Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
File: cSsCxFx16_ctVtM8KAKXwq6H6y0.mft (raw, json)
Hash identifier: 45ukzQ2qyoEWC/TcmzMsQnE1BaRk5GYhyQ/pO1PnvaU=
Subject key identifier: C8:77:7A:52:31:79:E6:6F:14:9C:7E:F8:45:4B:BB:20:EC:0E:4E:65
Authority key identifier: 71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
Certificate issuer: /CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Certificate serial: 01974F33282A9E078ABAD8F607B72B612FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
Manifest number: 01CE
Signing time: Sun 08 Jun 2025 11:00:41 +0000
Manifest this update: Sun 08 Jun 2025 11:00:41 +0000
Manifest next update: Mon 09 Jun 2025 11:00:41 +0000
Files and hashes: 1: cSsCxFx16_ctVtM8KAKXwq6H6y0.crl (hash: x3nfsT4mOu7Rvy2EHVa3LsoHplPBP/nWQJaA6M0SAmo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:41 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:28:2a:9e:07:8a:ba:d8:f6:07:b7:2b:61:2f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=712b02c45c75ebf72d56d33c280297c2ae87eb2d
Validity
Not Before: Jun 8 11:00:41 2025 GMT
Not After : Jun 9 11:00:41 2025 GMT
Subject: CN=c8777a523179e66f149c7ef8454bbb20ec0e4e65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:dd:1c:42:02:ee:81:ed:f3:11:20:91:7c:aa:
94:14:16:7f:5f:7a:91:eb:4c:89:b9:76:0f:78:16:
5f:e4:9d:10:02:a1:85:59:ec:c0:b6:65:0e:13:ca:
e5:3e:7f:0b:ac:4c:5b:66:51:43:68:c1:d0:5d:00:
61:d9:d4:3e:14:44:a4:e4:e4:18:56:a3:c5:a5:d0:
e7:05:2b:1e:9d:f4:9c:3e:dd:29:62:a0:31:09:23:
87:01:24:ff:c2:c8:44:72:57:7e:d3:b2:c2:6c:4c:
28:b3:1a:91:65:01:0d:fa:80:c8:cd:e1:71:3f:75:
5a:cd:75:f6:36:40:11:80:f1:6a:dc:2b:9d:db:54:
8d:19:b1:a7:3e:7c:34:93:27:da:f5:18:33:2b:de:
33:fa:83:f7:4f:22:db:27:ac:35:05:ba:c0:2e:ab:
07:55:04:56:21:ff:7c:6d:fa:7d:cb:e4:d0:9f:ff:
e1:cd:0b:f1:79:47:15:b3:0a:56:09:dd:fd:d8:71:
8e:cb:5d:cf:c1:ba:29:2a:42:07:3c:b6:72:ec:90:
6f:54:05:5c:58:2c:1a:6b:7e:51:04:d1:2b:b0:55:
20:d0:6d:f2:d6:d8:55:c9:3f:44:40:77:f5:0c:c8:
f9:b7:15:13:3a:bc:b6:eb:d7:ca:24:62:d2:bf:6d:
25:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:77:7A:52:31:79:E6:6F:14:9C:7E:F8:45:4B:BB:20:EC:0E:4E:65
X509v3 Authority Key Identifier:
keyid:71:2B:02:C4:5C:75:EB:F7:2D:56:D3:3C:28:02:97:C2:AE:87:EB:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cSsCxFx16_ctVtM8KAKXwq6H6y0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e7/7c3c4e-26db-4105-9918-352473dd5179/1/cSsCxFx16_ctVtM8KAKXwq6H6y0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
68:43:b7:98:93:fa:78:5a:28:13:93:22:b3:73:cf:30:9e:f1:
75:82:a0:84:c9:53:cb:13:25:9b:99:7c:3c:df:74:81:c2:82:
34:f7:7c:9d:16:d5:c9:c5:58:1c:a5:c8:88:c5:f6:85:20:ec:
87:22:50:2b:9d:1a:5d:f7:47:9b:98:7d:a4:b0:f9:f0:36:18:
51:b8:2e:f2:fa:7c:6a:48:35:80:67:2e:0b:c9:e2:1f:fc:27:
d1:a1:34:5b:09:15:87:2a:e1:11:f1:93:67:72:ff:68:e1:ac:
5e:b7:9a:2e:78:28:8b:55:d2:4b:2c:88:b5:00:2a:48:ec:04:
ae:65:ca:c9:b8:7d:56:66:86:44:99:36:77:d8:79:5f:3d:c3:
de:3a:51:da:6d:75:bc:28:6f:de:22:08:75:27:b2:b2:84:58:
fb:64:c8:44:2f:f7:90:fb:b4:85:48:7d:39:bd:43:98:c5:e9:
2d:35:a7:31:d8:93:80:b8:34:86:fb:50:47:18:84:18:45:e6:
d4:31:85:a4:57:38:9b:a2:f4:e5:ad:0b:ce:7a:41:62:39:fb:
1d:6d:47:2b:7d:d4:15:b9:43:f0:3d:b6:51:6e:e4:8a:2a:0e:
41:2a:96:8d:ac:06:bf:3d:58:d6:4c:c8:e7:3d:90:3e:1e:34:
24:08:99:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPMygqngeKutj2B7crYS/FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMmIwMmM0NWM3NWViZjcyZDU2ZDMzYzI4MDI5N2MyYWU4
N2ViMmQwHhcNMjUwNjA4MTEwMDQxWhcNMjUwNjA5MTEwMDQxWjAzMTEwLwYDVQQD
EyhjODc3N2E1MjMxNzllNjZmMTQ5YzdlZjg0NTRiYmIyMGVjMGU0ZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtd0cQgLuge3zESCRfKqUFBZ/X3qR
60yJuXYPeBZf5J0QAqGFWezAtmUOE8rlPn8LrExbZlFDaMHQXQBh2dQ+FESk5OQY
VqPFpdDnBSsenfScPt0pYqAxCSOHAST/wshEcld+07LCbEwosxqRZQEN+oDIzeFx
P3VazXX2NkARgPFq3Cud21SNGbGnPnw0kyfa9RgzK94z+oP3TyLbJ6w1BbrALqsH
VQRWIf98bfp9y+TQn//hzQvxeUcVswpWCd392HGOy13PwbopKkIHPLZy7JBvVAVc
WCwaa35RBNErsFUg0G3y1thVyT9EQHf1DMj5txUTOry269fKJGLSv20ldQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMh3elIxeeZvFJx++EVLuyDsDk5lMB8GA1UdIwQY
MBaAFHErAsRcdev3LVbTPCgCl8Kuh+stMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNy83YzNjNGUtMjZkYi00MTA1LTk5MTgt
MzUyNDczZGQ1MTc5LzEvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNy83YzNjNGUtMjZkYi00MTA1LTk5MTgtMzUyNDczZGQ1MTc5
LzEvY1NzQ3hGeDE2X2N0VnRNOEtBS1h3cTZINnkwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaEO3mJP6
eFooE5Mis3PPMJ7xdYKghMlTyxMlm5l8PN90gcKCNPd8nRbVycVYHKXIiMX2hSDs
hyJQK50aXfdHm5h9pLD58DYYUbgu8vp8akg1gGcuC8niH/wn0aE0WwkVhyrhEfGT
Z3L/aOGsXreaLngoi1XSSyyItQAqSOwErmXKybh9VmaGRJk2d9h5Xz3D3jpR2m11
vChv3iIIdSeysoRY+2TIRC/3kPu0hUh9Ob1DmMXpLTWnMdiTgLg0hvtQRxiEGEXm
1DGFpFc4m6L05a0LznpBYjn7HW1HK33UFblD8D22UW7kiioOQSqWjawGvz1Y1kzI
5z2QPh40JAiZyQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 21:43:43 2025 by rpki-client