Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
File: SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft (raw, json)
Hash identifier: WqfJcIa9aJbIdwq7J91/mqHBG2ges5/Jz8ATyeyYM8o=
Subject key identifier: C1:23:0C:02:2C:AF:FC:F4:C7:36:BB:4E:B5:A0:1A:10:AB:3A:1B:68
Authority key identifier: 4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
Certificate issuer: /CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Certificate serial: 01976929E30456B5E9070FA32979E74BDFF6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
Manifest number: 12C9
Signing time: Fri 13 Jun 2025 12:00:42 +0000
Manifest this update: Fri 13 Jun 2025 12:00:42 +0000
Manifest next update: Sat 14 Jun 2025 12:00:42 +0000
Files and hashes: 1: SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl (hash: YOc31kEHYbmT3jvb6vU04nDm5S/A+aReynZiViDId0A=)
2: eiFnEmDTPMfL3dAfRXolzkxp_i4.roa (hash: 4dzfRJYq125S/BqKfHbwTEsWNU4YgfgsuuliSEpx9eU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 07:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:29:e3:04:56:b5:e9:07:0f:a3:29:79:e7:4b:df:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b1cdcb90b9832016748a7e268cc1eff239262f8
Validity
Not Before: Jun 13 12:00:42 2025 GMT
Not After : Jun 14 12:00:42 2025 GMT
Subject: CN=c1230c022caffcf4c736bb4eb5a01a10ab3a1b68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c2:b5:18:39:ea:d8:fd:84:8c:8b:ba:d5:04:fe:
70:77:1e:67:e1:51:f0:80:1f:e3:36:7f:63:1c:0f:
cb:08:49:99:08:e2:ce:88:04:85:39:9f:d5:c3:67:
8e:91:2e:39:f2:7f:ba:19:f4:8b:ae:06:3b:ae:81:
0a:6e:6a:7d:0a:0d:6a:4b:ad:48:a7:17:45:70:1f:
f4:38:61:e1:59:ad:5d:32:09:1b:8e:46:8a:0b:8c:
71:5b:d5:b3:71:64:86:1d:6d:7d:e9:fa:ef:f9:22:
52:6e:4e:1e:18:29:5f:91:ec:42:92:f5:12:35:ff:
41:07:9e:d9:d1:15:85:d1:49:ca:af:90:ea:dc:3b:
6f:f3:aa:c2:7a:e3:da:22:e9:f4:64:0a:a3:60:ea:
74:74:1d:34:d0:03:a5:67:05:d6:cc:54:be:49:23:
e5:bf:9e:c0:9f:0c:5d:bf:97:67:74:fc:e8:d3:5e:
1d:73:f3:87:08:7b:e8:ae:21:fd:db:2f:f4:a2:cc:
74:4d:95:34:13:2b:e5:70:f6:4a:91:65:a4:a9:08:
5d:58:12:9f:f9:f1:93:a2:a1:fa:b9:07:d3:ae:3b:
2f:e1:4e:66:22:29:29:35:c1:be:a1:89:fa:cb:35:
5f:83:d8:6d:cc:40:fd:3e:87:bb:ef:34:50:eb:1d:
53:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C1:23:0C:02:2C:AF:FC:F4:C7:36:BB:4E:B5:A0:1A:10:AB:3A:1B:68
X509v3 Authority Key Identifier:
keyid:4B:1C:DC:B9:0B:98:32:01:67:48:A7:E2:68:CC:1E:FF:23:92:62:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SxzcuQuYMgFnSKfiaMwe_yOSYvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/d5daf8-4924-4bec-8518-aefc189fd851/1/SxzcuQuYMgFnSKfiaMwe_yOSYvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:a8:e0:f0:97:17:d2:20:f7:cf:26:27:00:d5:e3:7c:d0:7d:
aa:2b:4a:6b:b4:29:18:c8:12:10:21:08:85:35:0a:31:ab:ae:
33:cd:2b:eb:4d:bb:66:55:42:8e:bc:44:c7:23:53:b0:94:4c:
f8:05:59:fd:43:2f:aa:77:b9:5d:5c:c1:d2:3d:e1:ff:f0:23:
fc:cc:45:1f:44:ac:f3:87:36:9b:0d:ec:de:f3:10:7e:3d:6f:
b0:a3:45:66:d9:4e:c1:3a:23:dc:16:27:54:cc:47:b2:3f:40:
0a:8f:29:cd:76:0b:5e:e0:5a:ce:a0:02:46:c3:cc:55:a0:c8:
fd:61:91:df:bb:d7:12:ff:6b:05:7d:ad:fd:b4:0c:0f:82:6e:
ab:35:51:18:f3:20:21:0f:82:f7:4e:71:75:00:4b:fb:0f:89:
a5:df:8b:32:5b:50:00:49:64:2e:b3:94:b8:d2:94:5b:c1:99:
97:bf:29:db:cf:a7:f1:79:ed:9f:f9:a6:0b:cd:8e:df:bf:13:
6a:7b:87:e0:8c:b5:76:9e:81:ca:29:40:d5:bd:09:04:b1:e7:
cb:81:28:8e:28:39:9f:a0:55:95:fb:73:14:28:6f:c7:f3:ba:
87:09:e3:f9:8a:a6:db:0d:c8:0b:7d:7c:47:7f:c9:fb:27:be:
bd:09:36:ac
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKeMEVrXpBw+jKXnnS9/2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiMWNkY2I5MGI5ODMyMDE2NzQ4YTdlMjY4Y2MxZWZmMjM5
MjYyZjgwHhcNMjUwNjEzMTIwMDQyWhcNMjUwNjE0MTIwMDQyWjAzMTEwLwYDVQQD
EyhjMTIzMGMwMjJjYWZmY2Y0YzczNmJiNGViNWEwMWExMGFiM2ExYjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwrUYOerY/YSMi7rVBP5wdx5n4VHw
gB/jNn9jHA/LCEmZCOLOiASFOZ/Vw2eOkS458n+6GfSLrgY7roEKbmp9Cg1qS61I
pxdFcB/0OGHhWa1dMgkbjkaKC4xxW9WzcWSGHW196frv+SJSbk4eGClfkexCkvUS
Nf9BB57Z0RWF0UnKr5Dq3Dtv86rCeuPaIun0ZAqjYOp0dB000AOlZwXWzFS+SSPl
v57Anwxdv5dndPzo014dc/OHCHvoriH92y/0osx0TZU0EyvlcPZKkWWkqQhdWBKf
+fGToqH6uQfTrjsv4U5mIikpNcG+oYn6yzVfg9htzED9Poe77zRQ6x1TyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMEjDAIsr/z0xza7TrWgGhCrOhtoMB8GA1UdIwQY
MBaAFEsc3LkLmDIBZ0in4mjMHv8jkmL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC9kNWRhZjgtNDkyNC00YmVjLTg1MTgt
YWVmYzE4OWZkODUxLzEvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC9kNWRhZjgtNDkyNC00YmVjLTg1MTgtYWVmYzE4OWZkODUx
LzEvU3h6Y3VRdVlNZ0ZuU0tmaWFNd2VfeU9TWXZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATqjg8JcX
0iD3zyYnANXjfNB9qitKa7QpGMgSECEIhTUKMauuM80r6027ZlVCjrxExyNTsJRM
+AVZ/UMvqne5XVzB0j3h//Aj/MxFH0Ss84c2mw3s3vMQfj1vsKNFZtlOwToj3BYn
VMxHsj9ACo8pzXYLXuBazqACRsPMVaDI/WGR37vXEv9rBX2t/bQMD4JuqzVRGPMg
IQ+C905xdQBL+w+Jpd+LMltQAElkLrOUuNKUW8GZl78p28+n8Xntn/mmC82O378T
anuH4Iy1dp6ByilA1b0JBLHny4Eojig5n6BVlftzFChvx/O6hwnj+Yqm2w3IC318
R3/J+ye+vQk2rA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 17:14:13 2025 by rpki-client