Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
File: AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft (raw, json)
Hash identifier: edgQ8db6ePE9C4CarZ2VumRwesKBiAr44CPO7qVV44A=
Subject key identifier: D4:55:39:46:F2:88:48:3D:3F:57:50:F3:E5:75:0E:7F:36:52:21:8A
Authority key identifier: 00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2
Certificate issuer: /CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
Certificate serial: 0198861F03546CDE84670B8957FD222BC032
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
Manifest number: 0BA1
Signing time: Thu 07 Aug 2025 20:00:35 +0000
Manifest this update: Thu 07 Aug 2025 20:00:35 +0000
Manifest next update: Fri 08 Aug 2025 20:00:35 +0000
Files and hashes: 1: AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl (hash: z+TmhijOxJia8pieoaYwDzoveTiyQeX50P35RwgLPTc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl
rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 17:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:86:1f:03:54:6c:de:84:67:0b:89:57:fd:22:2b:c0:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=00be9718d4abb867dd0544ea8fb462dc332b9cd2
Validity
Not Before: Aug 7 20:00:35 2025 GMT
Not After : Aug 8 20:00:35 2025 GMT
Subject: CN=d4553946f288483d3f5750f3e5750e7f3652218a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:76:43:91:68:71:b5:a8:58:f3:12:55:de:07:
9b:78:4b:ce:af:f0:69:03:2c:41:12:9f:d0:dd:7a:
b9:ef:b7:1a:ab:07:43:06:08:0d:b5:27:b8:44:b1:
e6:07:df:f3:a7:8d:fb:25:74:f8:fd:86:8e:d1:85:
36:20:24:76:0f:13:e0:c5:30:20:bc:15:6c:34:68:
fc:a2:01:4a:d8:27:01:35:11:ad:b4:a8:cb:4f:90:
5e:4e:d7:2b:be:b2:18:4c:35:c1:d7:dc:9a:0c:74:
a0:b8:45:2c:bf:0d:b6:f1:74:04:ee:6f:5c:af:1c:
e5:e7:e1:95:14:ee:1e:7b:f2:c7:bf:12:ef:ba:19:
fe:6a:68:a6:84:87:64:ce:76:e8:50:a4:3e:af:bf:
90:b8:8d:49:47:d7:d0:74:52:3f:61:7b:a7:1e:c7:
71:78:65:13:da:a1:16:7d:e3:6a:8f:15:a7:69:f4:
75:57:eb:65:05:2a:2b:e4:a2:2c:06:9a:17:06:d2:
b3:16:21:88:2a:90:95:96:13:2d:d3:12:bc:3b:98:
95:7a:b4:20:e6:8d:60:54:33:25:33:e6:fb:49:79:
0b:16:b9:ee:d4:20:23:e0:6a:ba:2a:bb:c5:2a:07:
4f:35:1e:c1:cd:33:18:d9:49:00:4e:12:05:ca:4d:
22:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:55:39:46:F2:88:48:3D:3F:57:50:F3:E5:75:0E:7F:36:52:21:8A
X509v3 Authority Key Identifier:
keyid:00:BE:97:18:D4:AB:B8:67:DD:05:44:EA:8F:B4:62:DC:33:2B:9C:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AL6XGNSruGfdBUTqj7Ri3DMrnNI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b4/e72891-4bc6-4cad-b860-02a21358424a/1/AL6XGNSruGfdBUTqj7Ri3DMrnNI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:67:8b:9c:3d:b9:f0:b5:27:e2:5f:22:c9:9d:5a:a4:5c:e0:
28:a4:e0:24:19:8c:7f:20:89:76:b7:8e:de:76:60:7c:8a:47:
f6:2f:f6:5a:77:93:a1:c4:64:81:97:88:99:b6:35:e1:33:1f:
5d:74:0e:71:c6:11:a0:30:38:ac:48:76:5d:61:ad:d5:47:8e:
98:46:5c:a4:9c:ff:e2:0e:92:7e:d0:90:f3:19:cc:50:ae:fb:
b6:13:c4:96:0d:6b:0b:20:0e:35:4f:58:61:5e:15:e1:60:ed:
9b:ed:d4:06:4c:56:9d:7d:f3:9d:7e:fa:78:cd:46:70:2b:90:
6e:53:e4:55:8a:23:e1:de:aa:93:58:03:5e:7c:00:5d:47:b0:
ef:dc:54:6d:a0:55:07:ea:fd:4f:ee:d8:38:9f:84:a8:d2:f0:
67:9b:18:07:2d:9f:5d:87:14:88:c4:0f:59:ae:93:cc:8a:58:
19:71:45:7a:f6:07:a7:84:56:6a:cb:09:c5:7d:ae:75:22:86:
e8:6a:f7:7a:b6:59:66:f3:f6:72:7b:84:e8:7f:21:d2:5b:47:
58:5d:e9:91:69:82:2d:d0:78:a2:bd:c4:41:c8:a3:73:9f:4a:
44:6e:83:a8:4e:96:73:78:18:6c:3b:35:12:2f:c6:77:09:e7:
2a:5e:69:d9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiGHwNUbN6EZwuJV/0iK8AyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAwYmU5NzE4ZDRhYmI4NjdkZDA1NDRlYThmYjQ2MmRjMzMy
YjljZDIwHhcNMjUwODA3MjAwMDM1WhcNMjUwODA4MjAwMDM1WjAzMTEwLwYDVQQD
EyhkNDU1Mzk0NmYyODg0ODNkM2Y1NzUwZjNlNTc1MGU3ZjM2NTIyMThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv3ZDkWhxtahY8xJV3gebeEvOr/Bp
AyxBEp/Q3Xq577caqwdDBggNtSe4RLHmB9/zp437JXT4/YaO0YU2ICR2DxPgxTAg
vBVsNGj8ogFK2CcBNRGttKjLT5BeTtcrvrIYTDXB19yaDHSguEUsvw228XQE7m9c
rxzl5+GVFO4ee/LHvxLvuhn+amimhIdkznboUKQ+r7+QuI1JR9fQdFI/YXunHsdx
eGUT2qEWfeNqjxWnafR1V+tlBSor5KIsBpoXBtKzFiGIKpCVlhMt0xK8O5iVerQg
5o1gVDMlM+b7SXkLFrnu1CAj4Gq6KrvFKgdPNR7BzTMY2UkAThIFyk0iFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNRVOUbyiEg9P1dQ8+V1Dn82UiGKMB8GA1UdIwQY
MBaAFAC+lxjUq7hn3QVE6o+0YtwzK5zSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQUw2WEdOU3J1R2ZkQlVUcWo3UmkzRE1ybk5JLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNC9lNzI4OTEtNGJjNi00Y2FkLWI4NjAt
MDJhMjEzNTg0MjRhLzEvQUw2WEdOU3J1R2ZkQlVUcWo3UmkzRE1ybk5JLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNC9lNzI4OTEtNGJjNi00Y2FkLWI4NjAtMDJhMjEzNTg0MjRh
LzEvQUw2WEdOU3J1R2ZkQlVUcWo3UmkzRE1ybk5JLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABWeLnD25
8LUn4l8iyZ1apFzgKKTgJBmMfyCJdreO3nZgfIpH9i/2WneTocRkgZeImbY14TMf
XXQOccYRoDA4rEh2XWGt1UeOmEZcpJz/4g6SftCQ8xnMUK77thPElg1rCyAONU9Y
YV4V4WDtm+3UBkxWnX3znX76eM1GcCuQblPkVYoj4d6qk1gDXnwAXUew79xUbaBV
B+r9T+7YOJ+EqNLwZ5sYBy2fXYcUiMQPWa6TzIpYGXFFevYHp4RWassJxX2udSKG
6Gr3erZZZvP2cnuE6H8h0ltHWF3pkWmCLdB4or3EQcijc59KRG6DqE6Wc3gYbDs1
Ei/GdwnnKl5p2Q==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:42:43 2025 by rpki-client