Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
File: u9Qr14Mqar4W4VIqLX5OQNProKI.mft (raw, json)
Hash identifier: KCBa3zECFMn7bZ3jS1g9yEzZyo17hlOCmLsp25HeAbM=
Subject key identifier: 1D:44:17:A6:09:56:B4:48:A9:0D:71:20:F3:D6:60:87:5A:B7:47:44
Authority key identifier: BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
Certificate issuer: /CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Certificate serial: 0197493144D99DA1B91A61BD0E7A9C97A90D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
Manifest number: 1578
Signing time: Sat 07 Jun 2025 07:00:55 +0000
Manifest this update: Sat 07 Jun 2025 07:00:55 +0000
Manifest next update: Sun 08 Jun 2025 07:00:55 +0000
Files and hashes: 1: u9Qr14Mqar4W4VIqLX5OQNProKI.crl (hash: MRl/7j2nSOPUWM0HWjVqkliF6su2RSi/id0uvUIY3kM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:44:d9:9d:a1:b9:1a:61:bd:0e:7a:9c:97:a9:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bbd42bd7832a6abe16e1522a2d7e4e40d3eba0a2
Validity
Not Before: Jun 7 07:00:55 2025 GMT
Not After : Jun 8 07:00:55 2025 GMT
Subject: CN=1d4417a60956b448a90d7120f3d660875ab74744
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:1c:72:75:c5:ac:3b:eb:d7:ac:7b:89:8f:5d:
42:a3:c4:a1:f8:ea:a1:32:71:e6:7f:2e:9c:da:6f:
28:7f:cc:96:07:03:9a:fa:05:a7:bb:fc:74:7f:00:
80:42:66:c7:d9:2c:d5:0e:4a:26:dd:00:c7:d8:d7:
ee:10:07:5b:bf:53:04:61:cc:c7:56:eb:da:79:0b:
e5:cf:c0:30:2e:89:b1:f3:44:69:f1:88:92:80:6d:
76:b5:4d:9d:8a:f9:90:bc:85:a2:ae:4c:30:18:4a:
0c:19:ac:76:57:22:ca:58:c6:59:54:fe:72:c3:74:
2c:fd:41:83:ba:81:44:3d:20:07:bf:a6:a1:7f:d2:
98:d5:a3:fc:e5:99:a7:af:f6:d8:82:09:65:2a:f9:
20:8e:a7:6a:19:43:32:dd:0c:08:cc:a5:27:66:46:
09:f7:31:89:30:c8:b2:4f:3e:a1:36:e3:38:2b:48:
7d:ee:27:0d:89:8b:6c:04:87:d8:dd:9b:a9:40:4d:
d1:4b:28:92:69:7f:5a:8e:23:7a:8a:bb:a9:9d:79:
bf:06:96:dd:23:b0:b4:04:3f:91:d1:e3:ea:81:0f:
81:19:af:f3:a1:1f:02:20:61:b2:d1:5b:79:ca:13:
d5:47:e6:04:8b:6c:00:d8:34:d5:f5:04:ee:73:d1:
39:bb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:44:17:A6:09:56:B4:48:A9:0D:71:20:F3:D6:60:87:5A:B7:47:44
X509v3 Authority Key Identifier:
keyid:BB:D4:2B:D7:83:2A:6A:BE:16:E1:52:2A:2D:7E:4E:40:D3:EB:A0:A2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u9Qr14Mqar4W4VIqLX5OQNProKI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/d3ff63-e098-4e75-a346-80c8a867d771/1/u9Qr14Mqar4W4VIqLX5OQNProKI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:a7:85:e0:14:2f:1c:c5:21:a7:89:13:72:c3:5c:19:ff:68:
59:d3:d6:4e:2e:22:ab:68:0f:b8:e2:2d:84:67:d9:34:a4:a6:
81:e4:a6:ff:3a:da:8d:9f:cc:84:fc:ee:12:13:e0:83:9d:34:
6d:23:6f:9a:b1:08:41:60:19:b4:23:11:1a:66:b0:a0:54:62:
93:fa:25:95:1e:46:6f:17:d1:80:63:ee:69:7f:52:53:8e:6d:
87:6a:28:0d:86:a9:5a:13:21:38:2d:96:86:22:5b:a9:56:dc:
30:8e:03:c9:18:aa:af:23:4a:f1:e6:68:35:78:74:20:41:ed:
f3:3e:44:c3:2e:3a:df:ee:92:20:7d:8b:2b:9a:ef:9d:f5:33:
e5:7f:10:2a:bf:c3:6b:35:4d:31:19:36:88:71:0e:0b:5e:90:
a6:c3:61:80:08:2c:54:41:50:1d:1a:c7:d1:ec:3b:2d:63:3e:
79:f5:ff:1b:d0:85:27:5e:8d:7f:de:00:43:5b:df:34:17:83:
9e:cd:59:86:e0:8c:62:22:11:54:c5:51:c3:08:f3:82:61:ff:
20:fa:7a:7d:4c:56:0f:7c:7c:ac:7e:c1:56:19:d5:ff:fc:ef:
fd:a9:7c:a5:dc:f7:ad:65:3d:44:1c:16:3f:58:13:2e:7b:96:
fd:17:d2:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMUTZnaG5GmG9Dnqcl6kNMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiZDQyYmQ3ODMyYTZhYmUxNmUxNTIyYTJkN2U0ZTQwZDNl
YmEwYTIwHhcNMjUwNjA3MDcwMDU1WhcNMjUwNjA4MDcwMDU1WjAzMTEwLwYDVQQD
EygxZDQ0MTdhNjA5NTZiNDQ4YTkwZDcxMjBmM2Q2NjA4NzVhYjc0NzQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvBxydcWsO+vXrHuJj11Co8Sh+Oqh
MnHmfy6c2m8of8yWBwOa+gWnu/x0fwCAQmbH2SzVDkom3QDH2NfuEAdbv1MEYczH
VuvaeQvlz8AwLomx80Rp8YiSgG12tU2divmQvIWirkwwGEoMGax2VyLKWMZZVP5y
w3Qs/UGDuoFEPSAHv6ahf9KY1aP85Zmnr/bYggllKvkgjqdqGUMy3QwIzKUnZkYJ
9zGJMMiyTz6hNuM4K0h97icNiYtsBIfY3ZupQE3RSyiSaX9ajiN6irupnXm/Bpbd
I7C0BD+R0ePqgQ+BGa/zoR8CIGGy0Vt5yhPVR+YEi2wA2DTV9QTuc9E5uwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB1EF6YJVrRIqQ1xIPPWYIdat0dEMB8GA1UdIwQY
MBaAFLvUK9eDKmq+FuFSKi1+TkDT66CiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9kM2ZmNjMtZTA5OC00ZTc1LWEzNDYt
ODBjOGE4NjdkNzcxLzEvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9kM2ZmNjMtZTA5OC00ZTc1LWEzNDYtODBjOGE4NjdkNzcx
LzEvdTlRcjE0TXFhcjRXNFZJcUxYNU9RTlByb0tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD6eF4BQv
HMUhp4kTcsNcGf9oWdPWTi4iq2gPuOIthGfZNKSmgeSm/zrajZ/MhPzuEhPgg500
bSNvmrEIQWAZtCMRGmawoFRik/ollR5GbxfRgGPuaX9SU45th2ooDYapWhMhOC2W
hiJbqVbcMI4DyRiqryNK8eZoNXh0IEHt8z5Ewy463+6SIH2LK5rvnfUz5X8QKr/D
azVNMRk2iHEOC16QpsNhgAgsVEFQHRrH0ew7LWM+efX/G9CFJ16Nf94AQ1vfNBeD
ns1ZhuCMYiIRVMVRwwjzgmH/IPp6fUxWD3x8rH7BVhnV//zv/al8pdz3rWU9RBwW
P1gTLnuW/RfSGw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 11:38:41 2025 by rpki-client