Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
File: M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft (raw, json)
Hash identifier: q/1VX/CQ8NX86g/c0rGoNH1J6pJYdC8p/PbcguOa93k=
Subject key identifier: 7B:C1:E0:81:C2:14:FB:F8:B5:E4:AD:EB:16:02:4F:3C:B4:2B:B9:D0
Authority key identifier: 33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
Certificate issuer: /CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Certificate serial: 0197488C0061286EC7A8E91E2D5270326CB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
Manifest number: 0AFC
Signing time: Sat 07 Jun 2025 04:00:24 +0000
Manifest this update: Sat 07 Jun 2025 04:00:24 +0000
Manifest next update: Sun 08 Jun 2025 04:00:24 +0000
Files and hashes: 1: M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl (hash: IxqTtr1P76kfV+5QKaYT/lk7AmB+rCuhtu71BiwkOF8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 04:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:00:61:28:6e:c7:a8:e9:1e:2d:52:70:32:6c:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=336170a82d57fcb9e440aabc3be9ec40bd039c4e
Validity
Not Before: Jun 7 04:00:24 2025 GMT
Not After : Jun 8 04:00:24 2025 GMT
Subject: CN=7bc1e081c214fbf8b5e4adeb16024f3cb42bb9d0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:8f:51:bc:81:34:8d:b0:97:b8:5d:38:2c:50:
d8:12:2d:3f:b4:ad:a3:85:1e:fe:c1:49:21:33:af:
ce:49:b6:a3:49:f9:04:e1:7d:c4:b5:40:66:5a:58:
b4:05:c9:2f:7c:fc:1e:79:0a:b4:f9:a4:67:4c:51:
a3:6c:e8:6a:d7:d4:d9:d6:37:ee:65:98:71:fc:44:
a0:ec:aa:cd:88:6f:17:2b:9f:54:5c:77:9d:f4:3b:
66:38:c1:00:88:41:20:72:71:cd:d3:e8:da:c6:55:
83:3e:99:cd:b8:b0:21:9c:04:31:23:07:07:c0:1b:
d3:1c:a1:49:45:03:95:92:16:f6:a4:7a:39:f8:f3:
b8:82:3c:3b:ce:3b:cf:59:0d:bc:95:ea:af:eb:ae:
f6:12:2e:f7:d2:3b:cd:95:8d:b5:0a:a9:1c:06:82:
ab:7a:87:b5:c1:0d:8c:31:c7:98:84:4f:d4:4a:df:
9d:40:f4:8e:b8:b6:68:b4:5e:51:e0:b0:b6:d8:61:
ec:d8:d8:f8:c2:13:11:db:8d:84:53:45:62:4b:3f:
2a:ae:3a:11:4c:05:d3:50:cf:0a:48:49:18:4f:d2:
73:ef:ba:55:3e:da:50:85:aa:7c:8b:0f:8e:95:ba:
58:cf:96:dc:89:0f:5f:92:09:ae:ca:42:c0:aa:92:
cb:3b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:C1:E0:81:C2:14:FB:F8:B5:E4:AD:EB:16:02:4F:3C:B4:2B:B9:D0
X509v3 Authority Key Identifier:
keyid:33:61:70:A8:2D:57:FC:B9:E4:40:AA:BC:3B:E9:EC:40:BD:03:9C:4E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M2FwqC1X_LnkQKq8O-nsQL0DnE4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/eb/8e43b9-1f51-4b93-9b27-74b6f005d17b/1/M2FwqC1X_LnkQKq8O-nsQL0DnE4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:8c:06:2b:fa:29:a4:7b:88:92:a0:4c:86:60:41:f1:7e:24:
03:9c:92:85:5c:ae:16:c6:bb:65:a6:b7:97:66:d9:66:01:54:
0b:41:60:1b:62:a0:1c:87:41:e5:1f:50:a3:c2:51:c1:b6:2f:
e0:ee:e6:a9:aa:57:cb:d2:38:b1:3a:43:a8:51:02:e5:2e:28:
52:ca:88:c0:33:2c:b6:37:96:24:f0:00:ec:f3:e7:55:04:2b:
ff:0d:a2:bb:7d:69:8d:4b:50:88:f2:8f:45:ea:bd:d1:f2:9f:
c8:71:8e:7a:bf:b8:a0:e4:01:3e:9f:fe:12:62:a1:2b:e5:d7:
a5:32:44:a4:91:e3:72:00:56:43:aa:0d:3e:7f:ed:53:2c:c3:
bd:04:f4:03:0c:a6:ed:6f:54:da:21:b7:31:0f:cd:a6:7e:36:
fc:36:cb:22:6a:21:47:f8:3a:f4:b9:78:6a:a6:97:80:15:d9:
8e:0c:8e:b4:fb:18:87:fa:60:ad:ab:af:23:4b:9d:f1:d5:dd:
c6:60:73:6b:5b:db:32:68:3e:7e:dd:91:95:9a:db:74:bd:88:
20:f5:f8:13:10:bd:63:aa:c2:81:9a:4e:9e:f0:8f:2f:d1:86:
dd:b3:8f:7e:cb:6d:7d:0a:8f:4c:11:0a:39:9b:43:ee:80:d4:
8c:77:90:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjABhKG7HqOkeLVJwMmywMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzNjE3MGE4MmQ1N2ZjYjllNDQwYWFiYzNiZTllYzQwYmQw
MzljNGUwHhcNMjUwNjA3MDQwMDI0WhcNMjUwNjA4MDQwMDI0WjAzMTEwLwYDVQQD
Eyg3YmMxZTA4MWMyMTRmYmY4YjVlNGFkZWIxNjAyNGYzY2I0MmJiOWQwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA149RvIE0jbCXuF04LFDYEi0/tK2j
hR7+wUkhM6/OSbajSfkE4X3EtUBmWli0BckvfPweeQq0+aRnTFGjbOhq19TZ1jfu
ZZhx/ESg7KrNiG8XK59UXHed9DtmOMEAiEEgcnHN0+jaxlWDPpnNuLAhnAQxIwcH
wBvTHKFJRQOVkhb2pHo5+PO4gjw7zjvPWQ28leqv6672Ei730jvNlY21CqkcBoKr
eoe1wQ2MMceYhE/USt+dQPSOuLZotF5R4LC22GHs2Nj4whMR242EU0ViSz8qrjoR
TAXTUM8KSEkYT9Jz77pVPtpQhap8iw+OlbpYz5bciQ9fkgmuykLAqpLLOwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHvB4IHCFPv4teSt6xYCTzy0K7nQMB8GA1UdIwQY
MBaAFDNhcKgtV/y55ECqvDvp7EC9A5xOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYi84ZTQzYjktMWY1MS00YjkzLTliMjct
NzRiNmYwMDVkMTdiLzEvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYi84ZTQzYjktMWY1MS00YjkzLTliMjctNzRiNmYwMDVkMTdi
LzEvTTJGd3FDMVhfTG5rUUtxOE8tbnNRTDBEbkU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhIwGK/op
pHuIkqBMhmBB8X4kA5yShVyuFsa7Zaa3l2bZZgFUC0FgG2KgHIdB5R9Qo8JRwbYv
4O7mqapXy9I4sTpDqFEC5S4oUsqIwDMstjeWJPAA7PPnVQQr/w2iu31pjUtQiPKP
Req90fKfyHGOer+4oOQBPp/+EmKhK+XXpTJEpJHjcgBWQ6oNPn/tUyzDvQT0Awym
7W9U2iG3MQ/Npn42/DbLImohR/g69Ll4aqaXgBXZjgyOtPsYh/pgrauvI0ud8dXd
xmBza1vbMmg+ft2RlZrbdL2IIPX4ExC9Y6rCgZpOnvCPL9GG3bOPfsttfQqPTBEK
OZtD7oDUjHeQwA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:01:05 2025 by rpki-client