Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
File: d4LgCn_HYX2UJguB_SKjo_PcaG0.mft (raw, json)
Hash identifier: 0/l9ExRoG4V1mb92v2BrJke4wHt/pMxWOsE4slE58cg=
Subject key identifier: BC:C1:3A:63:36:6E:99:EC:86:F7:F4:21:3B:B6:C1:43:25:DE:9F:A5
Authority key identifier: 77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
Certificate issuer: /CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Certificate serial: 0197696126FA539DD958A41385A1C1228218
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
Manifest number: 0A1B
Signing time: Fri 13 Jun 2025 13:01:03 +0000
Manifest this update: Fri 13 Jun 2025 13:01:03 +0000
Manifest next update: Sat 14 Jun 2025 13:01:03 +0000
Files and hashes: 1: d4LgCn_HYX2UJguB_SKjo_PcaG0.crl (hash: Nu5RtEmKzGVmV309rUhF9oRuIqoiUuqauVwnpso6v/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:26:fa:53:9d:d9:58:a4:13:85:a1:c1:22:82:18
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7782e00a7fc7617d94260b81fd22a3a3f3dc686d
Validity
Not Before: Jun 13 13:01:03 2025 GMT
Not After : Jun 14 13:01:03 2025 GMT
Subject: CN=bcc13a63366e99ec86f7f4213bb6c14325de9fa5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:a1:43:db:58:e8:4d:18:65:22:4a:75:a6:01:
02:1c:38:dc:d3:3a:dc:f1:9b:ae:6c:8a:f7:b4:06:
c7:be:a1:2b:e7:94:7f:f6:de:9d:db:06:a0:37:64:
da:0a:98:11:9e:5e:9e:80:6e:6a:92:cd:67:e1:9b:
56:7b:a2:04:db:64:41:0c:04:f9:68:5d:15:a3:e8:
d0:f0:09:dc:58:81:9e:a0:78:d2:28:6c:b1:97:67:
e9:7f:cb:f0:4a:f3:d6:15:23:6b:f2:35:89:7d:08:
30:d3:90:2f:35:68:8b:ee:32:88:35:dc:d1:f6:ce:
3f:a0:4d:ab:9a:a0:39:49:b8:d8:93:be:03:f8:84:
90:c5:a0:21:3b:f0:85:28:43:e2:ab:51:c8:da:22:
9c:ff:2f:97:b9:84:0a:d3:47:6b:65:be:0c:6b:b9:
4a:48:24:90:92:5d:e1:04:a5:8f:ba:c6:81:36:47:
8e:91:b5:04:f0:d1:bf:1f:71:bd:32:d4:05:4e:2a:
59:7c:e5:61:2b:d3:95:49:50:85:d4:44:69:5e:d3:
21:c1:40:8a:d0:a6:16:d0:3c:8b:46:a9:5a:b8:46:
0b:1a:3c:6c:0b:67:29:8f:99:74:d9:f9:ca:3c:d9:
a4:8b:8b:06:6e:35:7b:8e:9b:6d:f6:13:03:f2:46:
da:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:C1:3A:63:36:6E:99:EC:86:F7:F4:21:3B:B6:C1:43:25:DE:9F:A5
X509v3 Authority Key Identifier:
keyid:77:82:E0:0A:7F:C7:61:7D:94:26:0B:81:FD:22:A3:A3:F3:DC:68:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d4LgCn_HYX2UJguB_SKjo_PcaG0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/ade60a-fd8c-422e-bca8-9a0284b3adc1/1/d4LgCn_HYX2UJguB_SKjo_PcaG0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:96:c7:a4:57:0c:63:e4:43:11:c7:65:f8:e5:4a:2f:11:68:
3f:9c:ac:4e:cf:b2:61:69:3c:73:ad:0b:21:65:15:c7:6a:9b:
00:07:aa:a5:58:b8:cf:76:13:5a:c7:af:80:78:57:26:99:d9:
ca:d5:eb:16:2c:1a:46:a4:88:82:73:e6:7e:c9:f9:7b:58:cd:
c9:b9:f3:81:2b:5e:f0:9f:3c:a7:27:99:d3:6f:38:98:fa:bd:
8a:0c:91:dd:75:52:e9:be:7a:0d:ca:cc:de:3f:4f:ae:84:19:
5b:93:29:f3:bb:3b:b9:fa:35:9c:28:0c:e2:b9:93:c2:51:fb:
54:da:84:df:03:73:e0:c9:c2:ba:44:86:63:b8:7a:8f:0a:18:
2b:0d:17:9d:49:39:21:60:fd:fa:74:94:87:69:c9:0f:2b:db:
28:7a:91:28:d0:61:c6:13:81:13:27:b9:5d:1c:ef:d9:03:98:
98:38:8f:30:95:13:28:8b:f9:6d:fb:aa:8d:a7:7c:5c:20:ee:
cd:f9:fb:28:fa:88:69:a1:0a:59:e0:52:b3:d4:fc:69:7c:c2:
39:32:e3:4c:82:54:4a:0a:41:bd:cf:fe:b9:38:5a:60:47:c9:
ac:1d:b5:bd:f0:4b:1d:b9:6d:00:6c:49:26:2c:ff:db:db:1b:
06:5d:8f:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYSb6U53ZWKQThaHBIoIYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ODJlMDBhN2ZjNzYxN2Q5NDI2MGI4MWZkMjJhM2EzZjNk
YzY4NmQwHhcNMjUwNjEzMTMwMTAzWhcNMjUwNjE0MTMwMTAzWjAzMTEwLwYDVQQD
EyhiY2MxM2E2MzM2NmU5OWVjODZmN2Y0MjEzYmI2YzE0MzI1ZGU5ZmE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkaFD21joTRhlIkp1pgECHDjc0zrc
8ZuubIr3tAbHvqEr55R/9t6d2wagN2TaCpgRnl6egG5qks1n4ZtWe6IE22RBDAT5
aF0Vo+jQ8AncWIGeoHjSKGyxl2fpf8vwSvPWFSNr8jWJfQgw05AvNWiL7jKINdzR
9s4/oE2rmqA5SbjYk74D+ISQxaAhO/CFKEPiq1HI2iKc/y+XuYQK00drZb4Ma7lK
SCSQkl3hBKWPusaBNkeOkbUE8NG/H3G9MtQFTipZfOVhK9OVSVCF1ERpXtMhwUCK
0KYW0DyLRqlauEYLGjxsC2cpj5l02fnKPNmki4sGbjV7jptt9hMD8kba3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLzBOmM2bpnshvf0ITu2wUMl3p+lMB8GA1UdIwQY
MBaAFHeC4Ap/x2F9lCYLgf0io6Pz3GhtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS9hZGU2MGEtZmQ4Yy00MjJlLWJjYTgt
OWEwMjg0YjNhZGMxLzEvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS9hZGU2MGEtZmQ4Yy00MjJlLWJjYTgtOWEwMjg0YjNhZGMx
LzEvZDRMZ0NuX0hZWDJVSmd1Ql9TS2pvX1BjYUcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiZbHpFcM
Y+RDEcdl+OVKLxFoP5ysTs+yYWk8c60LIWUVx2qbAAeqpVi4z3YTWsevgHhXJpnZ
ytXrFiwaRqSIgnPmfsn5e1jNybnzgSte8J88pyeZ0284mPq9igyR3XVS6b56DcrM
3j9ProQZW5Mp87s7ufo1nCgM4rmTwlH7VNqE3wNz4MnCukSGY7h6jwoYKw0XnUk5
IWD9+nSUh2nJDyvbKHqRKNBhxhOBEye5XRzv2QOYmDiPMJUTKIv5bfuqjad8XCDu
zfn7KPqIaaEKWeBSs9T8aXzCOTLjTIJUSgpBvc/+uThaYEfJrB21vfBLHbltAGxJ
Jiz/29sbBl2PTg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:55:04 2025 by rpki-client