Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft
File: X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft (raw, json)
Hash identifier: G8sxl0n3wXbxK2H/0fvnExSSodS7TMNcJm1OTQmgYao=
Subject key identifier: 66:8A:93:EA:A0:37:A1:D9:30:A1:D8:64:B4:7E:1C:42:6B:11:57:38
Authority key identifier: 5F:40:62:82:EC:14:FA:0B:C7:D6:51:1E:FC:BC:6A:E9:F1:E0:5B:3D
Certificate issuer: /CN=5f406282ec14fa0bc7d6511efcbc6ae9f1e05b3d
Certificate serial: 01976C2B638464458C72683E7B6A61D8419E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/X0BiguwU-gvH1lEe_Lxq6fHgWz0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft
Manifest number: 3C
Signing time: Sat 14 Jun 2025 02:01:12 +0000
Manifest this update: Sat 14 Jun 2025 02:01:12 +0000
Manifest next update: Sun 15 Jun 2025 02:01:12 +0000
Files and hashes: 1: X0BiguwU-gvH1lEe_Lxq6fHgWz0.crl (hash: LHqDrycY4nXXxPxHodMijfGm3nUBt3UKByR8v1cPalw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft
rsync://rpki.ripe.net/repository/DEFAULT/X0BiguwU-gvH1lEe_Lxq6fHgWz0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2b:63:84:64:45:8c:72:68:3e:7b:6a:61:d8:41:9e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5f406282ec14fa0bc7d6511efcbc6ae9f1e05b3d
Validity
Not Before: Jun 14 02:01:12 2025 GMT
Not After : Jun 15 02:01:12 2025 GMT
Subject: CN=668a93eaa037a1d930a1d864b47e1c426b115738
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:03:2d:9c:09:8b:58:27:04:9f:5e:5a:89:b6:
9d:79:42:2f:c9:2c:b5:8b:b2:ec:bc:03:36:45:6a:
4c:50:33:fc:fb:a1:74:9f:e3:ca:a2:73:7a:72:03:
0e:cc:98:3a:3b:ac:f4:bb:47:44:2d:dd:05:26:23:
f7:d7:f3:72:2e:ca:3f:44:e3:f7:e2:bb:3e:81:02:
f3:e8:73:c5:15:12:ae:a0:4e:d2:99:9e:92:1f:15:
95:52:8e:a9:bb:57:6b:5e:4a:06:45:94:7f:3a:de:
dd:df:70:b8:98:e5:c9:2f:68:2d:cd:ac:c9:99:1f:
5e:6f:a4:bd:cf:25:53:40:a5:78:d2:fd:ea:9c:87:
ba:42:85:63:89:f3:41:28:52:87:da:8d:e0:3b:d6:
60:02:25:14:02:c6:d6:92:86:ad:5a:03:71:6d:44:
00:41:b2:7e:9e:95:10:69:22:14:b8:2f:51:48:dc:
f0:7a:86:c7:7c:bf:11:25:7d:eb:1d:5c:ff:fe:0f:
d9:f2:5d:0a:00:47:cd:b6:0b:e8:ec:62:f2:a4:81:
29:ef:c4:76:6f:35:1a:a1:89:bf:9d:3e:b2:13:14:
5a:77:94:cd:c7:36:92:72:2d:cd:bf:e1:cd:97:87:
b5:fc:6a:57:de:7b:21:61:55:cc:61:3e:de:49:bd:
20:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:8A:93:EA:A0:37:A1:D9:30:A1:D8:64:B4:7E:1C:42:6B:11:57:38
X509v3 Authority Key Identifier:
keyid:5F:40:62:82:EC:14:FA:0B:C7:D6:51:1E:FC:BC:6A:E9:F1:E0:5B:3D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/X0BiguwU-gvH1lEe_Lxq6fHgWz0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/395b1c-a7da-4469-a4c5-e304facd1f7a/1/X0BiguwU-gvH1lEe_Lxq6fHgWz0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:85:d6:0d:1b:5b:b6:8d:c4:86:0a:29:df:25:54:a7:50:1e:
26:a2:19:26:1d:42:18:b9:c2:e3:53:dd:a2:49:dd:f6:bf:61:
42:18:ec:40:b4:9f:05:14:1e:62:64:65:ac:0a:a9:b0:17:38:
3a:3e:41:c9:dd:85:5f:b3:2f:81:b7:48:c3:33:d3:62:55:f3:
ac:06:4c:4e:bb:63:98:ee:11:e0:17:7a:16:ef:42:65:6e:eb:
5f:b0:94:c1:c9:7d:90:1a:fb:4f:78:02:9c:c5:b4:c9:aa:72:
07:72:eb:fd:57:23:4f:d5:0b:00:95:27:f1:41:aa:6a:6a:23:
26:93:cd:b5:73:d9:b4:10:84:ac:21:1b:24:3f:dd:13:9a:85:
38:12:8f:99:ea:24:61:fb:67:48:c4:8a:77:bb:7d:97:4f:a2:
f1:d7:9c:e1:93:b8:4e:b4:cc:4f:15:f5:c4:7d:32:5d:11:51:
c3:fc:2a:e0:1a:49:ce:21:3a:b1:85:c8:77:90:0a:cc:72:c9:
92:86:81:4e:ba:d0:db:4b:7a:0d:9c:65:32:31:c6:0c:e3:c1:
7b:f3:f5:22:27:2e:3c:1e:a7:fe:97:e6:e4:82:a8:ac:62:06:
dd:40:a0:7c:07:54:6d:ab:5d:77:f6:93:08:0e:fb:c3:f9:3a:
93:b2:d1:ef
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsK2OEZEWMcmg+e2ph2EGeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDVmNDA2MjgyZWMxNGZhMGJjN2Q2NTExZWZjYmM2YWU5ZjFl
MDViM2QwHhcNMjUwNjE0MDIwMTEyWhcNMjUwNjE1MDIwMTEyWjAzMTEwLwYDVQQD
Eyg2NjhhOTNlYWEwMzdhMWQ5MzBhMWQ4NjRiNDdlMWM0MjZiMTE1NzM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAswMtnAmLWCcEn15aibadeUIvySy1
i7LsvAM2RWpMUDP8+6F0n+PKonN6cgMOzJg6O6z0u0dELd0FJiP31/NyLso/ROP3
4rs+gQLz6HPFFRKuoE7SmZ6SHxWVUo6pu1drXkoGRZR/Ot7d33C4mOXJL2gtzazJ
mR9eb6S9zyVTQKV40v3qnIe6QoVjifNBKFKH2o3gO9ZgAiUUAsbWkoatWgNxbUQA
QbJ+npUQaSIUuC9RSNzweobHfL8RJX3rHVz//g/Z8l0KAEfNtgvo7GLypIEp78R2
bzUaoYm/nT6yExRad5TNxzaSci3Nv+HNl4e1/GpX3nshYVXMYT7eSb0gUwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGaKk+qgN6HZMKHYZLR+HEJrEVc4MB8GA1UdIwQY
MBaAFF9AYoLsFPoLx9ZRHvy8aunx4Fs9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvWDBCaWd1d1UtZ3ZIMWxFZV9MeHE2ZkhnV3owLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi8zOTViMWMtYTdkYS00NDY5LWE0YzUt
ZTMwNGZhY2QxZjdhLzEvWDBCaWd1d1UtZ3ZIMWxFZV9MeHE2ZkhnV3owLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi8zOTViMWMtYTdkYS00NDY5LWE0YzUtZTMwNGZhY2QxZjdh
LzEvWDBCaWd1d1UtZ3ZIMWxFZV9MeHE2ZkhnV3owLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFYXWDRtb
to3Ehgop3yVUp1AeJqIZJh1CGLnC41Pdoknd9r9hQhjsQLSfBRQeYmRlrAqpsBc4
Oj5Byd2FX7MvgbdIwzPTYlXzrAZMTrtjmO4R4Bd6Fu9CZW7rX7CUwcl9kBr7T3gC
nMW0yapyB3Lr/VcjT9ULAJUn8UGqamojJpPNtXPZtBCErCEbJD/dE5qFOBKPmeok
YftnSMSKd7t9l0+i8dec4ZO4TrTMTxX1xH0yXRFRw/wq4BpJziE6sYXId5AKzHLJ
koaBTrrQ20t6DZxlMjHGDOPBe/P1IicuPB6n/pfm5IKorGIG3UCgfAdUbatdd/aT
CA77w/k6k7LR7w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:14:11 2025 by rpki-client