Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
File: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft (raw, json)
Hash identifier: T8ZuPBNiR74NwV8xT5E7ydqMUpk7PYUHZaYj/vRQzB4=
Subject key identifier: DB:11:04:FA:E8:B9:4C:F7:0D:8B:F6:91:1C:4E:7A:88:6B:ED:6F:66
Authority key identifier: 56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
Certificate issuer: /CN=5682c32795f04a43209c68cd70ead248945992f8
Certificate serial: 019754226C7AF41A6F2A9758664ED348D357
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
Manifest number: 1313
Signing time: Mon 09 Jun 2025 10:00:31 +0000
Manifest this update: Mon 09 Jun 2025 10:00:31 +0000
Manifest next update: Tue 10 Jun 2025 10:00:31 +0000
Files and hashes: 1: VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl (hash: l11XV/p0ROuLbEWncmpx5gUUaKmqt4/ED4cLipO8nMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 06:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:22:6c:7a:f4:1a:6f:2a:97:58:66:4e:d3:48:d3:57
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=5682c32795f04a43209c68cd70ead248945992f8
Validity
Not Before: Jun 9 10:00:31 2025 GMT
Not After : Jun 10 10:00:31 2025 GMT
Subject: CN=db1104fae8b94cf70d8bf6911c4e7a886bed6f66
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:3f:20:36:61:81:9d:3b:50:df:b1:7d:00:c7:
00:4a:7e:f1:55:59:84:ab:c3:85:e7:9b:a0:f4:73:
28:d9:77:9e:02:f4:bb:58:60:c0:d8:0d:d8:3a:e5:
53:31:d9:d8:dc:01:86:d6:2f:bd:8d:dc:4b:a2:93:
6f:dc:e2:79:32:d1:bd:08:69:ad:13:e0:94:ad:21:
76:54:47:e6:54:43:06:04:30:63:55:30:0d:27:9c:
21:b6:77:df:cf:d3:e4:8a:a1:b4:19:22:26:16:ea:
c8:60:68:81:76:a7:3a:11:c8:2e:61:3c:ce:c2:5b:
0a:49:ba:ed:40:28:72:d2:7a:0c:fd:c0:c7:35:95:
7b:7a:56:b6:c0:69:9c:6e:3e:51:02:7a:2f:fa:89:
c1:56:60:15:aa:6e:0f:e9:91:c7:e3:a8:fd:93:85:
76:69:72:7c:fe:80:c5:a0:7a:cf:f9:43:97:16:e5:
d1:67:a6:87:20:37:21:13:74:dd:13:5b:c9:03:f2:
5b:57:eb:66:02:f6:00:2f:99:55:5d:f6:c9:b6:0a:
6f:87:7c:2f:d7:2b:27:85:ef:56:26:7c:d9:5b:14:
ef:cf:ea:4f:3d:24:5f:a8:4a:ed:05:c0:85:3c:b7:
13:c9:c7:21:50:e9:6f:3f:b8:de:0e:27:14:c1:f5:
9f:cf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DB:11:04:FA:E8:B9:4C:F7:0D:8B:F6:91:1C:4E:7A:88:6B:ED:6F:66
X509v3 Authority Key Identifier:
keyid:56:82:C3:27:95:F0:4A:43:20:9C:68:CD:70:EA:D2:48:94:59:92:F8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/abac27-3e08-4447-ad26-9eaa769e5c62/1/VoLDJ5XwSkMgnGjNcOrSSJRZkvg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:9e:cf:e6:e9:b4:1f:3a:87:a0:d2:73:f7:f8:37:f4:47:02:
fe:c3:1a:9b:73:ed:4d:63:3a:8b:25:f7:38:34:b3:96:e3:47:
42:f2:df:2e:36:5c:3c:46:63:8d:68:13:91:94:9a:c6:1d:89:
85:69:88:e9:7d:96:93:67:0e:9c:26:b2:e5:1b:70:c6:ec:da:
c8:44:2d:31:43:0b:f4:bc:d0:db:37:09:07:57:48:75:86:0b:
d0:42:a6:c9:3b:c8:17:45:6a:41:af:79:57:3d:0b:d5:fa:1f:
5e:ae:7d:9b:a6:94:05:4f:ba:58:65:43:8e:b4:8c:48:12:1b:
89:b0:48:54:17:20:60:02:93:62:7d:db:48:99:1e:14:b3:e6:
88:12:30:e3:82:c3:b1:da:03:8a:69:20:ef:bf:06:86:8a:cb:
59:8d:27:5b:94:83:15:3a:5a:0c:79:0c:e4:c4:79:3c:eb:98:
d1:df:c3:c8:e6:16:30:22:1c:d3:ba:8c:a1:9e:01:de:27:5e:
49:57:c7:da:f9:a6:c4:b0:ae:33:fb:99:f7:62:2f:8a:9e:5e:
87:e0:d1:a8:4f:2f:b2:4a:5a:dd:bc:ec:6b:86:57:22:bb:59:
d1:a8:3b:c3:62:cc:de:b8:9d:83:72:b1:1c:a0:bd:7f:a3:a2:
ee:ff:29:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUImx69BpvKpdYZk7TSNNXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU2ODJjMzI3OTVmMDRhNDMyMDljNjhjZDcwZWFkMjQ4OTQ1
OTkyZjgwHhcNMjUwNjA5MTAwMDMxWhcNMjUwNjEwMTAwMDMxWjAzMTEwLwYDVQQD
EyhkYjExMDRmYWU4Yjk0Y2Y3MGQ4YmY2OTExYzRlN2E4ODZiZWQ2ZjY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxj8gNmGBnTtQ37F9AMcASn7xVVmE
q8OF55ug9HMo2XeeAvS7WGDA2A3YOuVTMdnY3AGG1i+9jdxLopNv3OJ5MtG9CGmt
E+CUrSF2VEfmVEMGBDBjVTANJ5whtnffz9PkiqG0GSImFurIYGiBdqc6EcguYTzO
wlsKSbrtQChy0noM/cDHNZV7ela2wGmcbj5RAnov+onBVmAVqm4P6ZHH46j9k4V2
aXJ8/oDFoHrP+UOXFuXRZ6aHIDchE3TdE1vJA/JbV+tmAvYAL5lVXfbJtgpvh3wv
1ysnhe9WJnzZWxTvz+pPPSRfqErtBcCFPLcTycchUOlvP7jeDicUwfWfzwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNsRBProuUz3DYv2kRxOeohr7W9mMB8GA1UdIwQY
MBaAFFaCwyeV8EpDIJxozXDq0kiUWZL4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVm9MREo1WHdTa01nbkdqTmNPclNTSlJaa3ZnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9hYmFjMjctM2UwOC00NDQ3LWFkMjYt
OWVhYTc2OWU1YzYyLzEvVm9MREo1WHdTa01nbkdqTmNPclNTSlJaa3ZnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9hYmFjMjctM2UwOC00NDQ3LWFkMjYtOWVhYTc2OWU1YzYy
LzEvVm9MREo1WHdTa01nbkdqTmNPclNTSlJaa3ZnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABZ7P5um0
HzqHoNJz9/g39EcC/sMam3PtTWM6iyX3ODSzluNHQvLfLjZcPEZjjWgTkZSaxh2J
hWmI6X2Wk2cOnCay5RtwxuzayEQtMUML9LzQ2zcJB1dIdYYL0EKmyTvIF0VqQa95
Vz0L1fofXq59m6aUBU+6WGVDjrSMSBIbibBIVBcgYAKTYn3bSJkeFLPmiBIw44LD
sdoDimkg778GhorLWY0nW5SDFTpaDHkM5MR5POuY0d/DyOYWMCIc07qMoZ4B3ide
SVfH2vmmxLCuM/uZ92Ivip5eh+DRqE8vskpa3bzsa4ZXIrtZ0ag7w2LM3ridg3Kx
HKC9f6Oi7v8p+w==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:41:49 2025 by rpki-client