Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
File: pmAQdyZRcCotMzyDFfGukvbMdJA.mft (raw, json)
Hash identifier: //z2Z5XUOQXLRnBJZrVZbXTb4eheRgbBz2c3CZF656Q=
Subject key identifier: 43:F9:8F:47:BE:94:0F:C9:0C:BF:C5:56:EB:7F:DA:A5:95:75:8D:4E
Authority key identifier: A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
Certificate issuer: /CN=a66010772651702a2d333c8315f1ae92f6cc7490
Certificate serial: 01974BC3FE95841714FE985CC5EF4FEDCF31
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
Manifest number: 14B6
Signing time: Sat 07 Jun 2025 19:00:25 +0000
Manifest this update: Sat 07 Jun 2025 19:00:25 +0000
Manifest next update: Sun 08 Jun 2025 19:00:25 +0000
Files and hashes: 1: pmAQdyZRcCotMzyDFfGukvbMdJA.crl (hash: IR0Lshv7EZuydW6zkERMIMMNi9ebdXoSnBtcKLJy52w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:c3:fe:95:84:17:14:fe:98:5c:c5:ef:4f:ed:cf:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a66010772651702a2d333c8315f1ae92f6cc7490
Validity
Not Before: Jun 7 19:00:25 2025 GMT
Not After : Jun 8 19:00:25 2025 GMT
Subject: CN=43f98f47be940fc90cbfc556eb7fdaa595758d4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a4:e8:91:97:6c:16:71:a4:3d:ad:d1:f0:66:
8c:c3:fc:2c:88:29:87:1e:ae:9c:04:d0:ec:dd:c9:
ba:86:f3:a5:42:f3:c7:65:e6:6b:89:99:3a:93:44:
c2:44:75:c7:b6:5f:a0:ed:c3:ff:d1:9e:a4:28:c1:
48:1c:c5:77:7d:d9:69:6c:f7:06:ba:a3:f2:bc:6a:
d1:64:58:b7:6c:70:bf:6f:64:86:7a:90:02:af:52:
30:5a:c8:85:66:33:79:1d:4b:fb:25:18:52:6a:88:
48:d5:95:11:99:b7:64:99:b4:e9:8e:7e:85:0e:41:
63:8f:9d:79:ab:09:e2:2c:7b:d7:a7:99:68:83:ad:
48:c4:71:0d:39:08:69:ea:96:ce:ac:4d:5e:72:66:
66:b3:46:b2:7b:0a:4a:05:ec:20:ac:86:c0:05:6b:
e9:39:92:9f:de:b4:63:46:0c:52:ec:bf:00:8d:86:
ec:13:6a:f4:5b:49:f8:93:70:5b:dc:f1:28:d4:10:
8d:71:83:fd:47:f6:06:cc:23:b3:28:1d:74:38:f0:
c5:6a:75:e0:97:1b:0f:6b:b4:07:49:94:8e:a9:08:
5a:15:17:31:65:b7:08:05:7b:48:f5:c4:a6:c1:f5:
2c:d6:1a:7c:a3:e2:76:02:a5:5a:df:4b:66:b3:82:
58:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:F9:8F:47:BE:94:0F:C9:0C:BF:C5:56:EB:7F:DA:A5:95:75:8D:4E
X509v3 Authority Key Identifier:
keyid:A6:60:10:77:26:51:70:2A:2D:33:3C:83:15:F1:AE:92:F6:CC:74:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pmAQdyZRcCotMzyDFfGukvbMdJA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e2/454d7b-5d4a-4cf1-85eb-4fa71f24ee43/1/pmAQdyZRcCotMzyDFfGukvbMdJA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
83:a6:85:f8:78:6b:29:5c:22:00:3f:a2:0b:b0:6d:55:61:74:
cf:01:a1:9f:f7:08:31:eb:bb:aa:af:c9:ec:de:1f:5b:c5:12:
3a:b6:03:e3:8f:8e:46:22:28:99:05:c0:df:40:47:ee:e1:d7:
85:99:59:e9:20:4e:27:e9:57:c7:f4:db:56:97:e1:45:d1:9c:
77:09:26:14:ba:ce:2d:2f:56:fd:cc:83:0a:a5:72:0a:f3:53:
a6:a9:b4:f4:97:27:ab:a8:04:b1:84:7b:18:94:cb:08:b2:47:
5e:6a:ee:13:b7:8b:2b:3e:60:95:bc:8c:02:dc:c2:1a:f9:9e:
a4:c2:90:3b:76:a4:fe:a8:f8:fc:fa:fa:83:4d:d9:ee:74:37:
c1:aa:38:3e:66:03:7b:f0:3d:f2:c3:95:76:ff:d0:d5:86:9d:
2f:43:87:70:94:90:6d:3f:a3:75:7d:63:f5:75:85:5b:05:92:
92:ff:db:ae:06:ae:da:ba:23:35:4e:7c:fb:56:c5:b7:2a:31:
c8:71:54:c4:07:d7:23:e7:21:0f:ec:ac:ac:f4:d7:e9:41:a5:
d5:10:ed:0e:22:49:69:fd:7e:82:f2:c0:55:41:7b:29:cd:57:
89:f0:7b:14:ac:8d:30:0a:86:d1:3b:a3:61:f3:65:3f:6f:e3:
b4:7b:d7:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLw/6VhBcU/phcxe9P7c8xMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE2NjAxMDc3MjY1MTcwMmEyZDMzM2M4MzE1ZjFhZTkyZjZj
Yzc0OTAwHhcNMjUwNjA3MTkwMDI1WhcNMjUwNjA4MTkwMDI1WjAzMTEwLwYDVQQD
Eyg0M2Y5OGY0N2JlOTQwZmM5MGNiZmM1NTZlYjdmZGFhNTk1NzU4ZDRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6TokZdsFnGkPa3R8GaMw/wsiCmH
Hq6cBNDs3cm6hvOlQvPHZeZriZk6k0TCRHXHtl+g7cP/0Z6kKMFIHMV3fdlpbPcG
uqPyvGrRZFi3bHC/b2SGepACr1IwWsiFZjN5HUv7JRhSaohI1ZURmbdkmbTpjn6F
DkFjj515qwniLHvXp5log61IxHENOQhp6pbOrE1ecmZms0ayewpKBewgrIbABWvp
OZKf3rRjRgxS7L8AjYbsE2r0W0n4k3Bb3PEo1BCNcYP9R/YGzCOzKB10OPDFanXg
lxsPa7QHSZSOqQhaFRcxZbcIBXtI9cSmwfUs1hp8o+J2AqVa30tms4JYUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEP5j0e+lA/JDL/FVut/2qWVdY1OMB8GA1UdIwQY
MBaAFKZgEHcmUXAqLTM8gxXxrpL2zHSQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcG1BUWR5WlJjQ290TXp5REZmR3VrdmJNZEpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMi80NTRkN2ItNWQ0YS00Y2YxLTg1ZWIt
NGZhNzFmMjRlZTQzLzEvcG1BUWR5WlJjQ290TXp5REZmR3VrdmJNZEpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMi80NTRkN2ItNWQ0YS00Y2YxLTg1ZWItNGZhNzFmMjRlZTQz
LzEvcG1BUWR5WlJjQ290TXp5REZmR3VrdmJNZEpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAg6aF+Hhr
KVwiAD+iC7BtVWF0zwGhn/cIMeu7qq/J7N4fW8USOrYD44+ORiIomQXA30BH7uHX
hZlZ6SBOJ+lXx/TbVpfhRdGcdwkmFLrOLS9W/cyDCqVyCvNTpqm09Jcnq6gEsYR7
GJTLCLJHXmruE7eLKz5glbyMAtzCGvmepMKQO3ak/qj4/Pr6g03Z7nQ3wao4PmYD
e/A98sOVdv/Q1YadL0OHcJSQbT+jdX1j9XWFWwWSkv/brgau2rojNU58+1bFtyox
yHFUxAfXI+chD+ysrPTX6UGl1RDtDiJJaf1+gvLAVUF7Kc1XifB7FKyNMAqG0Tuj
YfNlP2/jtHvXIw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:34:48 2025 by rpki-client