Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
File: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft (raw, json)
Hash identifier: 5UFiBlp7WyPMQfuFVpelIHVtyff0q9h5G5w7Pulfl6g=
Subject key identifier: 5A:4B:FB:DB:B9:03:29:FC:76:5E:29:34:1F:A8:5E:A5:76:74:35:AB
Authority key identifier: 9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
Certificate issuer: /CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Certificate serial: 019763963549B4E95C29288763C2B2A5770E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
Manifest number: 0ACE
Signing time: Thu 12 Jun 2025 10:01:17 +0000
Manifest this update: Thu 12 Jun 2025 10:01:17 +0000
Manifest next update: Fri 13 Jun 2025 10:01:17 +0000
Files and hashes: 1: n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl (hash: pvkaDU4fxdSW+6pEJuq8ychPg21g4H8omOV2JwtlDMg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 10:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:63:96:35:49:b4:e9:5c:29:28:87:63:c2:b2:a5:77:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9ff07f509e947b267f87ba0ade89ec4d3ae56a3e
Validity
Not Before: Jun 12 10:01:17 2025 GMT
Not After : Jun 13 10:01:17 2025 GMT
Subject: CN=5a4bfbdbb90329fc765e29341fa85ea5767435ab
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:88:38:66:58:99:15:e9:25:e9:dd:3a:2a:9f:
d8:a8:be:4a:ae:e1:78:3f:cf:5c:b0:84:95:5f:8f:
63:ac:40:4c:05:de:c9:0d:e9:bc:96:28:84:8b:11:
a1:be:35:70:f9:9f:e2:cc:e6:ea:4b:34:8f:b6:0c:
ef:45:32:96:a5:c6:f8:37:97:bd:f9:fc:ad:ac:0c:
64:59:9d:5e:6b:a2:95:10:dc:f7:46:5d:c9:92:62:
8c:9a:f3:3b:d8:7d:82:e8:b0:2a:a4:83:ba:de:0c:
ca:8b:f7:91:73:1d:db:eb:51:05:00:e1:8d:c4:81:
a6:53:49:fa:f9:5b:95:d2:f0:87:e5:b8:af:d5:2b:
3c:23:fc:89:c8:72:01:87:ee:9b:95:ee:38:67:cf:
00:ff:c2:6d:ff:c8:7d:ff:33:5e:7d:30:fd:54:7c:
18:27:98:f3:34:31:86:3f:54:80:24:43:85:b4:c5:
2f:89:50:94:fa:cf:1a:81:b9:8b:bd:96:2f:1a:d9:
12:b1:02:af:3a:41:78:ee:f0:15:f0:1a:db:f3:f5:
ec:0b:44:67:e1:97:36:e7:1a:f7:7a:62:dd:f0:c7:
15:b6:1d:de:08:e9:e5:e1:9a:f9:85:1c:11:a1:a9:
ae:7e:f6:d7:94:06:e1:16:bb:ca:ac:a2:d2:d6:37:
72:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:4B:FB:DB:B9:03:29:FC:76:5E:29:34:1F:A8:5E:A5:76:74:35:AB
X509v3 Authority Key Identifier:
keyid:9F:F0:7F:50:9E:94:7B:26:7F:87:BA:0A:DE:89:EC:4D:3A:E5:6A:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9a/41953a-79ba-4402-bcde-8998aaa7f315/1/n_B_UJ6UeyZ_h7oK3onsTTrlaj4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:87:fa:49:97:17:ca:9d:6f:ad:1a:fe:37:93:4b:9c:b8:04:
f8:65:2c:b2:0d:5a:62:35:4a:ea:2e:05:9b:1e:43:6d:94:ee:
6c:3f:72:ec:84:4a:4a:72:7c:b7:0b:81:f9:f7:d1:fc:29:32:
d4:6c:83:40:48:54:2e:72:31:cd:5d:20:4b:7c:01:dc:79:d1:
78:e7:c5:59:98:72:77:71:82:0c:af:67:fe:37:8b:d6:36:99:
5d:49:78:44:d4:79:96:0c:50:fd:cd:f3:31:7d:f1:e3:6c:05:
10:d5:cc:38:55:fc:f9:7a:6b:3f:ae:92:39:b9:6b:c4:3a:ab:
d6:f0:2a:46:24:e5:96:96:c6:aa:04:e5:e9:a8:2f:4f:4b:f0:
64:68:0f:b4:0c:54:f2:7b:f0:53:ce:c3:db:e0:4a:5f:be:2f:
03:cc:68:8f:db:f6:db:16:9d:5c:1a:e6:b6:2c:5f:fc:86:5b:
19:bb:f3:5c:c5:39:e6:5b:6b:e6:83:fe:af:fa:59:37:04:3d:
d1:7e:6e:6d:5c:be:06:7d:f0:aa:e5:24:5d:f6:1d:04:e5:cd:
22:68:70:e4:46:59:b5:d3:cf:13:04:b0:01:9b:24:be:ef:3c:
a6:13:64:c7:94:d7:e9:00:7f:a1:3c:52:15:22:93:a0:62:35:
ef:c6:1d:cd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdjljVJtOlcKSiHY8KypXcOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmZjA3ZjUwOWU5NDdiMjY3Zjg3YmEwYWRlODllYzRkM2Fl
NTZhM2UwHhcNMjUwNjEyMTAwMTE3WhcNMjUwNjEzMTAwMTE3WjAzMTEwLwYDVQQD
Eyg1YTRiZmJkYmI5MDMyOWZjNzY1ZTI5MzQxZmE4NWVhNTc2NzQzNWFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmYg4ZliZFekl6d06Kp/YqL5KruF4
P89csISVX49jrEBMBd7JDem8liiEixGhvjVw+Z/izObqSzSPtgzvRTKWpcb4N5e9
+fytrAxkWZ1ea6KVENz3Rl3JkmKMmvM72H2C6LAqpIO63gzKi/eRcx3b61EFAOGN
xIGmU0n6+VuV0vCH5biv1Ss8I/yJyHIBh+6ble44Z88A/8Jt/8h9/zNefTD9VHwY
J5jzNDGGP1SAJEOFtMUviVCU+s8agbmLvZYvGtkSsQKvOkF47vAV8Brb8/XsC0Rn
4Zc25xr3emLd8McVth3eCOnl4Zr5hRwRoamufvbXlAbhFrvKrKLS1jdyQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFpL+9u5Ayn8dl4pNB+oXqV2dDWrMB8GA1UdIwQY
MBaAFJ/wf1CelHsmf4e6Ct6J7E065Wo+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85YS80MTk1M2EtNzliYS00NDAyLWJjZGUt
ODk5OGFhYTdmMzE1LzEvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85YS80MTk1M2EtNzliYS00NDAyLWJjZGUtODk5OGFhYTdmMzE1
LzEvbl9CX1VKNlVleVpfaDdvSzNvbnNUVHJsYWo0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPof6SZcX
yp1vrRr+N5NLnLgE+GUssg1aYjVK6i4Fmx5DbZTubD9y7IRKSnJ8twuB+ffR/Cky
1GyDQEhULnIxzV0gS3wB3HnReOfFWZhyd3GCDK9n/jeL1jaZXUl4RNR5lgxQ/c3z
MX3x42wFENXMOFX8+XprP66SOblrxDqr1vAqRiTllpbGqgTl6agvT0vwZGgPtAxU
8nvwU87D2+BKX74vA8xoj9v22xadXBrmtixf/IZbGbvzXMU55ltr5oP+r/pZNwQ9
0X5ubVy+Bn3wquUkXfYdBOXNImhw5EZZtdPPEwSwAZskvu88phNkx5TX6QB/oTxS
FSKToGI178YdzQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 18:43:21 2025 by rpki-client