Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
File: iXlCagvNkDpVJkksxa97TysO2wQ.mft (raw, json)
Hash identifier: CtjmY//vew0KJChYwf8e3IbOO+2441+njgQ5kpU6irE=
Subject key identifier: 12:63:A8:2E:0F:A2:D9:58:A5:4E:EF:4C:F4:54:32:11:CA:E9:D1:59
Authority key identifier: 89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
Certificate issuer: /CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Certificate serial: 0197553532ECB0C83AB2B021F457C0CDD508
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
Manifest number: 0504
Signing time: Mon 09 Jun 2025 15:00:39 +0000
Manifest this update: Mon 09 Jun 2025 15:00:39 +0000
Manifest next update: Tue 10 Jun 2025 15:00:39 +0000
Files and hashes: 1: iXlCagvNkDpVJkksxa97TysO2wQ.crl (hash: CQh6iBIMzP2UzDFGfsjAU8mwr7E2C9nA5DxHYzD396E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:55:35:32:ec:b0:c8:3a:b2:b0:21:f4:57:c0:cd:d5:08
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8979426a0bcd903a5526492cc5af7b4f2b0edb04
Validity
Not Before: Jun 9 15:00:39 2025 GMT
Not After : Jun 10 15:00:39 2025 GMT
Subject: CN=1263a82e0fa2d958a54eef4cf4543211cae9d159
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:68:2b:c2:29:c2:ed:64:99:a3:27:32:68:66:
bf:1b:04:56:7f:f6:9c:18:47:73:33:d0:fb:f6:23:
7d:9e:a8:0d:48:da:b3:0f:0d:68:df:a6:9f:7d:6c:
b3:49:f4:fe:48:a4:a0:58:90:56:cd:dc:1d:78:46:
46:b0:b9:ac:19:40:c1:85:8a:8e:32:c1:4a:b6:0c:
72:76:52:58:25:2e:08:10:31:43:6f:e2:39:87:43:
8e:44:17:71:4e:b5:5a:9b:50:e4:47:6b:9f:a3:f0:
c8:22:87:92:5b:30:af:a0:47:db:fb:44:88:e3:67:
74:09:e7:d3:6f:7e:21:51:71:f8:aa:ea:2d:d5:29:
15:f6:85:7e:11:0d:63:b2:1c:2d:a6:a6:c0:98:4b:
bc:45:c2:d4:28:94:62:36:68:fd:8d:24:a4:13:35:
61:5e:fc:26:ff:fb:3e:6a:db:9f:03:7e:24:bd:a1:
64:29:aa:fa:dc:4d:8e:16:a1:52:a6:58:16:e2:10:
ab:98:ba:69:fa:90:20:d4:4f:47:74:da:88:be:4f:
f5:bf:46:d2:33:72:7e:7a:2f:04:75:44:4e:40:b8:
4a:14:2d:24:1e:dd:6b:d0:5e:0b:05:f9:42:f9:50:
85:9c:73:ee:72:56:36:30:24:dd:e1:42:71:c9:7f:
b3:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
12:63:A8:2E:0F:A2:D9:58:A5:4E:EF:4C:F4:54:32:11:CA:E9:D1:59
X509v3 Authority Key Identifier:
keyid:89:79:42:6A:0B:CD:90:3A:55:26:49:2C:C5:AF:7B:4F:2B:0E:DB:04
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/iXlCagvNkDpVJkksxa97TysO2wQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/993364-d85f-4007-96ec-49ac28142318/1/iXlCagvNkDpVJkksxa97TysO2wQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
27:71:b8:b8:72:28:db:b4:8c:74:14:b9:af:d2:f9:04:9a:53:
a3:65:b8:13:c4:a1:18:28:c3:75:01:c8:54:bb:e1:c3:8b:6d:
23:44:2c:2b:a4:53:ad:a3:45:3f:b7:5f:27:9c:03:04:22:6f:
2c:7c:b0:c8:83:cb:ea:d6:b5:3e:60:2c:78:41:35:48:d2:7d:
92:52:f3:e8:c9:03:7c:e0:35:c5:c6:e7:87:15:0c:28:04:da:
56:f9:97:61:9f:bb:67:2b:c1:fc:03:8b:51:8f:cc:b3:0d:96:
03:51:23:43:3f:80:a8:b1:9e:6a:04:f7:8c:98:78:0f:a6:69:
e8:27:20:12:c3:8e:63:a0:39:c5:6a:bb:c4:0a:d9:1a:2f:02:
f4:5e:b6:a8:3c:20:f8:15:3c:a9:87:64:5a:cb:80:a4:07:15:
4e:a6:20:8a:b4:e6:86:e5:a4:69:b5:a9:9e:2a:93:6b:60:9d:
68:a3:ae:c3:c1:08:1f:46:9c:f6:59:00:a1:f3:47:e9:8b:db:
38:db:46:ea:dd:9a:af:12:04:7b:6b:40:48:3c:de:4e:a2:46:
cb:b5:a3:f9:dc:e5:22:c8:9e:83:3c:4c:9e:bb:85:9a:7c:92:
61:8b:ee:8c:66:69:bd:80:80:3f:ed:18:28:91:37:67:b9:0a:
ac:1d:4b:0b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdVNTLssMg6srAh9FfAzdUIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg5Nzk0MjZhMGJjZDkwM2E1NTI2NDkyY2M1YWY3YjRmMmIw
ZWRiMDQwHhcNMjUwNjA5MTUwMDM5WhcNMjUwNjEwMTUwMDM5WjAzMTEwLwYDVQQD
EygxMjYzYTgyZTBmYTJkOTU4YTU0ZWVmNGNmNDU0MzIxMWNhZTlkMTU5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh2grwinC7WSZoycyaGa/GwRWf/ac
GEdzM9D79iN9nqgNSNqzDw1o36affWyzSfT+SKSgWJBWzdwdeEZGsLmsGUDBhYqO
MsFKtgxydlJYJS4IEDFDb+I5h0OORBdxTrVam1DkR2ufo/DIIoeSWzCvoEfb+0SI
42d0CefTb34hUXH4quot1SkV9oV+EQ1jshwtpqbAmEu8RcLUKJRiNmj9jSSkEzVh
Xvwm//s+atufA34kvaFkKar63E2OFqFSplgW4hCrmLpp+pAg1E9HdNqIvk/1v0bS
M3J+ei8EdUROQLhKFC0kHt1r0F4LBflC+VCFnHPuclY2MCTd4UJxyX+zPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBJjqC4PotlYpU7vTPRUMhHK6dFZMB8GA1UdIwQY
MBaAFIl5QmoLzZA6VSZJLMWve08rDtsEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaVhsQ2Fndk5rRHBWSmtrc3hhOTdUeXNPMndRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi85OTMzNjQtZDg1Zi00MDA3LTk2ZWMt
NDlhYzI4MTQyMzE4LzEvaVhsQ2Fndk5rRHBWSmtrc3hhOTdUeXNPMndRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi85OTMzNjQtZDg1Zi00MDA3LTk2ZWMtNDlhYzI4MTQyMzE4
LzEvaVhsQ2Fndk5rRHBWSmtrc3hhOTdUeXNPMndRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJ3G4uHIo
27SMdBS5r9L5BJpTo2W4E8ShGCjDdQHIVLvhw4ttI0QsK6RTraNFP7dfJ5wDBCJv
LHywyIPL6ta1PmAseEE1SNJ9klLz6MkDfOA1xcbnhxUMKATaVvmXYZ+7ZyvB/AOL
UY/Msw2WA1EjQz+AqLGeagT3jJh4D6Zp6CcgEsOOY6A5xWq7xArZGi8C9F62qDwg
+BU8qYdkWsuApAcVTqYgirTmhuWkabWpniqTa2CdaKOuw8EIH0ac9lkAofNH6Yvb
ONtG6t2arxIEe2tASDzeTqJGy7Wj+dzlIsiegzxMnruFmnySYYvujGZpvYCAP+0Y
KJE3Z7kKrB1LCw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 00:17:53 2025 by rpki-client