Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
File: RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft (raw, json)
Hash identifier: ev65K1WsuChM8PIFfUOKhtevHMBTXz7nmh9abeatjXY=
Subject key identifier: A5:C5:8F:87:94:E0:36:41:25:34:8D:E7:BF:0B:41:83:09:37:C8:5F
Authority key identifier: 44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
Certificate issuer: /CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Certificate serial: 01974BFB41EDA811A4441D82F28108ADF4F0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
Manifest number: 02ED
Signing time: Sat 07 Jun 2025 20:00:46 +0000
Manifest this update: Sat 07 Jun 2025 20:00:46 +0000
Manifest next update: Sun 08 Jun 2025 20:00:46 +0000
Files and hashes: 1: RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl (hash: IGsr8pB+6ka6R2eDZtNPm5KxqIoIrATVRmtPMXNUlDc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:fb:41:ed:a8:11:a4:44:1d:82:f2:81:08:ad:f4:f0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4410d28a9274f9df1065b7f62f8b8997739c047d
Validity
Not Before: Jun 7 20:00:46 2025 GMT
Not After : Jun 8 20:00:46 2025 GMT
Subject: CN=a5c58f8794e0364125348de7bf0b41830937c85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:94:ed:84:7e:a9:51:61:43:fc:05:ff:21:0a:
7c:d6:63:1f:32:62:3b:55:df:8c:d1:0e:08:ba:f2:
09:c2:60:b3:9e:30:8b:93:ce:bb:7b:1f:4d:b4:ba:
06:d5:29:76:22:e9:28:64:5e:d6:57:0b:91:ac:27:
28:99:3c:df:bc:8c:1c:51:71:81:f2:68:14:8e:f0:
ca:22:77:cd:dd:ad:fd:af:92:e0:ee:57:82:f4:cf:
b5:9d:61:9f:e7:46:1c:57:41:a8:8e:f3:ca:68:c7:
1c:1b:06:d8:3a:ee:90:c7:96:89:91:8c:f8:ff:f9:
6e:91:c7:cc:d8:70:46:d3:29:2f:d0:8b:b4:ef:4b:
34:1f:6f:54:6c:49:7f:39:35:ae:f8:ec:52:29:37:
7c:c1:7b:e1:bb:1e:aa:91:0e:0c:ba:ae:e9:ce:a5:
d6:b5:b4:fd:c7:24:e1:b6:0e:50:02:0f:37:3c:0d:
c5:fa:f6:96:7e:2a:75:45:df:13:db:a4:8e:74:1d:
61:70:31:54:01:eb:7e:88:d5:e1:08:ce:54:e2:9d:
ab:50:25:2a:48:6e:4d:b3:f5:dc:fb:fe:dd:62:27:
5e:be:d5:60:23:74:b2:2b:cf:96:5e:e5:8c:8c:6b:
b0:3a:f1:58:bf:04:1c:98:b2:3a:51:32:b5:30:20:
ea:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A5:C5:8F:87:94:E0:36:41:25:34:8D:E7:BF:0B:41:83:09:37:C8:5F
X509v3 Authority Key Identifier:
keyid:44:10:D2:8A:92:74:F9:DF:10:65:B7:F6:2F:8B:89:97:73:9C:04:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RBDSipJ0-d8QZbf2L4uJl3OcBH0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/33aa2f-c409-4c70-ae0e-907838b5725f/1/RBDSipJ0-d8QZbf2L4uJl3OcBH0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b5:b3:0b:de:59:da:66:c7:ea:f7:a0:9b:92:e4:f5:2f:b7:5e:
67:29:33:e6:a9:00:07:2b:3e:64:31:69:ff:b2:fa:33:b4:08:
c0:f0:f3:6c:86:cf:2f:0e:52:ea:79:53:ae:9a:ce:c6:50:12:
f6:80:b0:4a:32:b7:bf:86:c9:e2:d3:f8:04:44:4a:a3:5b:5b:
8f:90:ec:e5:7a:ca:2c:6d:42:b5:2e:7a:9e:89:4d:0b:89:fb:
9a:17:b8:91:08:9c:4d:11:ac:98:4b:b3:c4:fb:47:69:5e:71:
f5:e8:c6:ea:0c:e6:ab:7e:8b:a6:bf:64:4b:8f:2a:6a:d8:a4:
e0:9e:31:fb:f0:2a:f3:0a:40:a4:2e:2d:bf:df:de:e7:69:98:
d5:08:87:2f:7e:f1:15:cb:74:8e:12:78:73:38:07:f5:70:2f:
a2:a2:5d:23:07:a5:b4:55:31:bf:41:74:48:af:7e:a5:35:41:
ed:8a:b0:1d:5b:ff:55:09:23:ff:6b:c9:84:c4:7d:a6:83:2c:
fe:61:7b:ee:38:41:8e:64:71:36:23:cf:df:3d:3b:ac:b8:d1:
a1:4e:0b:f9:db:cd:0d:3f:ad:ca:ec:89:b4:f0:6e:ef:75:93:
49:bc:24:3e:6a:cf:0f:d2:42:50:a5:41:42:aa:bc:c3:57:ca:
54:9e:cd:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdL+0HtqBGkRB2C8oEIrfTwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MTBkMjhhOTI3NGY5ZGYxMDY1YjdmNjJmOGI4OTk3NzM5
YzA0N2QwHhcNMjUwNjA3MjAwMDQ2WhcNMjUwNjA4MjAwMDQ2WjAzMTEwLwYDVQQD
EyhhNWM1OGY4Nzk0ZTAzNjQxMjUzNDhkZTdiZjBiNDE4MzA5MzdjODVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpTthH6pUWFD/AX/IQp81mMfMmI7
Vd+M0Q4IuvIJwmCznjCLk867ex9NtLoG1Sl2IukoZF7WVwuRrCcomTzfvIwcUXGB
8mgUjvDKInfN3a39r5Lg7leC9M+1nWGf50YcV0GojvPKaMccGwbYOu6Qx5aJkYz4
//lukcfM2HBG0ykv0Iu070s0H29UbEl/OTWu+OxSKTd8wXvhux6qkQ4Muq7pzqXW
tbT9xyThtg5QAg83PA3F+vaWfip1Rd8T26SOdB1hcDFUAet+iNXhCM5U4p2rUCUq
SG5Ns/Xc+/7dYidevtVgI3SyK8+WXuWMjGuwOvFYvwQcmLI6UTK1MCDqtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKXFj4eU4DZBJTSN578LQYMJN8hfMB8GA1UdIwQY
MBaAFEQQ0oqSdPnfEGW39i+LiZdznAR9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkJEU2lwSjAtZDhRWmJmMkw0dUpsM09jQkgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi8zM2FhMmYtYzQwOS00YzcwLWFlMGUt
OTA3ODM4YjU3MjVmLzEvUkJEU2lwSjAtZDhRWmJmMkw0dUpsM09jQkgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi8zM2FhMmYtYzQwOS00YzcwLWFlMGUtOTA3ODM4YjU3MjVm
LzEvUkJEU2lwSjAtZDhRWmJmMkw0dUpsM09jQkgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtbML3lna
Zsfq96CbkuT1L7deZykz5qkABys+ZDFp/7L6M7QIwPDzbIbPLw5S6nlTrprOxlAS
9oCwSjK3v4bJ4tP4BERKo1tbj5Ds5XrKLG1CtS56nolNC4n7mhe4kQicTRGsmEuz
xPtHaV5x9ejG6gzmq36Lpr9kS48qatik4J4x+/Aq8wpApC4tv9/e52mY1QiHL37x
Fct0jhJ4czgH9XAvoqJdIweltFUxv0F0SK9+pTVB7YqwHVv/VQkj/2vJhMR9poMs
/mF77jhBjmRxNiPP3z07rLjRoU4L+dvNDT+tyuyJtPBu73WTSbwkPmrPD9JCUKVB
Qqq8w1fKVJ7NEA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:03 2025 by rpki-client