
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
File: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft (raw, json)
Hash identifier: pgr0iU+aT7VQno/OJSmRKMBz+WorzYvS/51pz37umSY=
Subject key identifier: 39:DC:82:1C:62:A9:65:B7:75:C3:B6:58:9B:53:1F:35:F8:52:B3:E5
Authority key identifier: E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
Certificate issuer: /CN=e039649faa8f9de3dae91be799a27e2ca6628789
Certificate serial: 01974A7B2B2FF74148ABAD4D0F24EDDCB805
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 13:01:15 +0000
Manifest this update: Sat 07 Jun 2025 13:01:15 +0000
Manifest next update: Sun 08 Jun 2025 13:01:15 +0000
Files and hashes: 1: 4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl (hash: uU5dRMnIqpIwj8It5V2N6TZKgOfl/wcGOuMchwocIwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:2b:2f:f7:41:48:ab:ad:4d:0f:24:ed:dc:b8:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e039649faa8f9de3dae91be799a27e2ca6628789
Validity
Not Before: Jun 7 13:01:15 2025 GMT
Not After : Jun 8 13:01:15 2025 GMT
Subject: CN=39dc821c62a965b775c3b6589b531f35f852b3e5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:b8:33:95:28:20:60:bd:06:1e:d4:a3:74:2e:
9a:18:47:60:e5:75:ed:13:2c:37:c8:23:19:ff:58:
ee:c8:be:5b:67:3a:15:09:a8:aa:2f:d6:cc:fb:b7:
4a:4f:c7:80:39:50:e6:e8:2b:98:f4:98:85:6a:09:
2d:ed:48:be:96:a3:69:d8:c4:ff:0f:78:92:33:05:
75:9a:0c:c4:9f:a7:ba:3a:20:1e:c8:bf:68:ab:db:
07:76:dd:d7:25:29:89:1b:d4:aa:36:46:cf:9f:48:
17:2d:87:dd:32:53:83:a6:ad:84:a5:2b:b6:83:a7:
b5:f5:f5:93:89:31:ab:b4:b8:9e:0d:27:ac:f3:a7:
5b:a3:75:94:b1:85:05:6a:36:72:e0:42:08:d1:5b:
4e:74:47:0d:0c:3b:33:f3:1a:6f:2e:0d:3d:50:a3:
81:6b:c5:3e:13:d7:cf:0c:25:75:16:fb:ce:83:8f:
e7:2f:0b:1b:47:72:46:39:5c:0c:ef:fb:2a:b8:d0:
f9:47:81:c2:c6:ed:1b:65:08:ef:35:04:e5:9a:a9:
0a:96:12:a9:85:b1:c3:85:c4:84:a5:a7:3b:0a:1d:
1c:eb:33:03:bb:b6:0b:63:3c:0c:72:07:23:10:75:
f9:fe:19:7f:21:40:c0:2a:61:ec:49:99:cf:28:4e:
dd:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:DC:82:1C:62:A9:65:B7:75:C3:B6:58:9B:53:1F:35:F8:52:B3:E5
X509v3 Authority Key Identifier:
keyid:E0:39:64:9F:AA:8F:9D:E3:DA:E9:1B:E7:99:A2:7E:2C:A6:62:87:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Dlkn6qPnePa6RvnmaJ-LKZih4k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2a/2eface-d0a3-4339-8068-d7678a0787d1/1/4Dlkn6qPnePa6RvnmaJ-LKZih4k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:7f:04:fd:6c:d5:27:01:44:bb:cf:4a:4e:73:b7:36:c3:d0:
1d:81:0a:d5:c5:ef:9a:c0:c6:48:9a:ce:9e:71:ad:72:2e:3f:
f3:da:ad:39:e7:78:c8:f4:b8:d1:f3:82:41:29:81:dd:7a:a3:
00:84:9a:03:60:89:07:68:f9:a2:92:ab:79:15:5c:86:b8:3d:
ea:1c:ec:51:cc:ff:c4:a7:4f:0f:b1:ee:40:a1:d0:b6:02:1a:
21:1f:51:93:2c:8b:76:92:30:41:84:e8:8f:ce:f5:12:b2:5c:
30:a1:b8:21:92:99:42:ea:e9:f2:df:97:5c:41:08:43:bf:b8:
5a:b9:90:c7:31:3b:cc:2b:ca:08:00:19:fd:ff:07:f4:d8:0e:
ec:2a:89:9c:5a:f1:d0:42:8d:8f:d0:6c:3b:46:b5:13:28:fb:
ce:52:a5:7c:69:4d:ae:cb:69:19:9c:94:41:14:2d:58:92:d1:
a4:4f:45:c5:a3:4e:94:92:84:f0:56:0d:4a:42:7f:8f:f3:ce:
8f:5a:7a:8b:9c:cf:73:06:fc:8e:cb:61:17:e6:fd:d5:5a:aa:
7d:3b:b1:61:90:70:59:e2:14:7c:90:9b:ac:53:00:cf:e3:11:
58:60:fb:05:33:93:cd:a0:22:18:a0:fa:09:e4:e8:76:da:81:
a8:21:ea:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeysv90FIq61NDyTt3LgFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwMzk2NDlmYWE4ZjlkZTNkYWU5MWJlNzk5YTI3ZTJjYTY2
Mjg3ODkwHhcNMjUwNjA3MTMwMTE1WhcNMjUwNjA4MTMwMTE1WjAzMTEwLwYDVQQD
EygzOWRjODIxYzYyYTk2NWI3NzVjM2I2NTg5YjUzMWYzNWY4NTJiM2U1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyrgzlSggYL0GHtSjdC6aGEdg5XXt
Eyw3yCMZ/1juyL5bZzoVCaiqL9bM+7dKT8eAOVDm6CuY9JiFagkt7Ui+lqNp2MT/
D3iSMwV1mgzEn6e6OiAeyL9oq9sHdt3XJSmJG9SqNkbPn0gXLYfdMlODpq2EpSu2
g6e19fWTiTGrtLieDSes86dbo3WUsYUFajZy4EII0VtOdEcNDDsz8xpvLg09UKOB
a8U+E9fPDCV1FvvOg4/nLwsbR3JGOVwM7/squND5R4HCxu0bZQjvNQTlmqkKlhKp
hbHDhcSEpac7Ch0c6zMDu7YLYzwMcgcjEHX5/hl/IUDAKmHsSZnPKE7dvwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDncghxiqWW3dcO2WJtTHzX4UrPlMB8GA1UdIwQY
MBaAFOA5ZJ+qj53j2ukb55mifiymYoeJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yYS8yZWZhY2UtZDBhMy00MzM5LTgwNjgt
ZDc2NzhhMDc4N2QxLzEvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yYS8yZWZhY2UtZDBhMy00MzM5LTgwNjgtZDc2NzhhMDc4N2Qx
LzEvNERsa242cVBuZVBhNlJ2bm1hSi1MS1ppaDRrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD38E/WzV
JwFEu89KTnO3NsPQHYEK1cXvmsDGSJrOnnGtci4/89qtOed4yPS40fOCQSmB3Xqj
AISaA2CJB2j5opKreRVchrg96hzsUcz/xKdPD7HuQKHQtgIaIR9RkyyLdpIwQYTo
j871ErJcMKG4IZKZQurp8t+XXEEIQ7+4WrmQxzE7zCvKCAAZ/f8H9NgO7CqJnFrx
0EKNj9BsO0a1Eyj7zlKlfGlNrstpGZyUQRQtWJLRpE9FxaNOlJKE8FYNSkJ/j/PO
j1p6i5zPcwb8jsthF+b91VqqfTuxYZBwWeIUfJCbrFMAz+MRWGD7BTOTzaAiGKD6
CeTodtqBqCHqBg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:35:08 2025 by rpki-client