
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
File: C86QcAXcPrBHC8PbRpCNoQkXuEo.mft (raw, json)
Hash identifier: 5881xT9JGzhnposD3bbfAog7bYMBXvMeulf8Wecfw0c=
Subject key identifier: 1D:29:AF:29:5B:6B:D6:59:53:00:E6:65:86:A5:B1:9A:08:53:18:E0
Authority key identifier: 0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
Certificate issuer: /CN=0bce907005dc3eb0470bc3db46908da10917b84a
Certificate serial: 0197500EF62DD9F3DE06B520A0360990B6C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
Manifest number: 0F2F
Signing time: Sun 08 Jun 2025 15:00:47 +0000
Manifest this update: Sun 08 Jun 2025 15:00:47 +0000
Manifest next update: Mon 09 Jun 2025 15:00:47 +0000
Files and hashes: 1: C86QcAXcPrBHC8PbRpCNoQkXuEo.crl (hash: wF9oL3MVwHVUsJFN/epkhQuy1mcoqxzeLz+LhR1+/JM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 15:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:0e:f6:2d:d9:f3:de:06:b5:20:a0:36:09:90:b6:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bce907005dc3eb0470bc3db46908da10917b84a
Validity
Not Before: Jun 8 15:00:47 2025 GMT
Not After : Jun 9 15:00:47 2025 GMT
Subject: CN=1d29af295b6bd6595300e66586a5b19a085318e0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:dd:78:f0:20:07:fd:ec:59:de:b0:a6:c6:89:
1d:9a:34:8d:5e:20:66:04:17:64:ec:f9:b3:7d:2d:
39:48:0d:65:eb:7e:58:6b:08:d6:05:e1:8d:e6:f8:
db:68:19:59:50:79:8a:35:d3:6d:1c:b8:95:fb:b7:
27:f0:9b:61:cd:58:15:f4:b4:f3:b5:20:f0:57:09:
f2:05:8c:83:bf:65:ca:3b:01:43:4c:69:77:19:2b:
4c:f7:73:2d:02:5e:e8:bc:21:79:2a:97:98:6e:56:
62:94:63:9f:ac:a0:6d:0b:0b:05:b9:4b:0e:c9:47:
e3:54:9b:c6:5d:54:29:68:12:9e:e0:39:52:00:9f:
89:6b:8e:36:96:43:25:7f:aa:28:59:38:9f:cf:60:
da:99:f7:5f:4d:ea:70:09:48:b1:92:bb:bf:7d:f2:
04:2d:89:e0:58:3c:0e:58:b9:31:c5:bc:c2:d3:af:
84:f6:5d:66:72:dc:40:0e:c5:11:f6:8c:83:06:15:
24:f5:13:e2:ce:b4:bd:de:07:78:14:f5:55:77:78:
6c:4b:b8:69:cf:78:19:69:c6:93:9c:c8:96:cd:bb:
68:31:90:30:bd:0b:e5:47:84:fb:c7:ee:18:02:4c:
56:93:59:e4:ed:e1:dd:e2:93:d3:0e:34:42:6a:52:
92:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:29:AF:29:5B:6B:D6:59:53:00:E6:65:86:A5:B1:9A:08:53:18:E0
X509v3 Authority Key Identifier:
keyid:0B:CE:90:70:05:DC:3E:B0:47:0B:C3:DB:46:90:8D:A1:09:17:B8:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C86QcAXcPrBHC8PbRpCNoQkXuEo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/635f75-616b-4b93-ab40-e3718998b184/1/C86QcAXcPrBHC8PbRpCNoQkXuEo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:18:af:e4:0d:0f:88:68:8c:34:7b:c9:d3:9f:88:75:86:62:
95:cf:15:51:d7:04:9a:61:7c:ba:a6:8b:58:39:0f:48:bb:0f:
04:c2:3d:4e:df:dd:c6:d3:ae:6f:73:03:81:68:ee:ee:a2:e0:
ab:15:c0:0c:1a:af:7e:0a:f0:74:27:6b:75:b2:36:48:9e:1f:
ea:86:61:15:c4:0b:ef:8a:7c:f1:97:45:3d:27:a5:c8:86:d5:
8d:7b:98:cf:39:a4:a0:0a:4f:3f:4d:c4:0f:07:ff:d6:b4:11:
91:32:de:75:8e:b6:38:16:04:41:9f:7d:dc:54:53:b0:0c:c2:
16:4f:e3:f4:b3:ee:4f:9e:95:9a:86:30:79:35:d4:d3:7f:e7:
5e:22:5a:bc:53:77:7b:34:a4:22:b8:d6:16:0f:e2:4f:82:16:
f9:c7:68:02:8f:1f:67:d5:fc:90:ed:5d:81:0b:13:8a:f5:97:
21:06:6e:7b:b0:a2:fc:73:b9:a6:ce:a9:f3:23:c3:b1:8b:05:
22:36:aa:a4:07:f9:b9:83:b3:25:8e:5b:55:27:88:2b:8e:7f:
c5:83:5c:a4:cc:f7:9f:d9:c8:b5:46:fe:68:00:93:4b:be:23:
5c:93:a3:33:5c:9a:2c:51:12:74:66:ff:15:1c:a8:78:54:e6:
53:da:57:8c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQDvYt2fPeBrUgoDYJkLbCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiY2U5MDcwMDVkYzNlYjA0NzBiYzNkYjQ2OTA4ZGExMDkx
N2I4NGEwHhcNMjUwNjA4MTUwMDQ3WhcNMjUwNjA5MTUwMDQ3WjAzMTEwLwYDVQQD
EygxZDI5YWYyOTViNmJkNjU5NTMwMGU2NjU4NmE1YjE5YTA4NTMxOGUwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwd148CAH/exZ3rCmxokdmjSNXiBm
BBdk7PmzfS05SA1l635YawjWBeGN5vjbaBlZUHmKNdNtHLiV+7cn8JthzVgV9LTz
tSDwVwnyBYyDv2XKOwFDTGl3GStM93MtAl7ovCF5KpeYblZilGOfrKBtCwsFuUsO
yUfjVJvGXVQpaBKe4DlSAJ+Ja442lkMlf6ooWTifz2DamfdfTepwCUixkru/ffIE
LYngWDwOWLkxxbzC06+E9l1mctxADsUR9oyDBhUk9RPizrS93gd4FPVVd3hsS7hp
z3gZacaTnMiWzbtoMZAwvQvlR4T7x+4YAkxWk1nk7eHd4pPTDjRCalKSxQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0prylba9ZZUwDmZYalsZoIUxjgMB8GA1UdIwQY
MBaAFAvOkHAF3D6wRwvD20aQjaEJF7hKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi82MzVmNzUtNjE2Yi00YjkzLWFiNDAt
ZTM3MTg5OThiMTg0LzEvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi82MzVmNzUtNjE2Yi00YjkzLWFiNDAtZTM3MTg5OThiMTg0
LzEvQzg2UWNBWGNQckJIQzhQYlJwQ05vUWtYdUVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgRiv5A0P
iGiMNHvJ05+IdYZilc8VUdcEmmF8uqaLWDkPSLsPBMI9Tt/dxtOub3MDgWju7qLg
qxXADBqvfgrwdCdrdbI2SJ4f6oZhFcQL74p88ZdFPSelyIbVjXuYzzmkoApPP03E
Dwf/1rQRkTLedY62OBYEQZ993FRTsAzCFk/j9LPuT56VmoYweTXU03/nXiJavFN3
ezSkIrjWFg/iT4IW+cdoAo8fZ9X8kO1dgQsTivWXIQZue7Ci/HO5ps6p8yPDsYsF
IjaqpAf5uYOzJY5bVSeIK45/xYNcpMz3n9nItUb+aACTS74jXJOjM1yaLFESdGb/
FRyoeFTmU9pXjA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:30:34 2025 by rpki-client