Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
File: cdV4WLGdypZzvB9nIZ71Ab873Oo.mft (raw, json)
Hash identifier: YxzUUOfeeLjgm7QshH4IpsZ4Epcm2aIUNk8WmFzGIU8=
Subject key identifier: 7A:60:4B:8D:20:48:5A:63:4E:D7:80:C8:D8:80:6D:96:FF:6B:7A:C5
Authority key identifier: 71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
Certificate issuer: /CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Certificate serial: 0198530E3408E616F3B14825B82AB19F0795
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
Manifest number: 04E4
Signing time: Mon 28 Jul 2025 22:01:35 +0000
Manifest this update: Mon 28 Jul 2025 22:01:35 +0000
Manifest next update: Tue 29 Jul 2025 22:01:35 +0000
Files and hashes: 1: cdV4WLGdypZzvB9nIZ71Ab873Oo.crl (hash: HWTGw9zhB9l5PKPx5w1YUky5iqIip2DJyMdfjvT5tAU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 22:01:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:53:0e:34:08:e6:16:f3:b1:48:25:b8:2a:b1:9f:07:95
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=71d57858b19dca9673bc1f67219ef501bf3bdcea
Validity
Not Before: Jul 28 22:01:35 2025 GMT
Not After : Jul 29 22:01:35 2025 GMT
Subject: CN=7a604b8d20485a634ed780c8d8806d96ff6b7ac5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:cd:45:cb:dc:84:77:66:62:bd:e4:e5:6f:47:
e3:51:b0:5e:35:1c:43:7f:71:59:2b:2c:7d:1f:e7:
11:ec:19:a4:47:eb:b9:aa:62:78:9d:d5:99:17:0b:
29:8b:45:aa:f7:0a:57:68:13:fa:5f:bf:39:7b:f2:
95:d5:42:f0:8c:65:58:93:81:bb:e1:90:b4:07:76:
ab:49:ec:dd:d0:b7:e0:1b:8a:f9:1e:f3:9e:22:88:
47:f2:e3:7f:70:9d:3d:3c:a1:6f:9e:22:85:eb:a6:
68:6a:73:08:02:99:b7:9e:06:c3:8e:ba:ea:50:6f:
d1:3a:f5:a7:73:20:20:a1:0a:a1:26:44:b6:55:63:
31:46:85:55:28:ec:66:06:21:0f:10:04:20:fb:c3:
a3:f3:10:0a:d5:37:99:0e:fc:d7:30:1d:fa:d9:f8:
58:e7:55:0e:ee:a8:36:33:f6:a4:96:44:72:6c:1f:
2d:8a:c7:15:c6:28:fe:52:e6:b6:4d:d8:a5:3c:b9:
a2:07:e3:9d:3a:fb:dc:05:09:a1:1c:d2:de:d5:ff:
77:17:e7:19:8e:a5:db:b2:3a:76:b9:ce:83:9c:8b:
3f:3c:ee:54:4b:69:d0:08:0e:b6:5c:57:ab:c9:36:
fb:80:65:8f:59:25:2f:e8:a4:6e:c3:eb:18:24:8e:
b4:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7A:60:4B:8D:20:48:5A:63:4E:D7:80:C8:D8:80:6D:96:FF:6B:7A:C5
X509v3 Authority Key Identifier:
keyid:71:D5:78:58:B1:9D:CA:96:73:BC:1F:67:21:9E:F5:01:BF:3B:DC:EA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cdV4WLGdypZzvB9nIZ71Ab873Oo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/facf07-7497-446e-9da8-26731e5f806e/1/cdV4WLGdypZzvB9nIZ71Ab873Oo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:ff:f5:f1:41:2d:71:7e:86:cb:58:ed:3f:87:13:dc:79:c3:
60:bd:c0:c0:11:77:0a:d4:36:84:f6:d0:0e:83:8c:17:71:4a:
5c:4f:2b:9d:cd:4c:1b:9f:b5:28:a2:db:38:5b:e5:7f:6f:1e:
50:71:b0:38:69:7a:9a:bd:26:1e:2f:42:8e:37:e8:15:41:12:
b9:ed:cf:d2:25:e8:05:35:9a:c3:f9:cb:09:8f:f2:7c:81:65:
c0:cf:d4:d6:5e:b7:4c:a8:fe:ba:97:33:a9:87:5f:bb:5d:be:
a3:5b:a2:f9:ae:28:e1:6e:20:da:4e:3f:16:46:a2:b6:ad:24:
34:a7:f9:3c:3f:6a:52:ca:2c:ae:ca:20:9b:a6:35:3f:83:53:
06:b7:e0:db:d0:99:1d:31:86:27:67:39:a5:f0:17:a3:dc:fa:
b4:b4:14:50:ea:85:76:2e:fa:60:eb:f5:3a:84:5e:4e:b3:2a:
6e:68:d0:92:5f:6c:9d:30:db:37:8e:5a:d9:f8:3d:4d:31:d3:
d7:4a:73:31:48:bb:e2:1d:56:92:bc:5d:84:13:fa:84:4d:9c:
f5:ab:8c:4d:69:1f:60:7f:da:77:ce:4b:04:8c:4d:44:b8:8d:
c1:07:1c:9c:37:54:3e:32:99:be:9c:8e:68:f1:c8:5b:48:71:
29:c6:31:49
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhTDjQI5hbzsUgluCqxnweVMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxZDU3ODU4YjE5ZGNhOTY3M2JjMWY2NzIxOWVmNTAxYmYz
YmRjZWEwHhcNMjUwNzI4MjIwMTM1WhcNMjUwNzI5MjIwMTM1WjAzMTEwLwYDVQQD
Eyg3YTYwNGI4ZDIwNDg1YTYzNGVkNzgwYzhkODgwNmQ5NmZmNmI3YWM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAms1Fy9yEd2ZiveTlb0fjUbBeNRxD
f3FZKyx9H+cR7BmkR+u5qmJ4ndWZFwspi0Wq9wpXaBP6X785e/KV1ULwjGVYk4G7
4ZC0B3arSezd0LfgG4r5HvOeIohH8uN/cJ09PKFvniKF66ZoanMIApm3ngbDjrrq
UG/ROvWncyAgoQqhJkS2VWMxRoVVKOxmBiEPEAQg+8Oj8xAK1TeZDvzXMB362fhY
51UO7qg2M/aklkRybB8tiscVxij+Uua2TdilPLmiB+OdOvvcBQmhHNLe1f93F+cZ
jqXbsjp2uc6DnIs/PO5US2nQCA62XFeryTb7gGWPWSUv6KRuw+sYJI60aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHpgS40gSFpjTteAyNiAbZb/a3rFMB8GA1UdIwQY
MBaAFHHVeFixncqWc7wfZyGe9QG/O9zqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY2RWNFdMR2R5cFp6dkI5bklaNzFBYjg3M09vLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mYWNmMDctNzQ5Ny00NDZlLTlkYTgt
MjY3MzFlNWY4MDZlLzEvY2RWNFdMR2R5cFp6dkI5bklaNzFBYjg3M09vLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mYWNmMDctNzQ5Ny00NDZlLTlkYTgtMjY3MzFlNWY4MDZl
LzEvY2RWNFdMR2R5cFp6dkI5bklaNzFBYjg3M09vLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqv/18UEt
cX6Gy1jtP4cT3HnDYL3AwBF3CtQ2hPbQDoOMF3FKXE8rnc1MG5+1KKLbOFvlf28e
UHGwOGl6mr0mHi9CjjfoFUESue3P0iXoBTWaw/nLCY/yfIFlwM/U1l63TKj+upcz
qYdfu12+o1ui+a4o4W4g2k4/Fkaitq0kNKf5PD9qUsosrsogm6Y1P4NTBrfg29CZ
HTGGJ2c5pfAXo9z6tLQUUOqFdi76YOv1OoReTrMqbmjQkl9snTDbN45a2fg9TTHT
10pzMUi74h1WkrxdhBP6hE2c9auMTWkfYH/ad85LBIxNRLiNwQccnDdUPjKZvpyO
aPHIW0hxKcYxSQ==
-----END CERTIFICATE-----
Generated at Tue Jul 29 04:13:58 2025 by rpki-client