Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
File: S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft (raw, json)
Hash identifier: YiuDobDNAaDTLh4oNT4RwOHB7jpTVKfH7jSalVr7fqU=
Subject key identifier: D8:3F:A4:D0:78:B7:65:8B:D5:C7:70:65:31:E1:74:E7:BA:D0:4D:82
Authority key identifier: 4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
Certificate issuer: /CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Certificate serial: 01974DB2A5580B0E0875A942F7B1A08A9F8C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
Manifest number: 0791
Signing time: Sun 08 Jun 2025 04:00:42 +0000
Manifest this update: Sun 08 Jun 2025 04:00:42 +0000
Manifest next update: Mon 09 Jun 2025 04:00:42 +0000
Files and hashes: 1: S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl (hash: U1BqLQHL8OPohI1cwQDALdIqVh8E2yAhzNORTn7gDiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:a5:58:0b:0e:08:75:a9:42:f7:b1:a0:8a:9f:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4bccd0db52f0ed4f73a681e3d36ab6c230277d3c
Validity
Not Before: Jun 8 04:00:42 2025 GMT
Not After : Jun 9 04:00:42 2025 GMT
Subject: CN=d83fa4d078b7658bd5c7706531e174e7bad04d82
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:b3:8d:07:9e:68:2b:14:82:37:57:93:f9:43:
af:49:6d:c7:8d:4e:28:ea:14:7f:06:ad:a1:a2:71:
7a:62:c0:4f:c6:6f:f9:c5:b5:f9:61:1e:a6:03:df:
5c:fb:f9:46:53:ae:a4:33:ed:4e:51:dc:9b:45:80:
e5:ba:4b:51:aa:3e:fe:12:14:5c:ac:3f:c1:5d:76:
03:99:69:5e:ca:2b:aa:06:e5:97:48:52:5c:2a:73:
6a:da:a6:bf:d9:4f:4c:b6:d6:03:d7:e3:f5:32:94:
d9:da:1d:86:2a:a2:ef:ed:90:52:9c:fe:a0:62:1c:
42:88:e6:dc:46:be:b2:f0:39:13:3c:a7:77:34:ac:
d6:64:30:47:e2:65:12:de:a8:d2:26:6d:f5:c9:64:
48:71:89:ab:26:36:52:99:00:c1:30:e7:b5:a6:d2:
65:8f:c0:06:1b:57:4e:c0:8f:db:1f:e6:aa:7a:81:
27:08:bf:f4:ce:1f:e8:34:6e:09:9f:bf:be:08:a8:
47:2b:c1:0c:0f:f4:de:a0:e3:fb:dc:f6:61:0c:fb:
56:9c:3f:97:fb:6b:48:11:9b:44:46:af:8b:79:85:
7d:81:4f:e1:f5:f1:6e:f2:36:8a:fb:ab:2e:fb:a9:
0b:17:12:bb:1d:14:e6:58:90:41:8f:34:76:f1:08:
a9:0d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:3F:A4:D0:78:B7:65:8B:D5:C7:70:65:31:E1:74:E7:BA:D0:4D:82
X509v3 Authority Key Identifier:
keyid:4B:CC:D0:DB:52:F0:ED:4F:73:A6:81:E3:D3:6A:B6:C2:30:27:7D:3C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S8zQ21Lw7U9zpoHj02q2wjAnfTw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/41cc57-06a4-4732-8bfc-f3f15b1265bb/1/S8zQ21Lw7U9zpoHj02q2wjAnfTw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:28:f0:c4:f8:b9:73:98:62:71:83:07:a1:d7:ab:57:e5:c7:
4c:e5:fd:dc:f0:86:99:e1:ab:4f:37:99:ab:92:89:f4:25:97:
aa:65:9b:0a:d6:eb:cc:08:58:bf:ec:37:4f:65:b2:32:2c:56:
a3:65:8d:88:67:00:55:18:cb:98:82:95:3e:88:d8:b7:ea:bb:
f3:d2:2b:15:11:f4:06:3c:6c:ad:3f:3c:e9:ae:9f:3a:a7:ac:
d7:4d:87:45:f1:6c:af:8f:ac:84:53:88:c3:bf:48:d4:e9:4e:
6a:17:fa:70:7c:62:71:ec:e1:dc:d0:8a:10:09:34:29:97:ab:
cf:65:b0:3b:a7:e9:bf:38:09:01:fc:b4:62:6c:40:de:5d:25:
4c:57:aa:dd:2e:19:e1:39:e2:be:53:fd:b5:b1:e1:21:af:53:
61:83:64:95:48:97:f8:78:21:79:ab:35:64:a7:65:ec:37:8c:
7e:5e:8b:d8:d5:46:25:50:9a:61:98:ce:41:8f:a7:b2:ef:ea:
0a:be:71:e7:68:40:54:f5:90:fe:3c:08:d8:7e:1a:1c:d2:a0:
09:4f:75:b7:26:dd:b1:2f:01:f8:5d:b0:fb:bc:73:08:c4:e2:
71:18:6b:08:ea:1c:9e:be:40:b8:a3:00:4f:c1:8e:93:74:68:
b7:50:35:55
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNsqVYCw4IdalC97Ggip+MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiY2NkMGRiNTJmMGVkNGY3M2E2ODFlM2QzNmFiNmMyMzAy
NzdkM2MwHhcNMjUwNjA4MDQwMDQyWhcNMjUwNjA5MDQwMDQyWjAzMTEwLwYDVQQD
EyhkODNmYTRkMDc4Yjc2NThiZDVjNzcwNjUzMWUxNzRlN2JhZDA0ZDgyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmLONB55oKxSCN1eT+UOvSW3HjU4o
6hR/Bq2honF6YsBPxm/5xbX5YR6mA99c+/lGU66kM+1OUdybRYDluktRqj7+EhRc
rD/BXXYDmWleyiuqBuWXSFJcKnNq2qa/2U9MttYD1+P1MpTZ2h2GKqLv7ZBSnP6g
YhxCiObcRr6y8DkTPKd3NKzWZDBH4mUS3qjSJm31yWRIcYmrJjZSmQDBMOe1ptJl
j8AGG1dOwI/bH+aqeoEnCL/0zh/oNG4Jn7++CKhHK8EMD/TeoOP73PZhDPtWnD+X
+2tIEZtERq+LeYV9gU/h9fFu8jaK+6su+6kLFxK7HRTmWJBBjzR28QipDQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNg/pNB4t2WL1cdwZTHhdOe60E2CMB8GA1UdIwQY
MBaAFEvM0NtS8O1Pc6aB49NqtsIwJ308MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzh6UTIxTHc3VTl6cG9IajAycTJ3akFuZlR3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC80MWNjNTctMDZhNC00NzMyLThiZmMt
ZjNmMTViMTI2NWJiLzEvUzh6UTIxTHc3VTl6cG9IajAycTJ3akFuZlR3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC80MWNjNTctMDZhNC00NzMyLThiZmMtZjNmMTViMTI2NWJi
LzEvUzh6UTIxTHc3VTl6cG9IajAycTJ3akFuZlR3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhCjwxPi5
c5hicYMHoderV+XHTOX93PCGmeGrTzeZq5KJ9CWXqmWbCtbrzAhYv+w3T2WyMixW
o2WNiGcAVRjLmIKVPojYt+q789IrFRH0BjxsrT886a6fOqes102HRfFsr4+shFOI
w79I1OlOahf6cHxicezh3NCKEAk0KZerz2WwO6fpvzgJAfy0YmxA3l0lTFeq3S4Z
4TnivlP9tbHhIa9TYYNklUiX+Hgheas1ZKdl7DeMfl6L2NVGJVCaYZjOQY+nsu/q
Cr5x52hAVPWQ/jwI2H4aHNKgCU91tybdsS8B+F2w+7xzCMTicRhrCOocnr5AuKMA
T8GOk3Rot1A1VQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:49:27 2025 by rpki-client