Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
File: geY5cEKnqWRfwS91nQJhldfL_Vg.mft (raw, json)
Hash identifier: LCYm23HvJmW20F/rFvijWx1hJ+38PKH3vS8kYAubHms=
Subject key identifier: F6:C1:E3:1F:EF:20:50:F6:E3:BF:65:EA:B0:E5:47:FE:B0:B0:56:32
Authority key identifier: 81:E6:39:70:42:A7:A9:64:5F:C1:2F:75:9D:02:61:95:D7:CB:FD:58
Certificate issuer: /CN=81e6397042a7a9645fc12f759d026195d7cbfd58
Certificate serial: 01977753E8AF782399283EA0B1A7D834D809
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
Manifest number: 0C9F
Signing time: Mon 16 Jun 2025 06:01:17 +0000
Manifest this update: Mon 16 Jun 2025 06:01:17 +0000
Manifest next update: Tue 17 Jun 2025 06:01:17 +0000
Files and hashes: 1: geY5cEKnqWRfwS91nQJhldfL_Vg.crl (hash: L8ZPiz0vQH0efA3jYf5WY7h2J69ios3RNtK11icLE/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:53:e8:af:78:23:99:28:3e:a0:b1:a7:d8:34:d8:09
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=81e6397042a7a9645fc12f759d026195d7cbfd58
Validity
Not Before: Jun 16 06:01:17 2025 GMT
Not After : Jun 17 06:01:17 2025 GMT
Subject: CN=f6c1e31fef2050f6e3bf65eab0e547feb0b05632
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f6:1f:db:0a:d9:f6:a8:f3:26:cb:61:f2:10:18:
c8:b1:12:8f:f4:16:30:9f:24:45:91:a4:99:13:13:
fe:6e:38:c2:a2:12:a4:8c:b7:c8:9a:18:7b:64:35:
e3:98:b4:ed:99:b7:7d:2f:43:6c:7c:d9:0c:20:2b:
a0:33:0d:ca:95:de:fd:1c:11:d4:b5:90:e8:52:92:
7f:aa:1a:9d:76:a1:b5:10:8c:ad:1a:4f:d2:22:12:
d7:69:4a:ff:17:9e:30:d4:a0:ea:71:ee:50:d9:fd:
fd:1c:d6:5c:a9:24:df:f3:79:7c:b5:bd:ab:6a:2e:
5e:ba:03:5d:bd:39:ff:a3:e4:57:a6:ec:5c:5f:7a:
b3:0b:56:30:5b:86:34:db:3b:16:f3:f8:44:1c:d7:
b6:76:e3:7c:e3:36:0f:8a:27:a8:9c:51:06:c3:35:
4d:b0:71:d3:1b:bb:6f:a3:db:56:0c:af:a8:94:79:
63:64:e0:b6:41:59:fa:c7:a6:86:0d:79:9d:ff:93:
ab:39:04:49:ee:e1:1e:cf:95:7d:fb:5d:4f:ef:77:
c8:2d:ce:80:d5:b7:d5:97:6c:b8:f1:d7:ea:ed:01:
42:80:69:24:a2:b3:f1:b5:1c:5a:93:30:bc:9f:da:
e4:e3:a2:d4:9e:86:ec:51:14:0a:73:4c:17:e6:78:
08:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:C1:E3:1F:EF:20:50:F6:E3:BF:65:EA:B0:E5:47:FE:B0:B0:56:32
X509v3 Authority Key Identifier:
keyid:81:E6:39:70:42:A7:A9:64:5F:C1:2F:75:9D:02:61:95:D7:CB:FD:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/geY5cEKnqWRfwS91nQJhldfL_Vg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/5f8f1b-f3f1-4f1b-9ac4-5ca6a7ad05fa/1/geY5cEKnqWRfwS91nQJhldfL_Vg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:22:ce:33:e9:d0:4f:75:6b:88:c7:ea:4c:f4:d5:67:3e:3a:
3b:8d:83:eb:fe:b3:4a:79:ad:b0:0d:c4:81:b8:24:dc:c2:97:
c1:51:5f:2d:4e:03:7f:e9:e1:85:74:18:6f:e8:4f:3d:6c:3c:
84:21:6e:48:03:4d:76:c8:2c:a0:16:0b:e8:8e:f5:63:e4:19:
79:97:7c:fc:72:28:a9:f5:44:24:1e:b9:e6:a2:4c:94:62:dd:
ba:66:02:47:00:13:79:bb:db:76:1d:88:bb:a6:4a:ee:75:ba:
cd:e7:90:0a:5d:9f:0a:ce:5b:5e:cd:5b:db:22:76:8f:aa:bb:
94:08:44:af:f9:e3:cc:94:08:83:85:d1:77:4b:60:d8:15:ed:
64:c8:ea:1b:61:85:6f:a6:7d:0c:9e:d2:7c:50:88:d8:1e:98:
dd:6e:dc:dd:2d:d3:c8:db:35:e8:a8:d0:b2:67:55:9e:d0:02:
d2:51:de:7d:3e:37:f0:ff:eb:2d:ad:a5:0e:34:86:03:1c:34:
e5:2f:93:5e:84:5d:f1:a6:01:11:63:99:07:a6:35:c7:8d:be:
04:18:81:e5:56:c7:b0:5a:04:65:95:42:e0:23:d6:32:a0:b4:
4c:36:02:6d:28:ae:21:80:ad:18:b1:a6:2a:5c:49:82:9c:f8:
05:bd:8b:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3U+iveCOZKD6gsafYNNgJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgxZTYzOTcwNDJhN2E5NjQ1ZmMxMmY3NTlkMDI2MTk1ZDdj
YmZkNTgwHhcNMjUwNjE2MDYwMTE3WhcNMjUwNjE3MDYwMTE3WjAzMTEwLwYDVQQD
EyhmNmMxZTMxZmVmMjA1MGY2ZTNiZjY1ZWFiMGU1NDdmZWIwYjA1NjMyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9h/bCtn2qPMmy2HyEBjIsRKP9BYw
nyRFkaSZExP+bjjCohKkjLfImhh7ZDXjmLTtmbd9L0NsfNkMICugMw3Kld79HBHU
tZDoUpJ/qhqddqG1EIytGk/SIhLXaUr/F54w1KDqce5Q2f39HNZcqSTf83l8tb2r
ai5eugNdvTn/o+RXpuxcX3qzC1YwW4Y02zsW8/hEHNe2duN84zYPiieonFEGwzVN
sHHTG7tvo9tWDK+olHljZOC2QVn6x6aGDXmd/5OrOQRJ7uEez5V9+11P73fILc6A
1bfVl2y48dfq7QFCgGkkorPxtRxakzC8n9rk46LUnobsURQKc0wX5ngIuwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPbB4x/vIFD2479l6rDlR/6wsFYyMB8GA1UdIwQY
MBaAFIHmOXBCp6lkX8EvdZ0CYZXXy/1YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZ2VZNWNFS25xV1Jmd1M5MW5RSmhsZGZMX1ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81ZjhmMWItZjNmMS00ZjFiLTlhYzQt
NWNhNmE3YWQwNWZhLzEvZ2VZNWNFS25xV1Jmd1M5MW5RSmhsZGZMX1ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81ZjhmMWItZjNmMS00ZjFiLTlhYzQtNWNhNmE3YWQwNWZh
LzEvZ2VZNWNFS25xV1Jmd1M5MW5RSmhsZGZMX1ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgiLOM+nQ
T3VriMfqTPTVZz46O42D6/6zSnmtsA3Egbgk3MKXwVFfLU4Df+nhhXQYb+hPPWw8
hCFuSANNdsgsoBYL6I71Y+QZeZd8/HIoqfVEJB655qJMlGLdumYCRwATebvbdh2I
u6ZK7nW6zeeQCl2fCs5bXs1b2yJ2j6q7lAhEr/njzJQIg4XRd0tg2BXtZMjqG2GF
b6Z9DJ7SfFCI2B6Y3W7c3S3TyNs16KjQsmdVntAC0lHefT438P/rLa2lDjSGAxw0
5S+TXoRd8aYBEWOZB6Y1x42+BBiB5VbHsFoEZZVC4CPWMqC0TDYCbSiuIYCtGLGm
KlxJgpz4Bb2LAA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 14:41:04 2025 by rpki-client