Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
File: pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft (raw, json)
Hash identifier: mnbjhse0Z1rjM5ua4G7VG1Pg0G/a9eZXkv/0KIt36iI=
Subject key identifier: 85:66:D3:42:0A:7D:84:6B:22:9E:72:EB:29:89:5B:EF:27:C7:EF:C6
Authority key identifier: A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5
Certificate issuer: /CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
Certificate serial: 01974E578AF46B251AC51AB1BA854D89028B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
Manifest number: 157B
Signing time: Sun 08 Jun 2025 07:00:49 +0000
Manifest this update: Sun 08 Jun 2025 07:00:49 +0000
Manifest next update: Mon 09 Jun 2025 07:00:49 +0000
Files and hashes: 1: pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl (hash: g8i/IX5YulBRpKF/aGgzY5HPlqqdkRrjhMsawpxIkF0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl
rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:57:8a:f4:6b:25:1a:c5:1a:b1:ba:85:4d:89:02:8b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a6ad5e70013f4df8455fa06c93e60012c29973d5
Validity
Not Before: Jun 8 07:00:49 2025 GMT
Not After : Jun 9 07:00:49 2025 GMT
Subject: CN=8566d3420a7d846b229e72eb29895bef27c7efc6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f4:b2:04:b2:aa:ae:81:fa:d7:f8:95:7b:17:ec:
a9:86:d6:cc:ea:2a:95:65:60:ad:8d:8d:e3:58:77:
6c:aa:a4:78:2d:03:34:5e:61:30:d5:19:b9:3b:0c:
3a:a4:01:a7:e4:d5:aa:30:ea:eb:d3:f8:e9:a6:e1:
cf:38:ad:56:a7:87:0e:45:00:d9:dc:f4:8d:13:99:
d1:06:bd:8b:ee:92:a7:88:32:d5:b5:bc:14:a9:66:
29:57:a2:42:88:0e:19:f6:a6:c2:7e:05:a1:7a:6e:
b2:c8:2e:84:58:07:a8:87:04:ef:c8:2a:bc:b2:5a:
51:fd:23:57:f9:ef:26:67:80:ac:2c:76:c6:07:43:
5d:50:69:75:23:45:30:38:e7:b2:a9:d8:8c:90:84:
0a:29:ef:c9:2f:a2:5a:15:79:cc:18:86:20:d3:6e:
5b:a0:79:d2:b8:34:eb:a3:5c:4d:1d:ab:5d:c7:f2:
0c:5b:d4:4c:78:30:e1:a1:bd:39:e3:85:73:22:60:
f5:f1:e8:b9:29:ef:0d:94:45:35:21:06:da:aa:d8:
b7:d9:1e:66:ac:65:fa:93:bb:d6:8c:b9:02:e4:52:
01:b0:e4:de:38:c8:12:3c:c9:a6:db:a4:4e:eb:8f:
09:55:04:aa:48:0f:b7:c1:ae:3d:34:b5:5e:f1:42:
c9:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:66:D3:42:0A:7D:84:6B:22:9E:72:EB:29:89:5B:EF:27:C7:EF:C6
X509v3 Authority Key Identifier:
keyid:A6:AD:5E:70:01:3F:4D:F8:45:5F:A0:6C:93:E6:00:12:C2:99:73:D5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8f/546b9b-df0f-4970-a68e-36870337077e/1/pq1ecAE_TfhFX6Bsk-YAEsKZc9U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0e:82:c0:c0:0a:2e:6e:c6:04:67:fb:c1:cd:a6:d1:35:7f:76:
03:d2:2f:64:cf:5a:d4:0b:5e:1e:72:e5:f1:6e:fd:a8:da:81:
c8:4c:fe:8c:5e:18:99:1f:d1:09:50:c0:99:9d:b5:bd:0d:fe:
e8:c0:5b:c4:34:fa:82:2c:d2:c1:8a:b9:92:4e:e1:fc:ed:0f:
01:66:35:05:c3:d8:64:ea:c1:a0:46:4e:3e:f6:85:65:3d:10:
83:38:84:bc:64:7e:0e:a7:54:83:ad:c3:c3:14:cc:5d:26:ae:
49:6c:05:22:28:ed:a0:5d:04:15:53:7a:48:ed:b9:b7:43:10:
95:2c:db:46:3b:d4:3f:29:97:f9:41:41:47:f4:44:04:10:03:
03:65:fa:a8:39:c5:ad:0d:bf:ad:ff:99:72:ef:30:d0:25:ec:
b8:b3:aa:73:2e:49:9d:bc:8b:ea:b0:0b:72:17:d9:d7:1c:61:
96:aa:4f:c8:cd:aa:89:2b:9b:9b:19:4d:6a:08:9a:d6:cb:e5:
44:27:d4:45:d4:45:d4:0b:89:cf:80:26:14:90:78:40:9b:70:
aa:53:a3:72:0a:78:ed:d8:7d:9e:d3:53:a1:46:ca:2a:97:8d:
39:f1:d0:b2:6e:0e:8b:70:c3:35:7e:e5:4f:10:52:ee:57:ad:
ea:7c:2c:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOV4r0ayUaxRqxuoVNiQKLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2YWQ1ZTcwMDEzZjRkZjg0NTVmYTA2YzkzZTYwMDEyYzI5
OTczZDUwHhcNMjUwNjA4MDcwMDQ5WhcNMjUwNjA5MDcwMDQ5WjAzMTEwLwYDVQQD
Eyg4NTY2ZDM0MjBhN2Q4NDZiMjI5ZTcyZWIyOTg5NWJlZjI3YzdlZmM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA9LIEsqqugfrX+JV7F+yphtbM6iqV
ZWCtjY3jWHdsqqR4LQM0XmEw1Rm5Oww6pAGn5NWqMOrr0/jppuHPOK1Wp4cORQDZ
3PSNE5nRBr2L7pKniDLVtbwUqWYpV6JCiA4Z9qbCfgWhem6yyC6EWAeohwTvyCq8
slpR/SNX+e8mZ4CsLHbGB0NdUGl1I0UwOOeyqdiMkIQKKe/JL6JaFXnMGIYg025b
oHnSuDTro1xNHatdx/IMW9RMeDDhob0544VzImD18ei5Ke8NlEU1IQbaqti32R5m
rGX6k7vWjLkC5FIBsOTeOMgSPMmm26RO648JVQSqSA+3wa49NLVe8ULJTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIVm00IKfYRrIp5y6ymJW+8nx+/GMB8GA1UdIwQY
MBaAFKatXnABP034RV+gbJPmABLCmXPVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcHExZWNBRV9UZmhGWDZCc2stWUFFc0taYzlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Zi81NDZiOWItZGYwZi00OTcwLWE2OGUt
MzY4NzAzMzcwNzdlLzEvcHExZWNBRV9UZmhGWDZCc2stWUFFc0taYzlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Zi81NDZiOWItZGYwZi00OTcwLWE2OGUtMzY4NzAzMzcwNzdl
LzEvcHExZWNBRV9UZmhGWDZCc2stWUFFc0taYzlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADoLAwAou
bsYEZ/vBzabRNX92A9IvZM9a1AteHnLl8W79qNqByEz+jF4YmR/RCVDAmZ21vQ3+
6MBbxDT6gizSwYq5kk7h/O0PAWY1BcPYZOrBoEZOPvaFZT0QgziEvGR+DqdUg63D
wxTMXSauSWwFIijtoF0EFVN6SO25t0MQlSzbRjvUPymX+UFBR/REBBADA2X6qDnF
rQ2/rf+Zcu8w0CXsuLOqcy5JnbyL6rALchfZ1xxhlqpPyM2qiSubmxlNagia1svl
RCfURdRF1AuJz4AmFJB4QJtwqlOjcgp47dh9ntNToUbKKpeNOfHQsm4Oi3DDNX7l
TxBS7let6nws0w==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:50:04 2025 by rpki-client