Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
File: MfxYQJK_niCslRtZUN1PpxMgPMM.mft (raw, json)
Hash identifier: A8ank3T14KsD9z8WNobHaJ5JKmqzLqO79tYbVPm4KKg=
Subject key identifier: 5C:6D:6B:85:B1:A5:9A:2F:F3:92:21:C8:FF:6D:27:9E:D6:56:5D:B4
Authority key identifier: 31:FC:58:40:92:BF:9E:20:AC:95:1B:59:50:DD:4F:A7:13:20:3C:C3
Certificate issuer: /CN=31fc584092bf9e20ac951b5950dd4fa713203cc3
Certificate serial: 0197523405EA1D01E2E3CA31A49274F673FD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
Manifest number: 0F9F
Signing time: Mon 09 Jun 2025 01:00:30 +0000
Manifest this update: Mon 09 Jun 2025 01:00:30 +0000
Manifest next update: Tue 10 Jun 2025 01:00:30 +0000
Files and hashes: 1: MfxYQJK_niCslRtZUN1PpxMgPMM.crl (hash: KQQ/Jb1Nk2tZAYpYs3CgIIpkgiiuH846EFTqo3ZqjII=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:52:34:05:ea:1d:01:e2:e3:ca:31:a4:92:74:f6:73:fd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=31fc584092bf9e20ac951b5950dd4fa713203cc3
Validity
Not Before: Jun 9 01:00:30 2025 GMT
Not After : Jun 10 01:00:30 2025 GMT
Subject: CN=5c6d6b85b1a59a2ff39221c8ff6d279ed6565db4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:9f:3f:cb:00:3b:9f:37:f9:21:39:49:e3:b8:
be:18:47:9b:1a:e7:05:a4:4c:70:96:eb:70:50:33:
aa:a2:ca:59:0c:86:f8:e3:63:9b:da:a3:8d:c9:ec:
ec:04:82:c9:f4:61:8a:c0:3b:f6:76:09:45:4b:83:
58:52:0c:ca:6e:c4:a3:e7:e8:6d:1d:a9:84:17:7a:
fb:96:52:f6:75:79:e7:a9:9b:73:ea:dc:48:4e:ae:
9f:6f:dd:4c:af:53:61:b0:3c:6c:bf:78:d2:6b:ab:
2b:5b:dc:f2:62:cd:25:ac:16:68:37:40:d5:fe:43:
d5:35:ce:da:51:d0:d9:b8:7e:fa:c2:84:a1:e1:6c:
31:5c:2b:66:2f:c4:fc:0a:6e:24:58:70:52:2f:cb:
6d:75:bc:57:35:2d:cd:89:50:0e:15:cf:73:1c:f2:
d5:b6:4a:e5:d0:84:c7:be:97:ea:34:d3:28:87:55:
4b:4a:1b:9e:cc:f2:d1:8b:6e:55:cc:ff:61:23:ac:
bb:37:d3:9c:f0:70:65:86:d7:5a:8c:44:b8:5c:1a:
07:e1:95:d9:ac:4b:1e:20:28:d3:a6:4f:3e:a5:cf:
52:4a:ee:2d:28:db:f3:7c:a6:2d:45:f5:89:2b:12:
de:b2:45:6b:0b:ab:b4:a6:73:13:ba:32:03:ba:2c:
cc:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5C:6D:6B:85:B1:A5:9A:2F:F3:92:21:C8:FF:6D:27:9E:D6:56:5D:B4
X509v3 Authority Key Identifier:
keyid:31:FC:58:40:92:BF:9E:20:AC:95:1B:59:50:DD:4F:A7:13:20:3C:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MfxYQJK_niCslRtZUN1PpxMgPMM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/a96094-db94-4546-a424-8908f0ab185b/1/MfxYQJK_niCslRtZUN1PpxMgPMM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
61:19:bc:06:e4:cd:5f:6e:bd:19:04:29:32:82:bc:53:44:ec:
74:e3:b5:7f:68:21:a5:ee:ff:ab:e6:73:69:ee:d8:11:13:bf:
4f:d9:b1:c7:24:24:54:dc:62:95:89:84:c0:77:21:46:fd:6c:
42:d8:ae:3a:dc:24:e2:5a:bf:79:40:12:fd:be:2c:f9:83:94:
30:e5:c8:5b:1a:d1:0e:0b:cc:f3:f0:b1:c9:4b:02:9a:9b:46:
3b:4b:a5:40:e4:b3:9d:76:3c:26:54:ec:2c:d7:50:c6:e2:8c:
52:ed:ec:4c:4f:c9:1f:27:7d:29:bc:26:4b:bc:ed:83:0b:0f:
c6:5b:3c:a6:ba:93:16:7a:55:a0:4a:da:8d:d8:ee:5a:fa:a3:
ae:31:a3:75:91:9c:26:f2:11:a8:60:5c:0a:e4:5f:8d:1c:55:
76:c0:02:2b:f9:17:d0:dd:56:dc:14:04:0a:00:e7:0c:8c:e3:
02:d7:d6:d3:10:2e:b2:a8:44:a2:4b:3a:7d:83:5f:f9:ef:47:
49:c5:ed:82:df:c4:f1:0f:a5:7e:f5:8e:fd:cc:82:2f:72:44:
65:0d:21:43:35:9a:62:1c:a6:f4:14:51:b6:ea:78:02:0d:18:
df:b4:15:5b:a4:47:04:9d:98:35:a2:ff:60:e2:26:72:bd:4a:
e2:82:76:d6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdSNAXqHQHi48oxpJJ09nP9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMxZmM1ODQwOTJiZjllMjBhYzk1MWI1OTUwZGQ0ZmE3MTMy
MDNjYzMwHhcNMjUwNjA5MDEwMDMwWhcNMjUwNjEwMDEwMDMwWjAzMTEwLwYDVQQD
Eyg1YzZkNmI4NWIxYTU5YTJmZjM5MjIxYzhmZjZkMjc5ZWQ2NTY1ZGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0Z8/ywA7nzf5ITlJ47i+GEebGucF
pExwlutwUDOqospZDIb442Ob2qONyezsBILJ9GGKwDv2dglFS4NYUgzKbsSj5+ht
HamEF3r7llL2dXnnqZtz6txITq6fb91Mr1NhsDxsv3jSa6srW9zyYs0lrBZoN0DV
/kPVNc7aUdDZuH76woSh4WwxXCtmL8T8Cm4kWHBSL8ttdbxXNS3NiVAOFc9zHPLV
tkrl0ITHvpfqNNMoh1VLShuezPLRi25VzP9hI6y7N9Oc8HBlhtdajES4XBoH4ZXZ
rEseICjTpk8+pc9SSu4tKNvzfKYtRfWJKxLeskVrC6u0pnMTujIDuizMSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFxta4WxpZov85IhyP9tJ57WVl20MB8GA1UdIwQY
MBaAFDH8WECSv54grJUbWVDdT6cTIDzDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWZ4WVFKS19uaUNzbFJ0WlVOMVBweE1nUE1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny9hOTYwOTQtZGI5NC00NTQ2LWE0MjQt
ODkwOGYwYWIxODViLzEvTWZ4WVFKS19uaUNzbFJ0WlVOMVBweE1nUE1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny9hOTYwOTQtZGI5NC00NTQ2LWE0MjQtODkwOGYwYWIxODVi
LzEvTWZ4WVFKS19uaUNzbFJ0WlVOMVBweE1nUE1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYRm8BuTN
X269GQQpMoK8U0TsdOO1f2ghpe7/q+Zzae7YERO/T9mxxyQkVNxilYmEwHchRv1s
QtiuOtwk4lq/eUAS/b4s+YOUMOXIWxrRDgvM8/CxyUsCmptGO0ulQOSznXY8JlTs
LNdQxuKMUu3sTE/JHyd9KbwmS7ztgwsPxls8prqTFnpVoErajdjuWvqjrjGjdZGc
JvIRqGBcCuRfjRxVdsACK/kX0N1W3BQECgDnDIzjAtfW0xAusqhEoks6fYNf+e9H
ScXtgt/E8Q+lfvWO/cyCL3JEZQ0hQzWaYhym9BRRtup4Ag0Y37QVW6RHBJ2YNaL/
YOImcr1K4oJ21g==
-----END CERTIFICATE-----
Generated at Mon Jun 9 07:50:26 2025 by rpki-client