Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
File: SRrcI2V17CPX67-9wgQ5kYAmvvw.mft (raw, json)
Hash identifier: mWxAC9nicoiEwnwKfw4j5SQT0QAJ3hUIxnvzVrAU59c=
Subject key identifier: 5A:A4:E0:D7:F4:F0:3A:46:58:D9:85:37:C9:4F:FD:F0:80:BA:95:15
Authority key identifier: 49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
Certificate issuer: /CN=491adc236575ec23d7ebbfbdc20439918026befc
Certificate serial: 01974C6950406C0FBED5DDC0E50F9FA05FCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
Manifest number: 12A5
Signing time: Sat 07 Jun 2025 22:00:59 +0000
Manifest this update: Sat 07 Jun 2025 22:00:59 +0000
Manifest next update: Sun 08 Jun 2025 22:00:59 +0000
Files and hashes: 1: SRrcI2V17CPX67-9wgQ5kYAmvvw.crl (hash: N4HFq0K+4Obz++MYdbw/8NQbydOy1gz8mDVrxObzr/k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl
rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4c:69:50:40:6c:0f:be:d5:dd:c0:e5:0f:9f:a0:5f:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=491adc236575ec23d7ebbfbdc20439918026befc
Validity
Not Before: Jun 7 22:00:59 2025 GMT
Not After : Jun 8 22:00:59 2025 GMT
Subject: CN=5aa4e0d7f4f03a4658d98537c94ffdf080ba9515
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:ba:1a:b9:78:89:0e:e1:3c:f5:96:0a:fa:36:
d4:76:18:12:37:de:81:54:4d:c5:45:f3:46:f4:de:
54:cb:98:45:3b:5d:45:a4:d4:a0:9a:68:5f:cb:d4:
a3:59:b5:e8:51:9d:09:4f:d3:3a:fe:2b:f3:5c:5a:
b9:4d:83:c1:1a:d5:e5:f1:2d:6c:28:d2:79:04:ee:
52:9b:09:00:ec:8b:ff:27:a1:3f:94:19:87:12:1f:
44:2f:c9:e8:b2:f8:3c:e6:de:1a:f9:4e:df:36:e4:
95:00:34:8f:13:2e:22:ea:7b:26:99:ab:25:7d:da:
b5:46:55:7b:e3:8f:a2:24:aa:e1:5c:bc:11:4b:99:
15:30:17:69:40:36:2c:85:90:5b:1a:d6:49:6e:f2:
38:fe:bf:8c:cd:ef:85:0a:ef:9f:04:f8:7b:85:42:
df:b0:f6:e2:14:b5:eb:52:3a:e2:2e:1d:17:6b:b8:
86:0b:5e:34:3b:32:d4:54:61:e3:4d:3f:31:c0:71:
18:af:cf:5e:9b:bf:28:23:16:6e:9e:64:4b:92:b1:
53:f8:19:4a:3b:6f:f5:dd:c5:a5:ee:55:4d:ec:4f:
30:71:c8:0a:6d:9d:c9:ce:74:d1:8e:c0:68:b7:08:
41:55:ea:61:cf:c0:9f:d9:1d:ee:6e:b9:14:7c:75:
78:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:A4:E0:D7:F4:F0:3A:46:58:D9:85:37:C9:4F:FD:F0:80:BA:95:15
X509v3 Authority Key Identifier:
keyid:49:1A:DC:23:65:75:EC:23:D7:EB:BF:BD:C2:04:39:91:80:26:BE:FC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SRrcI2V17CPX67-9wgQ5kYAmvvw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/07/2e2194-3f91-4939-a830-aa80b4e7f2fd/1/SRrcI2V17CPX67-9wgQ5kYAmvvw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:02:86:7f:0f:52:b4:52:d5:e0:de:c2:ae:76:2c:6f:d9:a9:
93:73:07:20:4d:55:90:41:4b:55:29:e6:4c:d5:e7:c5:87:74:
21:a0:79:b2:36:5c:f4:99:5b:c2:92:08:2a:8b:33:49:b6:7c:
86:28:37:07:2e:f7:50:27:66:ea:f2:22:ab:04:f2:5b:16:01:
6f:e7:9f:96:19:8d:e8:5f:02:5c:27:72:c9:cd:5b:76:4b:1b:
8c:17:a1:d9:0a:94:cf:13:2c:df:2d:ad:d9:20:ff:07:a2:ec:
e0:e9:b8:68:d0:cf:f5:1e:94:d9:ee:e7:d4:6b:80:d0:5b:78:
11:0a:7d:f6:a9:2f:4c:4d:67:77:c0:cc:dc:45:83:65:5c:1f:
14:d4:f7:7d:99:61:ea:af:44:30:28:3f:c5:8d:70:07:59:95:
af:3a:59:26:74:f7:56:78:98:36:56:be:b1:d4:55:0d:36:ee:
b0:a1:19:3d:f6:69:20:fb:d3:01:b5:31:8c:4b:39:7c:3e:d3:
63:cc:f7:04:aa:5c:cd:d4:44:df:92:e7:91:1c:a4:83:aa:10:
7f:75:8d:9e:29:79:1f:0a:90:5b:38:45:3f:42:e2:fd:15:53:
77:3b:51:17:3d:dd:33:9f:55:80:e5:b6:f7:5f:f7:91:c5:fa:
86:d0:8f:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdMaVBAbA++1d3A5Q+foF/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5MWFkYzIzNjU3NWVjMjNkN2ViYmZiZGMyMDQzOTkxODAy
NmJlZmMwHhcNMjUwNjA3MjIwMDU5WhcNMjUwNjA4MjIwMDU5WjAzMTEwLwYDVQQD
Eyg1YWE0ZTBkN2Y0ZjAzYTQ2NThkOTg1MzdjOTRmZmRmMDgwYmE5NTE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyroauXiJDuE89ZYK+jbUdhgSN96B
VE3FRfNG9N5Uy5hFO11FpNSgmmhfy9SjWbXoUZ0JT9M6/ivzXFq5TYPBGtXl8S1s
KNJ5BO5SmwkA7Iv/J6E/lBmHEh9EL8nosvg85t4a+U7fNuSVADSPEy4i6nsmmasl
fdq1RlV744+iJKrhXLwRS5kVMBdpQDYshZBbGtZJbvI4/r+Mze+FCu+fBPh7hULf
sPbiFLXrUjriLh0Xa7iGC140OzLUVGHjTT8xwHEYr89em78oIxZunmRLkrFT+BlK
O2/13cWl7lVN7E8wccgKbZ3JznTRjsBotwhBVephz8Cf2R3ubrkUfHV4VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFqk4Nf08DpGWNmFN8lP/fCAupUVMB8GA1UdIwQY
MBaAFEka3CNldewj1+u/vcIEOZGAJr78MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1JyY0kyVjE3Q1BYNjctOXdnUTVrWUFtdnZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNy8yZTIxOTQtM2Y5MS00OTM5LWE4MzAt
YWE4MGI0ZTdmMmZkLzEvU1JyY0kyVjE3Q1BYNjctOXdnUTVrWUFtdnZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNy8yZTIxOTQtM2Y5MS00OTM5LWE4MzAtYWE4MGI0ZTdmMmZk
LzEvU1JyY0kyVjE3Q1BYNjctOXdnUTVrWUFtdnZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASwKGfw9S
tFLV4N7CrnYsb9mpk3MHIE1VkEFLVSnmTNXnxYd0IaB5sjZc9JlbwpIIKoszSbZ8
hig3By73UCdm6vIiqwTyWxYBb+eflhmN6F8CXCdyyc1bdksbjBeh2QqUzxMs3y2t
2SD/B6Ls4Om4aNDP9R6U2e7n1GuA0Ft4EQp99qkvTE1nd8DM3EWDZVwfFNT3fZlh
6q9EMCg/xY1wB1mVrzpZJnT3VniYNla+sdRVDTbusKEZPfZpIPvTAbUxjEs5fD7T
Y8z3BKpczdRE35LnkRykg6oQf3WNnil5HwqQWzhFP0Li/RVTdztRFz3dM59VgOW2
91/3kcX6htCPeA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 00:25:05 2025 by rpki-client