Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
File: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft (raw, json)
Hash identifier: 84Gi1PsRjtVQ8hMQPo9zDMqcbAdF7ZZ94GmISgH0evM=
Subject key identifier: D2:5C:B7:CE:10:AB:1D:A1:B3:73:BB:39:8E:3A:48:A2:B1:B3:B6:E6
Authority key identifier: 84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E
Certificate issuer: /CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e
Certificate serial: 019749D612D783F15E31AC5E239C67D8B8AA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
Manifest number: AE
Signing time: Sat 07 Jun 2025 10:00:55 +0000
Manifest this update: Sat 07 Jun 2025 10:00:55 +0000
Manifest next update: Sun 08 Jun 2025 10:00:55 +0000
Files and hashes: 1: hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl (hash: uOXqiN/yMNxHdjPLrNrqKo3suD7G1gA0zAXbbBQ1KH0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:12:d7:83:f1:5e:31:ac:5e:23:9c:67:d8:b8:aa
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8499b66a26996ebd5cab0c2ec3b67c025bf1094e
Validity
Not Before: Jun 7 10:00:55 2025 GMT
Not After : Jun 8 10:00:55 2025 GMT
Subject: CN=d25cb7ce10ab1da1b373bb398e3a48a2b1b3b6e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:a8:e3:b4:4f:1c:b3:b3:5a:48:61:01:de:2e:
09:97:32:a5:80:23:b8:30:ca:18:f5:64:ff:c3:10:
b0:26:43:36:89:cf:bb:c2:95:59:e1:3b:cf:3b:67:
81:80:85:ae:b0:af:e5:94:3d:c9:a8:3b:4f:46:fd:
3f:f3:01:2f:c9:f1:3b:63:df:67:07:a0:02:dc:1c:
a3:3a:cf:9e:87:99:76:20:8d:a8:70:77:13:87:ca:
3c:e1:eb:0a:20:ea:17:00:9f:c5:d4:3a:76:c1:c7:
24:bd:5d:85:98:b2:65:93:49:75:57:56:e0:4a:07:
ac:eb:79:0f:95:07:fd:fd:91:06:20:fa:00:cd:03:
e1:4d:37:df:24:72:b8:c3:67:28:46:88:78:b0:8b:
25:77:be:d7:6d:d1:06:71:ba:fd:03:15:9c:b8:9b:
a6:b1:16:19:42:11:f9:ec:e6:62:1a:0f:dc:e4:af:
c1:1c:bc:6b:22:77:56:c5:06:ef:fb:ef:87:4c:54:
21:24:1d:1c:3e:15:8c:ec:2c:28:6b:0b:8a:32:3f:
f4:46:79:4e:ee:19:9b:7f:e2:b7:86:ee:e2:84:f3:
16:09:82:25:ec:7a:fc:41:ae:a5:43:4b:bd:ef:f0:
e6:f8:fb:ee:07:d9:ba:43:23:a0:ec:a2:f2:03:f8:
92:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D2:5C:B7:CE:10:AB:1D:A1:B3:73:BB:39:8E:3A:48:A2:B1:B3:B6:E6
X509v3 Authority Key Identifier:
keyid:84:99:B6:6A:26:99:6E:BD:5C:AB:0C:2E:C3:B6:7C:02:5B:F1:09:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/01bdae-86c5-4c15-a998-5c9f9bb2db11/1/hJm2aiaZbr1cqwwuw7Z8AlvxCU4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a9:df:cc:f6:e6:ee:e2:31:d3:09:70:9c:5f:00:1c:78:0f:96:
1e:61:13:d3:83:f3:bc:46:d0:89:66:4c:60:c2:65:ce:38:87:
51:1c:48:c4:3f:64:c5:20:c8:3c:6f:0b:49:91:49:fa:fd:0d:
08:5e:03:02:33:ae:62:63:5a:69:44:d8:f5:a1:bb:e2:ff:f4:
a5:bd:24:ff:b5:5a:10:5c:e0:8a:18:2a:09:43:df:b2:ac:12:
ca:7a:9e:85:08:1a:0c:b2:25:2f:db:da:15:35:1d:a3:1b:73:
e6:6a:a5:92:d2:96:a2:bb:7a:75:c4:62:67:de:c0:10:f5:0c:
66:05:76:01:5d:97:ec:7f:95:9e:4d:46:ee:dd:b5:d7:eb:77:
06:17:d0:31:83:3e:75:7b:25:96:1d:43:33:9d:51:80:44:67:
8e:de:4a:f8:c8:b3:01:79:01:cf:15:0e:40:f7:31:db:7f:1c:
60:e5:6f:7a:2e:0f:a4:fb:5e:28:65:6f:78:9c:15:1e:3a:b7:
55:84:74:96:71:88:91:f1:d5:24:9d:c5:0b:11:32:0f:09:b8:
0e:b8:4a:f5:f7:e6:1a:71:85:ee:34:a3:05:80:40:7c:81:32:
c6:ba:da:e1:a1:74:d6:0a:4b:db:84:39:b3:19:9b:90:cd:f3:
7a:1c:23:ba
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1hLXg/FeMaxeI5xn2LiqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0OTliNjZhMjY5OTZlYmQ1Y2FiMGMyZWMzYjY3YzAyNWJm
MTA5NGUwHhcNMjUwNjA3MTAwMDU1WhcNMjUwNjA4MTAwMDU1WjAzMTEwLwYDVQQD
EyhkMjVjYjdjZTEwYWIxZGExYjM3M2JiMzk4ZTNhNDhhMmIxYjNiNmU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvajjtE8cs7NaSGEB3i4JlzKlgCO4
MMoY9WT/wxCwJkM2ic+7wpVZ4TvPO2eBgIWusK/llD3JqDtPRv0/8wEvyfE7Y99n
B6AC3ByjOs+eh5l2II2ocHcTh8o84esKIOoXAJ/F1Dp2wcckvV2FmLJlk0l1V1bg
Sges63kPlQf9/ZEGIPoAzQPhTTffJHK4w2coRoh4sIsld77XbdEGcbr9AxWcuJum
sRYZQhH57OZiGg/c5K/BHLxrIndWxQbv+++HTFQhJB0cPhWM7CwoawuKMj/0RnlO
7hmbf+K3hu7ihPMWCYIl7Hr8Qa6lQ0u97/Dm+PvuB9m6QyOg7KLyA/iSSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNJct84Qqx2hs3O7OY46SKKxs7bmMB8GA1UdIwQY
MBaAFISZtmommW69XKsMLsO2fAJb8QlOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC8wMWJkYWUtODZjNS00YzE1LWE5OTgt
NWM5ZjliYjJkYjExLzEvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC8wMWJkYWUtODZjNS00YzE1LWE5OTgtNWM5ZjliYjJkYjEx
LzEvaEptMmFpYVpicjFjcXd3dXc3WjhBbHZ4Q1U0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqd/M9ubu
4jHTCXCcXwAceA+WHmET04PzvEbQiWZMYMJlzjiHURxIxD9kxSDIPG8LSZFJ+v0N
CF4DAjOuYmNaaUTY9aG74v/0pb0k/7VaEFzgihgqCUPfsqwSynqehQgaDLIlL9va
FTUdoxtz5mqlktKWort6dcRiZ97AEPUMZgV2AV2X7H+Vnk1G7t211+t3BhfQMYM+
dXsllh1DM51RgERnjt5K+MizAXkBzxUOQPcx238cYOVvei4PpPteKGVveJwVHjq3
VYR0lnGIkfHVJJ3FCxEyDwm4DrhK9ffmGnGF7jSjBYBAfIEyxrra4aF01gpL24Q5
sxmbkM3zehwjug==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:35 2025 by rpki-client