Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
File: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft (raw, json)
Hash identifier: xo58HzseMRBUl7hmqjIYBDURhqDEoH7RvUTCtGMoH6I=
Subject key identifier: 34:FE:88:77:40:6D:F1:C2:E0:3B:59:B5:E1:CD:EA:AA:C5:8C:D4:81
Authority key identifier: F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
Certificate issuer: /CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Certificate serial: 01976BBD7EC79C7E54520EDD7670EE128AC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
Manifest number: 151C
Signing time: Sat 14 Jun 2025 00:01:10 +0000
Manifest this update: Sat 14 Jun 2025 00:01:10 +0000
Manifest next update: Sun 15 Jun 2025 00:01:10 +0000
Files and hashes: 1: 9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl (hash: rHDZdWFeqMJDmUSBcK7utMLBiUenRZ7+t0uJY/EALx0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:01:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:7e:c7:9c:7e:54:52:0e:dd:76:70:ee:12:8a:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f55e5e0d815893a68a40000805a18ae6b9f603c0
Validity
Not Before: Jun 14 00:01:10 2025 GMT
Not After : Jun 15 00:01:10 2025 GMT
Subject: CN=34fe8877406df1c2e03b59b5e1cdeaaac58cd481
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:24:b5:0c:11:38:ec:c0:b4:74:50:64:91:76:
44:dd:ba:0f:c1:ec:3b:eb:11:25:d9:2f:64:59:65:
b4:f5:93:17:62:b4:37:d0:18:6d:0e:c3:c4:2d:8e:
b9:96:66:8b:cf:64:7b:19:f7:0e:29:ea:0d:69:dd:
07:07:89:f5:a2:b3:bc:9d:18:26:74:ee:95:0e:8c:
9b:da:2f:e3:9f:da:a2:bd:d1:bf:dd:0c:fc:7d:02:
21:38:d9:c9:19:bb:eb:34:07:b6:eb:f7:7c:f3:5b:
35:04:e8:17:2e:2b:80:4b:46:ef:81:9e:00:ba:64:
2a:8d:ab:38:68:66:46:de:27:9c:f7:c7:79:82:91:
75:cc:5b:8c:72:00:09:7c:9a:17:95:80:1c:9b:a1:
cd:61:86:95:82:5f:fc:95:f1:9c:7a:5d:1c:08:f6:
42:d8:a8:38:61:64:c8:2c:79:ab:a3:3a:a0:5c:8b:
8f:75:2c:bd:2e:87:73:27:19:d7:5e:87:63:23:d3:
31:ae:ca:6a:73:f3:39:3c:d0:6c:9e:6f:e1:8f:de:
10:13:42:ae:b7:d7:1c:95:38:8e:75:3a:de:c2:fd:
91:93:60:82:f3:d5:5a:ef:df:e1:d5:60:3a:1f:5a:
b5:5b:56:e5:ae:33:76:19:35:6c:d2:0e:ad:0b:6d:
b0:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:FE:88:77:40:6D:F1:C2:E0:3B:59:B5:E1:CD:EA:AA:C5:8C:D4:81
X509v3 Authority Key Identifier:
keyid:F5:5E:5E:0D:81:58:93:A6:8A:40:00:08:05:A1:8A:E6:B9:F6:03:C0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9V5eDYFYk6aKQAAIBaGK5rn2A8A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/29f707-48e0-40e4-94ca-8fcb50cad840/1/9V5eDYFYk6aKQAAIBaGK5rn2A8A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:66:50:f8:f6:84:5c:81:a2:34:37:c0:f5:59:66:8f:fa:3e:
6e:ec:2a:58:07:ae:93:f4:d2:86:84:9b:27:b3:bb:57:e8:5c:
76:50:4e:c4:5b:97:67:60:93:4a:09:9a:2f:d0:52:12:82:e4:
24:00:08:60:b4:7c:9d:ef:c5:cc:98:68:af:5d:77:9b:ef:fb:
63:0d:73:1a:af:e0:c6:5e:c0:8c:40:11:8b:86:ea:6e:96:4f:
d4:82:f8:57:03:42:8e:35:31:41:27:96:ca:a9:f8:5c:22:8b:
29:24:ea:74:cb:7b:54:df:b4:bd:d5:04:af:52:10:59:13:2e:
4e:28:d2:6c:c0:2d:24:12:f2:21:e5:d7:25:17:57:62:5a:08:
25:eb:4f:a2:c6:d3:f1:03:0b:dd:34:ab:f1:bf:3a:f3:d9:66:
0a:99:0e:be:f4:b3:5b:70:67:bb:b6:b7:c7:33:17:75:8c:62:
12:cc:28:32:00:e6:e0:dc:d5:ac:c2:99:59:a1:05:6d:a5:f8:
ed:fc:e1:d3:dc:a8:ee:cc:f9:c4:13:81:23:4d:23:e8:f5:02:
74:74:99:45:06:8a:1f:58:f1:fd:5c:3b:21:e6:e7:a4:a5:ce:
d7:d4:ea:3d:08:d3:0c:e1:cb:c0:be:6d:b8:9c:58:87:0c:22:
95:e8:22:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvX7HnH5UUg7ddnDuEorHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1NWU1ZTBkODE1ODkzYTY4YTQwMDAwODA1YTE4YWU2Yjlm
NjAzYzAwHhcNMjUwNjE0MDAwMTEwWhcNMjUwNjE1MDAwMTEwWjAzMTEwLwYDVQQD
EygzNGZlODg3NzQwNmRmMWMyZTAzYjU5YjVlMWNkZWFhYWM1OGNkNDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwiS1DBE47MC0dFBkkXZE3boPwew7
6xEl2S9kWWW09ZMXYrQ30BhtDsPELY65lmaLz2R7GfcOKeoNad0HB4n1orO8nRgm
dO6VDoyb2i/jn9qivdG/3Qz8fQIhONnJGbvrNAe26/d881s1BOgXLiuAS0bvgZ4A
umQqjas4aGZG3iec98d5gpF1zFuMcgAJfJoXlYAcm6HNYYaVgl/8lfGcel0cCPZC
2Kg4YWTILHmrozqgXIuPdSy9LodzJxnXXodjI9Mxrspqc/M5PNBsnm/hj94QE0Ku
t9cclTiOdTrewv2Rk2CC89Va79/h1WA6H1q1W1blrjN2GTVs0g6tC22wBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDT+iHdAbfHC4DtZteHN6qrFjNSBMB8GA1UdIwQY
MBaAFPVeXg2BWJOmikAACAWhiua59gPAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOVY1ZURZRllrNmFLUUFBSUJhR0s1cm4yQThBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy8yOWY3MDctNDhlMC00MGU0LTk0Y2Et
OGZjYjUwY2FkODQwLzEvOVY1ZURZRllrNmFLUUFBSUJhR0s1cm4yQThBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy8yOWY3MDctNDhlMC00MGU0LTk0Y2EtOGZjYjUwY2FkODQw
LzEvOVY1ZURZRllrNmFLUUFBSUJhR0s1cm4yQThBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARGZQ+PaE
XIGiNDfA9Vlmj/o+buwqWAeuk/TShoSbJ7O7V+hcdlBOxFuXZ2CTSgmaL9BSEoLk
JAAIYLR8ne/FzJhor113m+/7Yw1zGq/gxl7AjEARi4bqbpZP1IL4VwNCjjUxQSeW
yqn4XCKLKSTqdMt7VN+0vdUEr1IQWRMuTijSbMAtJBLyIeXXJRdXYloIJetPosbT
8QML3TSr8b8689lmCpkOvvSzW3Bnu7a3xzMXdYxiEswoMgDm4NzVrMKZWaEFbaX4
7fzh09yo7sz5xBOBI00j6PUCdHSZRQaKH1jx/Vw7IebnpKXO19TqPQjTDOHLwL5t
uJxYhwwilegi2g==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:33:28 2025 by rpki-client