Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
File: 1EZzVsX7atsuunE8gBkUsvTX860.mft (raw, json)
Hash identifier: Df78O1bxhvX1fFK4GY7kJaqCL19H7K77knhL5DsIMKs=
Subject key identifier: 88:C4:0C:D1:16:62:30:93:AF:BF:31:B6:8A:93:80:AF:72:9A:FB:04
Authority key identifier: D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
Certificate issuer: /CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Certificate serial: 01974E8E5720D06A296863D53AF982C39939
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
Manifest number: 91
Signing time: Sun 08 Jun 2025 08:00:40 +0000
Manifest this update: Sun 08 Jun 2025 08:00:40 +0000
Manifest next update: Mon 09 Jun 2025 08:00:40 +0000
Files and hashes: 1: 1EZzVsX7atsuunE8gBkUsvTX860.crl (hash: 9cVeI76rQdftX0e5s2z5w7UAcBV37Dm1cj1Jn9+ZSWI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:57:20:d0:6a:29:68:63:d5:3a:f9:82:c3:99:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d4467356c5fb6adb2eba713c801914b2f4d7f3ad
Validity
Not Before: Jun 8 08:00:40 2025 GMT
Not After : Jun 9 08:00:40 2025 GMT
Subject: CN=88c40cd116623093afbf31b68a9380af729afb04
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:2c:0f:75:6d:08:fc:ff:af:76:27:21:68:99:
47:08:5c:8b:fb:dd:0a:cc:c9:a0:44:6e:ea:6a:62:
9b:91:42:4d:12:7e:90:fe:f5:32:ac:f3:3a:50:06:
be:61:a7:33:21:dd:1f:df:62:45:da:b6:7a:4d:aa:
bd:72:15:67:46:6f:8b:2d:06:41:f1:53:c8:85:97:
6b:19:3a:29:1f:27:ac:9e:25:c4:45:98:78:8f:f1:
34:69:24:3b:78:ec:22:44:e1:3d:e3:59:02:96:95:
14:ff:68:08:72:52:fb:98:79:71:25:87:6d:7b:dc:
16:06:01:d3:54:91:85:5e:54:87:62:0c:0b:64:22:
5b:f1:61:21:f1:3c:27:be:53:0f:d4:02:97:69:90:
2e:60:26:95:7b:83:cb:67:9c:33:a0:e2:6f:3c:dd:
ec:8d:be:b2:cf:c2:a7:11:a2:3b:1f:d0:b1:49:60:
72:19:52:4b:5f:e9:5d:63:f8:36:d9:2c:f6:0c:23:
ff:96:b1:cd:6f:36:82:64:4c:da:aa:88:78:9b:05:
43:ca:60:3f:9a:bf:66:54:4f:a4:1e:2b:ee:c0:33:
94:89:ff:c6:66:0c:96:d9:8f:d1:b7:90:d7:a0:ce:
0e:e7:b8:a2:35:43:de:7c:a6:41:80:02:00:4c:d6:
cb:5d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
88:C4:0C:D1:16:62:30:93:AF:BF:31:B6:8A:93:80:AF:72:9A:FB:04
X509v3 Authority Key Identifier:
keyid:D4:46:73:56:C5:FB:6A:DB:2E:BA:71:3C:80:19:14:B2:F4:D7:F3:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1EZzVsX7atsuunE8gBkUsvTX860.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/73/e7d2e2-56c9-4019-af9e-597b47d42db0/1/1EZzVsX7atsuunE8gBkUsvTX860.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c5:67:32:76:f7:eb:b4:e2:38:5e:77:f1:30:ee:b5:d6:09:f9:
6c:46:a0:4b:b8:fb:49:87:75:45:76:f2:d2:2c:6b:10:ec:7f:
1b:49:30:07:d6:7c:c4:40:d1:28:c4:93:d1:92:77:6e:7d:ea:
22:01:c7:b4:f5:5a:bf:a9:40:09:2e:d8:f4:b3:31:2a:8f:da:
8a:ee:a6:92:4d:db:a7:36:cb:f1:e8:8b:73:5b:01:9b:7b:56:
f6:a2:f8:2c:bd:94:88:fa:69:cc:a5:9d:36:34:e4:6a:ad:97:
de:22:62:6b:bb:e6:c5:3a:89:1d:a9:eb:1b:32:0c:c8:34:4d:
c1:6a:c5:1b:f6:d9:56:a5:31:e0:3e:d8:7c:76:c4:56:29:6d:
37:1c:0e:2a:63:42:43:b4:4e:86:05:bb:fa:b9:0a:69:95:4c:
4c:eb:6c:a7:7f:c9:b2:d6:f7:64:b5:89:0c:98:d5:1b:76:1d:
c3:f2:33:91:ac:bd:29:74:37:ed:9f:aa:bd:1c:ca:d7:47:d9:
cc:b6:33:ea:5b:b7:30:3d:c4:79:a5:78:2f:e6:55:c0:bf:3f:
09:28:9d:bb:5a:ff:1e:65:b5:13:43:3e:5d:a6:95:04:aa:77:
0d:66:a2:13:2e:88:81:df:42:87:c9:18:72:15:9b:f7:dd:e1:
9e:77:af:ab
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjlcg0GopaGPVOvmCw5k5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ0NDY3MzU2YzVmYjZhZGIyZWJhNzEzYzgwMTkxNGIyZjRk
N2YzYWQwHhcNMjUwNjA4MDgwMDQwWhcNMjUwNjA5MDgwMDQwWjAzMTEwLwYDVQQD
Eyg4OGM0MGNkMTE2NjIzMDkzYWZiZjMxYjY4YTkzODBhZjcyOWFmYjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAviwPdW0I/P+vdichaJlHCFyL+90K
zMmgRG7qamKbkUJNEn6Q/vUyrPM6UAa+YaczId0f32JF2rZ6Taq9chVnRm+LLQZB
8VPIhZdrGTopHyesniXERZh4j/E0aSQ7eOwiROE941kClpUU/2gIclL7mHlxJYdt
e9wWBgHTVJGFXlSHYgwLZCJb8WEh8TwnvlMP1AKXaZAuYCaVe4PLZ5wzoOJvPN3s
jb6yz8KnEaI7H9CxSWByGVJLX+ldY/g22Sz2DCP/lrHNbzaCZEzaqoh4mwVDymA/
mr9mVE+kHivuwDOUif/GZgyW2Y/Rt5DXoM4O57iiNUPefKZBgAIATNbLXQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIjEDNEWYjCTr78xtoqTgK9ymvsEMB8GA1UdIwQY
MBaAFNRGc1bF+2rbLrpxPIAZFLL01/OtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83My9lN2QyZTItNTZjOS00MDE5LWFmOWUt
NTk3YjQ3ZDQyZGIwLzEvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83My9lN2QyZTItNTZjOS00MDE5LWFmOWUtNTk3YjQ3ZDQyZGIw
LzEvMUVaelZzWDdhdHN1dW5FOGdCa1VzdlRYODYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAxWcydvfr
tOI4XnfxMO611gn5bEagS7j7SYd1RXby0ixrEOx/G0kwB9Z8xEDRKMST0ZJ3bn3q
IgHHtPVav6lACS7Y9LMxKo/aiu6mkk3bpzbL8eiLc1sBm3tW9qL4LL2UiPppzKWd
NjTkaq2X3iJia7vmxTqJHanrGzIMyDRNwWrFG/bZVqUx4D7YfHbEViltNxwOKmNC
Q7ROhgW7+rkKaZVMTOtsp3/Jstb3ZLWJDJjVG3Ydw/Izkay9KXQ37Z+qvRzK10fZ
zLYz6lu3MD3EeaV4L+ZVwL8/CSidu1r/HmW1E0M+XaaVBKp3DWaiEy6Igd9Ch8kY
chWb993hnnevqw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 09:28:42 2025 by rpki-client