Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
File: hGy8NY5qqP7tbgMmoECJt-XyqYk.mft (raw, json)
Hash identifier: ar+SndbfkoXufLZ0A9yeuIIMT/+X/3r3ZrRDKAukMxw=
Subject key identifier: ED:23:94:D5:DA:3B:B2:B1:7C:69:59:A7:63:4E:FA:12:3A:08:B0:D8
Authority key identifier: 84:6C:BC:35:8E:6A:A8:FE:ED:6E:03:26:A0:40:89:B7:E5:F2:A9:89
Certificate issuer: /CN=846cbc358e6aa8feed6e0326a04089b7e5f2a989
Certificate serial: 01976D3E853EDDBD9B988327659898BCC4DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
Manifest number: 09F0
Signing time: Sat 14 Jun 2025 07:01:43 +0000
Manifest this update: Sat 14 Jun 2025 07:01:43 +0000
Manifest next update: Sun 15 Jun 2025 07:01:43 +0000
Files and hashes: 1: hGy8NY5qqP7tbgMmoECJt-XyqYk.crl (hash: 8EKkGDruXpin6PdApnb+xhHjaolKX6db3EqR5XVzUyk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:85:3e:dd:bd:9b:98:83:27:65:98:98:bc:c4:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=846cbc358e6aa8feed6e0326a04089b7e5f2a989
Validity
Not Before: Jun 14 07:01:43 2025 GMT
Not After : Jun 15 07:01:43 2025 GMT
Subject: CN=ed2394d5da3bb2b17c6959a7634efa123a08b0d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ae:23:24:2b:96:0f:4c:0a:f5:23:9b:d3:0a:
7f:92:cb:5c:ea:42:36:6e:f4:36:24:a9:ff:5c:e1:
fb:35:c6:85:22:1d:a5:a4:f7:e2:d0:05:fc:b1:66:
11:c7:ea:d0:ab:57:2f:39:0a:87:28:e4:de:af:37:
fb:01:66:46:35:72:a8:ac:9f:8e:04:26:1b:0f:30:
b6:c4:31:5e:3d:6d:96:61:09:48:31:ee:e2:d1:5f:
59:69:3b:af:8c:e0:ba:f3:b7:d5:85:ff:b0:ce:d7:
57:9f:8e:82:c7:32:4f:27:6a:09:4c:ff:e2:46:31:
cb:3d:26:6c:45:c9:5b:ce:b1:35:86:53:bf:40:b9:
ea:2a:74:ce:6e:2d:c5:da:a3:13:31:f6:22:2d:a9:
f1:2f:15:de:48:11:43:cd:1e:70:37:5c:19:5f:33:
9d:fa:1a:32:39:bf:be:88:96:9c:54:04:38:2c:81:
4f:d0:4a:bb:b1:a3:65:08:5c:cb:0a:e1:12:e5:20:
c0:e6:63:e5:e9:7f:46:3f:4b:85:4d:27:0b:c7:0c:
8b:f4:03:30:b4:d4:a1:7f:7c:39:1c:bd:ee:45:d4:
b2:13:aa:92:4b:15:de:4c:ee:7f:ab:e1:fa:e3:5c:
d4:90:cf:2f:b8:d9:d0:04:93:bd:92:4a:c0:61:55:
0a:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:23:94:D5:DA:3B:B2:B1:7C:69:59:A7:63:4E:FA:12:3A:08:B0:D8
X509v3 Authority Key Identifier:
keyid:84:6C:BC:35:8E:6A:A8:FE:ED:6E:03:26:A0:40:89:B7:E5:F2:A9:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hGy8NY5qqP7tbgMmoECJt-XyqYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/95/5f3d45-00d0-455a-acc8-3f7d81baf7b7/1/hGy8NY5qqP7tbgMmoECJt-XyqYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:c1:8e:f9:a9:1b:a1:b1:39:1b:cb:b7:cf:9d:2a:55:ac:a7:
a7:db:43:07:c3:de:d6:7b:cb:aa:2e:b4:fb:f6:be:b7:b9:b3:
dd:ca:0d:b0:79:80:4c:0f:d1:41:ae:87:15:cf:89:c2:47:e3:
8c:6b:7c:e7:a1:35:17:42:04:1b:ca:51:09:d6:1f:db:7c:fc:
4c:ad:b1:11:11:5e:fa:75:80:05:9e:13:dd:e5:9c:dc:62:6b:
7c:57:49:50:88:00:49:74:ab:13:93:97:80:59:b1:dc:ca:2c:
83:37:92:d0:bd:77:3f:e7:a9:d5:24:88:52:e3:00:92:50:be:
9b:a1:94:a5:53:9c:09:67:61:b4:2e:9a:2e:44:f7:8a:71:21:
24:7d:2a:0a:c2:2c:c0:a4:8d:f0:44:58:36:99:72:7c:66:e2:
ef:c4:c2:82:ea:b7:69:1c:02:de:6d:3e:94:3b:6a:79:1a:65:
ed:4e:60:bb:14:fb:dd:af:18:c2:fd:b0:80:6c:74:aa:d3:41:
ee:35:ac:fc:8a:2c:5a:7a:46:d8:6d:bf:8f:9e:03:89:cd:92:
03:7c:f3:cb:60:02:a1:63:5d:a5:e4:57:50:d9:d8:b5:84:bb:
f8:bc:76:04:51:3b:42:c3:3c:c6:5d:9f:92:15:e0:59:d1:7c:
0a:be:bf:75
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPoU+3b2bmIMnZZiYvMTfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NmNiYzM1OGU2YWE4ZmVlZDZlMDMyNmEwNDA4OWI3ZTVm
MmE5ODkwHhcNMjUwNjE0MDcwMTQzWhcNMjUwNjE1MDcwMTQzWjAzMTEwLwYDVQQD
EyhlZDIzOTRkNWRhM2JiMmIxN2M2OTU5YTc2MzRlZmExMjNhMDhiMGQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAna4jJCuWD0wK9SOb0wp/kstc6kI2
bvQ2JKn/XOH7NcaFIh2lpPfi0AX8sWYRx+rQq1cvOQqHKOTerzf7AWZGNXKorJ+O
BCYbDzC2xDFePW2WYQlIMe7i0V9ZaTuvjOC687fVhf+wztdXn46CxzJPJ2oJTP/i
RjHLPSZsRclbzrE1hlO/QLnqKnTObi3F2qMTMfYiLanxLxXeSBFDzR5wN1wZXzOd
+hoyOb++iJacVAQ4LIFP0Eq7saNlCFzLCuES5SDA5mPl6X9GP0uFTScLxwyL9AMw
tNShf3w5HL3uRdSyE6qSSxXeTO5/q+H641zUkM8vuNnQBJO9kkrAYVUKDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO0jlNXaO7KxfGlZp2NO+hI6CLDYMB8GA1UdIwQY
MBaAFIRsvDWOaqj+7W4DJqBAibfl8qmJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEd5OE5ZNXFxUDd0YmdNbW9FQ0p0LVh5cVlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85NS81ZjNkNDUtMDBkMC00NTVhLWFjYzgt
M2Y3ZDgxYmFmN2I3LzEvaEd5OE5ZNXFxUDd0YmdNbW9FQ0p0LVh5cVlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85NS81ZjNkNDUtMDBkMC00NTVhLWFjYzgtM2Y3ZDgxYmFmN2I3
LzEvaEd5OE5ZNXFxUDd0YmdNbW9FQ0p0LVh5cVlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXMGO+akb
obE5G8u3z50qVaynp9tDB8Pe1nvLqi60+/a+t7mz3coNsHmATA/RQa6HFc+Jwkfj
jGt856E1F0IEG8pRCdYf23z8TK2xERFe+nWABZ4T3eWc3GJrfFdJUIgASXSrE5OX
gFmx3MosgzeS0L13P+ep1SSIUuMAklC+m6GUpVOcCWdhtC6aLkT3inEhJH0qCsIs
wKSN8ERYNplyfGbi78TCguq3aRwC3m0+lDtqeRpl7U5guxT73a8Ywv2wgGx0qtNB
7jWs/IosWnpG2G2/j54Dic2SA3zzy2ACoWNdpeRXUNnYtYS7+Lx2BFE7QsM8xl2f
khXgWdF8Cr6/dQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:59:54 2025 by rpki-client