Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
File: rSzoJufkLt3WnfrTpZqbmqTigYM.mft (raw, json)
Hash identifier: 7VwKmh6WgXfX/4t6fHLfHLdbsz2W6N3uEWfbday07GA=
Subject key identifier: 6D:8B:7A:D3:31:FA:2E:F7:FE:2F:F4:B1:6F:84:53:F8:A5:06:29:6B
Authority key identifier: AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
Certificate issuer: /CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Certificate serial: 01974D7C0A81A665AF8BEAB87BE41114D326
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
Manifest number: 147A
Signing time: Sun 08 Jun 2025 03:01:04 +0000
Manifest this update: Sun 08 Jun 2025 03:01:04 +0000
Manifest next update: Mon 09 Jun 2025 03:01:04 +0000
Files and hashes: 1: rSzoJufkLt3WnfrTpZqbmqTigYM.crl (hash: HjKrej1zmuCMP7I6zUm6aiSimkjyqnhIxJqYuvxSQsU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:7c:0a:81:a6:65:af:8b:ea:b8:7b:e4:11:14:d3:26
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad2ce826e7e42eddd69dfad3a59a9b9aa4e28183
Validity
Not Before: Jun 8 03:01:04 2025 GMT
Not After : Jun 9 03:01:04 2025 GMT
Subject: CN=6d8b7ad331fa2ef7fe2ff4b16f8453f8a506296b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:fc:f2:3d:eb:88:e3:89:ed:12:68:74:2d:f3:
b0:86:94:af:44:73:a1:a3:27:8b:22:6d:3e:a2:43:
b5:11:1c:aa:e5:1a:b5:11:be:3f:c6:68:8b:2d:31:
a3:b2:34:16:0f:e3:e4:9c:d8:9a:04:1a:2f:0e:2e:
94:40:65:ce:ec:58:45:ef:25:04:7e:c6:9a:5e:e3:
c0:21:4a:3c:d2:d2:93:a1:b1:a5:54:e4:99:50:d1:
9f:70:58:92:e1:10:7c:37:78:6c:cb:3e:23:f4:5f:
37:50:69:63:1f:db:af:13:5a:74:29:1a:01:29:ff:
3b:67:99:c4:7a:75:99:57:8f:7d:34:c4:92:53:99:
8a:b8:43:30:11:8f:7d:ef:d8:09:a1:d4:a2:5b:8d:
63:36:50:aa:42:29:af:c9:75:39:c1:c5:85:d4:4d:
84:5c:8d:04:2f:27:77:84:31:5e:c5:a2:5d:4f:26:
4d:15:fa:14:9b:c0:3f:d6:77:ef:a3:3b:eb:05:7c:
2a:92:49:50:76:49:b4:8a:8c:e1:44:a0:fc:8a:fd:
cd:30:3a:f3:96:93:7c:3f:78:71:0e:41:f7:96:cc:
d8:48:fe:9a:cf:02:0f:98:49:3a:8e:05:c0:97:81:
01:b6:6d:96:39:5f:42:cf:f0:f5:61:47:85:9f:b8:
a5:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:8B:7A:D3:31:FA:2E:F7:FE:2F:F4:B1:6F:84:53:F8:A5:06:29:6B
X509v3 Authority Key Identifier:
keyid:AD:2C:E8:26:E7:E4:2E:DD:D6:9D:FA:D3:A5:9A:9B:9A:A4:E2:81:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rSzoJufkLt3WnfrTpZqbmqTigYM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/bec563-581e-49e4-9cc7-a83a8d533275/1/rSzoJufkLt3WnfrTpZqbmqTigYM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:6e:50:ad:fb:15:9d:df:4d:79:27:39:a8:49:41:b9:09:60:
a9:27:14:09:69:8a:37:32:1f:72:1f:7c:ea:be:ed:1e:45:c5:
4d:0d:f1:a8:92:06:30:06:a6:9f:88:81:d2:45:67:2b:9a:fd:
3e:da:4f:16:41:91:f2:ae:5c:03:33:a3:0d:42:da:b6:f7:59:
09:3f:3a:ec:21:c5:ce:74:29:e8:8b:0d:e8:ee:28:8c:f6:65:
d8:8d:c0:e9:3c:3e:f2:fe:22:25:e6:98:b1:16:d3:38:b5:86:
80:d4:c7:34:2a:f3:64:d2:b5:5f:2c:e7:65:62:a7:10:f9:0f:
a9:eb:46:bd:77:de:01:70:72:28:e1:54:56:20:1c:17:20:94:
1d:34:68:9c:76:0e:42:3b:58:bb:7d:9c:56:e1:5c:ea:81:18:
79:8e:27:4e:9b:12:76:2c:e9:f2:b4:3c:97:50:ba:59:5d:e9:
81:a8:e8:05:21:81:a0:4e:9f:d7:40:62:a2:0b:28:14:dd:cd:
77:a1:09:4b:fd:82:0f:33:32:4a:e6:ca:83:cc:d6:6a:2e:a7:
36:bd:c2:80:93:a3:34:b9:b2:33:06:d1:fb:2f:c2:ef:59:b5:
3f:a9:3a:a5:87:18:d6:b9:9f:44:94:5a:9d:59:4c:0c:c7:36:
e2:d6:88:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNfAqBpmWvi+q4e+QRFNMmMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMmNlODI2ZTdlNDJlZGRkNjlkZmFkM2E1OWE5YjlhYTRl
MjgxODMwHhcNMjUwNjA4MDMwMTA0WhcNMjUwNjA5MDMwMTA0WjAzMTEwLwYDVQQD
Eyg2ZDhiN2FkMzMxZmEyZWY3ZmUyZmY0YjE2Zjg0NTNmOGE1MDYyOTZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPzyPeuI44ntEmh0LfOwhpSvRHOh
oyeLIm0+okO1ERyq5Rq1Eb4/xmiLLTGjsjQWD+PknNiaBBovDi6UQGXO7FhF7yUE
fsaaXuPAIUo80tKTobGlVOSZUNGfcFiS4RB8N3hsyz4j9F83UGljH9uvE1p0KRoB
Kf87Z5nEenWZV499NMSSU5mKuEMwEY9979gJodSiW41jNlCqQimvyXU5wcWF1E2E
XI0ELyd3hDFexaJdTyZNFfoUm8A/1nfvozvrBXwqkklQdkm0iozhRKD8iv3NMDrz
lpN8P3hxDkH3lszYSP6azwIPmEk6jgXAl4EBtm2WOV9Cz/D1YUeFn7illQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2LetMx+i73/i/0sW+EU/ilBilrMB8GA1UdIwQY
MBaAFK0s6Cbn5C7d1p3606Wam5qk4oGDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi9iZWM1NjMtNTgxZS00OWU0LTljYzct
YTgzYThkNTMzMjc1LzEvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi9iZWM1NjMtNTgxZS00OWU0LTljYzctYTgzYThkNTMzMjc1
LzEvclN6b0p1ZmtMdDNXbmZyVHBacWJtcVRpZ1lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkm5QrfsV
nd9NeSc5qElBuQlgqScUCWmKNzIfch986r7tHkXFTQ3xqJIGMAamn4iB0kVnK5r9
PtpPFkGR8q5cAzOjDULatvdZCT867CHFznQp6IsN6O4ojPZl2I3A6Tw+8v4iJeaY
sRbTOLWGgNTHNCrzZNK1XyznZWKnEPkPqetGvXfeAXByKOFUViAcFyCUHTRonHYO
QjtYu32cVuFc6oEYeY4nTpsSdizp8rQ8l1C6WV3pgajoBSGBoE6f10BiogsoFN3N
d6EJS/2CDzMySubKg8zWai6nNr3CgJOjNLmyMwbR+y/C71m1P6k6pYcY1rmfRJRa
nVlMDMc24taIQw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:45:48 2025 by rpki-client