Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
File: _cHyXKV_M_2E0mZg6CMFhW1P9U4.mft (raw, json)
Hash identifier: B3A/i6BIJbSnRBTml3G+JmdoAh7ddcluDcZdooUHAD8=
Subject key identifier: F6:64:34:71:EA:BC:F8:34:C1:16:CA:9C:92:B3:9A:2B:55:31:3B:93
Authority key identifier: FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
Certificate issuer: /CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Certificate serial: 0197526B64E75466B7F1349CBF95238788F3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
Manifest number: 0969
Signing time: Mon 09 Jun 2025 02:00:59 +0000
Manifest this update: Mon 09 Jun 2025 02:00:59 +0000
Manifest next update: Tue 10 Jun 2025 02:00:59 +0000
Files and hashes: 1: _cHyXKV_M_2E0mZg6CMFhW1P9U4.crl (hash: VTn2ZShjTbTmRhU2KmgKAMQF2WgbLaAGtmXva0WzgPY=)
2: wnJRh-4CUXkPHnOwTdcWOQViBQs.roa (hash: +Cv+ZEGLAnj74mF/vlyspj0D6dG5P9lPHFBp/dI5sxM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:6b:64:e7:54:66:b7:f1:34:9c:bf:95:23:87:88:f3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fdc1f25ca57f33fd84d26660e82305856d4ff54e
Validity
Not Before: Jun 9 02:00:59 2025 GMT
Not After : Jun 10 02:00:59 2025 GMT
Subject: CN=f6643471eabcf834c116ca9c92b39a2b55313b93
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:b6:9c:f1:e4:b6:bf:2e:45:2e:75:a6:dd:e5:
1d:66:ec:98:70:1e:e6:d9:31:d5:7d:6f:78:b6:06:
96:73:f6:68:1b:15:c9:0a:2f:81:c2:31:53:dc:4e:
63:c5:54:d6:16:b6:91:2c:0d:50:f6:c3:b8:49:3f:
92:e4:7d:f9:77:66:f4:2e:34:1a:9d:dd:b6:7d:0c:
dc:c2:24:29:93:91:df:0d:7c:d7:b7:93:aa:d7:e9:
af:2b:7a:e3:08:e5:9f:da:73:00:68:4c:64:6b:3e:
fd:2c:d9:bc:07:ad:ad:e9:42:db:c8:6d:1c:f7:e4:
79:9d:f5:27:0f:07:4c:88:68:6f:f6:21:77:86:c7:
63:9a:69:bc:51:46:5f:98:98:67:48:58:ea:3d:8d:
22:b8:01:9a:7f:fa:b5:70:dc:10:94:ec:1b:f7:53:
ad:f1:a3:36:5a:cc:c2:ac:a0:06:9e:83:b7:0d:56:
fd:a4:17:65:45:52:05:0a:6f:fc:02:8e:75:a6:94:
15:6c:36:08:4a:2d:e3:f4:3c:2e:ee:4b:c0:d8:c0:
5a:a3:cd:bb:1a:f9:0a:0c:55:21:3e:2b:ae:71:df:
b7:7b:49:34:1c:f8:f8:64:2f:75:5d:0e:40:32:32:
85:b8:34:73:e6:e3:72:16:6f:d1:34:4b:39:76:47:
05:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F6:64:34:71:EA:BC:F8:34:C1:16:CA:9C:92:B3:9A:2B:55:31:3B:93
X509v3 Authority Key Identifier:
keyid:FD:C1:F2:5C:A5:7F:33:FD:84:D2:66:60:E8:23:05:85:6D:4F:F5:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_cHyXKV_M_2E0mZg6CMFhW1P9U4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/d75869-ae0d-446d-93ed-00a0a328bb73/1/_cHyXKV_M_2E0mZg6CMFhW1P9U4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:81:de:44:dd:56:19:d6:55:50:91:27:36:65:bb:a9:24:2c:
13:0b:20:91:31:3b:67:d9:9e:63:12:5c:fc:7a:01:d8:7c:35:
5f:43:be:23:45:51:01:4d:78:09:5c:05:22:04:43:3a:7e:43:
b1:d0:f9:49:fb:33:c3:69:c0:01:ac:a8:88:b2:6c:e3:18:77:
11:28:08:44:0a:0e:c7:fc:f1:b7:b1:8d:95:bc:8c:49:aa:7d:
af:82:14:95:83:0d:8f:07:20:70:a5:fa:0d:9c:4c:c3:04:e5:
dd:07:5d:66:4c:28:5a:a4:5b:e6:31:d2:70:d2:75:5c:65:89:
d1:6c:e2:fc:bc:17:99:12:90:4a:77:62:7c:9b:cb:3b:0c:a8:
e1:d2:94:60:05:b6:d4:52:ca:1d:0f:e0:45:27:7d:4a:22:77:
8a:b2:e8:d4:49:aa:ff:9f:39:8f:ed:5e:4f:0f:ea:ea:26:68:
48:d4:b5:00:48:71:7a:d0:8d:f4:13:18:d2:1b:84:18:bd:ad:
2a:78:a2:93:92:82:cb:f9:2e:51:d5:bd:f9:d1:99:95:80:72:
0e:f3:3e:36:78:21:e6:b3:9e:49:d1:1e:24:30:42:5b:5f:74:
cb:d5:95:6b:03:33:a7:3b:c7:09:a3:61:77:d5:59:62:c3:a7:
1f:1e:8b:3e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSa2TnVGa38TScv5Ujh4jzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkYzFmMjVjYTU3ZjMzZmQ4NGQyNjY2MGU4MjMwNTg1NmQ0
ZmY1NGUwHhcNMjUwNjA5MDIwMDU5WhcNMjUwNjEwMDIwMDU5WjAzMTEwLwYDVQQD
EyhmNjY0MzQ3MWVhYmNmODM0YzExNmNhOWM5MmIzOWEyYjU1MzEzYjkzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl7ac8eS2vy5FLnWm3eUdZuyYcB7m
2THVfW94tgaWc/ZoGxXJCi+BwjFT3E5jxVTWFraRLA1Q9sO4ST+S5H35d2b0LjQa
nd22fQzcwiQpk5HfDXzXt5Oq1+mvK3rjCOWf2nMAaExkaz79LNm8B62t6ULbyG0c
9+R5nfUnDwdMiGhv9iF3hsdjmmm8UUZfmJhnSFjqPY0iuAGaf/q1cNwQlOwb91Ot
8aM2WszCrKAGnoO3DVb9pBdlRVIFCm/8Ao51ppQVbDYISi3j9Dwu7kvA2MBao827
GvkKDFUhPiuucd+3e0k0HPj4ZC91XQ5AMjKFuDRz5uNyFm/RNEs5dkcFGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPZkNHHqvPg0wRbKnJKzmitVMTuTMB8GA1UdIwQY
MBaAFP3B8lylfzP9hNJmYOgjBYVtT/VOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2NIeVhLVl9NXzJFMG1aZzZDTUZoVzFQOVU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi9kNzU4NjktYWUwZC00NDZkLTkzZWQt
MDBhMGEzMjhiYjczLzEvX2NIeVhLVl9NXzJFMG1aZzZDTUZoVzFQOVU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi9kNzU4NjktYWUwZC00NDZkLTkzZWQtMDBhMGEzMjhiYjcz
LzEvX2NIeVhLVl9NXzJFMG1aZzZDTUZoVzFQOVU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABIHeRN1W
GdZVUJEnNmW7qSQsEwsgkTE7Z9meYxJc/HoB2Hw1X0O+I0VRAU14CVwFIgRDOn5D
sdD5Sfszw2nAAayoiLJs4xh3ESgIRAoOx/zxt7GNlbyMSap9r4IUlYMNjwcgcKX6
DZxMwwTl3QddZkwoWqRb5jHScNJ1XGWJ0Wzi/LwXmRKQSndifJvLOwyo4dKUYAW2
1FLKHQ/gRSd9SiJ3irLo1Emq/585j+1eTw/q6iZoSNS1AEhxetCN9BMY0huEGL2t
Kniik5KCy/kuUdW9+dGZlYByDvM+Nngh5rOeSdEeJDBCW190y9WVawMzpzvHCaNh
d9VZYsOnHx6LPg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 11:55:40 2025 by rpki-client