Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
File: 6lT_assYDmBJc6UofvCpLmbfzOk.mft (raw, json)
Hash identifier: VaxSMs3Ul8OpdEgD1vHVH4keAkzOlUxdJUDRT/LDkks=
Subject key identifier: C3:1A:D6:55:D9:39:45:16:D3:60:72:C2:75:83:D5:1B:14:84:50:03
Authority key identifier: EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
Certificate issuer: /CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Certificate serial: 019749D5B3DEBE86EE82D028DEDBE1C8AFCB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
Manifest number: 0454
Signing time: Sat 07 Jun 2025 10:00:31 +0000
Manifest this update: Sat 07 Jun 2025 10:00:31 +0000
Manifest next update: Sun 08 Jun 2025 10:00:31 +0000
Files and hashes: 1: 6lT_assYDmBJc6UofvCpLmbfzOk.crl (hash: Wyq2pOPy8VU05Rl3U5DmwgrxIn9Ml/K6GYwhI+mUEFc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:b3:de:be:86:ee:82:d0:28:de:db:e1:c8:af:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ea54ff6acb180e604973a5287ef0a92e66dfcce9
Validity
Not Before: Jun 7 10:00:31 2025 GMT
Not After : Jun 8 10:00:31 2025 GMT
Subject: CN=c31ad655d9394516d36072c27583d51b14845003
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:45:5a:ef:d3:01:54:dc:6d:24:b5:0a:d4:f1:
5b:c5:09:e8:fd:72:db:46:82:75:de:3c:a9:a0:02:
2c:0d:1a:e0:2e:e8:63:0c:62:8e:30:9e:e5:87:a5:
26:b4:2a:76:b3:fe:2b:79:c2:ed:d3:df:bd:96:0a:
4b:2a:66:0f:45:b6:95:14:40:67:bb:8c:1e:55:7e:
75:c0:31:7b:20:e1:f3:96:a4:f1:9c:6c:b5:84:b8:
61:01:47:92:36:4b:06:cd:7c:89:82:a6:43:ab:6e:
1b:ce:69:e3:3d:e7:3a:7d:45:fd:70:c2:9e:81:ac:
5a:42:72:15:ae:e2:e4:62:b6:4e:ab:2a:71:a7:bd:
9d:85:33:f7:87:49:7d:5e:2c:2a:de:19:8e:6a:35:
d6:82:ea:9a:44:4a:64:a1:0c:28:56:46:09:48:32:
08:2c:45:9e:e1:e1:82:8f:b8:7f:a4:78:5d:22:10:
4d:87:ee:d3:76:95:7b:e5:c8:94:b2:54:d8:b4:69:
3d:7d:a6:cb:b8:c9:9d:8c:ae:b3:fd:01:4c:49:2e:
11:7c:76:9a:cc:69:9d:b4:e6:56:5b:35:af:c8:b5:
06:36:67:0a:82:7c:e6:e4:75:96:ac:64:8a:9b:18:
1f:6f:0b:ca:09:63:59:ab:85:7c:53:6b:08:75:a5:
ab:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C3:1A:D6:55:D9:39:45:16:D3:60:72:C2:75:83:D5:1B:14:84:50:03
X509v3 Authority Key Identifier:
keyid:EA:54:FF:6A:CB:18:0E:60:49:73:A5:28:7E:F0:A9:2E:66:DF:CC:E9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/6lT_assYDmBJc6UofvCpLmbfzOk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/df1985-ac3e-4404-821c-43c8f8b2c384/1/6lT_assYDmBJc6UofvCpLmbfzOk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:6a:e8:2d:60:f5:61:b4:69:96:79:70:33:df:ac:3b:6c:2b:
76:78:dd:f0:11:1b:5f:c1:9e:09:18:84:ef:07:53:69:d9:ae:
08:0d:cb:37:88:26:1f:cb:60:e1:0e:aa:4a:05:01:0f:eb:ab:
7b:be:a4:a7:0f:e3:47:8f:5c:42:78:51:5c:39:59:1e:32:e7:
a8:d0:b3:33:d1:42:dc:4a:22:f0:5a:49:92:20:6d:3d:6c:7f:
ff:bc:01:c5:4e:af:64:7e:bd:82:6e:63:f1:09:10:e0:bf:30:
c4:ed:d0:8d:cc:18:ee:07:da:37:ca:0c:ad:89:39:b3:7d:45:
08:95:86:44:f6:b3:2a:d4:9d:bf:8f:b6:d1:ee:f3:1f:f0:0c:
2b:39:9a:42:9b:95:46:40:23:80:c2:24:c7:c5:9b:d5:97:99:
4d:d1:42:08:27:2a:8e:b1:5a:d7:8e:4f:21:25:aa:b7:55:9d:
93:0c:b7:d0:76:7c:db:1d:b9:d0:13:1f:4c:77:64:de:74:31:
c7:9e:f0:5f:1e:90:7b:fd:5c:15:99:3d:ea:74:02:e5:7b:1d:
f2:27:f6:1e:4d:b1:85:2d:ee:d5:4b:ae:4a:3f:ec:0a:db:13:
ba:20:1f:e4:33:35:b2:b8:66:a2:19:07:43:e2:8a:b6:89:c0:
c5:ea:f3:96
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1bPevobugtAo3tvhyK/LMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVhNTRmZjZhY2IxODBlNjA0OTczYTUyODdlZjBhOTJlNjZk
ZmNjZTkwHhcNMjUwNjA3MTAwMDMxWhcNMjUwNjA4MTAwMDMxWjAzMTEwLwYDVQQD
EyhjMzFhZDY1NWQ5Mzk0NTE2ZDM2MDcyYzI3NTgzZDUxYjE0ODQ1MDAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvEVa79MBVNxtJLUK1PFbxQno/XLb
RoJ13jypoAIsDRrgLuhjDGKOMJ7lh6UmtCp2s/4recLt09+9lgpLKmYPRbaVFEBn
u4weVX51wDF7IOHzlqTxnGy1hLhhAUeSNksGzXyJgqZDq24bzmnjPec6fUX9cMKe
gaxaQnIVruLkYrZOqypxp72dhTP3h0l9Xiwq3hmOajXWguqaREpkoQwoVkYJSDII
LEWe4eGCj7h/pHhdIhBNh+7TdpV75ciUslTYtGk9fabLuMmdjK6z/QFMSS4RfHaa
zGmdtOZWWzWvyLUGNmcKgnzm5HWWrGSKmxgfbwvKCWNZq4V8U2sIdaWr3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMMa1lXZOUUW02BywnWD1RsUhFADMB8GA1UdIwQY
MBaAFOpU/2rLGA5gSXOlKH7wqS5m38zpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNmxUX2Fzc1lEbUJKYzZVb2Z2Q3BMbWJmek9rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy9kZjE5ODUtYWMzZS00NDA0LTgyMWMt
NDNjOGY4YjJjMzg0LzEvNmxUX2Fzc1lEbUJKYzZVb2Z2Q3BMbWJmek9rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy9kZjE5ODUtYWMzZS00NDA0LTgyMWMtNDNjOGY4YjJjMzg0
LzEvNmxUX2Fzc1lEbUJKYzZVb2Z2Q3BMbWJmek9rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFWroLWD1
YbRplnlwM9+sO2wrdnjd8BEbX8GeCRiE7wdTadmuCA3LN4gmH8tg4Q6qSgUBD+ur
e76kpw/jR49cQnhRXDlZHjLnqNCzM9FC3Eoi8FpJkiBtPWx//7wBxU6vZH69gm5j
8QkQ4L8wxO3QjcwY7gfaN8oMrYk5s31FCJWGRPazKtSdv4+20e7zH/AMKzmaQpuV
RkAjgMIkx8Wb1ZeZTdFCCCcqjrFa145PISWqt1Wdkwy30HZ82x250BMfTHdk3nQx
x57wXx6Qe/1cFZk96nQC5Xsd8if2Hk2xhS3u1UuuSj/sCtsTuiAf5DM1srhmohkH
Q+KKtonAxerzlg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 12:21:12 2025 by rpki-client