Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
File: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft (raw, json)
Hash identifier: IsAt2LrFaZnYI4KMDcg1Vsq0QHPZFeJm/xOvYxSo+bg=
Subject key identifier: 05:3A:31:61:7C:95:D6:F3:A6:1C:CF:A6:2B:A3:46:B1:C7:D4:CB:DF
Authority key identifier: 21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
Certificate issuer: /CN=21de5947d9bdf6b08156a939bd20d93492c71104
Certificate serial: 01974EC5794D5D120A31DC2E0D199DD702EF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
Manifest number: 0B59
Signing time: Sun 08 Jun 2025 09:00:53 +0000
Manifest this update: Sun 08 Jun 2025 09:00:53 +0000
Manifest next update: Mon 09 Jun 2025 09:00:53 +0000
Files and hashes: 1: Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl (hash: X8tl59lX3h7Hnoa9n68ywO3Gru8LKSZ9/FE9fb18TLY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 09:00:53 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:c5:79:4d:5d:12:0a:31:dc:2e:0d:19:9d:d7:02:ef
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=21de5947d9bdf6b08156a939bd20d93492c71104
Validity
Not Before: Jun 8 09:00:53 2025 GMT
Not After : Jun 9 09:00:53 2025 GMT
Subject: CN=053a31617c95d6f3a61ccfa62ba346b1c7d4cbdf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:6c:82:00:8b:f5:bc:c4:bc:b0:47:6f:aa:9b:
6c:a3:ba:13:08:db:fc:06:72:52:4f:fd:79:0f:8a:
e0:17:2f:d0:e5:87:3b:82:1e:ef:30:7c:73:86:b4:
10:db:56:06:3b:99:8e:5e:05:c6:2f:2c:18:a6:39:
c5:84:fe:21:55:d3:49:3e:5e:4d:f6:1b:e9:95:d2:
f4:b7:cf:5b:9d:91:9c:54:97:0f:44:25:6d:75:9a:
49:fb:84:44:f1:5a:45:5b:a8:89:02:2f:af:11:03:
44:7a:55:19:fb:76:8b:4f:e0:9a:e2:2e:a6:6b:42:
03:d2:32:85:73:06:80:3e:5f:67:bf:6c:b0:06:84:
0f:58:78:73:0d:2d:3e:06:78:2f:2e:e4:03:db:2d:
4c:77:8c:3b:c3:1f:08:84:54:79:ff:a1:07:f0:8b:
bf:d3:65:fe:24:5c:a5:96:7b:87:f2:47:a7:5d:48:
89:0f:02:a7:c9:9f:d0:1d:01:8d:1a:89:97:81:e8:
5e:73:a7:36:5e:26:f3:4c:f2:18:65:b6:a3:72:01:
f5:d1:02:72:8f:e5:51:15:ef:bc:23:e6:e0:ac:a0:
99:af:aa:b6:a7:85:28:96:af:04:08:21:d5:cd:51:
45:ca:53:e4:06:50:2f:3c:e0:98:cf:bd:16:fd:11:
42:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
05:3A:31:61:7C:95:D6:F3:A6:1C:CF:A6:2B:A3:46:B1:C7:D4:CB:DF
X509v3 Authority Key Identifier:
keyid:21:DE:59:47:D9:BD:F6:B0:81:56:A9:39:BD:20:D9:34:92:C7:11:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/87e558-093f-4150-928d-48233117178c/1/Id5ZR9m99rCBVqk5vSDZNJLHEQQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:41:82:ad:5e:ec:30:51:60:57:1d:37:f6:cc:6f:d9:f1:8e:
ff:42:f2:f6:a6:13:b3:e2:19:93:14:b7:dd:aa:7c:8a:96:f4:
7e:fc:ab:6c:d9:13:d6:62:18:2d:c8:fe:40:18:69:a1:b9:44:
e0:1e:2b:eb:87:ac:aa:dd:75:ee:f1:d9:f0:41:cf:51:e3:68:
12:08:01:dd:62:cf:6c:2c:19:6c:ca:b3:fb:b5:a3:24:c1:6c:
72:48:c8:fd:c2:86:33:81:96:86:74:e3:64:52:eb:fb:fb:8b:
c3:dc:94:b2:34:36:05:b4:2f:40:ef:66:67:68:62:e2:35:a0:
37:c2:4f:35:21:97:91:06:4d:dc:5c:58:64:06:23:a9:ad:f7:
bc:38:66:20:7f:02:14:6e:fd:1a:bc:5f:1f:b8:28:c4:76:f6:
0f:7a:b0:0d:af:fd:27:3f:0e:88:f7:e5:c5:9d:6d:53:67:63:
13:58:06:c5:54:ec:7e:3c:02:5d:07:3d:3c:b1:27:4a:f0:6e:
b1:75:22:89:16:81:b1:54:c1:0a:9b:ae:c7:8c:c8:f8:42:b5:
4f:cd:7f:10:5d:fc:73:5c:63:70:6c:19:27:86:c9:7e:49:73:
37:6e:6c:26:1d:ef:f0:ac:91:de:0f:b2:09:c9:3f:e9:a5:58:
db:27:fe:71
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOxXlNXRIKMdwuDRmd1wLvMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIxZGU1OTQ3ZDliZGY2YjA4MTU2YTkzOWJkMjBkOTM0OTJj
NzExMDQwHhcNMjUwNjA4MDkwMDUzWhcNMjUwNjA5MDkwMDUzWjAzMTEwLwYDVQQD
EygwNTNhMzE2MTdjOTVkNmYzYTYxY2NmYTYyYmEzNDZiMWM3ZDRjYmRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjmyCAIv1vMS8sEdvqptso7oTCNv8
BnJST/15D4rgFy/Q5Yc7gh7vMHxzhrQQ21YGO5mOXgXGLywYpjnFhP4hVdNJPl5N
9hvpldL0t89bnZGcVJcPRCVtdZpJ+4RE8VpFW6iJAi+vEQNEelUZ+3aLT+Ca4i6m
a0ID0jKFcwaAPl9nv2ywBoQPWHhzDS0+BngvLuQD2y1Md4w7wx8IhFR5/6EH8Iu/
02X+JFyllnuH8kenXUiJDwKnyZ/QHQGNGomXgehec6c2XibzTPIYZbajcgH10QJy
j+VRFe+8I+bgrKCZr6q2p4Uolq8ECCHVzVFFylPkBlAvPOCYz70W/RFCGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAU6MWF8ldbzphzPpiujRrHH1MvfMB8GA1UdIwQY
MBaAFCHeWUfZvfawgVapOb0g2TSSxxEEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi84N2U1NTgtMDkzZi00MTUwLTkyOGQt
NDgyMzMxMTcxNzhjLzEvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi84N2U1NTgtMDkzZi00MTUwLTkyOGQtNDgyMzMxMTcxNzhj
LzEvSWQ1WlI5bTk5ckNCVnFrNXZTRFpOSkxIRVFRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUkGCrV7s
MFFgVx039sxv2fGO/0Ly9qYTs+IZkxS33ap8ipb0fvyrbNkT1mIYLcj+QBhpoblE
4B4r64esqt117vHZ8EHPUeNoEggB3WLPbCwZbMqz+7WjJMFsckjI/cKGM4GWhnTj
ZFLr+/uLw9yUsjQ2BbQvQO9mZ2hi4jWgN8JPNSGXkQZN3FxYZAYjqa33vDhmIH8C
FG79GrxfH7goxHb2D3qwDa/9Jz8OiPflxZ1tU2djE1gGxVTsfjwCXQc9PLEnSvBu
sXUiiRaBsVTBCpuux4zI+EK1T81/EF38c1xjcGwZJ4bJfklzN25sJh3v8KyR3g+y
Cck/6aVY2yf+cQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 16:48:33 2025 by rpki-client