Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
File: mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft (raw, json)
Hash identifier: mpf8rc25+glL1FVFKtfcjkjRonXC6z4xxyjVDk3c3+g=
Subject key identifier: 80:8D:22:11:B5:63:F0:6A:CE:6A:29:C6:22:92:27:B4:ED:B4:98:13
Authority key identifier: 99:F4:97:3E:52:4B:08:71:75:82:57:76:30:D3:31:93:E5:3B:67:C9
Certificate issuer: /CN=99f4973e524b08717582577630d33193e53b67c9
Certificate serial: 01968DA67D0309B5CB7A810AEEEDDCDD3C96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
Manifest number: 03CD
Signing time: Thu 01 May 2025 21:00:20 +0000
Manifest this update: Thu 01 May 2025 21:00:20 +0000
Manifest next update: Fri 02 May 2025 21:00:20 +0000
Files and hashes: 1: mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl (hash: 78uEE2csbpEBQYU+lHoeUrNaBWbYoXvwNgW/ey6v3bs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 02 May 2025 21:00:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:8d:a6:7d:03:09:b5:cb:7a:81:0a:ee:ed:dc:dd:3c:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99f4973e524b08717582577630d33193e53b67c9
Validity
Not Before: May 1 21:00:20 2025 GMT
Not After : May 2 21:00:20 2025 GMT
Subject: CN=808d2211b563f06ace6a29c6229227b4edb49813
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:f1:3d:94:af:a2:bb:21:b3:7d:58:10:a5:a8:
c5:64:a3:9e:bf:0c:b7:a1:25:56:c0:81:0d:13:1c:
ef:87:7e:35:70:f0:55:58:c8:aa:e6:c7:0e:ba:30:
bf:a2:63:27:76:81:28:a7:4a:5c:0d:e2:70:c1:27:
a4:7a:12:07:5d:0a:a7:a7:cc:03:cf:c1:e7:dc:d0:
ac:2a:eb:ec:a1:08:fe:4e:39:ee:a9:df:4b:e2:d1:
e2:a9:89:89:e2:92:a0:ed:43:c3:98:6b:c7:05:07:
83:66:74:4c:eb:f0:ba:31:ae:30:ef:91:56:cd:f6:
16:41:7f:e7:d1:dd:41:de:3c:08:7d:2d:1e:ed:d1:
b6:e0:65:a7:70:bb:22:31:5f:0c:36:bc:67:8e:64:
19:1c:66:b9:a1:f9:4f:92:3f:9a:1e:29:57:28:f1:
e6:1a:70:5d:10:02:31:0a:9f:20:9c:cb:ec:58:af:
e6:7b:14:fe:9f:f2:db:33:f9:12:fc:d7:d7:4d:4b:
6a:2d:df:fa:73:68:34:3f:b4:f7:16:0c:31:33:9b:
78:71:7f:e6:93:b7:85:3d:b4:ff:6b:ea:79:ee:36:
6c:ff:c1:bb:5b:b2:d1:35:c2:76:34:11:26:e8:94:
3a:88:44:05:59:7a:93:20:5d:2d:91:08:b1:01:df:
9f:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
80:8D:22:11:B5:63:F0:6A:CE:6A:29:C6:22:92:27:B4:ED:B4:98:13
X509v3 Authority Key Identifier:
keyid:99:F4:97:3E:52:4B:08:71:75:82:57:76:30:D3:31:93:E5:3B:67:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mfSXPlJLCHF1gld2MNMxk-U7Z8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/3c4a64-4b35-41d2-82a5-f30303f3f2f5/1/mfSXPlJLCHF1gld2MNMxk-U7Z8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:e7:62:66:fa:eb:53:f2:0a:c3:97:6e:b4:ee:68:4a:a2:b5:
03:00:9a:5d:67:14:f9:27:c8:0a:55:20:df:5b:76:16:2b:ad:
0a:13:fe:a2:23:f1:d2:bf:10:06:1d:f1:e3:b0:7b:25:2d:20:
0d:1b:14:ab:cb:15:54:d0:e2:fd:2e:1f:a4:a0:ab:35:6a:22:
de:c2:b8:f0:32:96:28:d4:25:8e:7a:87:1b:e0:2d:ac:eb:32:
fd:06:f6:1e:b2:05:91:85:83:c4:5e:e9:9f:f1:67:f0:bb:c1:
41:28:0b:69:97:c3:83:24:ac:b5:dd:07:d5:cb:0b:0c:69:05:
f5:bb:d9:b8:98:ab:a3:66:4f:b6:94:d6:4e:7b:9a:86:cd:00:
b9:59:44:b2:ad:55:30:60:7c:62:94:27:a5:26:02:c3:74:c2:
8f:b4:83:8e:12:2a:d9:1b:9b:66:3c:60:1d:03:40:2d:25:1b:
2a:95:80:f2:50:2c:4e:73:27:ab:75:10:b2:a1:d1:66:ac:83:
be:2e:ce:38:82:93:96:d2:58:ce:56:e8:e7:52:aa:2b:cd:d6:
46:6c:14:79:bf:4d:52:de:7d:47:38:c8:f1:c9:3c:b0:f7:4c:
a3:7f:4b:4f:bc:18:2d:c1:6d:50:b8:cf:30:86:ea:8c:83:4f:
3e:25:13:6e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZaNpn0DCbXLeoEK7u3c3TyWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZjQ5NzNlNTI0YjA4NzE3NTgyNTc3NjMwZDMzMTkzZTUz
YjY3YzkwHhcNMjUwNTAxMjEwMDIwWhcNMjUwNTAyMjEwMDIwWjAzMTEwLwYDVQQD
Eyg4MDhkMjIxMWI1NjNmMDZhY2U2YTI5YzYyMjkyMjdiNGVkYjQ5ODEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnPE9lK+iuyGzfVgQpajFZKOevwy3
oSVWwIENExzvh341cPBVWMiq5scOujC/omMndoEop0pcDeJwwSekehIHXQqnp8wD
z8Hn3NCsKuvsoQj+Tjnuqd9L4tHiqYmJ4pKg7UPDmGvHBQeDZnRM6/C6Ma4w75FW
zfYWQX/n0d1B3jwIfS0e7dG24GWncLsiMV8MNrxnjmQZHGa5oflPkj+aHilXKPHm
GnBdEAIxCp8gnMvsWK/mexT+n/LbM/kS/NfXTUtqLd/6c2g0P7T3FgwxM5t4cX/m
k7eFPbT/a+p57jZs/8G7W7LRNcJ2NBEm6JQ6iEQFWXqTIF0tkQixAd+fnwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFICNIhG1Y/BqzmopxiKSJ7TttJgTMB8GA1UdIwQY
MBaAFJn0lz5SSwhxdYJXdjDTMZPlO2fJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWZTWFBsSkxDSEYxZ2xkMk1OTXhrLVU3WjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi8zYzRhNjQtNGIzNS00MWQyLTgyYTUt
ZjMwMzAzZjNmMmY1LzEvbWZTWFBsSkxDSEYxZ2xkMk1OTXhrLVU3WjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi8zYzRhNjQtNGIzNS00MWQyLTgyYTUtZjMwMzAzZjNmMmY1
LzEvbWZTWFBsSkxDSEYxZ2xkMk1OTXhrLVU3WjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQediZvrr
U/IKw5dutO5oSqK1AwCaXWcU+SfIClUg31t2FiutChP+oiPx0r8QBh3x47B7JS0g
DRsUq8sVVNDi/S4fpKCrNWoi3sK48DKWKNQljnqHG+AtrOsy/Qb2HrIFkYWDxF7p
n/Fn8LvBQSgLaZfDgySstd0H1csLDGkF9bvZuJiro2ZPtpTWTnuahs0AuVlEsq1V
MGB8YpQnpSYCw3TCj7SDjhIq2RubZjxgHQNALSUbKpWA8lAsTnMnq3UQsqHRZqyD
vi7OOIKTltJYzlbo51KqK83WRmwUeb9NUt59RzjI8ck8sPdMo39LT7wYLcFtULjP
MIbqjINPPiUTbg==
-----END CERTIFICATE-----
Generated at Fri May 2 06:21:16 2025 by rpki-client