Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
File: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft (raw, json)
Hash identifier: O2PO3Z42+0EcgncHiJYdHbruALO1de8T+p6lT8Oq3do=
Subject key identifier: B3:41:AD:1C:CF:39:58:0E:37:1B:F6:8F:F2:40:8D:0A:CF:DE:87:C9
Authority key identifier: FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
Certificate issuer: /CN=fb959fb90a158f17de5d8296df954482a8d6211c
Certificate serial: 01975BA4FB5912291C17C2700DCA61CF9A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
Manifest number: 03DF
Signing time: Tue 10 Jun 2025 21:00:28 +0000
Manifest this update: Tue 10 Jun 2025 21:00:28 +0000
Manifest next update: Wed 11 Jun 2025 21:00:28 +0000
Files and hashes: 1: 1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl (hash: JXDHwAGFYx0MeGXJuI+xE1O117uxYRmU1LX4b8R7zUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:a4:fb:59:12:29:1c:17:c2:70:0d:ca:61:cf:9a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fb959fb90a158f17de5d8296df954482a8d6211c
Validity
Not Before: Jun 10 21:00:28 2025 GMT
Not After : Jun 11 21:00:28 2025 GMT
Subject: CN=b341ad1ccf39580e371bf68ff2408d0acfde87c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:94:f7:fb:08:eb:27:14:57:48:49:8f:f2:a2:48:
cc:7c:38:da:08:d9:74:83:0e:de:09:d6:9e:ff:52:
a5:19:7a:c5:1e:bd:1a:4a:d1:c8:28:99:f9:fe:12:
fc:b9:ec:4d:f1:ce:84:f2:41:30:e6:d2:af:c7:c8:
aa:8e:da:df:1c:b1:2f:41:c0:10:1c:a4:40:db:4c:
ee:52:8b:54:e1:19:3e:69:69:20:0a:89:44:ec:a3:
ae:ec:d6:e5:1e:9a:42:16:e8:44:ee:fe:16:94:e4:
01:27:82:71:35:ff:06:e4:37:85:88:9a:d6:47:51:
7d:8b:66:26:e6:e8:ac:ff:ad:69:42:ab:bd:bf:6b:
36:2c:ac:ac:4a:9d:1a:8c:66:7d:d2:f6:83:f8:11:
25:28:5e:c2:c5:14:f8:ad:7b:21:61:1c:64:f3:a6:
b9:3b:d5:57:4d:15:df:03:69:1a:17:8c:92:a5:b9:
4f:b2:b2:1b:61:87:85:34:ab:aa:bd:a5:37:05:7e:
ae:aa:6f:5f:17:6d:24:59:a4:bd:56:d5:cd:00:03:
b0:2b:a8:d3:87:3b:6e:3b:47:ac:83:bf:88:a7:f1:
f9:9c:ef:e0:20:4c:e7:23:97:a9:36:7b:3d:d5:3e:
c7:5e:1d:94:47:7c:0b:86:c1:65:ad:30:95:2d:28:
a5:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:41:AD:1C:CF:39:58:0E:37:1B:F6:8F:F2:40:8D:0A:CF:DE:87:C9
X509v3 Authority Key Identifier:
keyid:FB:95:9F:B9:0A:15:8F:17:DE:5D:82:96:DF:95:44:82:A8:D6:21:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-5WfuQoVjxfeXYKW35VEgqjWIRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/09/e336af-4591-4d35-9536-5abf9a04293e/1/1-5WfuQoVjxfeXYKW35VEgqjWIRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
16:69:1c:a2:c1:05:88:1f:cc:ff:8c:30:4f:53:67:97:de:5d:
07:40:d3:24:95:55:91:cc:b9:39:5e:d5:ce:1f:08:37:43:71:
39:20:97:6b:a3:69:30:57:92:5f:92:74:ee:76:b2:75:f0:c2:
18:f7:2b:93:4f:86:af:cc:57:1b:01:ed:1f:d5:a3:02:14:2a:
64:da:f9:c0:3a:56:0d:b3:fc:15:b5:2c:32:2e:17:31:a7:fd:
e5:fb:fc:ea:df:2a:e9:bb:4c:94:13:d6:84:62:a0:e0:58:cb:
ff:3b:5a:11:c0:2f:ec:7a:b6:de:d5:51:e6:b7:a3:23:7d:7d:
61:fd:2d:f9:81:ff:27:22:c2:cc:29:cf:7f:98:8e:a5:23:98:
e6:48:8c:93:ec:21:1d:bb:28:03:4e:be:c4:0e:b5:1e:98:f4:
ca:6a:ea:59:fa:f1:51:c7:85:8c:94:91:82:c7:d9:e7:e7:12:
90:0d:fa:a9:0a:11:f3:50:a0:a1:4b:67:73:6c:36:38:67:fa:
a1:d8:3d:a7:f0:c3:97:56:d9:01:72:80:fe:dc:ff:7e:e6:d8:
99:fa:d6:63:02:96:12:0a:f8:84:8e:8b:80:7f:90:ec:27:33:
01:ca:e6:c2:e8:b7:9c:70:06:86:95:0e:df:a7:ad:be:a5:b4:
2d:fb:3e:3e
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdbpPtZEikcF8JwDcphz5ptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZiOTU5ZmI5MGExNThmMTdkZTVkODI5NmRmOTU0NDgyYThk
NjIxMWMwHhcNMjUwNjEwMjEwMDI4WhcNMjUwNjExMjEwMDI4WjAzMTEwLwYDVQQD
EyhiMzQxYWQxY2NmMzk1ODBlMzcxYmY2OGZmMjQwOGQwYWNmZGU4N2M5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlPf7COsnFFdISY/yokjMfDjaCNl0
gw7eCdae/1KlGXrFHr0aStHIKJn5/hL8uexN8c6E8kEw5tKvx8iqjtrfHLEvQcAQ
HKRA20zuUotU4Rk+aWkgColE7KOu7NblHppCFuhE7v4WlOQBJ4JxNf8G5DeFiJrW
R1F9i2Ym5uis/61pQqu9v2s2LKysSp0ajGZ90vaD+BElKF7CxRT4rXshYRxk86a5
O9VXTRXfA2kaF4ySpblPsrIbYYeFNKuqvaU3BX6uqm9fF20kWaS9VtXNAAOwK6jT
hztuO0esg7+Ip/H5nO/gIEznI5epNns91T7HXh2UR3wLhsFlrTCVLSiltwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFLNBrRzPOVgONxv2j/JAjQrP3ofJMB8GA1UdIwQY
MBaAFPuVn7kKFY8X3l2Clt+VRIKo1iEcMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS01V2Z1UW9WanhmZVhZS1czNVZFZ3FqV0lSdy5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvMDkvZTMzNmFmLTQ1OTEtNGQzNS05NTM2
LTVhYmY5YTA0MjkzZS8xLzEtNVdmdVFvVmp4ZmVYWUtXMzVWRWdxaldJUncubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxULzA5L2UzMzZhZi00NTkxLTRkMzUtOTUzNi01YWJmOWEwNDI5
M2UvMS8xLTVXZnVRb1ZqeGZlWFlLVzM1VkVncWpXSVJ3LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFmkc
osEFiB/M/4wwT1Nnl95dB0DTJJVVkcy5OV7Vzh8IN0NxOSCXa6NpMFeSX5J07nay
dfDCGPcrk0+Gr8xXGwHtH9WjAhQqZNr5wDpWDbP8FbUsMi4XMaf95fv86t8q6btM
lBPWhGKg4FjL/ztaEcAv7Hq23tVR5rejI319Yf0t+YH/JyLCzCnPf5iOpSOY5kiM
k+whHbsoA06+xA61Hpj0ymrqWfrxUceFjJSRgsfZ5+cSkA36qQoR81CgoUtnc2w2
OGf6odg9p/DDl1bZAXKA/tz/fubYmfrWYwKWEgr4hI6LgH+Q7CczAcrmwui3nHAG
hpUO36etvqW0Lfs+Pg==
-----END CERTIFICATE-----
Generated at Wed Jun 11 04:12:47 2025 by rpki-client