Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
File: 4Fx81akbRFhmDQcOBHf75pXBKws.mft (raw, json)
Hash identifier: Q7JfozAkPpdTQea+0bRpqqtN07/tghvrJlkYwdB0mfM=
Subject key identifier: B0:E8:C0:2C:15:AE:40:7E:E3:28:EB:67:9D:77:0A:77:CF:7E:D0:22
Authority key identifier: E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
Certificate issuer: /CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Certificate serial: 01974779963690970A78EA036D580C60766C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
Manifest number: 0BFA
Signing time: Fri 06 Jun 2025 23:00:40 +0000
Manifest this update: Fri 06 Jun 2025 23:00:40 +0000
Manifest next update: Sat 07 Jun 2025 23:00:40 +0000
Files and hashes: 1: 4Fx81akbRFhmDQcOBHf75pXBKws.crl (hash: ZTDm+TSKNFAjvDvbE7kwIZ70n6Y+lr6y5nBarHUq94w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:96:36:90:97:0a:78:ea:03:6d:58:0c:60:76:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e05c7cd5a91b4458660d070e0477fbe695c12b0b
Validity
Not Before: Jun 6 23:00:40 2025 GMT
Not After : Jun 7 23:00:40 2025 GMT
Subject: CN=b0e8c02c15ae407ee328eb679d770a77cf7ed022
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:96:06:c8:98:04:5e:2e:a6:7f:ca:4c:28:34:
cc:6b:b5:73:cf:86:63:9b:73:9f:c4:16:cf:2e:70:
e2:89:b4:f9:fd:c3:4d:39:cb:7f:53:8c:73:0d:d9:
7e:6c:da:ad:33:02:a7:39:7c:18:18:19:e1:74:5c:
25:ed:6d:73:18:cb:73:e2:60:83:c0:5c:d8:9b:87:
3a:53:b2:a0:73:61:c8:7d:07:43:bb:ea:ab:23:2b:
c5:93:40:0d:4f:bd:f8:43:3f:1d:c5:02:98:d4:b3:
58:f2:b3:35:12:43:8d:ea:f9:0b:cb:c7:28:d2:42:
ea:b4:c7:57:ef:08:f7:c0:25:01:4e:42:68:d3:39:
d6:13:a8:ef:17:fb:48:c5:7c:bc:89:c6:08:78:b1:
04:9a:e1:c0:e1:49:35:6a:e8:4e:96:96:e0:1b:44:
2b:ea:a2:85:52:45:7a:04:be:3d:a9:e7:93:04:93:
1c:d4:7d:94:9f:46:87:a7:f4:11:6d:84:b7:14:85:
c1:97:ad:00:af:80:a2:01:97:42:dd:b2:9f:2d:38:
ca:06:cd:18:36:7a:17:f1:2c:24:ac:18:d4:69:23:
76:21:cf:5c:16:5c:4d:5a:ab:e0:91:4a:3c:27:ca:
a8:72:04:b6:ec:ac:3e:85:b2:c7:ca:9c:99:0c:6b:
7b:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B0:E8:C0:2C:15:AE:40:7E:E3:28:EB:67:9D:77:0A:77:CF:7E:D0:22
X509v3 Authority Key Identifier:
keyid:E0:5C:7C:D5:A9:1B:44:58:66:0D:07:0E:04:77:FB:E6:95:C1:2B:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4Fx81akbRFhmDQcOBHf75pXBKws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5a/f11913-1045-4aba-b871-832b5def5ad8/1/4Fx81akbRFhmDQcOBHf75pXBKws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:f7:45:c1:b1:e8:38:6d:ac:f0:f0:2e:77:59:78:aa:6e:ff:
96:1c:bd:3f:19:61:ee:b7:be:10:9f:12:36:c5:de:9e:e0:d0:
f4:2d:76:b3:ea:4a:ca:9b:ee:8d:63:a2:74:0e:82:a0:e1:84:
4a:50:2e:d0:07:40:45:cc:94:28:de:0d:f1:d9:c3:4d:a3:4c:
e8:99:30:50:8a:d2:2f:3f:43:75:6d:d4:99:fc:a3:fb:df:8c:
cc:b5:06:37:fe:cf:9a:65:be:f5:07:06:77:75:c3:c7:2f:5d:
60:c7:a0:48:45:cf:62:24:9d:9e:c3:55:2a:02:f4:b5:2c:b2:
75:bd:60:45:a7:c9:ac:83:a6:43:65:cc:fd:9d:06:df:6e:9b:
73:d1:5b:6a:b3:61:00:14:2a:52:6a:b2:07:7e:bd:42:93:51:
be:ea:04:f3:65:51:b9:8b:bc:02:78:f3:3a:3d:19:66:c0:c8:
36:45:3d:c8:b4:c7:ab:ed:be:ad:4a:d4:d6:e2:ce:41:7f:6d:
97:57:4d:2a:59:8f:85:83:36:90:63:af:74:a8:f4:3d:eb:43:
13:50:ae:27:90:24:89:94:9e:50:c8:74:5a:96:e2:d6:1d:88:
aa:a6:71:1d:35:b0:89:75:23:06:48:f3:a3:a0:57:55:22:d7:
79:10:5f:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeZY2kJcKeOoDbVgMYHZsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUwNWM3Y2Q1YTkxYjQ0NTg2NjBkMDcwZTA0NzdmYmU2OTVj
MTJiMGIwHhcNMjUwNjA2MjMwMDQwWhcNMjUwNjA3MjMwMDQwWjAzMTEwLwYDVQQD
EyhiMGU4YzAyYzE1YWU0MDdlZTMyOGViNjc5ZDc3MGE3N2NmN2VkMDIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0JYGyJgEXi6mf8pMKDTMa7Vzz4Zj
m3OfxBbPLnDiibT5/cNNOct/U4xzDdl+bNqtMwKnOXwYGBnhdFwl7W1zGMtz4mCD
wFzYm4c6U7Kgc2HIfQdDu+qrIyvFk0ANT734Qz8dxQKY1LNY8rM1EkON6vkLy8co
0kLqtMdX7wj3wCUBTkJo0znWE6jvF/tIxXy8icYIeLEEmuHA4Uk1auhOlpbgG0Qr
6qKFUkV6BL49qeeTBJMc1H2Un0aHp/QRbYS3FIXBl60Ar4CiAZdC3bKfLTjKBs0Y
NnoX8SwkrBjUaSN2Ic9cFlxNWqvgkUo8J8qocgS27Kw+hbLHypyZDGt7mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLDowCwVrkB+4yjrZ513CnfPftAiMB8GA1UdIwQY
MBaAFOBcfNWpG0RYZg0HDgR3++aVwSsLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNEZ4ODFha2JSRmhtRFFjT0JIZjc1cFhCS3dzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81YS9mMTE5MTMtMTA0NS00YWJhLWI4NzEt
ODMyYjVkZWY1YWQ4LzEvNEZ4ODFha2JSRmhtRFFjT0JIZjc1cFhCS3dzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81YS9mMTE5MTMtMTA0NS00YWJhLWI4NzEtODMyYjVkZWY1YWQ4
LzEvNEZ4ODFha2JSRmhtRFFjT0JIZjc1cFhCS3dzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgvdFwbHo
OG2s8PAud1l4qm7/lhy9Pxlh7re+EJ8SNsXenuDQ9C12s+pKypvujWOidA6CoOGE
SlAu0AdARcyUKN4N8dnDTaNM6JkwUIrSLz9DdW3Umfyj+9+MzLUGN/7PmmW+9QcG
d3XDxy9dYMegSEXPYiSdnsNVKgL0tSyydb1gRafJrIOmQ2XM/Z0G326bc9FbarNh
ABQqUmqyB369QpNRvuoE82VRuYu8AnjzOj0ZZsDINkU9yLTHq+2+rUrU1uLOQX9t
l1dNKlmPhYM2kGOvdKj0PetDE1CuJ5AkiZSeUMh0Wpbi1h2IqqZxHTWwiXUjBkjz
o6BXVSLXeRBf+w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:34:40 2025 by rpki-client