Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
File: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft (raw, json)
Hash identifier: i+5wYujTFyaOxd0iWrXpdLz6TgQ/GND667MyDaaA3nc=
Subject key identifier: B7:8D:AD:91:B1:13:31:F0:A7:91:34:29:B7:52:9B:0E:17:E0:69:F3
Authority key identifier: E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
Certificate issuer: /CN=e385733213b34236019a140ff19c5398ed71730e
Certificate serial: 0197647143352BC71ABF20FED9F5D18EFC01
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
Manifest number: 0C5C
Signing time: Thu 12 Jun 2025 14:00:33 +0000
Manifest this update: Thu 12 Jun 2025 14:00:33 +0000
Manifest next update: Fri 13 Jun 2025 14:00:33 +0000
Files and hashes: 1: 44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl (hash: IBp58p54mDa32CDzdK1yRGthfQENEoF21onQYZYkqpw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:64:71:43:35:2b:c7:1a:bf:20:fe:d9:f5:d1:8e:fc:01
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e385733213b34236019a140ff19c5398ed71730e
Validity
Not Before: Jun 12 14:00:33 2025 GMT
Not After : Jun 13 14:00:33 2025 GMT
Subject: CN=b78dad91b11331f0a7913429b7529b0e17e069f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:36:eb:83:bc:16:f6:8a:c4:a4:ba:ae:a3:2c:
50:27:90:fd:48:2b:91:7c:72:2e:61:be:78:5e:66:
59:52:5c:35:18:4d:4d:4a:92:c7:8e:ff:cc:9f:b9:
36:09:12:50:0e:f1:c0:59:bd:8b:d1:58:6f:cd:f8:
14:01:43:9f:9c:36:4d:d3:0b:76:e1:57:ff:e0:b4:
42:20:f3:92:25:03:9d:2a:e4:9e:72:a1:74:cc:68:
ee:32:56:db:1e:64:89:3e:b3:b1:46:e8:1c:e4:75:
54:c9:31:08:27:b7:d7:44:85:5c:cd:9b:8a:20:65:
cb:5d:57:24:eb:4b:6d:49:75:bc:12:87:1f:01:a1:
ce:50:97:fa:18:64:95:b3:f5:a5:6c:bd:7c:41:c4:
6d:69:d3:7f:74:e6:1d:78:53:4b:a9:60:8d:5a:29:
64:54:81:63:2e:29:3e:8e:fa:88:62:7e:7a:b1:6b:
6e:7a:0d:76:4a:d2:4d:b1:d9:49:f6:6e:56:4b:78:
c4:54:b4:8f:94:2f:0f:21:ae:47:00:74:e0:0c:78:
0a:8d:1b:23:4d:73:bc:49:66:b5:12:57:c1:18:35:
4b:5e:be:b4:ae:07:db:c2:c5:e0:bd:bf:9e:8c:02:
2c:19:0e:18:86:18:69:50:4f:0e:bb:99:69:1c:aa:
1c:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:8D:AD:91:B1:13:31:F0:A7:91:34:29:B7:52:9B:0E:17:E0:69:F3
X509v3 Authority Key Identifier:
keyid:E3:85:73:32:13:B3:42:36:01:9A:14:0F:F1:9C:53:98:ED:71:73:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/44VzMhOzQjYBmhQP8ZxTmO1xcw4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/54/2ae088-69c8-477d-a4bf-877d3fac2667/1/44VzMhOzQjYBmhQP8ZxTmO1xcw4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:90:ed:97:29:ed:a1:ae:57:f7:5a:94:a4:83:bc:b0:63:47:
c1:c9:df:5e:95:cf:20:b8:f6:c1:21:ed:55:fa:f9:08:e5:fd:
d4:09:7e:f8:e9:42:5b:a1:36:99:c3:4b:18:d1:fc:14:e1:0f:
e6:9a:ff:a2:58:e4:48:7c:90:ca:e0:15:05:e9:8f:1d:5a:77:
6d:df:e8:f8:d0:42:79:a1:14:52:53:c3:4d:4f:51:8f:f3:5e:
47:33:8b:9c:74:d0:21:6a:20:4a:65:0d:e4:b9:fc:e7:c8:c4:
ba:00:25:37:2b:02:ce:4b:8f:ba:36:79:b5:85:aa:a0:f6:f3:
05:0c:5f:95:84:79:0e:e6:79:9b:69:a4:39:8b:4d:5a:a7:82:
37:c9:22:f4:19:f2:13:7a:d1:fb:d4:fc:49:df:2b:8e:a0:d0:
2e:40:73:b5:0e:c1:07:4a:2a:3c:1e:9b:2d:35:1f:59:0f:2e:
2d:ff:35:aa:0b:b8:d8:ea:31:51:a1:13:8c:22:2d:bf:a5:4c:
30:88:30:83:21:51:0a:89:ec:1e:44:c1:5a:b0:ac:f2:a8:a7:
4b:50:89:cf:b5:8c:31:78:f5:f5:09:3c:69:af:16:52:9a:bf:
82:30:33:0e:fb:cc:7f:41:75:23:2f:2c:bb:b6:1d:96:6c:17:
f0:61:07:e5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdkcUM1K8cavyD+2fXRjvwBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUzODU3MzMyMTNiMzQyMzYwMTlhMTQwZmYxOWM1Mzk4ZWQ3
MTczMGUwHhcNMjUwNjEyMTQwMDMzWhcNMjUwNjEzMTQwMDMzWjAzMTEwLwYDVQQD
EyhiNzhkYWQ5MWIxMTMzMWYwYTc5MTM0MjliNzUyOWIwZTE3ZTA2OWYzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzDbrg7wW9orEpLquoyxQJ5D9SCuR
fHIuYb54XmZZUlw1GE1NSpLHjv/Mn7k2CRJQDvHAWb2L0VhvzfgUAUOfnDZN0wt2
4Vf/4LRCIPOSJQOdKuSecqF0zGjuMlbbHmSJPrOxRugc5HVUyTEIJ7fXRIVczZuK
IGXLXVck60ttSXW8EocfAaHOUJf6GGSVs/WlbL18QcRtadN/dOYdeFNLqWCNWilk
VIFjLik+jvqIYn56sWtueg12StJNsdlJ9m5WS3jEVLSPlC8PIa5HAHTgDHgKjRsj
TXO8SWa1ElfBGDVLXr60rgfbwsXgvb+ejAIsGQ4YhhhpUE8Ou5lpHKocPwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLeNrZGxEzHwp5E0KbdSmw4X4GnzMB8GA1UdIwQY
MBaAFOOFczITs0I2AZoUD/GcU5jtcXMOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NC8yYWUwODgtNjljOC00NzdkLWE0YmYt
ODc3ZDNmYWMyNjY3LzEvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NC8yYWUwODgtNjljOC00NzdkLWE0YmYtODc3ZDNmYWMyNjY3
LzEvNDRWek1oT3pRallCbWhRUDhaeFRtTzF4Y3c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAJDtlynt
oa5X91qUpIO8sGNHwcnfXpXPILj2wSHtVfr5COX91Al++OlCW6E2mcNLGNH8FOEP
5pr/oljkSHyQyuAVBemPHVp3bd/o+NBCeaEUUlPDTU9Rj/NeRzOLnHTQIWogSmUN
5Ln858jEugAlNysCzkuPujZ5tYWqoPbzBQxflYR5DuZ5m2mkOYtNWqeCN8ki9Bny
E3rR+9T8Sd8rjqDQLkBztQ7BB0oqPB6bLTUfWQ8uLf81qgu42OoxUaETjCItv6VM
MIgwgyFRConsHkTBWrCs8qinS1CJz7WMMXj19Qk8aa8WUpq/gjAzDvvMf0F1Iy8s
u7YdlmwX8GEH5Q==
-----END CERTIFICATE-----
Generated at Thu Jun 12 17:04:34 2025 by rpki-client