Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
File: b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft (raw, json)
Hash identifier: T90nI92Y0h9RQO9KSMWYNA4A96P71CmhdDtnAiOnFFI=
Subject key identifier: 93:87:D0:C9:9D:11:1F:18:4B:C0:CC:FB:91:E7:E3:1F:BF:DC:69:1E
Authority key identifier: 6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
Certificate issuer: /CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Certificate serial: 0197496802309E54DF43723514DE2C6D5B2A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
Manifest number: 0223
Signing time: Sat 07 Jun 2025 08:00:42 +0000
Manifest this update: Sat 07 Jun 2025 08:00:42 +0000
Manifest next update: Sun 08 Jun 2025 08:00:42 +0000
Files and hashes: 1: b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl (hash: 98p00h0fTQLyzmsdj++4XKo1PZ6U7zQwzIXMfRhXilM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:02:30:9e:54:df:43:72:35:14:de:2c:6d:5b:2a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f6554c4d85bfd86f0a749c1ca0f5d0e9692e655
Validity
Not Before: Jun 7 08:00:42 2025 GMT
Not After : Jun 8 08:00:42 2025 GMT
Subject: CN=9387d0c99d111f184bc0ccfb91e7e31fbfdc691e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:da:48:9b:0d:63:6b:b8:ce:4b:66:1c:a1:25:
eb:27:a4:d5:5a:72:2d:24:e9:52:1a:0b:69:23:cb:
ea:53:ce:b2:19:24:a0:97:f7:4f:e1:3b:32:17:7c:
91:b2:42:92:4b:30:4d:a3:6b:4b:c2:a7:13:e4:4c:
03:69:65:25:a5:b6:13:bb:04:95:55:d0:ab:9d:91:
e7:76:4c:d4:81:c9:34:53:4d:e0:3e:9d:f8:32:d7:
d5:3a:6f:66:53:b1:9a:85:c2:86:8f:ed:3d:d9:16:
8e:1f:c6:d3:c4:e0:7b:7b:2a:03:64:c5:b4:47:9d:
ad:8a:0f:0d:16:1d:11:d5:38:df:33:23:d9:4a:28:
4b:2a:b8:c6:d5:0b:e0:e5:2b:25:7e:42:f0:b5:3b:
83:34:30:ed:7f:df:d8:15:4c:39:d9:7a:fa:9b:79:
94:c7:ff:2d:5d:9a:ee:9e:70:f4:31:66:49:c6:30:
7f:c8:29:12:6a:b0:46:17:ed:03:68:70:45:93:be:
5a:b7:06:12:f3:27:b8:7d:56:69:3c:c6:bb:ee:af:
64:73:53:50:0d:43:ca:21:8d:1a:5c:2b:35:0a:f7:
6f:a0:38:df:12:c1:76:c6:aa:a1:4e:3e:da:2d:20:
9d:d2:3d:05:7e:30:95:d0:6d:76:78:c2:ea:8c:fc:
3c:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:87:D0:C9:9D:11:1F:18:4B:C0:CC:FB:91:E7:E3:1F:BF:DC:69:1E
X509v3 Authority Key Identifier:
keyid:6F:65:54:C4:D8:5B:FD:86:F0:A7:49:C1:CA:0F:5D:0E:96:92:E6:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b2VUxNhb_Ybwp0nByg9dDpaS5lU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/5bca60-163f-40f8-877d-873dbd12c6a2/1/b2VUxNhb_Ybwp0nByg9dDpaS5lU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2d:9b:18:36:32:be:92:48:62:09:4d:97:87:16:9b:aa:af:da:
91:ee:4d:dc:04:d3:8c:04:a6:5e:8b:0b:89:10:2d:c2:ef:6a:
36:c5:cd:68:17:da:f6:34:c2:65:12:ac:79:e0:01:41:21:e2:
2f:8c:44:1d:24:10:15:bc:08:be:c4:77:67:4d:15:88:d2:40:
6b:86:7b:6a:ab:a7:09:2d:02:ac:e9:3f:07:16:4b:88:37:fb:
10:b7:8a:48:43:6e:c8:de:79:65:c4:23:74:f3:b4:6c:08:80:
1c:c0:51:36:0f:64:19:8f:d8:41:87:0c:41:00:0b:0a:aa:6f:
87:77:50:c3:4d:12:64:5a:3b:24:53:3b:2d:48:12:4d:60:cf:
55:7f:f3:b6:b8:c6:2f:f7:b1:57:75:d2:a1:6b:c6:59:d4:58:
76:fd:e6:89:43:72:3d:75:10:73:cc:69:44:05:03:1d:45:5a:
a4:05:d6:16:a7:12:a4:c7:9e:ff:e1:3a:93:c0:f8:b1:a7:c6:
93:46:58:78:b4:7f:2d:e4:bf:51:4a:30:d0:9a:d2:4d:3e:1a:
af:80:d9:d1:7b:c5:33:be:7d:6f:11:7c:71:d3:ec:31:99:2a:
62:e6:b3:5b:78:da:ef:65:da:e3:36:ed:81:9a:fb:a1:21:3d:
3a:76:76:b3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaAIwnlTfQ3I1FN4sbVsqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNjU1NGM0ZDg1YmZkODZmMGE3NDljMWNhMGY1ZDBlOTY5
MmU2NTUwHhcNMjUwNjA3MDgwMDQyWhcNMjUwNjA4MDgwMDQyWjAzMTEwLwYDVQQD
Eyg5Mzg3ZDBjOTlkMTExZjE4NGJjMGNjZmI5MWU3ZTMxZmJmZGM2OTFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3tpImw1ja7jOS2YcoSXrJ6TVWnIt
JOlSGgtpI8vqU86yGSSgl/dP4TsyF3yRskKSSzBNo2tLwqcT5EwDaWUlpbYTuwSV
VdCrnZHndkzUgck0U03gPp34MtfVOm9mU7GahcKGj+092RaOH8bTxOB7eyoDZMW0
R52tig8NFh0R1TjfMyPZSihLKrjG1Qvg5SslfkLwtTuDNDDtf9/YFUw52Xr6m3mU
x/8tXZrunnD0MWZJxjB/yCkSarBGF+0DaHBFk75atwYS8ye4fVZpPMa77q9kc1NQ
DUPKIY0aXCs1CvdvoDjfEsF2xqqhTj7aLSCd0j0FfjCV0G12eMLqjPw8nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJOH0MmdER8YS8DM+5Hn4x+/3GkeMB8GA1UdIwQY
MBaAFG9lVMTYW/2G8KdJwcoPXQ6WkuZVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjJWVXhOaGJfWWJ3cDBuQnlnOWREcGFTNWxVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy81YmNhNjAtMTYzZi00MGY4LTg3N2Qt
ODczZGJkMTJjNmEyLzEvYjJWVXhOaGJfWWJ3cDBuQnlnOWREcGFTNWxVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy81YmNhNjAtMTYzZi00MGY4LTg3N2QtODczZGJkMTJjNmEy
LzEvYjJWVXhOaGJfWWJ3cDBuQnlnOWREcGFTNWxVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALZsYNjK+
kkhiCU2Xhxabqq/ake5N3ATTjASmXosLiRAtwu9qNsXNaBfa9jTCZRKseeABQSHi
L4xEHSQQFbwIvsR3Z00ViNJAa4Z7aqunCS0CrOk/BxZLiDf7ELeKSENuyN55ZcQj
dPO0bAiAHMBRNg9kGY/YQYcMQQALCqpvh3dQw00SZFo7JFM7LUgSTWDPVX/ztrjG
L/exV3XSoWvGWdRYdv3miUNyPXUQc8xpRAUDHUVapAXWFqcSpMee/+E6k8D4safG
k0ZYeLR/LeS/UUow0JrSTT4ar4DZ0XvFM759bxF8cdPsMZkqYuazW3ja72Xa4zbt
gZr7oSE9OnZ2sw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:33:00 2025 by rpki-client