Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
File: AoDVqrjuctqjUocfunLspFGnDtw.mft (raw, json)
Hash identifier: r4CYBGgT0D646Fr5DyEJ/T6/yG4phg+yK/x40OSQ7hE=
Subject key identifier: 35:BD:AE:A5:F8:FC:62:A7:2B:44:67:51:CF:82:9A:9B:06:AD:FD:51
Authority key identifier: 02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
Certificate issuer: /CN=0280d5aab8ee72daa352871fba72eca451a70edc
Certificate serial: 019749D6445877F438B0667788923B8FFE6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
Manifest number: 0836
Signing time: Sat 07 Jun 2025 10:01:08 +0000
Manifest this update: Sat 07 Jun 2025 10:01:08 +0000
Manifest next update: Sun 08 Jun 2025 10:01:08 +0000
Files and hashes: 1: AoDVqrjuctqjUocfunLspFGnDtw.crl (hash: xnXv1mTO1NBEFaK+hTXxSfro5w1MWGFbtChGENWtzX8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:44:58:77:f4:38:b0:66:77:88:92:3b:8f:fe:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0280d5aab8ee72daa352871fba72eca451a70edc
Validity
Not Before: Jun 7 10:01:08 2025 GMT
Not After : Jun 8 10:01:08 2025 GMT
Subject: CN=35bdaea5f8fc62a72b446751cf829a9b06adfd51
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:69:69:c7:17:e0:1f:91:a5:b6:f3:f8:20:ce:
a3:12:89:7d:25:1c:db:aa:d9:de:5d:3b:61:b8:20:
42:c1:83:ed:80:84:6d:2a:5c:83:9b:bf:d1:f7:c0:
d0:c7:e1:9e:5c:b9:5a:bc:4d:25:5e:e4:e2:92:63:
03:bf:06:e4:c3:e7:c6:76:ba:15:5e:16:f1:1a:56:
61:be:d7:c1:c7:5f:df:c0:c9:b6:d4:72:9e:68:c6:
42:69:d1:b9:d4:42:68:a4:1f:6d:78:1d:50:c4:de:
09:13:d6:f2:43:4d:94:42:c3:a2:3f:9b:04:2e:74:
c6:d2:59:bc:fc:bf:18:12:c1:6a:aa:d0:ab:52:a9:
5e:ae:ae:59:10:83:30:8c:8c:52:d2:e4:4c:80:c2:
27:8f:46:03:a6:e2:f0:e5:69:98:37:26:69:13:54:
ce:b1:a2:c3:bf:7a:34:17:b2:a9:cb:4e:44:0e:b1:
b1:c3:05:2e:a7:76:52:5f:84:86:d3:70:8d:58:46:
4c:76:cb:8c:3f:2d:9e:1e:26:b1:88:5a:fe:43:78:
47:ec:b0:b9:b6:ae:1a:8c:4e:33:90:59:70:bf:8e:
1e:d2:36:03:11:a8:30:f1:cd:17:3a:da:76:cc:d9:
6f:8e:b5:da:b8:68:76:63:5d:8b:9e:ca:bc:71:8f:
a0:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
35:BD:AE:A5:F8:FC:62:A7:2B:44:67:51:CF:82:9A:9B:06:AD:FD:51
X509v3 Authority Key Identifier:
keyid:02:80:D5:AA:B8:EE:72:DA:A3:52:87:1F:BA:72:EC:A4:51:A7:0E:DC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/AoDVqrjuctqjUocfunLspFGnDtw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/b8ec91-3ea6-4529-8ce1-f406e0878d54/1/AoDVqrjuctqjUocfunLspFGnDtw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b4:6b:bd:b4:b8:d6:03:30:fe:8c:c0:12:89:6a:c3:fd:bc:35:
73:ac:df:2a:54:2e:b9:19:2b:61:e9:83:81:9f:34:cf:e5:37:
4a:15:78:3f:19:60:66:6f:c0:24:fa:20:cc:7d:80:bd:ce:e0:
51:98:0c:ca:dd:de:ef:97:03:d9:4b:0d:97:d6:ff:a6:83:17:
b1:d2:ea:af:bd:f0:77:55:50:e4:b9:c5:b4:4c:be:90:1c:84:
5b:dc:12:71:f4:35:98:ec:fe:13:40:cf:92:08:92:db:6e:da:
51:4f:a0:49:df:8f:c6:0c:e1:26:70:24:16:06:dc:e4:d8:3f:
00:48:c7:4b:14:0e:35:f2:4c:db:cc:e4:9b:01:8f:5c:84:05:
64:1b:1b:ca:5d:bf:50:d6:d4:04:ca:6d:c1:bd:e0:b7:1a:7f:
90:6b:33:3f:ea:02:b6:a0:e8:53:02:80:44:85:71:cd:0a:dd:
27:cf:ea:cb:ab:c7:02:24:cc:d4:b0:f9:64:e9:76:93:6a:3e:
9b:62:52:3b:f0:2c:90:0d:fc:87:3a:c7:ae:c1:74:72:5b:97:
9c:36:16:ff:58:b1:10:e9:ec:5e:c8:94:9d:18:d5:35:3d:d2:
1e:7c:c9:99:e2:9b:e9:33:1f:03:2d:33:52:0b:c6:a7:b5:72:
3b:f2:64:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1kRYd/Q4sGZ3iJI7j/5tMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAyODBkNWFhYjhlZTcyZGFhMzUyODcxZmJhNzJlY2E0NTFh
NzBlZGMwHhcNMjUwNjA3MTAwMTA4WhcNMjUwNjA4MTAwMTA4WjAzMTEwLwYDVQQD
EygzNWJkYWVhNWY4ZmM2MmE3MmI0NDY3NTFjZjgyOWE5YjA2YWRmZDUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw2lpxxfgH5GltvP4IM6jEol9JRzb
qtneXTthuCBCwYPtgIRtKlyDm7/R98DQx+GeXLlavE0lXuTikmMDvwbkw+fGdroV
XhbxGlZhvtfBx1/fwMm21HKeaMZCadG51EJopB9teB1QxN4JE9byQ02UQsOiP5sE
LnTG0lm8/L8YEsFqqtCrUqlerq5ZEIMwjIxS0uRMgMInj0YDpuLw5WmYNyZpE1TO
saLDv3o0F7Kpy05EDrGxwwUup3ZSX4SG03CNWEZMdsuMPy2eHiaxiFr+Q3hH7LC5
tq4ajE4zkFlwv44e0jYDEagw8c0XOtp2zNlvjrXauGh2Y12Lnsq8cY+g2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDW9rqX4/GKnK0RnUc+CmpsGrf1RMB8GA1UdIwQY
MBaAFAKA1aq47nLao1KHH7py7KRRpw7cMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9iOGVjOTEtM2VhNi00NTI5LThjZTEt
ZjQwNmUwODc4ZDU0LzEvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9iOGVjOTEtM2VhNi00NTI5LThjZTEtZjQwNmUwODc4ZDU0
LzEvQW9EVnFyanVjdHFqVW9jZnVuTHNwRkduRHR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtGu9tLjW
AzD+jMASiWrD/bw1c6zfKlQuuRkrYemDgZ80z+U3ShV4PxlgZm/AJPogzH2Avc7g
UZgMyt3e75cD2UsNl9b/poMXsdLqr73wd1VQ5LnFtEy+kByEW9wScfQ1mOz+E0DP
kgiS227aUU+gSd+PxgzhJnAkFgbc5Ng/AEjHSxQONfJM28zkmwGPXIQFZBsbyl2/
UNbUBMptwb3gtxp/kGszP+oCtqDoUwKARIVxzQrdJ8/qy6vHAiTM1LD5ZOl2k2o+
m2JSO/AskA38hzrHrsF0cluXnDYW/1ixEOnsXsiUnRjVNT3SHnzJmeKb6TMfAy0z
UgvGp7VyO/JkGw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 19:51:47 2025 by rpki-client