Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
File: fHvscgXfiNB3CG9Kj7WuznXLtmE.mft (raw, json)
Hash identifier: 5hqjnx8nyseDQrI5DLaPTAkjMpSYnEss9MqrRd9VLCE=
Subject key identifier: FE:81:4A:B3:36:5C:2F:B3:5B:F9:C7:54:62:F9:42:E9:35:46:F7:B5
Authority key identifier: 7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
Certificate issuer: /CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Certificate serial: 01976A3CD0F82C420838E5473675308CFD90
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
Manifest number: 13E2
Signing time: Fri 13 Jun 2025 17:00:59 +0000
Manifest this update: Fri 13 Jun 2025 17:00:59 +0000
Manifest next update: Sat 14 Jun 2025 17:00:59 +0000
Files and hashes: 1: fHvscgXfiNB3CG9Kj7WuznXLtmE.crl (hash: i1xXUtwOtadVupDniR7DT8GCWzPYqYaciGL3bZCV92Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:3c:d0:f8:2c:42:08:38:e5:47:36:75:30:8c:fd:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7c7bec7205df88d077086f4a8fb5aece75cbb661
Validity
Not Before: Jun 13 17:00:59 2025 GMT
Not After : Jun 14 17:00:59 2025 GMT
Subject: CN=fe814ab3365c2fb35bf9c75462f942e93546f7b5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:3b:dd:c8:7b:0a:a6:25:33:03:15:12:ba:11:
0a:59:6d:d7:f2:82:ed:50:0a:65:44:ac:38:62:ef:
69:21:3e:39:ac:3c:5e:f8:00:f8:be:e3:9a:ac:55:
03:89:4e:4d:ca:7d:cd:d9:bd:e5:89:ba:d9:67:cd:
4f:6d:09:ae:1e:8e:58:c7:ed:9e:7a:a9:ea:b1:32:
28:fe:78:f7:2e:94:10:b5:01:a2:22:57:df:f2:85:
ae:ba:e6:21:b4:17:2b:68:53:a7:f2:48:8f:24:ab:
31:66:8a:7b:a8:cf:07:64:6a:08:7a:74:d6:09:d8:
e0:37:d3:de:b7:25:1b:5f:b9:32:9b:2e:76:99:b7:
c9:57:d5:d8:f7:87:a3:44:09:15:00:41:73:d6:da:
63:c3:10:d4:04:24:dc:f7:8d:55:8a:c2:c3:2e:74:
50:12:ef:5f:56:ff:cd:ad:ef:45:50:3d:35:da:21:
c6:40:e3:b1:ef:d9:27:b6:5e:2c:dc:bc:c8:9d:7f:
9f:97:ad:89:51:52:72:4a:82:0e:e5:a7:8f:4d:3c:
89:f5:b6:79:33:54:c0:26:bd:c2:ac:4a:02:78:06:
a3:26:c5:81:ba:99:49:89:45:d8:1f:1d:c2:b6:e4:
96:52:52:5b:2f:30:9b:6d:d2:55:2c:6c:ba:da:0d:
40:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FE:81:4A:B3:36:5C:2F:B3:5B:F9:C7:54:62:F9:42:E9:35:46:F7:B5
X509v3 Authority Key Identifier:
keyid:7C:7B:EC:72:05:DF:88:D0:77:08:6F:4A:8F:B5:AE:CE:75:CB:B6:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fHvscgXfiNB3CG9Kj7WuznXLtmE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ee/2cd4cc-f498-4dae-9e24-8af66f488bbc/1/fHvscgXfiNB3CG9Kj7WuznXLtmE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:27:6f:f4:b2:b3:eb:6f:7d:cd:5d:6e:c7:31:a1:a7:90:7b:
81:50:1d:10:4a:a7:06:43:d8:c6:61:33:d9:b9:ca:84:cd:67:
40:73:2f:a7:bf:23:ac:2d:39:53:f5:91:c4:94:3a:58:24:9b:
86:a1:b0:d7:79:88:8b:ef:d4:ff:b5:aa:f3:c7:c5:12:96:ce:
48:db:68:65:df:c6:ba:ca:83:fb:73:07:d9:44:13:b5:92:7c:
7b:f2:b0:df:7e:bf:01:4b:66:35:0e:e5:bb:5d:72:a9:f2:29:
9c:7b:99:b9:e0:61:6b:a2:3d:8a:86:b8:49:b6:92:e8:3b:58:
fd:e7:2a:14:40:da:66:c2:ca:c4:34:a4:9e:13:99:03:e8:db:
a3:df:43:33:fa:4f:f0:1c:1f:80:aa:bd:86:7c:f6:94:ec:81:
1e:c4:21:c4:67:2e:35:ad:09:ae:cf:1d:6e:3a:dd:3c:69:5b:
49:f9:b8:ca:07:2a:1b:3e:6f:d7:b0:e8:9a:96:28:b8:74:54:
ad:95:8d:89:3e:18:0d:a4:3a:80:52:3f:61:db:4d:26:7a:8d:
aa:91:c3:5c:75:cd:6b:f4:97:4c:4a:d8:4f:b4:7c:f5:ba:38:
9b:2a:89:f2:77:f6:13:eb:06:63:0d:bb:52:4c:57:70:1f:52:
b8:f0:d2:05
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqPND4LEIIOOVHNnUwjP2QMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdjN2JlYzcyMDVkZjg4ZDA3NzA4NmY0YThmYjVhZWNlNzVj
YmI2NjEwHhcNMjUwNjEzMTcwMDU5WhcNMjUwNjE0MTcwMDU5WjAzMTEwLwYDVQQD
EyhmZTgxNGFiMzM2NWMyZmIzNWJmOWM3NTQ2MmY5NDJlOTM1NDZmN2I1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4jvdyHsKpiUzAxUSuhEKWW3X8oLt
UAplRKw4Yu9pIT45rDxe+AD4vuOarFUDiU5Nyn3N2b3librZZ81PbQmuHo5Yx+2e
eqnqsTIo/nj3LpQQtQGiIlff8oWuuuYhtBcraFOn8kiPJKsxZop7qM8HZGoIenTW
CdjgN9PetyUbX7kymy52mbfJV9XY94ejRAkVAEFz1tpjwxDUBCTc941VisLDLnRQ
Eu9fVv/Nre9FUD012iHGQOOx79kntl4s3LzInX+fl62JUVJySoIO5aePTTyJ9bZ5
M1TAJr3CrEoCeAajJsWBuplJiUXYHx3CtuSWUlJbLzCbbdJVLGy62g1AkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP6BSrM2XC+zW/nHVGL5Quk1Rve1MB8GA1UdIwQY
MBaAFHx77HIF34jQdwhvSo+1rs51y7ZhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZS8yY2Q0Y2MtZjQ5OC00ZGFlLTllMjQt
OGFmNjZmNDg4YmJjLzEvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZS8yY2Q0Y2MtZjQ5OC00ZGFlLTllMjQtOGFmNjZmNDg4YmJj
LzEvZkh2c2NnWGZpTkIzQ0c5S2o3V3V6blhMdG1FLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKydv9LKz
6299zV1uxzGhp5B7gVAdEEqnBkPYxmEz2bnKhM1nQHMvp78jrC05U/WRxJQ6WCSb
hqGw13mIi+/U/7Wq88fFEpbOSNtoZd/GusqD+3MH2UQTtZJ8e/Kw336/AUtmNQ7l
u11yqfIpnHuZueBha6I9ioa4SbaS6DtY/ecqFEDaZsLKxDSknhOZA+jbo99DM/pP
8BwfgKq9hnz2lOyBHsQhxGcuNa0Jrs8dbjrdPGlbSfm4ygcqGz5v17DompYouHRU
rZWNiT4YDaQ6gFI/YdtNJnqNqpHDXHXNa/SXTErYT7R89bo4myqJ8nf2E+sGYw27
UkxXcB9SuPDSBQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:58:34 2025 by rpki-client