Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
File: sxU2q-49e1S4MDubxpqKq76XAOQ.mft (raw, json)
Hash identifier: ZkoMFRZzeLMduC1HX+TKKdxE8zv7SfHUYFeeiX/jpSY=
Subject key identifier: CF:61:79:FF:1A:FC:A5:9F:88:23:33:DE:85:99:09:BE:AC:9C:5A:58
Authority key identifier: B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
Certificate issuer: /CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Certificate serial: 0197696177BADD106FA3FA5DFC6F74E575DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
Manifest number: 07A2
Signing time: Fri 13 Jun 2025 13:01:24 +0000
Manifest this update: Fri 13 Jun 2025 13:01:24 +0000
Manifest next update: Sat 14 Jun 2025 13:01:24 +0000
Files and hashes: 1: sxU2q-49e1S4MDubxpqKq76XAOQ.crl (hash: sQQvSJCmALPwBpY9v7r6xByC1nSPVUlStL2FcEnBNic=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:01:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:61:77:ba:dd:10:6f:a3:fa:5d:fc:6f:74:e5:75:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b31536abee3d7b54b8303b9bc69a8aabbe9700e4
Validity
Not Before: Jun 13 13:01:24 2025 GMT
Not After : Jun 14 13:01:24 2025 GMT
Subject: CN=cf6179ff1afca59f882333de859909beac9c5a58
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:69:ff:b6:00:42:fe:c6:11:83:76:cb:4d:59:
01:9a:f0:2f:4b:f9:27:50:27:fd:b3:b8:f4:91:8d:
75:7c:57:10:8e:ab:f7:ec:5c:0a:0f:97:0d:03:0e:
05:48:02:bc:10:a7:9a:d8:c8:fd:93:d8:b4:61:9d:
a4:57:a2:cc:82:6e:8a:fc:5e:e3:d7:08:d0:07:83:
a1:5a:31:ad:81:d5:c3:2f:a9:95:d8:f6:29:60:ef:
72:9b:2a:a7:da:85:20:2e:b9:79:f1:b9:6c:06:fd:
47:69:79:cd:14:e2:73:ac:d7:6c:68:c9:d8:75:e6:
32:b1:67:50:66:58:1d:84:e8:6d:c8:9a:59:87:20:
2f:63:14:ed:ba:24:59:7b:5a:f4:eb:fc:92:3b:e7:
07:0a:16:cf:01:b9:64:43:ed:51:31:65:3c:f5:1f:
0f:74:46:1d:86:a3:d8:80:b5:74:72:30:2c:b4:f8:
5e:31:bb:4f:01:22:48:92:63:58:12:7a:59:5f:57:
40:14:b1:52:cb:67:07:1c:d7:f9:89:9d:dc:22:0f:
c2:66:03:4b:7b:93:6a:26:65:f8:75:6d:5f:91:48:
14:5a:37:64:f5:92:a0:d2:6a:8f:0b:f0:19:ae:7f:
b8:e4:d2:92:7d:3e:f6:9f:ce:50:3c:63:c2:04:f6:
01:f7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CF:61:79:FF:1A:FC:A5:9F:88:23:33:DE:85:99:09:BE:AC:9C:5A:58
X509v3 Authority Key Identifier:
keyid:B3:15:36:AB:EE:3D:7B:54:B8:30:3B:9B:C6:9A:8A:AB:BE:97:00:E4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sxU2q-49e1S4MDubxpqKq76XAOQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/dcf32f-326d-4e40-85a3-ccc877b5a375/1/sxU2q-49e1S4MDubxpqKq76XAOQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:74:ae:6f:22:7d:53:c8:ea:e9:09:64:1b:0c:69:48:c5:ad:
68:70:34:7a:08:d5:4c:83:18:8f:e5:f2:bf:95:5b:76:a2:04:
b3:4f:6a:b2:42:88:ec:7f:22:62:a4:b1:c6:29:9c:b8:a3:00:
4a:34:95:c8:3e:75:a7:46:19:fa:c1:e6:8f:dd:6a:9f:4e:11:
02:7a:9e:7e:fc:4d:bf:2c:d7:b4:82:8f:f4:c5:a7:ca:08:97:
32:c9:3c:24:31:03:4d:6f:08:e7:15:f0:4c:38:44:84:5e:eb:
e1:fb:83:12:45:f9:6d:c0:fa:67:12:66:4d:c3:e5:0c:ed:01:
b9:41:7a:4f:66:62:b1:2f:47:c2:ae:0d:c0:db:68:4d:33:d3:
b3:ce:f7:32:d0:eb:4d:c4:fd:ae:9e:77:56:16:c9:90:36:27:
28:5d:5a:98:48:b0:ee:c1:53:29:09:51:0a:b0:23:0c:14:24:
11:0b:00:d3:d4:20:24:c4:84:05:39:b3:ee:48:3d:8f:62:d1:
3a:cf:55:94:83:64:18:38:1f:0c:0b:31:2e:26:44:d5:07:73:
85:91:be:0e:24:0a:bf:4c:50:85:e1:1a:bd:d0:13:37:10:b5:
4c:37:e5:4e:0d:77:d9:6f:8e:6e:c3:2e:1f:76:31:35:c7:14:
97:2b:ec:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYXe63RBvo/pd/G905XXbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMTUzNmFiZWUzZDdiNTRiODMwM2I5YmM2OWE4YWFiYmU5
NzAwZTQwHhcNMjUwNjEzMTMwMTI0WhcNMjUwNjE0MTMwMTI0WjAzMTEwLwYDVQQD
EyhjZjYxNzlmZjFhZmNhNTlmODgyMzMzZGU4NTk5MDliZWFjOWM1YTU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA32n/tgBC/sYRg3bLTVkBmvAvS/kn
UCf9s7j0kY11fFcQjqv37FwKD5cNAw4FSAK8EKea2Mj9k9i0YZ2kV6LMgm6K/F7j
1wjQB4OhWjGtgdXDL6mV2PYpYO9ymyqn2oUgLrl58blsBv1HaXnNFOJzrNdsaMnY
deYysWdQZlgdhOhtyJpZhyAvYxTtuiRZe1r06/ySO+cHChbPAblkQ+1RMWU89R8P
dEYdhqPYgLV0cjAstPheMbtPASJIkmNYEnpZX1dAFLFSy2cHHNf5iZ3cIg/CZgNL
e5NqJmX4dW1fkUgUWjdk9ZKg0mqPC/AZrn+45NKSfT72n85QPGPCBPYB9wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFM9hef8a/KWfiCMz3oWZCb6snFpYMB8GA1UdIwQY
MBaAFLMVNqvuPXtUuDA7m8aaiqu+lwDkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3hVMnEtNDllMVM0TUR1YnhwcUtxNzZYQU9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9kY2YzMmYtMzI2ZC00ZTQwLTg1YTMt
Y2NjODc3YjVhMzc1LzEvc3hVMnEtNDllMVM0TUR1YnhwcUtxNzZYQU9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9kY2YzMmYtMzI2ZC00ZTQwLTg1YTMtY2NjODc3YjVhMzc1
LzEvc3hVMnEtNDllMVM0TUR1YnhwcUtxNzZYQU9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATnSubyJ9
U8jq6QlkGwxpSMWtaHA0egjVTIMYj+Xyv5VbdqIEs09qskKI7H8iYqSxximcuKMA
SjSVyD51p0YZ+sHmj91qn04RAnqefvxNvyzXtIKP9MWnygiXMsk8JDEDTW8I5xXw
TDhEhF7r4fuDEkX5bcD6ZxJmTcPlDO0BuUF6T2ZisS9Hwq4NwNtoTTPTs873MtDr
TcT9rp53VhbJkDYnKF1amEiw7sFTKQlRCrAjDBQkEQsA09QgJMSEBTmz7kg9j2LR
Os9VlINkGDgfDAsxLiZE1QdzhZG+DiQKv0xQheEavdATNxC1TDflTg132W+ObsMu
H3YxNccUlyvsaQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 20:12:42 2025 by rpki-client