:06:1a:16:ad:bc:
39:d7:41:62:25:ff:f8:34:dd:8d:a5:8c:e4:6d:38:
31:fe:71:77:01:83:17:f0:04:29:41:e2:84:d7:b4:
9e:9b:06:68:2b:19:ef:eb:9c:51:7b:9b:bf:ea:30:
74:c1:d1:cd:72:d7:ef:13:03:b5:b8:a7:bd:ef:a3:
4d:0d:6a:e9:0f:44:05:16:16:a8:32:ff:76:bd:a8:
72:d3:75:43:79:94:28:44:45:1a:ab:a1:66:a8:ff:
e9:38:59:b8:0d:68:11:ac:3f:9d:ab:95:9a:99:ac:
e4:b8:c6:c3:25:11:ac:79:b1:c9:12:f6:79:d6:0a:
c5:dd:c6:55:37:5f:49:46:39:95:23:6d:29:93:d6:
a6:79:9e:41:be:bf:d8:fa:28:7f:aa:06:cd:b0:e5:
c4:00:90:eb:78:0c:b3:63:10:12:23:04:27:50:2b:
96:cd:1c:0a:bb:02:f1:30:60:92:9b:c4:db:69:a6:
15:60:90:3e:00:00:7e:38:a7:05:93:ca:00:16:b6:
37:66:b4:cb:e4:0f:df:87:82:0c:ce:f7:f6:00:33:
b8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9B:5D:1D:16:9F:D5:AC:D2:D0:DD:D3:52:5E:9C:28:CD:76:10:4C:EE
X509v3 Authority Key Identifier:
keyid:FE:11:17:E9:76:B3:E3:39:53:B9:36:1B:B4:BB:1E:BA:2F:40:9D:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_hEX6Xaz4zlTuTYbtLseui9Ane0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ccfb64-2ec9-4d86-aace-846e1f41fc62/1/_hEX6Xaz4zlTuTYbtLseui9Ane0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:70:fb:39:d8:47:d6:7c:b8:28:48:f5:e8:0e:cb:7f:f3:9f:
fd:cb:a4:bb:cf:c4:e2:ab:07:09:e8:0f:03:06:01:de:af:58:
b8:c7:20:e8:ae:b0:26:0c:fc:3b:b6:66:3c:59:24:8f:fa:4f:
66:de:a1:02:4d:ca:9d:72:dc:c2:25:51:99:af:13:b4:c4:5d:
6d:17:e0:da:8f:65:54:b1:9d:0d:5f:8d:57:c2:90:52:b6:17:
90:15:34:df:8e:ab:a0:95:32:78:90:30:d8:85:8a:ac:ef:de:
bf:2b:0d:d8:46:f4:b9:8e:9c:3d:87:52:ee:33:d7:64:17:a4:
ce:aa:ef:c8:ba:e3:4d:bb:04:7a:ee:00:20:57:76:cb:37:1b:
81:dc:42:fc:b9:08:9e:9e:56:21:22:97:7f:4b:33:c3:d5:69:
47:92:11:2e:45:cb:81:e3:ce:ac:1b:9d:79:6f:0d:7c:f3:6e:
f6:75:4b:4a:e8:c3:24:07:9f:db:d5:28:ac:2f:30:a4:b8:ef:
8c:26:4c:8b:2a:65:0c:ee:39:83:0e:88:00:df:86:59:0b:60:
2a:7f:85:d3:ff:06:05:4f:04:63:a8:7b:c6:ee:03:51:eb:06:
a8:a1:f1:ec:e7:a3:2a:29:ac:78:56:d0:8e:58:09:22:a7:70:
f9:84:7c:d2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwB4XYex+LxBuPtTCEqgsBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlMTExN2U5NzZiM2UzMzk1M2I5MzYxYmI0YmIxZWJhMmY0
MDlkZWQwHhcNMjUwNjE0MjAwMDMwWhcNMjUwNjE1MjAwMDMwWjAzMTEwLwYDVQQD
Eyg5YjVkMWQxNjlmZDVhY2QyZDBkZGQzNTI1ZTljMjhjZDc2MTA0Y2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxDKQbQ919cyVE9CjMQop5Gy2RbF9
lqxyBLw6IMTlr629xT76dKb6BhoWrbw510FiJf/4NN2NpYzkbTgx/nF3AYMX8AQp
QeKE17SemwZoKxnv65xRe5u/6jB0wdHNctfvEwO1uKe976NNDWrpD0QFFhaoMv92
vahy03VDeZQoREUaq6FmqP/pOFm4DWgRrD+dq5WamazkuMbDJRGsebHJEvZ51grF
3cZVN19JRjmVI20pk9ameZ5Bvr/Y+ih/qgbNsOXEAJDreAyzYxASIwQnUCuWzRwK
uwLxMGCSm8TbaaYVYJA+AAB+OKcFk8oAFrY3ZrTL5A/fh4IMzvf2ADO41QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJtdHRaf1azS0N3TUl6cKM12EEzuMB8GA1UdIwQY
MBaAFP4RF+l2s+M5U7k2G7S7HrovQJ3tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2hFWDZYYXo0emxUdVRZYnRMc2V1aTlBbmUwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9jY2ZiNjQtMmVjOS00ZDg2LWFhY2Ut
ODQ2ZTFmNDFmYzYyLzEvX2hFWDZYYXo0emxUdVRZYnRMc2V1aTlBbmUwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9jY2ZiNjQtMmVjOS00ZDg2LWFhY2UtODQ2ZTFmNDFmYzYy
LzEvX2hFWDZYYXo0emxUdVRZYnRMc2V1aTlBbmUwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQnD7OdhH
1ny4KEj16A7Lf/Of/cuku8/E4qsHCegPAwYB3q9YuMcg6K6wJgz8O7ZmPFkkj/pP
Zt6hAk3KnXLcwiVRma8TtMRdbRfg2o9lVLGdDV+NV8KQUrYXkBU0346roJUyeJAw
2IWKrO/evysN2Eb0uY6cPYdS7jPXZBekzqrvyLrjTbsEeu4AIFd2yzcbgdxC/LkI
np5WISKXf0szw9VpR5IRLkXLgePOrBudeW8NfPNu9nVLSujDJAef29UorC8wpLjv
jCZMiyplDO45gw6IAN+GWQtgKn+F0/8GBU8EY6h7xu4DUesGqKHx7OejKimseFbQ
jlgJIqdw+YR80g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:27:18 2025 by rpki-client