Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
File: pO9xMrnCMYeert1cpNwysWXwx_M.mft (raw, json)
Hash identifier: G5qTNyjawbFsIYEGIso9S2gM222kGCT1860yHDJYY90=
Subject key identifier: F1:BB:7D:B9:0D:9F:1E:D9:75:C8:49:C8:0B:B2:9A:D2:F5:C1:EA:63
Authority key identifier: A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
Certificate issuer: /CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Certificate serial: 019754C743DEF84B2C034264D393D13E408C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
Manifest number: 0CBB
Signing time: Mon 09 Jun 2025 13:00:34 +0000
Manifest this update: Mon 09 Jun 2025 13:00:34 +0000
Manifest next update: Tue 10 Jun 2025 13:00:34 +0000
Files and hashes: 1: pO9xMrnCMYeert1cpNwysWXwx_M.crl (hash: RrjcwKM5pJpd3kcZw036xdrsr/XYq4NhLZi3GT9Vh5Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:c7:43:de:f8:4b:2c:03:42:64:d3:93:d1:3e:40:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a4ef7132b9c231879eaedd5ca4dc32b165f0c7f3
Validity
Not Before: Jun 9 13:00:34 2025 GMT
Not After : Jun 10 13:00:34 2025 GMT
Subject: CN=f1bb7db90d9f1ed975c849c80bb29ad2f5c1ea63
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:3f:1b:2e:cc:6b:df:5e:34:5d:c1:67:30:7b:
d2:d7:d2:f9:09:f6:99:e1:81:45:a5:9f:71:52:34:
59:b5:e5:9a:eb:eb:95:ce:d7:4a:57:b4:5f:85:c6:
24:68:78:17:66:74:d1:ac:c1:64:d8:30:51:32:09:
2b:af:c7:0b:e1:8d:44:7d:0d:46:85:d9:d6:ad:08:
0b:87:66:e5:e6:03:d7:a1:8c:1c:0e:3f:ba:8e:71:
b5:d4:f1:81:2b:0a:28:b9:ad:a5:d9:3c:a6:16:c6:
35:cb:83:8b:85:75:68:1f:d2:dd:03:8e:0a:a3:1f:
26:d8:84:cd:ba:0e:f4:cc:50:95:d2:f4:8d:9b:f1:
44:4a:c5:c4:7c:0d:04:49:fb:65:d8:aa:19:94:f4:
8d:9d:94:74:e3:df:e5:47:30:a8:07:68:ee:cd:db:
95:9b:5c:5e:34:2b:3e:89:7f:fa:a1:fb:34:6f:05:
27:8b:75:92:8c:1a:a0:0f:cc:c7:f5:b4:7e:d3:95:
d3:42:9e:bc:dd:61:0e:49:8d:ef:70:89:cf:30:4f:
04:cd:12:be:8c:c1:32:41:94:ab:eb:fa:40:a9:f4:
44:64:5f:36:e8:c5:c7:d5:6b:29:7f:cd:1f:7b:1a:
5c:23:7e:96:42:7f:e9:a4:6b:7a:32:35:b4:c4:2a:
f0:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:BB:7D:B9:0D:9F:1E:D9:75:C8:49:C8:0B:B2:9A:D2:F5:C1:EA:63
X509v3 Authority Key Identifier:
keyid:A4:EF:71:32:B9:C2:31:87:9E:AE:DD:5C:A4:DC:32:B1:65:F0:C7:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pO9xMrnCMYeert1cpNwysWXwx_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/06/50e8de-0632-49aa-8b32-bc472b786653/1/pO9xMrnCMYeert1cpNwysWXwx_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:6d:fb:ad:b3:01:c3:60:16:c5:2d:5c:b8:5a:56:fe:12:70:
40:cc:cf:b9:1f:a2:ec:70:4d:98:a6:92:d2:a4:ba:8d:56:e8:
ea:8b:7b:b6:80:02:01:d1:09:f9:d1:4a:7c:27:1c:f6:59:54:
81:66:c7:15:c8:db:ab:c7:b8:8f:db:47:62:8c:d6:79:17:aa:
d4:a0:37:16:4a:8a:ed:b1:86:3c:ec:6a:89:a0:39:60:91:15:
ef:0c:39:82:34:f5:e8:c7:5e:8e:2e:37:37:29:15:17:62:28:
fd:08:55:eb:db:ec:05:b3:32:ec:e4:0a:f7:3e:68:74:02:05:
b9:2a:90:c5:9a:18:5d:40:fb:79:5d:9a:31:85:ff:8e:a5:1c:
7d:5b:7a:3f:f8:51:c1:62:9f:29:11:a1:8c:e1:02:8b:87:8f:
61:68:5c:72:35:03:2d:8f:63:86:a9:4b:92:74:51:f4:4a:8a:
02:2e:ce:c4:1a:61:14:76:33:3f:a9:6b:50:47:bd:97:ed:77:
69:db:e4:02:97:07:cc:53:a6:17:32:9e:b9:8a:6f:26:ca:39:
ef:38:2c:11:af:a2:d7:ba:20:90:18:98:aa:60:71:74:0d:33:
85:b5:7d:0c:39:34:ce:3b:59:cd:9f:36:f7:4a:41:48:6c:5c:
37:db:fd:59
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUx0Pe+EssA0Jk05PRPkCMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0ZWY3MTMyYjljMjMxODc5ZWFlZGQ1Y2E0ZGMzMmIxNjVm
MGM3ZjMwHhcNMjUwNjA5MTMwMDM0WhcNMjUwNjEwMTMwMDM0WjAzMTEwLwYDVQQD
EyhmMWJiN2RiOTBkOWYxZWQ5NzVjODQ5YzgwYmIyOWFkMmY1YzFlYTYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuD8bLsxr3140XcFnMHvS19L5CfaZ
4YFFpZ9xUjRZteWa6+uVztdKV7RfhcYkaHgXZnTRrMFk2DBRMgkrr8cL4Y1EfQ1G
hdnWrQgLh2bl5gPXoYwcDj+6jnG11PGBKwooua2l2TymFsY1y4OLhXVoH9LdA44K
ox8m2ITNug70zFCV0vSNm/FESsXEfA0ESftl2KoZlPSNnZR049/lRzCoB2juzduV
m1xeNCs+iX/6ofs0bwUni3WSjBqgD8zH9bR+05XTQp683WEOSY3vcInPME8EzRK+
jMEyQZSr6/pAqfREZF826MXH1Wspf80fexpcI36WQn/ppGt6MjW0xCrwHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPG7fbkNnx7ZdchJyAuymtL1wepjMB8GA1UdIwQY
MBaAFKTvcTK5wjGHnq7dXKTcMrFl8MfzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcE85eE1ybkNNWWVlcnQxY3BOd3lzV1h3eF9NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNi81MGU4ZGUtMDYzMi00OWFhLThiMzIt
YmM0NzJiNzg2NjUzLzEvcE85eE1ybkNNWWVlcnQxY3BOd3lzV1h3eF9NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNi81MGU4ZGUtMDYzMi00OWFhLThiMzItYmM0NzJiNzg2NjUz
LzEvcE85eE1ybkNNWWVlcnQxY3BOd3lzV1h3eF9NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmG37rbMB
w2AWxS1cuFpW/hJwQMzPuR+i7HBNmKaS0qS6jVbo6ot7toACAdEJ+dFKfCcc9llU
gWbHFcjbq8e4j9tHYozWeReq1KA3FkqK7bGGPOxqiaA5YJEV7ww5gjT16Mdeji43
NykVF2Io/QhV69vsBbMy7OQK9z5odAIFuSqQxZoYXUD7eV2aMYX/jqUcfVt6P/hR
wWKfKRGhjOECi4ePYWhccjUDLY9jhqlLknRR9EqKAi7OxBphFHYzP6lrUEe9l+13
advkApcHzFOmFzKeuYpvJso57zgsEa+i17ogkBiYqmBxdA0zhbV9DDk0zjtZzZ82
90pBSGxcN9v9WQ==
-----END CERTIFICATE-----
Generated at Mon Jun 9 16:47:51 2025 by rpki-client