Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
File: deEJHTju5ZeWM68nco7pUjGv9tM.mft (raw, json)
Hash identifier: v5sqTbC6/ClOVmROA6FXnCKsH92X5hll0VoAMDLR4lM=
Subject key identifier: 1F:58:3C:8B:56:74:D6:72:D0:0A:5F:AA:E4:A5:5D:B4:AA:2B:34:5D
Authority key identifier: 75:E1:09:1D:38:EE:E5:97:96:33:AF:27:72:8E:E9:52:31:AF:F6:D3
Certificate issuer: /CN=75e1091d38eee5979633af27728ee95231aff6d3
Certificate serial: 0197801F6EAA345844B5BDBB15ADC56C5DD4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
Manifest number: 035E
Signing time: Tue 17 Jun 2025 23:00:32 +0000
Manifest this update: Tue 17 Jun 2025 23:00:32 +0000
Manifest next update: Wed 18 Jun 2025 23:00:32 +0000
Files and hashes: 1: deEJHTju5ZeWM68nco7pUjGv9tM.crl (hash: mFNZ3h8PrRZ8nFbQVUnU2hUIy/Sm6pJLIAQt/S4Io3w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:80:1f:6e:aa:34:58:44:b5:bd:bb:15:ad:c5:6c:5d:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=75e1091d38eee5979633af27728ee95231aff6d3
Validity
Not Before: Jun 17 23:00:32 2025 GMT
Not After : Jun 18 23:00:32 2025 GMT
Subject: CN=1f583c8b5674d672d00a5faae4a55db4aa2b345d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:bf:95:50:b1:c6:e4:6e:e1:e2:c1:69:bb:fd:
81:77:bf:9c:63:50:e9:3b:7a:25:65:f7:65:59:44:
80:f7:73:4e:a0:93:99:79:34:6f:a2:14:4d:6c:01:
56:7b:b1:3e:0f:c8:dd:9d:ad:9e:8c:ed:19:d6:43:
f6:aa:a2:3a:61:7d:91:4c:5c:97:73:54:38:c7:12:
ac:08:35:ef:81:1d:c6:bc:b9:6b:52:d5:0f:f4:8d:
60:a4:ab:b9:d1:e9:3c:bc:e7:cf:b7:3f:0b:17:e2:
23:bb:d9:4f:d0:ee:c4:03:90:7b:8f:2c:c6:d1:8e:
68:9d:b9:37:91:89:5d:06:24:9e:50:4a:88:a7:23:
ad:b2:d5:ea:42:e6:75:0f:10:7c:6d:bf:e3:2a:26:
5a:d9:da:89:e4:59:75:63:9d:a8:13:d6:2d:51:74:
87:80:34:8d:3b:f9:89:1a:c9:94:62:20:69:62:85:
11:dd:51:2a:4e:bf:a5:da:7a:d0:7f:40:92:3d:cc:
c3:4e:65:f1:42:63:58:5b:fa:d4:a4:7c:61:6f:d4:
98:c0:09:fc:24:a6:d5:2e:86:6a:a8:c0:05:18:ab:
db:c0:11:86:3b:59:d0:05:00:6a:48:59:78:4e:ba:
ef:b4:4c:d1:b9:f9:a5:1a:9b:84:2d:09:09:3e:b8:
46:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1F:58:3C:8B:56:74:D6:72:D0:0A:5F:AA:E4:A5:5D:B4:AA:2B:34:5D
X509v3 Authority Key Identifier:
keyid:75:E1:09:1D:38:EE:E5:97:96:33:AF:27:72:8E:E9:52:31:AF:F6:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/deEJHTju5ZeWM68nco7pUjGv9tM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/fbce4a-b6a2-44e5-83fa-0d671d470078/1/deEJHTju5ZeWM68nco7pUjGv9tM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
63:23:6a:19:cb:39:35:bb:09:50:00:de:3f:13:3c:3b:43:c1:
90:cb:1f:ef:71:ba:d1:33:e9:51:96:da:52:1b:3d:c0:5a:2f:
74:1a:b8:5e:f5:cd:6b:db:ab:74:c9:4b:b4:35:70:aa:d2:94:
ab:c6:b3:5b:9a:a2:6c:f0:55:2e:9c:9a:0f:bd:65:66:8b:a6:
0e:92:93:41:85:0c:bd:9f:61:68:a5:c0:a4:e0:be:08:5d:14:
eb:d5:82:41:6c:c7:44:19:25:f6:92:12:4a:be:53:5f:10:f9:
77:96:b1:8d:ef:35:f2:ab:09:3a:75:9e:a5:4a:40:b6:7a:b7:
05:ee:e7:ae:47:74:8f:bf:a9:68:55:0b:1c:ec:99:d8:82:68:
d9:68:e3:c1:f5:4a:f3:c1:17:e6:80:0e:dd:6a:27:42:95:ee:
28:39:89:2f:f7:90:6a:0e:c2:a1:fa:57:4e:e4:b1:d0:64:a2:
73:5d:34:63:ab:c0:fd:ab:a2:3d:fb:a6:95:2b:09:48:37:4a:
57:33:19:f0:19:09:cb:90:57:c9:24:ae:b9:a5:d4:11:8d:ca:
e1:f9:2c:77:30:01:ad:df:f0:00:93:02:eb:e7:73:9d:1d:80:
f9:4c:e9:dc:2a:46:cb:ff:23:1d:12:91:79:3e:e9:dc:6d:16:
90:82:55:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeAH26qNFhEtb27Fa3FbF3UMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ZTEwOTFkMzhlZWU1OTc5NjMzYWYyNzcyOGVlOTUyMzFh
ZmY2ZDMwHhcNMjUwNjE3MjMwMDMyWhcNMjUwNjE4MjMwMDMyWjAzMTEwLwYDVQQD
EygxZjU4M2M4YjU2NzRkNjcyZDAwYTVmYWFlNGE1NWRiNGFhMmIzNDVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApb+VULHG5G7h4sFpu/2Bd7+cY1Dp
O3olZfdlWUSA93NOoJOZeTRvohRNbAFWe7E+D8jdna2ejO0Z1kP2qqI6YX2RTFyX
c1Q4xxKsCDXvgR3GvLlrUtUP9I1gpKu50ek8vOfPtz8LF+Iju9lP0O7EA5B7jyzG
0Y5onbk3kYldBiSeUEqIpyOtstXqQuZ1DxB8bb/jKiZa2dqJ5Fl1Y52oE9YtUXSH
gDSNO/mJGsmUYiBpYoUR3VEqTr+l2nrQf0CSPczDTmXxQmNYW/rUpHxhb9SYwAn8
JKbVLoZqqMAFGKvbwBGGO1nQBQBqSFl4TrrvtEzRufmlGpuELQkJPrhGXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB9YPItWdNZy0ApfquSlXbSqKzRdMB8GA1UdIwQY
MBaAFHXhCR047uWXljOvJ3KO6VIxr/bTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGVFSkhUanU1WmVXTTY4bmNvN3BVakd2OXRNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9mYmNlNGEtYjZhMi00NGU1LTgzZmEt
MGQ2NzFkNDcwMDc4LzEvZGVFSkhUanU1WmVXTTY4bmNvN3BVakd2OXRNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9mYmNlNGEtYjZhMi00NGU1LTgzZmEtMGQ2NzFkNDcwMDc4
LzEvZGVFSkhUanU1WmVXTTY4bmNvN3BVakd2OXRNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYyNqGcs5
NbsJUADePxM8O0PBkMsf73G60TPpUZbaUhs9wFovdBq4XvXNa9urdMlLtDVwqtKU
q8azW5qibPBVLpyaD71lZoumDpKTQYUMvZ9haKXApOC+CF0U69WCQWzHRBkl9pIS
Sr5TXxD5d5axje818qsJOnWepUpAtnq3Be7nrkd0j7+paFULHOyZ2IJo2WjjwfVK
88EX5oAO3WonQpXuKDmJL/eQag7CofpXTuSx0GSic100Y6vA/auiPfumlSsJSDdK
VzMZ8BkJy5BXySSuuaXUEY3K4fksdzABrd/wAJMC6+dznR2A+Uzp3CpGy/8jHRKR
eT7p3G0WkIJVQw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 06:37:56 2025 by rpki-client