Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
File: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft (raw, json)
Hash identifier: NIIMiuZCOClF+VccEM2nuBS4EAYyRukgHaGrfb8LWM8=
Subject key identifier: BB:8B:8C:C9:57:86:B5:75:B1:A0:69:4E:27:41:04:80:2A:84:59:CB
Authority key identifier: F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
Certificate issuer: /CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Certificate serial: 01976C622AC879E65514F632910B9B44C886
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
Manifest number: 0510
Signing time: Sat 14 Jun 2025 03:01:02 +0000
Manifest this update: Sat 14 Jun 2025 03:01:02 +0000
Manifest next update: Sun 15 Jun 2025 03:01:02 +0000
Files and hashes: 1: 9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl (hash: K6epAkBDAQAPVYhUOWDQcbKqygDjMRnw4yluukeB8J0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:62:2a:c8:79:e6:55:14:f6:32:91:0b:9b:44:c8:86
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f4391cfd28b07e6a9e1ca3256cdb82017b2b5621
Validity
Not Before: Jun 14 03:01:02 2025 GMT
Not After : Jun 15 03:01:02 2025 GMT
Subject: CN=bb8b8cc95786b575b1a0694e274104802a8459cb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:fa:de:64:30:f6:e3:78:d7:85:17:43:e5:c4:
15:5a:14:b8:6e:ec:7a:e8:8c:7b:34:ef:3c:6f:3a:
db:04:b4:4b:31:a2:f9:d7:92:a5:c4:79:c5:4d:4d:
d0:f0:c8:4f:f7:f5:14:cc:48:4b:6c:97:d8:f1:d7:
5a:5b:4f:eb:77:b8:84:d8:97:23:fc:c0:8e:10:65:
d0:fc:21:fa:5b:61:c9:a5:bc:bd:0c:75:dd:3c:f8:
8f:11:2d:be:5d:4f:22:c8:9f:f6:e8:9a:db:8e:f2:
fa:57:11:63:fc:39:50:c3:6f:17:66:f4:78:dc:4a:
51:c3:ed:c7:b0:2d:98:e6:93:9a:10:8e:51:55:5e:
01:ae:ae:11:82:c4:ba:38:c5:83:48:24:58:69:63:
b2:96:f7:df:d4:fb:e7:3d:10:1f:b1:31:a3:69:3d:
6f:8e:08:56:de:b5:e8:1f:e8:01:27:e6:81:63:cc:
c0:8c:a3:bb:86:8d:cc:95:38:64:4d:ee:be:32:27:
6d:ed:93:07:44:ac:82:24:c9:92:ba:c6:c4:0a:40:
e4:a5:07:48:3b:90:bb:c2:fc:1e:0e:43:a6:98:dd:
66:6e:d3:da:3e:47:2d:cd:42:29:5e:a0:8d:dd:10:
02:c2:01:93:da:16:f2:0f:ea:db:04:63:c9:58:40:
ec:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:8B:8C:C9:57:86:B5:75:B1:A0:69:4E:27:41:04:80:2A:84:59:CB
X509v3 Authority Key Identifier:
keyid:F4:39:1C:FD:28:B0:7E:6A:9E:1C:A3:25:6C:DB:82:01:7B:2B:56:21
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9Dkc_SiwfmqeHKMlbNuCAXsrViE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/b6ea3e-cc91-48bf-86bc-e5a9ba8f56ae/1/9Dkc_SiwfmqeHKMlbNuCAXsrViE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:44:e1:6c:e2:b3:30:0f:14:ab:d9:d1:8f:fb:f6:3c:0b:dd:
23:ed:4e:4b:c9:d7:a5:5b:29:de:d8:ba:5a:ab:fb:b8:c5:15:
58:1d:fb:c7:5f:18:cb:4e:6e:8e:38:97:57:d8:7b:9a:7b:f3:
60:c1:43:61:25:24:88:0e:cd:d9:81:e6:c3:f9:55:c8:f2:d6:
61:45:7f:3d:5f:15:0d:88:26:fe:05:53:02:a4:a1:d5:31:b8:
af:45:11:e1:3d:12:46:00:a0:3a:69:f9:f3:1f:ea:d3:81:8b:
45:16:fd:58:83:19:e8:e1:14:8b:d9:5e:bf:59:0d:88:e1:0f:
51:21:9b:03:fb:11:38:2a:ae:83:b0:9a:ea:98:ee:11:22:a9:
df:52:b6:6b:c7:30:e2:72:e9:c5:5f:03:c7:f5:5a:f5:75:0d:
d9:16:ba:08:df:dc:0a:11:1a:99:43:c1:36:3d:53:2c:92:be:
08:ea:74:91:73:87:a4:f9:79:1b:0f:05:f8:3f:d1:96:7e:f1:
77:53:02:34:e8:4b:c1:76:05:93:eb:76:b7:33:b7:9e:e2:21:
55:e3:4c:b8:ee:16:d8:d8:90:4e:99:da:db:51:f9:27:d6:5a:
ad:12:91:b5:e0:9a:1e:3d:4b:0c:3e:2a:65:86:c3:ae:e8:45:
f4:a6:10:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsYirIeeZVFPYykQubRMiGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY0MzkxY2ZkMjhiMDdlNmE5ZTFjYTMyNTZjZGI4MjAxN2Iy
YjU2MjEwHhcNMjUwNjE0MDMwMTAyWhcNMjUwNjE1MDMwMTAyWjAzMTEwLwYDVQQD
EyhiYjhiOGNjOTU3ODZiNTc1YjFhMDY5NGUyNzQxMDQ4MDJhODQ1OWNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArvreZDD243jXhRdD5cQVWhS4bux6
6Ix7NO88bzrbBLRLMaL515KlxHnFTU3Q8MhP9/UUzEhLbJfY8ddaW0/rd7iE2Jcj
/MCOEGXQ/CH6W2HJpby9DHXdPPiPES2+XU8iyJ/26JrbjvL6VxFj/DlQw28XZvR4
3EpRw+3HsC2Y5pOaEI5RVV4Brq4RgsS6OMWDSCRYaWOylvff1PvnPRAfsTGjaT1v
jghW3rXoH+gBJ+aBY8zAjKO7ho3MlThkTe6+Midt7ZMHRKyCJMmSusbECkDkpQdI
O5C7wvweDkOmmN1mbtPaPkctzUIpXqCN3RACwgGT2hbyD+rbBGPJWEDsAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLuLjMlXhrV1saBpTidBBIAqhFnLMB8GA1UdIwQY
MBaAFPQ5HP0osH5qnhyjJWzbggF7K1YhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9iNmVhM2UtY2M5MS00OGJmLTg2YmMt
ZTVhOWJhOGY1NmFlLzEvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9iNmVhM2UtY2M5MS00OGJmLTg2YmMtZTVhOWJhOGY1NmFl
LzEvOURrY19TaXdmbXFlSEtNbGJOdUNBWHNyVmlFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmUThbOKz
MA8Uq9nRj/v2PAvdI+1OS8nXpVsp3ti6Wqv7uMUVWB37x18Yy05ujjiXV9h7mnvz
YMFDYSUkiA7N2YHmw/lVyPLWYUV/PV8VDYgm/gVTAqSh1TG4r0UR4T0SRgCgOmn5
8x/q04GLRRb9WIMZ6OEUi9lev1kNiOEPUSGbA/sROCqug7Ca6pjuESKp31K2a8cw
4nLpxV8Dx/Va9XUN2Ra6CN/cChEamUPBNj1TLJK+COp0kXOHpPl5Gw8F+D/Rln7x
d1MCNOhLwXYFk+t2tzO3nuIhVeNMuO4W2NiQTpna21H5J9ZarRKRteCaHj1LDD4q
ZYbDruhF9KYQ1g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:43:43 2025 by rpki-client