
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
File: dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft (raw, json)
Hash identifier: VlEjgwKiCjDipAXlOzEjpzUnFupZvkXzK2dSbUoGGfU=
Subject key identifier: 58:00:A7:61:41:5F:9D:6C:38:30:3D:D5:06:3D:AD:FE:5D:66:4C:67
Authority key identifier: 75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
Certificate issuer: /CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Certificate serial: 01974E20810C7C062A55F9EF2632045B9A24
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
Manifest number: 09A5
Signing time: Sun 08 Jun 2025 06:00:42 +0000
Manifest this update: Sun 08 Jun 2025 06:00:42 +0000
Manifest next update: Mon 09 Jun 2025 06:00:42 +0000
Files and hashes: 1: dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl (hash: 5288Bi7Yf1SkX0OdfQ+molAwo+oL4bQdRd6cMc6yHWU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:81:0c:7c:06:2a:55:f9:ef:26:32:04:5b:9a:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=759aaa36150ee155c3b51ad9c707f6c43bf2be63
Validity
Not Before: Jun 8 06:00:42 2025 GMT
Not After : Jun 9 06:00:42 2025 GMT
Subject: CN=5800a761415f9d6c38303dd5063dadfe5d664c67
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:04:7e:8a:56:41:49:47:48:be:74:fd:17:70:
08:cf:bc:17:c8:e0:df:7e:6e:3e:0e:04:ff:6c:e9:
f7:ad:d5:24:11:e2:b1:86:a4:e2:dd:68:0b:cd:ad:
07:9d:94:d8:3a:a2:49:de:11:d4:63:e8:34:99:d5:
4c:0e:bf:3a:31:da:01:92:cd:69:5e:ff:22:27:94:
44:14:25:a7:cc:10:33:1a:06:29:7d:57:21:39:d6:
98:7f:7c:08:aa:2b:c2:9c:d7:92:92:9a:66:ae:5e:
e1:48:ad:d1:0b:08:5a:ae:a0:e5:bd:c7:9a:a3:43:
de:92:d5:55:ae:7e:7b:c3:bf:05:8b:f3:06:0f:83:
41:d7:56:2f:e4:33:e0:96:f7:12:e4:49:37:02:8d:
f7:11:f5:ab:d3:78:a7:01:9c:3d:6e:4d:e5:c7:e1:
43:c2:15:e7:ec:ca:4a:a4:08:c8:b8:85:87:db:9d:
12:ed:37:26:36:2b:94:e2:36:89:bc:03:6e:25:e8:
bd:d7:6a:df:05:4d:17:73:32:46:35:e2:69:a5:65:
89:4f:cb:43:52:0b:13:c5:8e:b9:3d:ba:77:6a:1d:
b3:cc:c5:1d:3c:f0:0a:cb:9b:b8:92:1d:ae:ba:47:
21:65:7e:79:00:90:89:02:e3:d5:b4:84:4e:3c:ce:
62:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
58:00:A7:61:41:5F:9D:6C:38:30:3D:D5:06:3D:AD:FE:5D:66:4C:67
X509v3 Authority Key Identifier:
keyid:75:9A:AA:36:15:0E:E1:55:C3:B5:1A:D9:C7:07:F6:C4:3B:F2:BE:63
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dZqqNhUO4VXDtRrZxwf2xDvyvmM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/f2afdf-e3cc-4939-ae4e-73d10d5b9fec/1/dZqqNhUO4VXDtRrZxwf2xDvyvmM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:6c:ff:50:84:53:e4:44:80:62:f1:ed:00:52:96:d0:7f:c6:
85:42:70:5f:8a:6c:c9:e4:10:37:a2:f1:bb:e6:61:13:fc:c7:
0f:ac:02:67:54:64:9b:27:93:33:a9:f0:2b:76:9b:da:6e:7e:
16:2b:3b:ee:75:27:40:cb:6c:f4:fa:ef:34:2a:83:1b:f7:dd:
33:0e:2f:65:46:4f:0b:08:1f:6a:35:76:60:e3:bb:99:d0:37:
72:33:2f:a4:3c:bc:8b:d1:0a:81:d3:ee:d9:3e:c6:04:fc:1b:
fc:98:5a:44:5c:17:56:e6:7e:af:28:82:88:99:ee:c0:c6:ce:
a7:29:58:1e:a7:b4:c7:7c:9a:0e:b8:d1:2b:5e:fe:eb:65:ae:
5d:aa:48:34:b3:da:c3:2e:25:06:56:87:5f:cd:f1:3b:d5:17:
e9:bc:88:94:e1:be:15:5a:49:10:d9:83:c0:ef:0c:44:7a:57:
94:59:39:71:5e:45:20:98:fd:68:86:a2:ef:05:91:bd:fb:af:
ee:20:2f:c4:f1:73:d1:99:29:9c:04:6d:b7:08:b5:9c:8e:13:
30:31:06:a1:39:20:19:7b:2f:17:96:9f:ca:4c:77:56:89:f6:
a1:08:f8:40:96:c9:43:13:11:20:fe:60:f7:9d:ee:63:2d:2d:
a7:5a:bc:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOIIEMfAYqVfnvJjIEW5okMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1OWFhYTM2MTUwZWUxNTVjM2I1MWFkOWM3MDdmNmM0M2Jm
MmJlNjMwHhcNMjUwNjA4MDYwMDQyWhcNMjUwNjA5MDYwMDQyWjAzMTEwLwYDVQQD
Eyg1ODAwYTc2MTQxNWY5ZDZjMzgzMDNkZDUwNjNkYWRmZTVkNjY0YzY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAugR+ilZBSUdIvnT9F3AIz7wXyODf
fm4+DgT/bOn3rdUkEeKxhqTi3WgLza0HnZTYOqJJ3hHUY+g0mdVMDr86MdoBks1p
Xv8iJ5REFCWnzBAzGgYpfVchOdaYf3wIqivCnNeSkppmrl7hSK3RCwharqDlvcea
o0PektVVrn57w78Fi/MGD4NB11Yv5DPglvcS5Ek3Ao33EfWr03inAZw9bk3lx+FD
whXn7MpKpAjIuIWH250S7TcmNiuU4jaJvANuJei912rfBU0XczJGNeJppWWJT8tD
UgsTxY65Pbp3ah2zzMUdPPAKy5u4kh2uukchZX55AJCJAuPVtIROPM5ixQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFgAp2FBX51sODA91QY9rf5dZkxnMB8GA1UdIwQY
MBaAFHWaqjYVDuFVw7Ua2ccH9sQ78r5jMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9mMmFmZGYtZTNjYy00OTM5LWFlNGUt
NzNkMTBkNWI5ZmVjLzEvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9mMmFmZGYtZTNjYy00OTM5LWFlNGUtNzNkMTBkNWI5ZmVj
LzEvZFpxcU5oVU80VlhEdFJyWnh3ZjJ4RHZ5dm1NLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaWz/UIRT
5ESAYvHtAFKW0H/GhUJwX4psyeQQN6Lxu+ZhE/zHD6wCZ1RkmyeTM6nwK3ab2m5+
Fis77nUnQMts9PrvNCqDG/fdMw4vZUZPCwgfajV2YOO7mdA3cjMvpDy8i9EKgdPu
2T7GBPwb/JhaRFwXVuZ+ryiCiJnuwMbOpylYHqe0x3yaDrjRK17+62WuXapINLPa
wy4lBlaHX83xO9UX6byIlOG+FVpJENmDwO8MRHpXlFk5cV5FIJj9aIai7wWRvfuv
7iAvxPFz0ZkpnARttwi1nI4TMDEGoTkgGXsvF5afykx3Von2oQj4QJbJQxMRIP5g
953uYy0tp1q8jQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 11:04:26 2025 by rpki-client