Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
File: sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json)
Hash identifier: xSEhlfgzDJDpsAzBLwASjfHGL+CntofhUXZmzmuK0UM=
Subject key identifier: C6:6A:BE:7F:23:5A:F9:0C:C6:D7:62:02:D3:99:7C:19:D8:B1:EF:A1
Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
Certificate issuer: /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Certificate serial: 01975BDCE1A2744EE9A7BE01F86510A79EF0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
Manifest number: 079B
Signing time: Tue 10 Jun 2025 22:01:31 +0000
Manifest this update: Tue 10 Jun 2025 22:01:31 +0000
Manifest next update: Wed 11 Jun 2025 22:01:31 +0000
Files and hashes: 1: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: HC9aJk8eg5PXpR77gNPtFgRCyTiaSO49SaqVNdGsWRA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 20:45:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5b:dc:e1:a2:74:4e:e9:a7:be:01:f8:65:10:a7:9e:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Validity
Not Before: Jun 10 22:01:31 2025 GMT
Not After : Jun 11 22:01:31 2025 GMT
Subject: CN=c66abe7f235af90cc6d76202d3997c19d8b1efa1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:0b:cc:b7:0b:5c:46:2e:07:ae:2a:f6:68:b0:
e3:67:05:0c:53:36:eb:59:db:68:3b:fc:38:1c:af:
06:e0:1e:6e:a4:5c:45:25:eb:b4:31:bc:85:79:78:
1c:7f:5b:a1:f5:b8:2d:c5:1a:ba:98:7f:af:6c:c2:
e0:7f:04:ef:dc:89:71:68:89:7d:c7:93:fd:47:d7:
59:d4:30:02:e2:5b:73:d9:82:e9:bc:c0:fe:5f:09:
37:da:35:f1:cb:d8:2e:29:87:db:08:64:01:c2:b8:
bd:c8:dd:d9:c3:1d:eb:83:e6:2c:11:dc:f8:0d:b8:
d4:ca:95:b1:cb:5a:58:c5:fb:87:af:9b:87:cb:68:
ba:0f:bd:74:3f:b5:32:0f:0a:51:da:59:45:80:5c:
19:d9:70:ee:b8:8b:65:28:32:a2:65:fc:c5:b2:eb:
1f:0d:f9:72:ab:28:bc:03:d5:98:21:84:79:17:cf:
92:a1:02:bf:eb:06:c6:4b:b2:7b:3e:76:81:d1:65:
9f:e7:61:57:3e:f4:73:09:30:c3:ba:b7:61:27:33:
3a:35:18:e6:c1:c5:93:b6:1d:fb:3d:c2:b4:72:fa:
5d:38:8f:18:d7:9e:79:87:05:6b:c2:5a:89:a1:b2:
8e:55:15:f1:34:bf:ec:11:74:ce:b7:31:03:06:fa:
6e:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C6:6A:BE:7F:23:5A:F9:0C:C6:D7:62:02:D3:99:7C:19:D8:B1:EF:A1
X509v3 Authority Key Identifier:
keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:3b:70:67:0e:b1:47:a8:90:b1:8f:9d:fb:df:ec:f0:90:58:
b2:76:15:ac:84:3b:e8:cb:8d:b7:ee:cd:c7:8e:cc:9f:79:61:
71:24:a4:3d:4c:df:6f:68:cb:65:1b:69:46:f2:85:81:e9:94:
4a:8c:d9:56:50:34:6a:5a:4a:12:89:e9:d1:d9:cc:9c:b2:89:
29:a3:97:2a:75:70:4b:b4:fc:10:f5:2e:02:61:cb:e2:3f:e9:
8f:f3:2e:e0:7d:aa:83:a5:4f:05:a5:7c:94:cd:f1:8d:ad:f9:
d3:17:71:e6:49:75:ec:bf:f4:08:b0:c0:9b:ce:f9:d1:52:4c:
22:8c:b1:6d:b5:4e:79:67:d9:0b:79:a3:29:4f:cf:1c:4c:a7:
52:1a:b3:20:fe:7c:bc:ad:d0:66:95:92:be:fb:46:2e:fc:69:
9f:c7:b2:47:1c:1a:c9:76:e7:97:0c:dc:9d:ca:ca:f5:b9:ec:
d1:82:45:4b:17:f4:9e:e5:12:a6:8f:38:69:a0:36:30:89:f7:
25:73:b6:d7:ba:65:9f:54:69:1f:80:db:65:3a:88:56:1a:7e:
41:6f:f5:44:fa:2c:a5:6a:b2:c7:ac:f8:9c:0a:3e:4c:17:97:
05:89:a7:c6:0b:9f:b1:51:63:af:60:9d:16:bd:06:fc:e6:99:
a0:da:20:ed
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdb3OGidE7pp74B+GUQp57wMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMTUzNmFiZWUzZDdiNTRiODMwM2I5YmM2OWE4YWFiYmU5
NzAwZTQwHhcNMjUwNjEwMjIwMTMxWhcNMjUwNjExMjIwMTMxWjAzMTEwLwYDVQQD
EyhjNjZhYmU3ZjIzNWFmOTBjYzZkNzYyMDJkMzk5N2MxOWQ4YjFlZmExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxQvMtwtcRi4Hrir2aLDjZwUMUzbr
WdtoO/w4HK8G4B5upFxFJeu0MbyFeXgcf1uh9bgtxRq6mH+vbMLgfwTv3IlxaIl9
x5P9R9dZ1DAC4ltz2YLpvMD+Xwk32jXxy9guKYfbCGQBwri9yN3Zwx3rg+YsEdz4
DbjUypWxy1pYxfuHr5uHy2i6D710P7UyDwpR2llFgFwZ2XDuuItlKDKiZfzFsusf
Dflyqyi8A9WYIYR5F8+SoQK/6wbGS7J7PnaB0WWf52FXPvRzCTDDurdhJzM6NRjm
wcWTth37PcK0cvpdOI8Y1555hwVrwlqJobKOVRXxNL/sEXTOtzEDBvpukwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMZqvn8jWvkMxtdiAtOZfBnYse+hMB8GA1UdIwQY
MBaAFLMVNqvuPXtUuDA7m8aaiqu+lwDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3hVMnEtNDllMVM0TUR1YnhwcUtxNzZYQU9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kY2YzMmYtMzI2ZC00ZTQwLTg1YTMt
Y2NjODc3YjVhMzc1LzEvc3hVMnEtNDllMVM0TUR1YnhwcUtxNzZYQU9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kY2YzMmYtMzI2ZC00ZTQwLTg1YTMtY2NjODc3YjVhMzc1
LzEvc3hVMnEtNDllMVM0TUR1YnhwcUtxNzZYQU9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiTtwZw6x
R6iQsY+d+9/s8JBYsnYVrIQ76MuNt+7Nx47Mn3lhcSSkPUzfb2jLZRtpRvKFgemU
SozZVlA0alpKEonp0dnMnLKJKaOXKnVwS7T8EPUuAmHL4j/pj/Mu4H2qg6VPBaV8
lM3xja350xdx5kl17L/0CLDAm8750VJMIoyxbbVOeWfZC3mjKU/PHEynUhqzIP58
vK3QZpWSvvtGLvxpn8eyRxwayXbnlwzcncrK9bns0YJFSxf0nuUSpo84aaA2MIn3
JXO217pln1RpH4DbZTqIVhp+QW/1RPospWqyx6z4nAo+TBeXBYmnxgufsVFjr2Cd
Fr0G/OaZoNog7Q==
-----END CERTIFICATE-----
Generated at Wed Jun 11 06:50:28 2025 by rpki-client