Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.mft
File: Us3j-fOkO7GGEIo8M9n2NVeh14w.mft (raw, json)
Hash identifier: ItqNXUWgY9ron/84HPaE936P4TFxPHwBTFYQ+RN153E=
Subject key identifier: F7:B0:01:FF:AD:58:23:54:E6:3E:50:3F:F2:B3:18:EB:B6:59:10:10
Authority key identifier: 52:CD:E3:F9:F3:A4:3B:B1:86:10:8A:3C:33:D9:F6:35:57:A1:D7:8C
Certificate issuer: /CN=52cde3f9f3a43bb186108a3c33d9f63557a1d78c
Certificate serial: 0198477747F0556B76761D816096152B6094
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Us3j-fOkO7GGEIo8M9n2NVeh14w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.mft
Manifest number: B4
Signing time: Sat 26 Jul 2025 16:00:56 +0000
Manifest this update: Sat 26 Jul 2025 16:00:56 +0000
Manifest next update: Sun 27 Jul 2025 16:00:56 +0000
Files and hashes: 1: Us3j-fOkO7GGEIo8M9n2NVeh14w.crl (hash: Jo5wSesK22X2rNPfGcHdHE+e4DO7WrsXI5saoV5p8k0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.mft
rsync://rpki.ripe.net/repository/DEFAULT/Us3j-fOkO7GGEIo8M9n2NVeh14w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 15:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:47:77:47:f0:55:6b:76:76:1d:81:60:96:15:2b:60:94
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=52cde3f9f3a43bb186108a3c33d9f63557a1d78c
Validity
Not Before: Jul 26 16:00:56 2025 GMT
Not After : Jul 27 16:00:56 2025 GMT
Subject: CN=f7b001ffad582354e63e503ff2b318ebb6591010
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:1f:8e:50:39:1b:57:5f:cf:ad:7b:57:59:16:
67:03:4b:b9:c7:4e:fb:c4:8a:67:df:af:aa:b7:5e:
b9:cb:5b:2c:86:7b:c8:63:f2:e2:34:31:1d:cc:7d:
e7:4d:59:93:0d:83:83:17:a7:47:67:87:32:29:65:
89:fd:2e:7a:1e:1a:0d:04:e9:38:89:2b:0a:e6:c4:
44:77:f7:ce:67:3e:04:da:f0:aa:7f:06:c8:07:b8:
dd:c2:6c:1b:5c:6e:b6:60:3e:1c:4e:2c:bc:e2:64:
ca:e5:40:16:47:6c:82:c6:7b:56:4c:54:b5:43:94:
e2:57:55:8d:43:af:db:5b:20:ab:bc:3a:0c:18:77:
32:2e:bc:ea:71:de:79:51:02:01:a0:cf:e8:a9:80:
25:88:16:4e:09:26:a8:a3:f8:29:08:b1:1c:ff:45:
ab:f9:f6:9d:69:08:da:63:62:da:7c:d2:f9:9a:85:
4f:9f:eb:c4:96:16:76:d2:15:ec:71:9e:73:ef:37:
86:69:7d:b0:4d:5e:7a:82:78:95:12:f6:71:c3:51:
89:80:c3:0a:6b:30:12:fb:a8:38:67:b9:31:ca:18:
fa:56:f8:4b:43:ff:9c:6f:f7:38:16:7f:74:09:48:
d0:4e:70:57:ca:c9:2e:33:74:9a:27:69:42:cc:32:
3c:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F7:B0:01:FF:AD:58:23:54:E6:3E:50:3F:F2:B3:18:EB:B6:59:10:10
X509v3 Authority Key Identifier:
keyid:52:CD:E3:F9:F3:A4:3B:B1:86:10:8A:3C:33:D9:F6:35:57:A1:D7:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Us3j-fOkO7GGEIo8M9n2NVeh14w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/6dffd8-e433-441b-bb37-6046c00496bc/1/Us3j-fOkO7GGEIo8M9n2NVeh14w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:9c:f4:2a:71:79:8b:b0:73:83:9a:91:03:0d:66:6a:ff:f9:
e7:1b:7c:c5:78:b9:dc:3c:48:56:98:7f:8f:d4:c9:c8:13:2b:
da:81:88:74:a0:88:78:e9:19:ff:02:7d:89:87:cb:66:70:fb:
fd:77:19:ed:a1:fe:0f:7a:14:c0:3e:73:ac:20:24:ad:06:d1:
a9:b2:d5:59:cc:a8:07:ac:b0:7c:7f:24:a1:1d:10:9e:f5:83:
50:45:c1:24:8d:ce:97:1a:5a:77:fd:06:2f:f6:72:4a:b1:12:
f3:97:20:d0:64:d4:c0:f0:7b:d5:9b:81:7a:dd:d1:03:f5:c6:
c3:5a:2e:a4:ab:de:69:01:74:8e:0a:e5:44:a6:f5:d4:d1:69:
54:96:cf:37:e6:e3:cb:66:88:9b:3d:42:41:94:68:ec:fd:56:
96:da:c2:32:e1:30:d4:9d:2c:1f:af:02:bd:25:9b:05:27:d6:
37:46:c6:4b:8e:f2:e4:da:35:63:4b:40:0d:9e:99:73:4f:42:
0b:65:1b:36:46:06:64:ca:70:13:22:38:16:2a:72:d5:a3:bc:
75:39:02:a5:34:d9:e5:5b:af:d1:84:b5:15:17:67:b4:41:0d:
10:49:1b:86:d9:f2:ff:27:c2:9c:e6:51:ee:1b:bb:e8:44:5b:
8b:df:9e:c4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhHd0fwVWt2dh2BYJYVK2CUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUyY2RlM2Y5ZjNhNDNiYjE4NjEwOGEzYzMzZDlmNjM1NTdh
MWQ3OGMwHhcNMjUwNzI2MTYwMDU2WhcNMjUwNzI3MTYwMDU2WjAzMTEwLwYDVQQD
EyhmN2IwMDFmZmFkNTgyMzU0ZTYzZTUwM2ZmMmIzMThlYmI2NTkxMDEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoB+OUDkbV1/PrXtXWRZnA0u5x077
xIpn36+qt165y1sshnvIY/LiNDEdzH3nTVmTDYODF6dHZ4cyKWWJ/S56HhoNBOk4
iSsK5sREd/fOZz4E2vCqfwbIB7jdwmwbXG62YD4cTiy84mTK5UAWR2yCxntWTFS1
Q5TiV1WNQ6/bWyCrvDoMGHcyLrzqcd55UQIBoM/oqYAliBZOCSaoo/gpCLEc/0Wr
+fadaQjaY2LafNL5moVPn+vElhZ20hXscZ5z7zeGaX2wTV56gniVEvZxw1GJgMMK
azAS+6g4Z7kxyhj6VvhLQ/+cb/c4Fn90CUjQTnBXyskuM3SaJ2lCzDI8RQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPewAf+tWCNU5j5QP/KzGOu2WRAQMB8GA1UdIwQY
MBaAFFLN4/nzpDuxhhCKPDPZ9jVXodeMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVXMzai1mT2tPN0dHRUlvOE05bjJOVmVoMTR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy82ZGZmZDgtZTQzMy00NDFiLWJiMzct
NjA0NmMwMDQ5NmJjLzEvVXMzai1mT2tPN0dHRUlvOE05bjJOVmVoMTR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy82ZGZmZDgtZTQzMy00NDFiLWJiMzctNjA0NmMwMDQ5NmJj
LzEvVXMzai1mT2tPN0dHRUlvOE05bjJOVmVoMTR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsZz0KnF5
i7Bzg5qRAw1mav/55xt8xXi53DxIVph/j9TJyBMr2oGIdKCIeOkZ/wJ9iYfLZnD7
/XcZ7aH+D3oUwD5zrCAkrQbRqbLVWcyoB6ywfH8koR0QnvWDUEXBJI3Olxpad/0G
L/ZySrES85cg0GTUwPB71ZuBet3RA/XGw1oupKveaQF0jgrlRKb11NFpVJbPN+bj
y2aImz1CQZRo7P1WltrCMuEw1J0sH68CvSWbBSfWN0bGS47y5No1Y0tADZ6Zc09C
C2UbNkYGZMpwEyI4Fipy1aO8dTkCpTTZ5Vuv0YS1FRdntEENEEkbhtny/yfCnOZR
7hu76ERbi9+exA==
-----END CERTIFICATE-----
Generated at Sat Jul 26 23:52:54 2025 by rpki-client