Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
File: hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft (raw, json)
Hash identifier: lfzQhoNTOuyz2zwxo6+PqKv0QtJqSxPV5KB3zuCAotg=
Subject key identifier: 5F:4A:11:A7:40:94:B4:3C:F6:12:6A:00:65:F5:D8:61:BE:11:C6:E2
Authority key identifier: 84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
Certificate issuer: /CN=84f590ca62c246440583818c31f2573a0f50ffd0
Certificate serial: 01977B6738B217F4A5756FA786C235C8C855
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
Manifest number: 09AA
Signing time: Tue 17 Jun 2025 01:00:51 +0000
Manifest this update: Tue 17 Jun 2025 01:00:51 +0000
Manifest next update: Wed 18 Jun 2025 01:00:51 +0000
Files and hashes: 1: hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl (hash: zXKHGM6nKtR7IonYT0UmQ+KL+W5z3gPqOQsg9S3gOmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 23:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7b:67:38:b2:17:f4:a5:75:6f:a7:86:c2:35:c8:c8:55
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=84f590ca62c246440583818c31f2573a0f50ffd0
Validity
Not Before: Jun 17 01:00:51 2025 GMT
Not After : Jun 18 01:00:51 2025 GMT
Subject: CN=5f4a11a74094b43cf6126a0065f5d861be11c6e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:7f:1b:73:46:00:81:9d:e7:83:61:5a:89:79:
70:06:95:7d:73:19:50:c6:a2:e4:7b:91:03:ba:1d:
77:75:8f:65:00:21:1c:b4:91:47:72:84:e8:a4:15:
ea:06:57:69:1c:10:c9:77:b6:cd:14:1c:df:19:83:
b0:9e:3b:cb:a5:b0:c9:0f:72:c4:f8:9a:f4:51:3f:
e2:37:11:03:bd:1d:e5:8f:0c:16:6a:8d:e4:8e:00:
8e:9f:ca:4e:1c:d9:1e:cf:ac:7b:ca:27:81:76:71:
7a:1c:de:c6:db:09:26:13:af:96:bc:1a:2d:9b:57:
41:8a:49:46:42:f8:b6:a8:c3:1e:6a:3c:84:a5:0c:
75:74:32:0e:94:4e:64:e7:ad:e3:14:a4:b0:c1:00:
48:56:8c:2e:2f:07:1b:3c:fc:c4:6f:cc:16:80:4c:
aa:cb:81:8c:bd:fa:21:88:09:34:89:74:fe:73:1e:
1f:14:9e:d9:53:46:63:08:af:91:f8:23:fa:7f:6a:
ad:8c:94:e3:c5:9a:b2:e6:06:83:77:f5:39:6d:2e:
dd:a5:46:bb:f3:76:34:6c:e4:9d:cb:b1:bc:35:8f:
7f:a6:18:2a:c8:6f:d3:7d:a8:7b:0f:30:ba:e2:5c:
fe:ab:14:d1:c6:65:1d:bd:15:32:70:27:71:82:b7:
ba:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5F:4A:11:A7:40:94:B4:3C:F6:12:6A:00:65:F5:D8:61:BE:11:C6:E2
X509v3 Authority Key Identifier:
keyid:84:F5:90:CA:62:C2:46:44:05:83:81:8C:31:F2:57:3A:0F:50:FF:D0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hPWQymLCRkQFg4GMMfJXOg9Q_9A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5a99e8-bb46-4fcd-aea1-8d56a7b09953/1/hPWQymLCRkQFg4GMMfJXOg9Q_9A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
17:a5:96:4d:16:1a:fc:f8:6f:2c:23:7f:61:de:11:64:84:0c:
b6:89:8d:9f:56:9c:fc:58:61:d9:a3:e9:04:9b:49:a1:41:51:
08:08:b1:ec:6f:79:21:03:a0:62:cf:39:33:14:94:9e:e4:bd:
ad:71:56:48:1e:44:8b:f2:dd:fc:14:5c:53:c7:f7:30:68:d1:
98:54:7b:48:19:02:87:01:4f:c3:a9:33:5f:a2:ba:01:12:85:
79:71:c5:8e:95:41:c5:7d:b0:62:8d:d3:84:15:62:7b:7b:0c:
7e:4e:f2:a4:50:f9:88:60:af:1f:b1:0a:6c:e4:52:0f:ee:d8:
fb:9c:5f:f4:fb:76:5f:47:9a:12:57:e1:a0:d2:54:47:b0:69:
24:fd:c6:89:e3:7f:e0:1b:33:99:1e:3c:14:e2:fc:96:11:41:
56:53:fd:91:c4:07:29:0e:f7:1d:f9:af:a3:02:5e:83:cd:56:
1f:f5:a6:a7:b1:d7:45:c3:5c:fa:78:fd:b2:80:d8:47:08:0f:
05:43:48:50:1b:28:b1:1d:81:f6:aa:61:a7:a5:03:1a:63:d9:
65:93:af:c9:ec:67:b7:c7:37:e3:49:60:8c:7e:8c:00:c9:d9:
51:6a:99:e3:a0:2e:92:a6:19:85:88:ee:43:ad:e2:1e:94:a9:
19:64:33:87
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd7ZziyF/SldW+nhsI1yMhVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0ZjU5MGNhNjJjMjQ2NDQwNTgzODE4YzMxZjI1NzNhMGY1
MGZmZDAwHhcNMjUwNjE3MDEwMDUxWhcNMjUwNjE4MDEwMDUxWjAzMTEwLwYDVQQD
Eyg1ZjRhMTFhNzQwOTRiNDNjZjYxMjZhMDA2NWY1ZDg2MWJlMTFjNmUyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAun8bc0YAgZ3ng2FaiXlwBpV9cxlQ
xqLke5EDuh13dY9lACEctJFHcoTopBXqBldpHBDJd7bNFBzfGYOwnjvLpbDJD3LE
+Jr0UT/iNxEDvR3ljwwWao3kjgCOn8pOHNkez6x7yieBdnF6HN7G2wkmE6+WvBot
m1dBiklGQvi2qMMeajyEpQx1dDIOlE5k563jFKSwwQBIVowuLwcbPPzEb8wWgEyq
y4GMvfohiAk0iXT+cx4fFJ7ZU0ZjCK+R+CP6f2qtjJTjxZqy5gaDd/U5bS7dpUa7
83Y0bOSdy7G8NY9/phgqyG/Tfah7DzC64lz+qxTRxmUdvRUycCdxgre6WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF9KEadAlLQ89hJqAGX12GG+EcbiMB8GA1UdIwQY
MBaAFIT1kMpiwkZEBYOBjDHyVzoPUP/QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaFBXUXltTENSa1FGZzRHTU1mSlhPZzlRXzlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81YTk5ZTgtYmI0Ni00ZmNkLWFlYTEt
OGQ1NmE3YjA5OTUzLzEvaFBXUXltTENSa1FGZzRHTU1mSlhPZzlRXzlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny81YTk5ZTgtYmI0Ni00ZmNkLWFlYTEtOGQ1NmE3YjA5OTUz
LzEvaFBXUXltTENSa1FGZzRHTU1mSlhPZzlRXzlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAF6WWTRYa
/PhvLCN/Yd4RZIQMtomNn1ac/Fhh2aPpBJtJoUFRCAix7G95IQOgYs85MxSUnuS9
rXFWSB5Ei/Ld/BRcU8f3MGjRmFR7SBkChwFPw6kzX6K6ARKFeXHFjpVBxX2wYo3T
hBVie3sMfk7ypFD5iGCvH7EKbORSD+7Y+5xf9Pt2X0eaElfhoNJUR7BpJP3GieN/
4BszmR48FOL8lhFBVlP9kcQHKQ73HfmvowJeg81WH/Wmp7HXRcNc+nj9soDYRwgP
BUNIUBsosR2B9qphp6UDGmPZZZOvyexnt8c340lgjH6MAMnZUWqZ46AukqYZhYju
Q63iHpSpGWQzhw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 09:00:20 2025 by rpki-client