
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
File: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft (raw, json)
Hash identifier: LzNaM6WpHo+oGvNO0DgisSPFntub/bsL+KCMPr4rvqs=
Subject key identifier: 53:A8:1D:12:AB:C9:6D:5F:C6:E5:0B:29:56:63:32:9E:C2:95:BC:3E
Authority key identifier: 91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19
Certificate issuer: /CN=91535398ea57f6ac8c02e659e92f18b138e13619
Certificate serial: 0197469ED3338FC35A97A222570554C9C888
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
Manifest number: 12E3
Signing time: Fri 06 Jun 2025 19:01:43 +0000
Manifest this update: Fri 06 Jun 2025 19:01:43 +0000
Manifest next update: Sat 07 Jun 2025 19:01:43 +0000
Files and hashes: 1: kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl (hash: C3dYrF+9jywrRiGJKjPvnvoFwz7XLCKm0Fp/ap73k6A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl
rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 19:01:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:d3:33:8f:c3:5a:97:a2:22:57:05:54:c9:c8:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=91535398ea57f6ac8c02e659e92f18b138e13619
Validity
Not Before: Jun 6 19:01:43 2025 GMT
Not After : Jun 7 19:01:43 2025 GMT
Subject: CN=53a81d12abc96d5fc6e50b295663329ec295bc3e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:8f:ab:25:b7:f3:d1:d0:33:ec:58:14:33:9e:
64:8b:d2:3e:7a:52:c9:1e:a7:78:0c:6c:73:9f:c0:
e7:50:5c:6b:4c:fa:47:9f:e9:c4:e5:de:8d:65:db:
c9:f0:96:0e:85:b3:ce:b3:a7:80:91:6f:0c:b4:eb:
e0:77:70:24:a9:9f:74:be:8f:b3:2c:94:b3:df:55:
17:13:74:b8:ef:a4:b2:9e:27:c5:41:7b:52:2e:be:
58:77:48:4c:9c:da:95:4d:c1:c5:2e:82:db:cf:22:
22:ed:48:b4:6b:eb:c7:23:34:9b:a5:0d:6c:eb:a6:
89:3d:eb:6b:5f:d1:dd:7b:d1:0b:27:66:6b:1e:71:
7f:4d:57:9a:0a:27:00:8d:9a:72:72:5c:e1:5c:51:
3a:56:2e:a1:fd:bb:72:59:2c:01:90:38:dc:1c:28:
5d:5f:40:11:17:75:6b:66:d9:4b:d0:8d:49:da:42:
7c:d8:c9:69:b7:60:f3:1c:e6:a4:f1:b5:19:72:43:
f0:51:79:a2:97:53:80:09:49:1f:c0:f6:7b:45:56:
00:e8:1b:f4:58:6b:08:1a:67:d3:14:79:55:2c:00:
99:ad:01:41:1f:3c:61:78:7d:e8:ab:e9:8f:1d:84:
8b:90:84:94:9f:ce:24:69:77:47:c9:f4:6c:c4:e6:
b9:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:A8:1D:12:AB:C9:6D:5F:C6:E5:0B:29:56:63:32:9E:C2:95:BC:3E
X509v3 Authority Key Identifier:
keyid:91:53:53:98:EA:57:F6:AC:8C:02:E6:59:E9:2F:18:B1:38:E1:36:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1b/0ca175-895a-452a-bad4-c599f09787f9/1/kVNTmOpX9qyMAuZZ6S8YsTjhNhk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:6a:cf:cd:4c:44:92:95:26:15:49:c9:30:22:ad:3f:d2:e6:
72:94:b0:54:8a:2f:2d:93:0b:75:8f:a5:8b:a2:15:ce:60:5c:
35:ad:1d:a7:51:79:69:92:9f:12:27:f8:2c:c0:57:01:8d:c0:
81:cb:2c:c2:b2:d7:ca:73:c5:68:8f:25:57:c2:72:4f:b8:67:
68:e0:4a:ab:4e:f5:e2:fa:db:58:6c:04:b7:46:19:4d:c2:3a:
49:a4:56:55:13:1a:7a:a5:46:d3:9b:d7:72:7a:54:c6:a8:46:
71:1f:8c:27:b1:b4:c5:1b:0e:af:6a:e2:af:9d:c4:a4:48:8f:
12:54:4a:80:0a:7b:b0:e5:55:50:b0:b1:cb:84:24:de:7a:79:
98:cb:ad:42:00:b1:73:29:01:16:e2:3a:cc:64:82:cb:53:7b:
4e:83:93:8c:67:78:2e:30:c4:34:3a:3f:21:a5:b6:11:ec:2b:
0e:06:ad:98:55:41:88:2f:56:e9:2d:b9:e5:a7:5a:08:ff:30:
ba:e4:26:cf:ca:ac:b8:d0:3c:e6:3c:e7:5d:42:48:f4:19:c3:
e5:23:ae:01:29:06:be:03:dd:00:40:8f:19:93:6e:e8:eb:28:
b6:30:f1:08:5c:70:18:18:5a:83:35:ed:d2:09:dc:6f:f1:14:
c1:ad:03:e3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGntMzj8Nal6IiVwVUyciIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkxNTM1Mzk4ZWE1N2Y2YWM4YzAyZTY1OWU5MmYxOGIxMzhl
MTM2MTkwHhcNMjUwNjA2MTkwMTQzWhcNMjUwNjA3MTkwMTQzWjAzMTEwLwYDVQQD
Eyg1M2E4MWQxMmFiYzk2ZDVmYzZlNTBiMjk1NjYzMzI5ZWMyOTViYzNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt4+rJbfz0dAz7FgUM55ki9I+elLJ
Hqd4DGxzn8DnUFxrTPpHn+nE5d6NZdvJ8JYOhbPOs6eAkW8MtOvgd3AkqZ90vo+z
LJSz31UXE3S476SynifFQXtSLr5Yd0hMnNqVTcHFLoLbzyIi7Ui0a+vHIzSbpQ1s
66aJPetrX9Hde9ELJ2ZrHnF/TVeaCicAjZpyclzhXFE6Vi6h/btyWSwBkDjcHChd
X0ARF3VrZtlL0I1J2kJ82Mlpt2DzHOak8bUZckPwUXmil1OACUkfwPZ7RVYA6Bv0
WGsIGmfTFHlVLACZrQFBHzxheH3oq+mPHYSLkISUn84kaXdHyfRsxOa5vwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFOoHRKryW1fxuULKVZjMp7Clbw+MB8GA1UdIwQY
MBaAFJFTU5jqV/asjALmWekvGLE44TYZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQva1ZOVG1PcFg5cXlNQXVaWjZTOFlzVGpoTmhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYi8wY2ExNzUtODk1YS00NTJhLWJhZDQt
YzU5OWYwOTc4N2Y5LzEva1ZOVG1PcFg5cXlNQXVaWjZTOFlzVGpoTmhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYi8wY2ExNzUtODk1YS00NTJhLWJhZDQtYzU5OWYwOTc4N2Y5
LzEva1ZOVG1PcFg5cXlNQXVaWjZTOFlzVGpoTmhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ2rPzUxE
kpUmFUnJMCKtP9LmcpSwVIovLZMLdY+li6IVzmBcNa0dp1F5aZKfEif4LMBXAY3A
gcsswrLXynPFaI8lV8JyT7hnaOBKq0714vrbWGwEt0YZTcI6SaRWVRMaeqVG05vX
cnpUxqhGcR+MJ7G0xRsOr2rir53EpEiPElRKgAp7sOVVULCxy4Qk3np5mMutQgCx
cykBFuI6zGSCy1N7ToOTjGd4LjDENDo/IaW2EewrDgatmFVBiC9W6S255adaCP8w
uuQmz8qsuNA85jznXUJI9BnD5SOuASkGvgPdAECPGZNu6OsotjDxCFxwGBhagzXt
0gncb/EUwa0D4w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:47:01 2025 by rpki-client