Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
File: cI7ctL7wrwFvBYdt285M0kx9968.mft (raw, json)
Hash identifier: uKYffkL/2Zl1uGI3I2BMjUnws1iTfgUYgK2UAr4DvI0=
Subject key identifier: 61:7F:98:8B:B1:49:35:81:AB:AD:1A:0A:2E:5F:D3:98:5E:32:58:8E
Authority key identifier: 70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
Certificate issuer: /CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Certificate serial: 01976F9A1B2EC69E37A09D3B1204CD50B14B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
Manifest number: 03B5
Signing time: Sat 14 Jun 2025 18:00:59 +0000
Manifest this update: Sat 14 Jun 2025 18:00:59 +0000
Manifest next update: Sun 15 Jun 2025 18:00:59 +0000
Files and hashes: 1: cI7ctL7wrwFvBYdt285M0kx9968.crl (hash: unpp7i7UDX4BOLCjEfD/Jf5BJBr44Kki9EAxxbBiKsk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:9a:1b:2e:c6:9e:37:a0:9d:3b:12:04:cd:50:b1:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=708edcb4bef0af016f05876ddbce4cd24c7df7af
Validity
Not Before: Jun 14 18:00:59 2025 GMT
Not After : Jun 15 18:00:59 2025 GMT
Subject: CN=617f988bb1493581abad1a0a2e5fd3985e32588e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:39:0a:00:0c:5c:73:1e:68:05:50:a3:8c:ac:
af:05:9f:58:87:60:a3:49:86:81:98:f7:fc:aa:0e:
44:76:cc:da:ce:f9:30:30:a6:d0:be:cb:a1:e3:f2:
62:4f:19:db:d5:41:8f:07:2b:24:7d:a3:36:f6:f7:
6a:37:38:e7:b1:fd:88:9d:04:cd:8a:07:0c:31:86:
33:00:63:b6:14:1b:a2:81:3d:0b:fb:91:27:58:0c:
5b:4d:b1:33:6f:b9:b3:3d:90:a8:27:77:a1:bd:6f:
80:0e:00:ab:0d:a7:06:2e:ea:c5:6a:70:01:c4:a5:
5f:8d:50:fd:e4:71:02:c5:fe:fe:53:24:ec:97:3e:
b3:5c:b9:53:c9:57:e1:08:9f:d1:1f:6e:d0:4e:9d:
62:58:15:83:22:8b:76:db:68:fb:5a:8e:fd:ca:6f:
ed:94:f6:60:6d:cd:dd:54:ae:d3:e9:65:58:c8:10:
0a:85:ae:c1:3c:0d:2a:d4:da:82:97:bd:bd:b1:12:
64:21:76:69:01:cc:70:9c:00:79:c2:00:fc:83:d3:
a3:5a:66:30:08:40:be:ff:a9:3e:f8:0e:9f:f1:4f:
b5:ed:29:c9:19:e3:56:0c:77:0c:8c:fc:77:e0:00:
0f:24:4b:11:f2:f3:0d:d0:e1:5f:c6:0b:cf:0a:ea:
ab:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:7F:98:8B:B1:49:35:81:AB:AD:1A:0A:2E:5F:D3:98:5E:32:58:8E
X509v3 Authority Key Identifier:
keyid:70:8E:DC:B4:BE:F0:AF:01:6F:05:87:6D:DB:CE:4C:D2:4C:7D:F7:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cI7ctL7wrwFvBYdt285M0kx9968.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/50/ad6062-1858-4dce-9be6-57a247d38170/1/cI7ctL7wrwFvBYdt285M0kx9968.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
64:20:b7:7f:02:39:79:93:d0:f4:91:01:41:4f:3f:36:37:1a:
e6:e0:84:7c:7e:6e:1b:2e:a7:02:fc:7c:ee:87:27:e5:b6:cf:
8f:8b:81:62:94:b9:b2:c9:b1:d5:83:59:ae:6f:29:f3:81:35:
0a:05:e5:bb:eb:ad:2c:83:e8:bc:12:da:39:ec:d0:44:18:93:
26:0f:0a:62:20:8a:33:fd:97:7c:89:63:53:d4:e3:87:ff:6d:
ec:f8:4a:2f:55:55:f0:72:e2:e2:e8:65:06:d3:39:a6:9d:45:
4e:68:3f:71:82:6b:8e:36:1c:ec:09:23:3e:5e:5e:ba:67:00:
d1:da:6f:f0:39:7a:e9:39:45:e2:22:2e:45:7a:79:c6:6c:e3:
df:a8:35:36:b3:58:bb:85:e1:3e:a7:16:e7:b8:9a:f9:09:2c:
ab:ec:f3:c5:46:39:c0:f6:a9:86:8c:c2:90:e2:4b:4b:64:86:
b6:dd:18:5d:9b:32:37:3c:44:32:e5:f0:5c:3b:ff:22:e6:e3:
50:41:48:4f:3c:a4:a3:d7:9e:50:e6:4b:8b:16:92:6b:aa:fc:
f1:16:d5:ba:92:b4:8e:96:b7:1b:79:9a:d2:55:bd:9b:47:67:
44:6b:0c:b3:02:39:c2:21:5b:d7:28:de:7c:91:c2:cc:be:98:
95:42:1a:8a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmhsuxp43oJ07EgTNULFLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwOGVkY2I0YmVmMGFmMDE2ZjA1ODc2ZGRiY2U0Y2QyNGM3
ZGY3YWYwHhcNMjUwNjE0MTgwMDU5WhcNMjUwNjE1MTgwMDU5WjAzMTEwLwYDVQQD
Eyg2MTdmOTg4YmIxNDkzNTgxYWJhZDFhMGEyZTVmZDM5ODVlMzI1ODhlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqjkKAAxccx5oBVCjjKyvBZ9Yh2Cj
SYaBmPf8qg5EdszazvkwMKbQvsuh4/JiTxnb1UGPByskfaM29vdqNzjnsf2InQTN
igcMMYYzAGO2FBuigT0L+5EnWAxbTbEzb7mzPZCoJ3ehvW+ADgCrDacGLurFanAB
xKVfjVD95HECxf7+UyTslz6zXLlTyVfhCJ/RH27QTp1iWBWDIot222j7Wo79ym/t
lPZgbc3dVK7T6WVYyBAKha7BPA0q1NqCl729sRJkIXZpAcxwnAB5wgD8g9OjWmYw
CEC+/6k++A6f8U+17SnJGeNWDHcMjPx34AAPJEsR8vMN0OFfxgvPCuqrLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGF/mIuxSTWBq60aCi5f05heMliOMB8GA1UdIwQY
MBaAFHCO3LS+8K8BbwWHbdvOTNJMffevMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYt
NTdhMjQ3ZDM4MTcwLzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MC9hZDYwNjItMTg1OC00ZGNlLTliZTYtNTdhMjQ3ZDM4MTcw
LzEvY0k3Y3RMN3dyd0Z2QllkdDI4NU0wa3g5OTY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZCC3fwI5
eZPQ9JEBQU8/Njca5uCEfH5uGy6nAvx87ocn5bbPj4uBYpS5ssmx1YNZrm8p84E1
CgXlu+utLIPovBLaOezQRBiTJg8KYiCKM/2XfIljU9Tjh/9t7PhKL1VV8HLi4uhl
BtM5pp1FTmg/cYJrjjYc7AkjPl5eumcA0dpv8Dl66TlF4iIuRXp5xmzj36g1NrNY
u4XhPqcW57ia+Qksq+zzxUY5wPaphozCkOJLS2SGtt0YXZsyNzxEMuXwXDv/Iubj
UEFITzyko9eeUOZLixaSa6r88RbVupK0jpa3G3ma0lW9m0dnRGsMswI5wiFb1yje
fJHCzL6YlUIaig==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:08:06 2025 by rpki-client