Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e5/06f9a3-8fca-414e-b5ad-ca36d98b3c4d/1/U_8iLUoiYwLL8QBoyqb0xB97scs.mft
File: U_8iLUoiYwLL8QBoyqb0xB97scs.mft (raw, json)
Hash identifier: rbCj36bleqej/HoucE9XSAQIyqcE37cybJglINg12mI=
Subject key identifier: 7F:C6:16:84:9B:56:0F:63:AC:18:09:52:3A:92:E9:47:56:F1:9D:B9
Authority key identifier: 53:FF:22:2D:4A:22:63:02:CB:F1:00:68:CA:A6:F4:C4:1F:7B:B1:CB
Certificate issuer: /CN=53ff222d4a226302cbf10068caa6f4c41f7bb1cb
Certificate serial: 0197711AA32D43537DC9030CBDBFDE60E440
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U_8iLUoiYwLL8QBoyqb0xB97scs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e5/06f9a3-8fca-414e-b5ad-ca36d98b3c4d/1/U_8iLUoiYwLL8QBoyqb0xB97scs.mft
Manifest number: 0137
Signing time: Sun 15 Jun 2025 01:01:00 +0000
Manifest this update: Sun 15 Jun 2025 01:01:00 +0000
Manifest next update: Mon 16 Jun 2025 01:01:00 +0000
Files and hashes: 1: U_8iLUoiYwLL8QBoyqb0xB97scs.crl (hash: afBqL7OJJjPnWWJMSW2Xk0KfSPFZq4LMiO8AuCDLwXw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e5/06f9a3-8fca-414e-b5ad-ca36d98b3c4d/1/U_8iLUoiYwLL8QBoyqb0xB97scs.crl
rsync://rpki.ripe.net/repository/DEFAULT/e5/06f9a3-8fca-414e-b5ad-ca36d98b3c4d/1/U_8iLUoiYwLL8QBoyqb0xB97scs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U_8iLUoiYwLL8QBoyqb0xB97scs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1a:a3:2d:43:53:7d:c9:03:0c:bd:bf:de:60:e4:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53ff222d4a226302cbf10068caa6f4c41f7bb1cb
Validity
Not Before: Jun 15 01:01:00 2025 GMT
Not After : Jun 16 01:01:00 2025 GMT
Subject: CN=7fc616849b560f63ac1809523a92e94756f19db9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:e4:c4:02:12:b5:5d:ce:1d:97:4c:82:9a:ce:
0b:32:0d:d4:d6:5c:4d:01:68:7f:97:02:6b:12:a0:
b9:d5:33:7e:6e:4d:86:4e:af:e2:92:ef:7b:b9:e4:
dd:88:a2:a4:e1:70:ff:9b:49:2d:e6:99:16:d2:27:
b9:9e:9d:e6:c9:27:1d:d6:6e:52:32:99:8e:d7:07:
aa:53:c7:1d:0b:4c:30:43:69:10:12:ba:b5:f0:b0:
81:6e:e4:6d:45:6d:da:6b:ea:84:c2:c9:a7:b1:08:
3e:21:e9:8a:d1:ac:9a:8a:fd:48:6e:bf:d7:ba:64:
72:d9:9e:66:00:c1:23:98:3f:9c:f4:b1:c0:4a:24:
4a:ba:c2:67:77:79:5f:96:ea:f3:b1:20:cc:3d:96:
25:a0:a8:ce:04:c0:23:1b:57:de:0a:d5:6f:98:0b:
ef:56:45:4c:f3:47:26:05:3e:89:c4:e5:69:e2:20:
16:45:63:b7:4c:82:97:0c:39:cc:a9:c8:9e:84:5d:
2b:b1:0c:18:94:e5:a4:93:0b:d3:e9:9e:95:d3:53:
eb:af:0a:4a:f4:c2:3a:3c:ea:5d:24:0c:88:96:8c:
26:10:a4:03:c7:d7:0f:01:ae:ec:09:32:a1:25:70:
ce:5b:e9:4d:72:ce:a7:1d:3c:23:ec:0b:5b:20:c8:
1c:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7F:C6:16:84:9B:56:0F:63:AC:18:09:52:3A:92:E9:47:56:F1:9D:B9
X509v3 Authority Key Identifier:
keyid:53:FF:22:2D:4A:22:63:02:CB:F1:00:68:CA:A6:F4:C4:1F:7B:B1:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U_8iLUoiYwLL8QBoyqb0xB97scs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/06f9a3-8fca-414e-b5ad-ca36d98b3c4d/1/U_8iLUoiYwLL8QBoyqb0xB97scs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e5/06f9a3-8fca-414e-b5ad-ca36d98b3c4d/1/U_8iLUoiYwLL8QBoyqb0xB97scs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:d7:1a:9a:26:07:c6:2c:cd:13:96:41:6e:a0:0d:f2:1c:11:
5d:92:46:37:16:f0:df:41:cf:b3:2f:1f:3e:ef:ae:b4:35:bf:
ca:24:4c:3c:6e:4a:5b:90:bd:6f:c3:21:5e:29:b6:c5:e8:88:
eb:10:60:71:99:b6:d9:0e:8e:12:e0:4e:b8:89:84:cd:bc:4c:
fa:f0:0b:5d:f3:16:c1:83:46:12:bf:94:c2:50:05:75:7a:53:
81:bc:ca:77:fb:26:d3:b4:bc:ac:3b:25:86:ee:58:a1:a9:27:
81:97:24:74:f7:2e:da:f9:59:29:24:1b:c6:c8:97:4d:ad:40:
5b:7a:1d:00:9a:8c:e8:87:27:6d:70:af:58:ce:aa:41:9c:30:
53:7b:56:76:cc:90:c6:e1:f8:36:b8:90:8f:21:4d:c1:b0:ee:
2a:43:f9:79:46:8a:fc:e4:ba:05:cc:6e:39:13:25:69:1d:d7:
50:5f:1f:75:b4:cd:da:cf:7b:17:37:62:e4:7d:a3:ca:7f:e4:
ab:42:0f:d6:60:15:d9:34:5e:4c:0c:06:2b:08:e1:9e:d6:97:
a8:00:d5:d1:ce:e5:49:61:5f:2f:13:0b:8b:27:1f:5b:58:59:
11:a7:4f:06:c6:2f:61:cd:f5:44:88:4a:68:d8:30:86:ab:fb:
e9:2d:6c:12
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxGqMtQ1N9yQMMvb/eYORAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzZmYyMjJkNGEyMjYzMDJjYmYxMDA2OGNhYTZmNGM0MWY3
YmIxY2IwHhcNMjUwNjE1MDEwMTAwWhcNMjUwNjE2MDEwMTAwWjAzMTEwLwYDVQQD
Eyg3ZmM2MTY4NDliNTYwZjYzYWMxODA5NTIzYTkyZTk0NzU2ZjE5ZGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAseTEAhK1Xc4dl0yCms4LMg3U1lxN
AWh/lwJrEqC51TN+bk2GTq/iku97ueTdiKKk4XD/m0kt5pkW0ie5np3myScd1m5S
MpmO1weqU8cdC0wwQ2kQErq18LCBbuRtRW3aa+qEwsmnsQg+IemK0ayaiv1Ibr/X
umRy2Z5mAMEjmD+c9LHASiRKusJnd3lflurzsSDMPZYloKjOBMAjG1feCtVvmAvv
VkVM80cmBT6JxOVp4iAWRWO3TIKXDDnMqciehF0rsQwYlOWkkwvT6Z6V01PrrwpK
9MI6POpdJAyIlowmEKQDx9cPAa7sCTKhJXDOW+lNcs6nHTwj7AtbIMgcDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH/GFoSbVg9jrBgJUjqS6UdW8Z25MB8GA1UdIwQY
MBaAFFP/Ii1KImMCy/EAaMqm9MQfe7HLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVV84aUxVb2lZd0xMOFFCb3lxYjB4Qjk3c2NzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNS8wNmY5YTMtOGZjYS00MTRlLWI1YWQt
Y2EzNmQ5OGIzYzRkLzEvVV84aUxVb2lZd0xMOFFCb3lxYjB4Qjk3c2NzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNS8wNmY5YTMtOGZjYS00MTRlLWI1YWQtY2EzNmQ5OGIzYzRk
LzEvVV84aUxVb2lZd0xMOFFCb3lxYjB4Qjk3c2NzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS9camiYH
xizNE5ZBbqAN8hwRXZJGNxbw30HPsy8fPu+utDW/yiRMPG5KW5C9b8MhXim2xeiI
6xBgcZm22Q6OEuBOuImEzbxM+vALXfMWwYNGEr+UwlAFdXpTgbzKd/sm07S8rDsl
hu5YoakngZckdPcu2vlZKSQbxsiXTa1AW3odAJqM6IcnbXCvWM6qQZwwU3tWdsyQ
xuH4NriQjyFNwbDuKkP5eUaK/OS6BcxuORMlaR3XUF8fdbTN2s97Fzdi5H2jyn/k
q0IP1mAV2TReTAwGKwjhntaXqADV0c7lSWFfLxMLiycfW1hZEadPBsYvYc31RIhK
aNgwhqv76S1sEg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:20 2025 by rpki-client