Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
File: rHI58-_bN5H1vlVSmbXYFpfz0BI.mft (raw, json)
Hash identifier: JRspk34bVLpqitooqX7G/NLlqRhpnseonjz/dGZuSDM=
Subject key identifier: 31:37:AE:CE:42:96:DC:A6:51:C8:F5:79:41:C1:46:5A:97:21:D9:05
Authority key identifier: AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12
Certificate issuer: /CN=ac7239f3efdb3791f5be555299b5d81697f3d012
Certificate serial: 01976DAB20CAF8D5CD719CD5C0FC606D7722
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
Manifest number: 114B
Signing time: Sat 14 Jun 2025 09:00:20 +0000
Manifest this update: Sat 14 Jun 2025 09:00:20 +0000
Manifest next update: Sun 15 Jun 2025 09:00:20 +0000
Files and hashes: 1: rHI58-_bN5H1vlVSmbXYFpfz0BI.crl (hash: GZPRD2JNi/NikrePurFizFSquQVyUdJQ8Lqsy0ruHEY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.crl
rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:20:ca:f8:d5:cd:71:9c:d5:c0:fc:60:6d:77:22
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac7239f3efdb3791f5be555299b5d81697f3d012
Validity
Not Before: Jun 14 09:00:20 2025 GMT
Not After : Jun 15 09:00:20 2025 GMT
Subject: CN=3137aece4296dca651c8f57941c1465a9721d905
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:1d:e1:f8:66:96:30:d6:2c:f4:f2:c5:66:32:
81:1e:8b:53:37:81:51:0c:ca:9a:51:08:26:e0:88:
7b:18:e6:cd:7a:c8:6e:1f:94:3e:8b:71:c4:8c:c4:
86:a5:b6:50:a1:31:8b:29:55:f5:50:78:5f:6d:4b:
da:55:50:b7:d0:3b:0c:15:92:72:1f:fb:ad:99:96:
c3:20:af:38:ae:ca:ea:f2:64:d6:29:32:6f:a3:50:
c5:4a:37:ae:60:d3:86:33:2f:85:97:fe:43:5e:55:
9d:d6:2f:93:2a:e0:f8:4a:ba:21:0c:75:42:57:c5:
a5:61:18:5a:13:d1:f2:fd:8d:e0:34:0a:b9:56:1a:
d8:00:1e:6d:05:22:50:f7:7f:96:36:a3:25:da:da:
69:c7:32:b8:1a:25:e2:45:93:03:44:75:06:a1:52:
12:7f:a6:4d:f1:0d:68:d2:ad:3b:50:2f:ea:3b:94:
56:d0:2b:ed:89:b1:ef:e7:1d:4c:85:db:32:46:ea:
67:01:33:25:b6:a0:99:c7:be:cc:cc:39:56:c6:2e:
b8:b5:b3:7d:60:e9:d1:5a:ad:86:1f:4e:80:7d:0a:
71:bd:18:44:6c:f6:66:0f:53:0e:2a:6e:25:26:14:
eb:0f:d0:db:24:33:5c:95:6b:de:07:fb:d9:32:69:
69:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:37:AE:CE:42:96:DC:A6:51:C8:F5:79:41:C1:46:5A:97:21:D9:05
X509v3 Authority Key Identifier:
keyid:AC:72:39:F3:EF:DB:37:91:F5:BE:55:52:99:B5:D8:16:97:F3:D0:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rHI58-_bN5H1vlVSmbXYFpfz0BI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1e/c890fc-2cf8-4075-875d-ccfc7f07b9cb/1/rHI58-_bN5H1vlVSmbXYFpfz0BI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fb:ae:4a:b1:65:fa:01:49:a0:09:f6:4e:34:95:ae:ab:be:
ff:18:bd:8b:36:8d:3f:dd:5c:e5:ac:66:0e:94:f5:fb:c8:16:
9f:a4:77:b2:50:b7:52:9b:9b:bf:85:e6:c0:7f:9b:25:da:ec:
d0:52:d3:72:87:04:72:32:e5:ff:2e:67:0b:0a:6b:2e:f9:ea:
99:87:bb:61:c3:de:4c:89:44:c7:0d:db:e5:5f:a0:77:95:48:
76:3f:49:15:5b:34:c6:e0:dc:13:52:38:9c:bc:2a:dd:d7:b5:
7b:72:f1:db:a9:f3:ff:f6:6f:e7:2f:ff:66:52:66:a8:b1:dd:
e3:8c:aa:a6:7b:9f:3d:00:e0:3a:05:5a:9d:4a:01:c0:a8:95:
20:76:ea:b5:7b:f8:b7:2b:e3:bd:cd:a2:96:8a:b5:2e:9b:cf:
3a:17:31:6b:99:6e:70:fa:05:05:d7:5a:7b:ef:6d:de:12:cc:
f9:90:03:b6:79:5d:9d:34:0e:4f:dd:c1:9f:0b:90:d8:7e:2a:
a8:d6:5a:57:bd:dd:c1:14:e2:a7:4c:f8:17:df:4f:74:37:39:
cb:70:d9:d8:3a:38:64:fa:52:e3:68:5d:28:5c:f8:2d:92:e4:
a4:71:6b:79:a5:cc:7a:59:58:ed:12:d1:17:6a:b5:fd:e9:a0:
90:88:6b:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtqyDK+NXNcZzVwPxgbXciMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjNzIzOWYzZWZkYjM3OTFmNWJlNTU1Mjk5YjVkODE2OTdm
M2QwMTIwHhcNMjUwNjE0MDkwMDIwWhcNMjUwNjE1MDkwMDIwWjAzMTEwLwYDVQQD
EygzMTM3YWVjZTQyOTZkY2E2NTFjOGY1Nzk0MWMxNDY1YTk3MjFkOTA1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnx3h+GaWMNYs9PLFZjKBHotTN4FR
DMqaUQgm4Ih7GObNeshuH5Q+i3HEjMSGpbZQoTGLKVX1UHhfbUvaVVC30DsMFZJy
H/utmZbDIK84rsrq8mTWKTJvo1DFSjeuYNOGMy+Fl/5DXlWd1i+TKuD4SrohDHVC
V8WlYRhaE9Hy/Y3gNAq5VhrYAB5tBSJQ93+WNqMl2tppxzK4GiXiRZMDRHUGoVIS
f6ZN8Q1o0q07UC/qO5RW0CvtibHv5x1MhdsyRupnATMltqCZx77MzDlWxi64tbN9
YOnRWq2GH06AfQpxvRhEbPZmD1MOKm4lJhTrD9DbJDNclWveB/vZMmlpZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDE3rs5CltymUcj1eUHBRlqXIdkFMB8GA1UdIwQY
MBaAFKxyOfPv2zeR9b5VUpm12BaX89ASMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckhJNTgtX2JONUgxdmxWU21iWFlGcGZ6MEJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZS9jODkwZmMtMmNmOC00MDc1LTg3NWQt
Y2NmYzdmMDdiOWNiLzEvckhJNTgtX2JONUgxdmxWU21iWFlGcGZ6MEJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZS9jODkwZmMtMmNmOC00MDc1LTg3NWQtY2NmYzdmMDdiOWNi
LzEvckhJNTgtX2JONUgxdmxWU21iWFlGcGZ6MEJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd/uuSrFl
+gFJoAn2TjSVrqu+/xi9izaNP91c5axmDpT1+8gWn6R3slC3Upubv4XmwH+bJdrs
0FLTcocEcjLl/y5nCwprLvnqmYe7YcPeTIlExw3b5V+gd5VIdj9JFVs0xuDcE1I4
nLwq3de1e3Lx26nz//Zv5y//ZlJmqLHd44yqpnufPQDgOgVanUoBwKiVIHbqtXv4
tyvjvc2iloq1LpvPOhcxa5lucPoFBddae+9t3hLM+ZADtnldnTQOT93BnwuQ2H4q
qNZaV73dwRTip0z4F99PdDc5y3DZ2Do4ZPpS42hdKFz4LZLkpHFreaXMellY7RLR
F2q1/emgkIhrLQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:03:39 2025 by rpki-client