Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
File: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft (raw, json)
Hash identifier: 7RV2fRX7ypjbRTya9XGQNokmzfNgBsaJi7Vi5+U1HVc=
Subject key identifier: 98:07:3C:33:93:03:0E:FC:46:29:0F:61:3F:18:79:28:51:17:E4:B4
Authority key identifier: F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
Certificate issuer: /CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Certificate serial: 019651C96E5E5B06EBED32F49A4D8A70B133
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
Manifest number: 0BDC
Signing time: Sun 20 Apr 2025 06:01:17 +0000
Manifest this update: Sun 20 Apr 2025 06:01:17 +0000
Manifest next update: Mon 21 Apr 2025 06:01:17 +0000
Files and hashes: 1: 9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl (hash: ARiFR6hxKUiK5Rvyb4nliM1b8Gmd2VANtfgc5jSbFVY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 21 Apr 2025 06:01:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:51:c9:6e:5e:5b:06:eb:ed:32:f4:9a:4d:8a:70:b1:33
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f643f0352adfc98ac8801b94e5a007e7070b07ac
Validity
Not Before: Apr 20 06:01:17 2025 GMT
Not After : Apr 21 06:01:17 2025 GMT
Subject: CN=98073c3393030efc46290f613f1879285117e4b4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:95:93:5b:45:8a:80:a2:ec:11:d6:40:53:5a:
46:40:bd:b5:bf:1c:73:ff:a7:e1:19:91:f2:6f:0b:
72:dd:d3:50:c2:96:c6:97:ac:bd:72:54:de:1b:e3:
89:a8:cc:de:fa:77:02:fd:1e:49:a0:b6:67:19:2d:
bc:ae:00:3e:f6:08:40:61:31:cb:46:8e:4b:bb:a9:
db:74:e7:b3:33:a7:52:2c:66:d9:9c:63:f9:2e:e8:
7d:8f:2e:54:61:f4:3c:b5:87:b2:0c:1e:13:40:f2:
e5:ed:df:19:ca:4b:65:67:0f:49:b5:f9:20:09:35:
77:c6:98:ef:6a:e1:3e:3a:a3:ad:24:75:14:f7:5e:
72:96:3c:06:5d:58:df:85:3e:b0:63:00:d6:ba:4f:
e6:4f:a6:87:8a:30:e6:d0:b0:0c:ea:a9:e6:e1:66:
71:d6:df:af:0d:1e:71:c2:18:ef:5e:85:17:36:95:
d3:9f:e4:67:93:40:6f:36:5c:95:a5:5a:bc:c6:b8:
30:9b:ce:e6:9f:67:1e:fb:ba:8a:d7:18:9d:55:82:
b9:65:04:16:2e:0c:df:cc:24:c2:e8:75:b6:8a:bf:
54:22:c1:d9:6a:c7:88:17:94:d4:ba:85:f3:f0:34:
7e:eb:7c:00:13:8b:a0:5b:57:a9:b7:ec:50:fb:a1:
4f:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
98:07:3C:33:93:03:0E:FC:46:29:0F:61:3F:18:79:28:51:17:E4:B4
X509v3 Authority Key Identifier:
keyid:F6:43:F0:35:2A:DF:C9:8A:C8:80:1B:94:E5:A0:07:E7:07:0B:07:AC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9kPwNSrfyYrIgBuU5aAH5wcLB6w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/6ac77a-4a5f-4d39-8cfa-005fc07cedc8/1/9kPwNSrfyYrIgBuU5aAH5wcLB6w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
04:4a:61:71:ee:4e:60:18:bc:80:ce:11:d6:86:c2:13:7c:40:
42:2f:60:6e:7e:91:ff:40:73:e2:ee:3f:20:cb:cc:ce:74:f4:
3f:0a:47:77:40:4d:f3:1d:a9:d3:1f:a6:da:7a:fd:12:bb:06:
00:6c:78:a7:99:7c:a0:a7:28:4b:f2:c7:f4:09:f5:f4:b3:55:
19:70:1b:95:36:9b:12:7e:ce:22:ce:c9:0a:5d:61:d5:56:41:
1b:de:91:a3:db:fd:41:9b:f5:30:58:ab:d3:cb:24:47:b6:1f:
b2:66:09:c2:b8:54:cf:3d:20:c4:47:2f:3e:c3:3a:77:a0:49:
91:96:a0:b7:97:02:0c:a1:f2:ae:a7:84:16:3a:2e:89:53:11:
dd:f1:fe:28:9a:ff:ac:1b:09:09:c7:d9:91:d4:33:e6:2c:6e:
96:1e:5d:50:7d:7d:53:89:e5:6d:9e:82:39:e1:1b:ae:32:e7:
de:85:68:07:f0:c2:24:23:54:ab:a6:ba:03:84:4b:36:98:b2:
46:f3:62:6e:ac:8a:b5:0f:4f:27:ab:cb:fb:e8:89:e7:26:12:
76:f0:4b:2e:47:31:5f:30:9c:e1:47:5b:0c:ed:38:07:d2:b5:
37:46:94:45:ae:76:c2:28:cb:72:34:52:ce:ad:60:46:bc:9d:
f6:4d:22:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZZRyW5eWwbr7TL0mk2KcLEzMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NDNmMDM1MmFkZmM5OGFjODgwMWI5NGU1YTAwN2U3MDcw
YjA3YWMwHhcNMjUwNDIwMDYwMTE3WhcNMjUwNDIxMDYwMTE3WjAzMTEwLwYDVQQD
Eyg5ODA3M2MzMzkzMDMwZWZjNDYyOTBmNjEzZjE4NzkyODUxMTdlNGI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpWTW0WKgKLsEdZAU1pGQL21vxxz
/6fhGZHybwty3dNQwpbGl6y9clTeG+OJqMze+ncC/R5JoLZnGS28rgA+9ghAYTHL
Ro5Lu6nbdOezM6dSLGbZnGP5Luh9jy5UYfQ8tYeyDB4TQPLl7d8ZyktlZw9Jtfkg
CTV3xpjvauE+OqOtJHUU915yljwGXVjfhT6wYwDWuk/mT6aHijDm0LAM6qnm4WZx
1t+vDR5xwhjvXoUXNpXTn+Rnk0BvNlyVpVq8xrgwm87mn2ce+7qK1xidVYK5ZQQW
LgzfzCTC6HW2ir9UIsHZaseIF5TUuoXz8DR+63wAE4ugW1ept+xQ+6FPtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJgHPDOTAw78RikPYT8YeShRF+S0MB8GA1UdIwQY
MBaAFPZD8DUq38mKyIAblOWgB+cHCwesMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi82YWM3N2EtNGE1Zi00ZDM5LThjZmEt
MDA1ZmMwN2NlZGM4LzEvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi82YWM3N2EtNGE1Zi00ZDM5LThjZmEtMDA1ZmMwN2NlZGM4
LzEvOWtQd05TcmZ5WXJJZ0J1VTVhQUg1d2NMQjZ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABEphce5O
YBi8gM4R1obCE3xAQi9gbn6R/0Bz4u4/IMvMznT0PwpHd0BN8x2p0x+m2nr9ErsG
AGx4p5l8oKcoS/LH9An19LNVGXAblTabEn7OIs7JCl1h1VZBG96Ro9v9QZv1MFir
08skR7YfsmYJwrhUzz0gxEcvPsM6d6BJkZagt5cCDKHyrqeEFjouiVMR3fH+KJr/
rBsJCcfZkdQz5ixulh5dUH19U4nlbZ6COeEbrjLn3oVoB/DCJCNUq6a6A4RLNpiy
RvNibqyKtQ9PJ6vL++iJ5yYSdvBLLkcxXzCc4UdbDO04B9K1N0aURa52wijLcjRS
zq1gRryd9k0iTg==
-----END CERTIFICATE-----
Generated at Sun Apr 20 12:59:59 2025 by rpki-client