Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
File: rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft (raw, json)
Hash identifier: bw4RbRfUjo8FNT98g+CKvCx7koVuNYjGolLFOihFsgE=
Subject key identifier: 5A:05:94:EA:31:90:76:F2:59:39:10:01:B5:36:0C:D6:DA:D0:90:17
Authority key identifier: AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
Certificate issuer: /CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Certificate serial: 01976F2BF3E19EE148D11D258CC52EDAB910
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
Manifest number: 057F
Signing time: Sat 14 Jun 2025 16:00:40 +0000
Manifest this update: Sat 14 Jun 2025 16:00:40 +0000
Manifest next update: Sun 15 Jun 2025 16:00:40 +0000
Files and hashes: 1: rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl (hash: 9cnW3+TpLwRI11LneWNrKnpBs/M+EgfOrStXhtznVxg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl
rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:2b:f3:e1:9e:e1:48:d1:1d:25:8c:c5:2e:da:b9:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac3440f30e305bc0058b859b68a8340a033b6b42
Validity
Not Before: Jun 14 16:00:40 2025 GMT
Not After : Jun 15 16:00:40 2025 GMT
Subject: CN=5a0594ea319076f259391001b5360cd6dad09017
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ff:d0:b3:18:bc:11:b1:ba:26:d0:e6:6b:b7:
91:61:67:05:5d:37:3e:40:09:97:9e:f7:9a:78:21:
48:fb:69:aa:08:53:aa:f4:37:40:25:bd:1b:49:6f:
16:f0:4c:1f:99:08:66:ee:45:41:65:b2:f4:d2:0c:
1d:9a:32:06:3f:10:3d:59:df:66:04:52:0c:f9:eb:
c8:a2:65:cd:de:df:cd:97:ef:24:1b:de:32:26:97:
16:3d:96:f0:97:81:56:21:84:91:da:bc:67:d1:9c:
f2:00:5e:45:4e:0d:ac:73:2e:61:cb:32:f8:ad:9a:
71:3e:72:8e:fd:6f:71:99:47:27:8d:6c:1d:9e:a3:
08:ce:a5:09:29:7a:fc:cf:eb:44:f8:35:46:08:8a:
49:5f:3f:40:9d:51:0b:03:c8:44:03:da:a7:bd:c6:
26:3b:37:df:36:63:65:c2:e4:3f:1f:2e:db:a3:a0:
f2:6f:51:34:39:ae:dd:17:c0:e2:70:a5:50:4b:13:
e2:6d:d9:f1:8e:e9:46:6f:21:bb:e6:2a:72:ce:e5:
7c:9c:8b:17:77:ff:ad:67:99:06:1e:8b:ce:43:23:
56:b9:14:9e:c4:84:d6:c4:5f:7b:71:71:a7:40:24:
2b:fd:9a:6e:c5:63:44:22:91:5c:3d:eb:1f:bb:0a:
84:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:05:94:EA:31:90:76:F2:59:39:10:01:B5:36:0C:D6:DA:D0:90:17
X509v3 Authority Key Identifier:
keyid:AC:34:40:F3:0E:30:5B:C0:05:8B:85:9B:68:A8:34:0A:03:3B:6B:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rDRA8w4wW8AFi4WbaKg0CgM7a0I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/87/a6777d-b778-442c-b82f-438d404edc2a/1/rDRA8w4wW8AFi4WbaKg0CgM7a0I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8a:86:9e:42:62:fc:e5:25:ba:0c:a2:aa:08:df:fa:16:fd:91:
c9:32:5d:dc:77:9a:f0:64:8a:8b:81:35:67:2d:15:d9:41:79:
3a:e2:1c:38:6c:2b:ae:ec:b0:72:93:32:ef:9a:b9:ff:8b:d0:
77:2f:17:64:d1:27:90:b0:62:16:b5:1d:ba:59:1c:c4:c5:78:
a3:34:51:07:33:7d:37:86:ce:a6:e6:d3:73:26:3a:8d:d4:de:
dc:df:fc:b2:bf:eb:88:56:cf:20:d9:8a:b1:21:72:79:2c:4d:
64:d1:9f:e9:fe:b8:e2:02:18:bd:33:81:d4:3c:2b:ba:54:60:
10:2d:da:67:61:4d:5b:e6:35:08:22:5e:c9:92:ae:88:3a:b9:
62:dd:1f:58:05:2d:73:0b:2b:a4:51:e6:7b:7b:c1:cb:d1:7b:
23:73:d1:92:12:8c:ba:76:92:01:99:8e:e1:2e:94:fe:cd:13:
55:15:68:25:b7:68:bc:e4:de:f9:f6:27:1d:e3:a7:cf:0d:55:
02:ce:79:2a:6c:d4:c8:b2:6d:54:e1:6f:a1:6e:83:b3:9f:a8:
79:97:ca:26:8c:f8:8d:3f:18:62:27:b9:e7:dc:7a:3c:a0:f6:
38:15:4d:73:eb:7c:d4:d3:16:03:ff:f6:00:ac:b0:49:67:5e:
03:69:b0:5f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvK/PhnuFI0R0ljMUu2rkQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjMzQ0MGYzMGUzMDViYzAwNThiODU5YjY4YTgzNDBhMDMz
YjZiNDIwHhcNMjUwNjE0MTYwMDQwWhcNMjUwNjE1MTYwMDQwWjAzMTEwLwYDVQQD
Eyg1YTA1OTRlYTMxOTA3NmYyNTkzOTEwMDFiNTM2MGNkNmRhZDA5MDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu//Qsxi8EbG6JtDma7eRYWcFXTc+
QAmXnveaeCFI+2mqCFOq9DdAJb0bSW8W8EwfmQhm7kVBZbL00gwdmjIGPxA9Wd9m
BFIM+evIomXN3t/Nl+8kG94yJpcWPZbwl4FWIYSR2rxn0ZzyAF5FTg2scy5hyzL4
rZpxPnKO/W9xmUcnjWwdnqMIzqUJKXr8z+tE+DVGCIpJXz9AnVELA8hEA9qnvcYm
OzffNmNlwuQ/Hy7bo6Dyb1E0Oa7dF8DicKVQSxPibdnxjulGbyG75ipyzuV8nIsX
d/+tZ5kGHovOQyNWuRSexITWxF97cXGnQCQr/ZpuxWNEIpFcPesfuwqEPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFoFlOoxkHbyWTkQAbU2DNba0JAXMB8GA1UdIwQY
MBaAFKw0QPMOMFvABYuFm2ioNAoDO2tCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckRSQTh3NHdXOEFGaTRXYmFLZzBDZ003YTBJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ny9hNjc3N2QtYjc3OC00NDJjLWI4MmYt
NDM4ZDQwNGVkYzJhLzEvckRSQTh3NHdXOEFGaTRXYmFLZzBDZ003YTBJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ny9hNjc3N2QtYjc3OC00NDJjLWI4MmYtNDM4ZDQwNGVkYzJh
LzEvckRSQTh3NHdXOEFGaTRXYmFLZzBDZ003YTBJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAioaeQmL8
5SW6DKKqCN/6Fv2RyTJd3Hea8GSKi4E1Zy0V2UF5OuIcOGwrruywcpMy75q5/4vQ
dy8XZNEnkLBiFrUdulkcxMV4ozRRBzN9N4bOpubTcyY6jdTe3N/8sr/riFbPINmK
sSFyeSxNZNGf6f644gIYvTOB1DwrulRgEC3aZ2FNW+Y1CCJeyZKuiDq5Yt0fWAUt
cwsrpFHme3vBy9F7I3PRkhKMunaSAZmO4S6U/s0TVRVoJbdovOTe+fYnHeOnzw1V
As55KmzUyLJtVOFvoW6Ds5+oeZfKJoz4jT8YYie559x6PKD2OBVNc+t81NMWA//2
AKywSWdeA2mwXw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:49:59 2025 by rpki-client