Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
File: I8cVVBujctWQ1odn14zmmEABMFk.mft (raw, json)
Hash identifier: YXmfftW+WVS5IUvjAq0mxIyAcoUcQMVYKx31+RrewnY=
Subject key identifier: 77:29:2C:61:DB:E8:28:F5:89:B3:F1:74:B5:42:2F:01:17:AE:12:21
Authority key identifier: 23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
Certificate issuer: /CN=23c715541ba372d590d68767d78ce69840013059
Certificate serial: 01974A7AAE747A108337AAC38770F139A5FF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
Manifest number: 1579
Signing time: Sat 07 Jun 2025 13:00:43 +0000
Manifest this update: Sat 07 Jun 2025 13:00:43 +0000
Manifest next update: Sun 08 Jun 2025 13:00:43 +0000
Files and hashes: 1: I8cVVBujctWQ1odn14zmmEABMFk.crl (hash: f+bc1zqGH9jT11LuQPdsMy9YkfBKq7N+E3U7akZA7I4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 13:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:ae:74:7a:10:83:37:aa:c3:87:70:f1:39:a5:ff
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23c715541ba372d590d68767d78ce69840013059
Validity
Not Before: Jun 7 13:00:43 2025 GMT
Not After : Jun 8 13:00:43 2025 GMT
Subject: CN=77292c61dbe828f589b3f174b5422f0117ae1221
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:81:63:4a:cc:7d:b0:76:74:df:bc:7f:c1:b3:
f9:1b:6b:91:ea:be:f6:51:6e:e3:b5:1f:16:14:7a:
af:72:0a:97:af:44:27:43:87:d3:8b:e9:d4:1c:69:
3f:b1:88:7b:b0:b3:a7:7b:a2:b8:e4:a9:0e:aa:8a:
58:d1:0d:b7:77:51:1f:c3:31:9d:ba:68:58:b1:5b:
95:96:bd:f8:3e:13:43:51:d9:b9:33:eb:33:9f:e0:
15:f4:18:06:86:17:40:f9:e2:84:5a:9d:73:fe:03:
9a:76:07:1d:e3:4c:d2:18:06:09:0a:ec:5d:cb:45:
1b:77:a3:d8:fd:ab:ac:4b:d7:cc:34:ab:95:eb:39:
75:6e:bb:20:6f:fc:8d:f3:ba:3f:2c:8f:08:65:4a:
27:8b:b5:91:a8:a0:49:75:67:52:72:74:fb:69:ee:
c3:db:7c:b7:02:2d:01:d7:27:3d:ef:93:7d:41:1f:
49:5f:17:8d:b2:16:7f:2e:a5:7d:eb:71:3c:c6:ee:
7c:cc:49:21:87:04:7e:88:90:46:6b:7d:f3:b4:f3:
81:74:d1:22:cb:c9:05:e5:0c:16:f6:91:04:8d:f1:
7c:a2:8f:00:4c:4d:be:9c:56:51:ed:f9:2a:c3:44:
f2:f3:eb:bc:97:17:6d:76:02:13:80:0e:98:56:e3:
94:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:29:2C:61:DB:E8:28:F5:89:B3:F1:74:B5:42:2F:01:17:AE:12:21
X509v3 Authority Key Identifier:
keyid:23:C7:15:54:1B:A3:72:D5:90:D6:87:67:D7:8C:E6:98:40:01:30:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I8cVVBujctWQ1odn14zmmEABMFk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/f184a9-c2fe-4279-acdc-7ce6980cb1cc/1/I8cVVBujctWQ1odn14zmmEABMFk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:86:68:70:ae:43:24:57:2d:72:72:1c:7f:2b:d6:31:80:a3:
11:cd:3d:08:e5:74:81:92:9d:47:83:cb:98:e6:48:75:66:f4:
f0:bb:b2:5d:47:ac:92:96:40:c1:dd:0a:25:41:30:83:27:6c:
a7:52:59:1e:86:a6:a1:9b:70:b3:8d:bc:63:5a:7d:74:1c:33:
a9:1b:27:ff:ec:07:46:55:2c:11:7a:b4:d4:7e:85:07:e1:c4:
12:7e:47:15:12:a0:81:5c:66:1c:be:73:bd:79:f1:46:e7:d6:
5e:05:80:fd:2f:4c:5c:98:5e:da:dc:d3:11:f3:dd:b8:27:ed:
ff:fa:f3:32:ad:34:55:3c:69:aa:f4:cb:0c:e7:e0:57:d5:ff:
15:b9:04:8d:80:b6:14:bc:48:7f:aa:4d:11:03:b3:7c:aa:82:
45:0d:a1:47:46:e5:9d:c9:b0:9e:33:6d:9c:47:da:b6:59:e7:
f6:00:8f:83:a7:97:68:86:9a:90:d7:45:ca:9e:5f:ea:2e:84:
24:a6:1c:34:b6:f2:df:35:2d:f1:04:90:8b:d0:c4:10:8f:4a:
8f:52:4e:39:b6:c7:df:af:2c:ef:bd:68:f9:e0:10:c0:72:cb:
83:dd:9e:a6:f6:37:f0:17:cb:5e:b1:ff:a5:fe:d6:b2:a7:b7:
b5:db:14:b5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeq50ehCDN6rDh3DxOaX/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYzcxNTU0MWJhMzcyZDU5MGQ2ODc2N2Q3OGNlNjk4NDAw
MTMwNTkwHhcNMjUwNjA3MTMwMDQzWhcNMjUwNjA4MTMwMDQzWjAzMTEwLwYDVQQD
Eyg3NzI5MmM2MWRiZTgyOGY1ODliM2YxNzRiNTQyMmYwMTE3YWUxMjIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyIFjSsx9sHZ037x/wbP5G2uR6r72
UW7jtR8WFHqvcgqXr0QnQ4fTi+nUHGk/sYh7sLOne6K45KkOqopY0Q23d1EfwzGd
umhYsVuVlr34PhNDUdm5M+szn+AV9BgGhhdA+eKEWp1z/gOadgcd40zSGAYJCuxd
y0Ubd6PY/ausS9fMNKuV6zl1brsgb/yN87o/LI8IZUoni7WRqKBJdWdScnT7ae7D
23y3Ai0B1yc975N9QR9JXxeNshZ/LqV963E8xu58zEkhhwR+iJBGa33ztPOBdNEi
y8kF5QwW9pEEjfF8oo8ATE2+nFZR7fkqw0Ty8+u8lxdtdgITgA6YVuOUGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHcpLGHb6Cj1ibPxdLVCLwEXrhIhMB8GA1UdIwQY
MBaAFCPHFVQbo3LVkNaHZ9eM5phAATBZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSThjVlZCdWpjdFdRMW9kbjE0em1tRUFCTUZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9mMTg0YTktYzJmZS00Mjc5LWFjZGMt
N2NlNjk4MGNiMWNjLzEvSThjVlZCdWpjdFdRMW9kbjE0em1tRUFCTUZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9mMTg0YTktYzJmZS00Mjc5LWFjZGMtN2NlNjk4MGNiMWNj
LzEvSThjVlZCdWpjdFdRMW9kbjE0em1tRUFCTUZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM4ZocK5D
JFctcnIcfyvWMYCjEc09COV0gZKdR4PLmOZIdWb08LuyXUeskpZAwd0KJUEwgyds
p1JZHoamoZtws428Y1p9dBwzqRsn/+wHRlUsEXq01H6FB+HEEn5HFRKggVxmHL5z
vXnxRufWXgWA/S9MXJhe2tzTEfPduCft//rzMq00VTxpqvTLDOfgV9X/FbkEjYC2
FLxIf6pNEQOzfKqCRQ2hR0blncmwnjNtnEfatlnn9gCPg6eXaIaakNdFyp5f6i6E
JKYcNLby3zUt8QSQi9DEEI9Kj1JOObbH368s771o+eAQwHLLg92epvY38BfLXrH/
pf7Wsqe3tdsUtQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 22:27:36 2025 by rpki-client