
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
File: xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft (raw, json)
Hash identifier: Mwedu/wQc8SXcjJpH4hpilHo0DqMJ+HqHCHZwGIwbOw=
Subject key identifier: 98:6A:5D:A1:AC:9A:BD:5D:0F:82:73:97:B3:C3:A2:2A:7E:EE:41:E1
Authority key identifier: C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
Certificate issuer: /CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Certificate serial: 0197499F36794D9021284BD8BAC8C9BD45FE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
Manifest number: 13C8
Signing time: Sat 07 Jun 2025 09:01:00 +0000
Manifest this update: Sat 07 Jun 2025 09:01:00 +0000
Manifest next update: Sun 08 Jun 2025 09:01:00 +0000
Files and hashes: 1: xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl (hash: mx8EuzNDIfNNRZI/9M1bRTgyDzpi/Hr+Z/7wNDZN/Hk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:36:79:4d:90:21:28:4b:d8:ba:c8:c9:bd:45:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c491456eda59fb0fd2d173f95412be35f6cfbfaf
Validity
Not Before: Jun 7 09:01:00 2025 GMT
Not After : Jun 8 09:01:00 2025 GMT
Subject: CN=986a5da1ac9abd5d0f827397b3c3a22a7eee41e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:15:73:b8:e5:3e:cb:48:e4:0b:13:a3:a8:3a:
0b:85:46:32:cc:0c:f2:d6:62:c1:c7:71:7c:e5:85:
fe:91:c5:01:1b:49:a6:b8:6a:e8:4b:53:f2:ec:85:
a1:1b:fd:62:cd:8f:84:2d:f8:29:5e:b3:5a:47:a0:
0e:47:5d:5c:5c:c5:50:f4:78:d8:d4:48:19:81:bd:
ee:ac:4f:6e:66:b8:d8:36:4e:b6:a9:3b:23:06:e3:
d6:8a:fa:cf:72:25:9c:cf:e2:3c:fd:ae:72:55:9e:
a0:5a:1d:b6:1a:17:41:d0:69:6d:54:12:74:f3:bb:
6e:1e:58:1d:bc:65:c7:b3:35:75:5d:0f:fc:f7:95:
4b:cd:f6:7d:d5:65:d0:e4:d6:5a:76:7b:0f:7c:14:
16:e5:c8:ae:f2:63:9b:7f:f6:4f:60:96:44:86:89:
cf:2a:a4:3c:8e:3b:12:fe:c0:52:c2:a6:48:c3:a0:
6c:53:95:30:f5:ea:8d:c1:0d:c9:07:fa:1e:52:75:
32:df:52:b5:24:58:97:d0:0d:12:b7:29:cc:10:4d:
16:7d:18:08:b3:4b:d8:47:70:aa:16:e6:d9:fe:4d:
59:12:dd:4a:2a:cb:b9:b8:25:3a:9e:4e:8b:2c:69:
de:4a:ed:5e:f8:fb:d2:71:dc:6c:5c:ae:df:88:24:
05:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:6A:5D:A1:AC:9A:BD:5D:0F:82:73:97:B3:C3:A2:2A:7E:EE:41:E1
X509v3 Authority Key Identifier:
keyid:C4:91:45:6E:DA:59:FB:0F:D2:D1:73:F9:54:12:BE:35:F6:CF:BF:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xJFFbtpZ-w_S0XP5VBK-NfbPv68.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/56/4f408d-bda5-4a94-b83a-a730ccfdadc5/1/xJFFbtpZ-w_S0XP5VBK-NfbPv68.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2b:8e:d7:2b:da:d6:c5:8c:e6:40:2d:0d:23:d3:d4:24:eb:6c:
1b:f6:7f:81:cf:ed:db:8f:e7:d8:54:1f:8d:b8:03:55:11:e0:
de:75:1b:39:83:29:6f:63:26:e8:4d:88:9f:ff:9d:2b:d6:54:
1e:2c:3f:e4:69:cf:d8:60:44:64:92:7b:5e:c3:5d:2f:72:9c:
d9:c3:dd:a0:c2:0e:c7:46:b1:b8:d7:9b:0b:89:a0:aa:30:80:
e1:15:28:c8:b2:a9:3c:e8:d6:9b:1b:f6:42:2d:fa:ed:99:dc:
7e:94:86:40:0c:1e:92:90:7a:9e:6f:51:c7:36:f0:6a:6a:aa:
e1:da:e6:31:ff:f7:ff:fa:27:fc:9e:cc:70:48:9e:20:00:9e:
70:a3:d2:a5:dc:dd:c0:ec:9c:45:ec:64:ff:19:9e:a1:db:d6:
16:fa:e2:49:2a:da:82:af:0e:b8:ae:13:cb:4e:04:21:62:39:
7f:e0:a5:d4:0c:b7:3d:5e:a3:76:5f:0f:9f:51:67:20:31:a9:
09:8c:6e:e2:87:c6:88:f8:ff:a5:ac:b4:9e:eb:fe:15:32:6d:
2f:62:2c:f6:2b:62:5c:8f:7e:6c:c3:91:97:60:70:fb:fe:8a:
26:a6:85:e1:e8:b3:dc:2d:f3:65:0f:e7:15:19:f9:cb:37:d1:
85:0e:ab:93
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnzZ5TZAhKEvYusjJvUX+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0OTE0NTZlZGE1OWZiMGZkMmQxNzNmOTU0MTJiZTM1ZjZj
ZmJmYWYwHhcNMjUwNjA3MDkwMTAwWhcNMjUwNjA4MDkwMTAwWjAzMTEwLwYDVQQD
Eyg5ODZhNWRhMWFjOWFiZDVkMGY4MjczOTdiM2MzYTIyYTdlZWU0MWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArhVzuOU+y0jkCxOjqDoLhUYyzAzy
1mLBx3F85YX+kcUBG0mmuGroS1Py7IWhG/1izY+ELfgpXrNaR6AOR11cXMVQ9HjY
1EgZgb3urE9uZrjYNk62qTsjBuPWivrPciWcz+I8/a5yVZ6gWh22GhdB0GltVBJ0
87tuHlgdvGXHszV1XQ/895VLzfZ91WXQ5NZadnsPfBQW5ciu8mObf/ZPYJZEhonP
KqQ8jjsS/sBSwqZIw6BsU5Uw9eqNwQ3JB/oeUnUy31K1JFiX0A0StynMEE0WfRgI
s0vYR3CqFubZ/k1ZEt1KKsu5uCU6nk6LLGneSu1e+PvScdxsXK7fiCQFkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJhqXaGsmr1dD4Jzl7PDoip+7kHhMB8GA1UdIwQY
MBaAFMSRRW7aWfsP0tFz+VQSvjX2z7+vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2Et
YTczMGNjZmRhZGM1LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Ni80ZjQwOGQtYmRhNS00YTk0LWI4M2EtYTczMGNjZmRhZGM1
LzEveEpGRmJ0cFotd19TMFhQNVZCSy1OZmJQdjY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAK47XK9rW
xYzmQC0NI9PUJOtsG/Z/gc/t24/n2FQfjbgDVRHg3nUbOYMpb2Mm6E2In/+dK9ZU
Hiw/5GnP2GBEZJJ7XsNdL3Kc2cPdoMIOx0axuNebC4mgqjCA4RUoyLKpPOjWmxv2
Qi367ZncfpSGQAwekpB6nm9Rxzbwamqq4drmMf/3//on/J7McEieIACecKPSpdzd
wOycRexk/xmeodvWFvriSSragq8OuK4Ty04EIWI5f+Cl1Ay3PV6jdl8Pn1FnIDGp
CYxu4ofGiPj/pay0nuv+FTJtL2Is9itiXI9+bMORl2Bw+/6KJqaF4eiz3C3zZQ/n
FRn5yzfRhQ6rkw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:37:17 2025 by rpki-client