Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
File: cVYaucXzkpItp8rhgMMwc2XwI4Y.mft (raw, json)
Hash identifier: Om0SJKQeF4XQsIQzXeeIITlj7ByFgmP+C9Z6qnokr/E=
Subject key identifier: 70:9C:F3:F3:E4:34:9F:7A:C1:99:FB:59:B4:B0:91:57:A5:44:3D:CB
Authority key identifier: 71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
Certificate issuer: /CN=71561ab9c5f392922da7cae180c3307365f02386
Certificate serial: 019873E355C20D2BBDCA019C430C9875179A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
Manifest number: 0F48
Signing time: Mon 04 Aug 2025 07:02:15 +0000
Manifest this update: Mon 04 Aug 2025 07:02:15 +0000
Manifest next update: Tue 05 Aug 2025 07:02:15 +0000
Files and hashes: 1: cVYaucXzkpItp8rhgMMwc2XwI4Y.crl (hash: Zmj1G7C4ksKbfrXenymCv8t5EoiaEkNbuHPZi6W3+oc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e3:55:c2:0d:2b:bd:ca:01:9c:43:0c:98:75:17:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71561ab9c5f392922da7cae180c3307365f02386
Validity
Not Before: Aug 4 07:02:15 2025 GMT
Not After : Aug 5 07:02:15 2025 GMT
Subject: CN=709cf3f3e4349f7ac199fb59b4b09157a5443dcb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8f:3e:50:c6:0d:21:2a:ff:37:57:ca:28:2d:14:
a6:bf:54:68:65:de:b5:3b:35:51:21:96:a1:03:ab:
c4:6a:3a:0b:ad:43:26:6c:7e:fb:96:6d:b7:61:85:
40:f2:16:5f:ee:14:aa:9c:6f:47:9f:a4:41:76:e4:
8f:97:77:30:2d:ba:68:fc:42:50:01:65:7b:46:11:
b2:69:b1:78:1a:c0:99:34:9d:72:08:1a:70:f2:78:
1a:e9:28:f1:52:fa:79:9a:8d:1e:6a:33:ad:3f:3d:
0d:de:be:e1:6e:26:41:84:c1:88:3f:41:f6:6b:12:
cc:82:65:45:ff:1c:36:85:d9:f1:99:95:0b:c7:7b:
16:87:fe:49:f5:55:09:f2:94:d2:ea:55:7e:34:83:
fc:21:ba:15:2b:20:9f:1c:f5:d7:5d:f1:c5:5d:e8:
06:6a:7e:da:24:46:70:07:b2:02:45:bd:4f:ca:7b:
5d:ee:8f:16:78:07:2a:84:6f:01:b7:d6:56:12:04:
6b:de:cc:cc:f7:1e:7c:47:e3:6c:37:57:e1:07:25:
80:6f:28:67:12:16:01:20:b1:b3:4e:66:8c:f5:22:
b6:6f:f5:2a:01:53:16:d1:0f:c9:4f:7f:3e:fe:f5:
be:e1:56:82:d6:6f:42:50:a9:56:2c:34:cb:f7:8c:
49:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:9C:F3:F3:E4:34:9F:7A:C1:99:FB:59:B4:B0:91:57:A5:44:3D:CB
X509v3 Authority Key Identifier:
keyid:71:56:1A:B9:C5:F3:92:92:2D:A7:CA:E1:80:C3:30:73:65:F0:23:86
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cVYaucXzkpItp8rhgMMwc2XwI4Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/2135e3-593f-4cdb-af55-c6f4ee872364/1/cVYaucXzkpItp8rhgMMwc2XwI4Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:d4:dc:88:8e:aa:c5:1a:b6:b7:d8:1b:42:a8:a5:55:7d:b1:
b7:ad:a4:f9:ec:5e:07:aa:f9:18:44:be:e7:16:b5:0e:ac:3a:
33:e8:39:1b:fc:39:2a:c7:d8:56:dc:bf:dc:f9:b9:32:27:09:
37:15:dd:e4:1d:8c:e8:f8:b3:ad:0d:e7:f2:3c:2b:89:94:0a:
7c:50:50:8f:32:45:aa:32:de:c1:4b:7b:a1:14:a6:5d:40:60:
e3:76:85:5c:af:9d:5e:f8:a2:e4:c8:fc:b7:0f:ab:61:3a:27:
d6:ee:11:63:67:3c:d1:03:49:5e:62:98:ff:64:d7:e8:11:0d:
e6:50:6b:d1:b6:dd:2b:9c:fa:7b:de:00:66:46:1f:9d:f7:9a:
1b:14:a1:3b:67:f0:06:fc:df:e9:8c:24:ad:ad:69:d9:76:60:
6b:d0:df:c0:71:da:5a:20:ba:70:52:38:f9:14:3b:7c:17:bd:
eb:f4:d2:9f:f6:ed:21:7a:32:02:eb:93:62:37:a4:30:d8:af:
71:0d:df:2e:a4:f8:8f:e4:cb:b5:fa:f5:7b:90:63:c6:ba:af:
af:73:c7:85:3b:17:8c:4f:f0:5c:23:05:bc:41:f6:7e:b2:b2:
71:49:14:bf:e0:60:74:de:93:df:0d:c5:34:94:7e:a3:12:e0:
20:a0:e9:f2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz41XCDSu9ygGcQwyYdReaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNTYxYWI5YzVmMzkyOTIyZGE3Y2FlMTgwYzMzMDczNjVm
MDIzODYwHhcNMjUwODA0MDcwMjE1WhcNMjUwODA1MDcwMjE1WjAzMTEwLwYDVQQD
Eyg3MDljZjNmM2U0MzQ5ZjdhYzE5OWZiNTliNGIwOTE1N2E1NDQzZGNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjz5Qxg0hKv83V8ooLRSmv1RoZd61
OzVRIZahA6vEajoLrUMmbH77lm23YYVA8hZf7hSqnG9Hn6RBduSPl3cwLbpo/EJQ
AWV7RhGyabF4GsCZNJ1yCBpw8nga6SjxUvp5mo0eajOtPz0N3r7hbiZBhMGIP0H2
axLMgmVF/xw2hdnxmZULx3sWh/5J9VUJ8pTS6lV+NIP8IboVKyCfHPXXXfHFXegG
an7aJEZwB7ICRb1Pyntd7o8WeAcqhG8Bt9ZWEgRr3szM9x58R+NsN1fhByWAbyhn
EhYBILGzTmaM9SK2b/UqAVMW0Q/JT38+/vW+4VaC1m9CUKlWLDTL94xJPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCc8/PkNJ96wZn7WbSwkVelRD3LMB8GA1UdIwQY
MBaAFHFWGrnF85KSLafK4YDDMHNl8COGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1ZZYXVjWHprcEl0cDhyaGdNTXdjMlh3STRZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC8yMTM1ZTMtNTkzZi00Y2RiLWFmNTUt
YzZmNGVlODcyMzY0LzEvY1ZZYXVjWHprcEl0cDhyaGdNTXdjMlh3STRZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC8yMTM1ZTMtNTkzZi00Y2RiLWFmNTUtYzZmNGVlODcyMzY0
LzEvY1ZZYXVjWHprcEl0cDhyaGdNTXdjMlh3STRZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAttTciI6q
xRq2t9gbQqilVX2xt62k+exeB6r5GES+5xa1Dqw6M+g5G/w5KsfYVty/3Pm5MicJ
NxXd5B2M6PizrQ3n8jwriZQKfFBQjzJFqjLewUt7oRSmXUBg43aFXK+dXvii5Mj8
tw+rYTon1u4RY2c80QNJXmKY/2TX6BEN5lBr0bbdK5z6e94AZkYfnfeaGxShO2fw
Bvzf6Ywkra1p2XZga9DfwHHaWiC6cFI4+RQ7fBe96/TSn/btIXoyAuuTYjekMNiv
cQ3fLqT4j+TLtfr1e5Bjxrqvr3PHhTsXjE/wXCMFvEH2frKycUkUv+BgdN6T3w3F
NJR+oxLgIKDp8g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 10:59:48 2025 by rpki-client