Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
File: xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft (raw, json)
Hash identifier: I+5fhAeD9PtgEXDo64Ywkp4KG4xic3PP7BNPg+Eod6M=
Subject key identifier: FF:C9:BE:49:5B:DD:B5:F3:CB:CD:A4:32:3C:FA:5D:64:70:62:ED:BF
Authority key identifier: C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
Certificate issuer: /CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Certificate serial: 01975121A7F5FC5CC65331E84315B5790D2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
Manifest number: 1072
Signing time: Sun 08 Jun 2025 20:00:49 +0000
Manifest this update: Sun 08 Jun 2025 20:00:49 +0000
Manifest next update: Mon 09 Jun 2025 20:00:49 +0000
Files and hashes: 1: xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl (hash: wi5WFmkIwgpgKciL2p+P83HqVxsQZnOtrh3LuIb1aE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:21:a7:f5:fc:5c:c6:53:31:e8:43:15:b5:79:0d:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c4e0b38c59bd42b2b07e2aafb26d9f55bab3817a
Validity
Not Before: Jun 8 20:00:49 2025 GMT
Not After : Jun 9 20:00:49 2025 GMT
Subject: CN=ffc9be495bddb5f3cbcda4323cfa5d647062edbf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:00:3f:4b:c6:b8:a9:fb:e6:b5:b5:22:28:4b:
38:47:94:3d:09:fb:b8:d2:ae:e7:25:70:1a:1c:e2:
f5:ca:cd:47:0f:c5:4e:69:40:0b:79:d2:1a:ba:8d:
1f:ea:72:5b:e4:60:28:de:ba:44:b7:76:2f:7f:6c:
8b:91:e4:d3:e9:78:4d:51:c8:22:e2:b0:bb:f7:5f:
3b:8f:27:c4:c9:a4:46:1b:43:7b:70:51:45:8e:04:
e4:21:02:0c:c4:00:95:74:7d:78:f4:19:27:2c:fc:
bb:2c:fe:a1:0c:28:4b:be:8c:de:68:39:46:2b:51:
ea:cd:b6:b1:ef:c2:8b:3f:35:68:4e:de:cf:6f:47:
78:14:89:32:00:d8:0a:4f:f2:dc:c7:a5:ad:6f:ae:
99:6d:9e:6e:b4:f9:3b:12:08:db:0b:46:ca:7f:f4:
b9:2b:1b:59:df:24:8c:f3:45:08:19:3d:53:6f:16:
7a:3a:b4:9b:ff:99:4d:08:be:f3:4a:e9:af:08:c5:
49:68:fb:89:f5:c2:e6:f4:34:25:fc:3e:bd:ca:79:
ca:ba:e2:44:16:75:e4:87:b2:4c:f3:0d:ca:08:47:
60:f2:b0:ad:7b:23:65:24:62:ae:93:3e:5e:54:39:
f1:0e:31:c3:3d:c2:6f:de:e2:fc:17:98:3f:99:c6:
42:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:C9:BE:49:5B:DD:B5:F3:CB:CD:A4:32:3C:FA:5D:64:70:62:ED:BF
X509v3 Authority Key Identifier:
keyid:C4:E0:B3:8C:59:BD:42:B2:B0:7E:2A:AF:B2:6D:9F:55:BA:B3:81:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/xOCzjFm9QrKwfiqvsm2fVbqzgXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ce/0c756c-4cf1-479b-974d-b232d7dafcac/1/xOCzjFm9QrKwfiqvsm2fVbqzgXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:ac:0a:a3:25:ac:d2:e1:8f:08:cd:70:12:5c:f9:86:f9:78:
51:f1:06:49:91:44:98:40:43:bd:f5:16:20:ae:9e:b3:7c:f7:
2d:b8:c9:8a:fa:15:66:82:47:ec:76:64:ed:f7:93:e7:2e:0a:
be:2c:52:56:1f:81:86:65:8d:35:31:15:61:49:3a:7a:01:25:
5d:1f:cf:95:46:18:a2:dc:83:78:55:cb:66:ec:0b:4f:08:d8:
fb:34:fb:03:94:54:01:32:46:0a:b3:51:89:c9:0d:92:20:47:
b0:41:84:c1:e4:3e:9b:b5:04:53:35:08:41:2f:1f:8f:fe:9f:
40:72:d7:f9:6c:7d:f5:17:30:31:fb:27:76:54:19:10:34:d3:
d5:bc:9c:ad:9b:09:65:c1:c1:e1:f8:8d:25:fa:a7:db:80:a5:
d0:0a:18:09:18:b2:5d:3d:5e:7a:e3:33:d7:f8:e1:42:c8:29:
80:09:bb:7d:c4:f8:00:e9:e3:d1:2d:f2:c5:1c:8e:60:ef:d0:
1a:b6:1f:a3:de:73:75:f6:af:f8:b5:49:01:9c:c4:da:92:df:
9e:00:00:b5:d8:5a:f3:15:c1:a9:db:b2:be:55:6d:7b:55:f0:
b2:f2:36:f2:c3:9d:eb:c9:6a:6d:93:68:26:5e:12:45:d5:78:
57:55:36:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRIaf1/FzGUzHoQxW1eQ0sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM0ZTBiMzhjNTliZDQyYjJiMDdlMmFhZmIyNmQ5ZjU1YmFi
MzgxN2EwHhcNMjUwNjA4MjAwMDQ5WhcNMjUwNjA5MjAwMDQ5WjAzMTEwLwYDVQQD
EyhmZmM5YmU0OTViZGRiNWYzY2JjZGE0MzIzY2ZhNWQ2NDcwNjJlZGJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwA/S8a4qfvmtbUiKEs4R5Q9Cfu4
0q7nJXAaHOL1ys1HD8VOaUALedIauo0f6nJb5GAo3rpEt3Yvf2yLkeTT6XhNUcgi
4rC79187jyfEyaRGG0N7cFFFjgTkIQIMxACVdH149BknLPy7LP6hDChLvozeaDlG
K1Hqzbax78KLPzVoTt7Pb0d4FIkyANgKT/Lcx6Wtb66ZbZ5utPk7EgjbC0bKf/S5
KxtZ3ySM80UIGT1TbxZ6OrSb/5lNCL7zSumvCMVJaPuJ9cLm9DQl/D69ynnKuuJE
FnXkh7JM8w3KCEdg8rCteyNlJGKukz5eVDnxDjHDPcJv3uL8F5g/mcZC4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP/Jvklb3bXzy82kMjz6XWRwYu2/MB8GA1UdIwQY
MBaAFMTgs4xZvUKysH4qr7Jtn1W6s4F6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQt
YjIzMmQ3ZGFmY2FjLzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZS8wYzc1NmMtNGNmMS00NzliLTk3NGQtYjIzMmQ3ZGFmY2Fj
LzEveE9DempGbTlRckt3ZmlxdnNtMmZWYnF6Z1hvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoqwKoyWs
0uGPCM1wElz5hvl4UfEGSZFEmEBDvfUWIK6es3z3LbjJivoVZoJH7HZk7feT5y4K
vixSVh+BhmWNNTEVYUk6egElXR/PlUYYotyDeFXLZuwLTwjY+zT7A5RUATJGCrNR
ickNkiBHsEGEweQ+m7UEUzUIQS8fj/6fQHLX+Wx99RcwMfsndlQZEDTT1bycrZsJ
ZcHB4fiNJfqn24Cl0AoYCRiyXT1eeuMz1/jhQsgpgAm7fcT4AOnj0S3yxRyOYO/Q
GrYfo95zdfav+LVJAZzE2pLfngAAtdha8xXBqduyvlVte1XwsvI28sOd68lqbZNo
Jl4SRdV4V1U2nA==
-----END CERTIFICATE-----
Generated at Mon Jun 9 01:24:54 2025 by rpki-client