Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
File: vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft (raw, json)
Hash identifier: UD7Y5kSlyfrcWds4urQc4IRoKh0ETe7jIi++e1sZHB8=
Subject key identifier: E6:26:28:72:0E:88:6B:C7:36:F8:F3:A6:59:FB:B1:87:5C:3F:C2:B8
Authority key identifier: BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
Certificate issuer: /CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Certificate serial: 0197CC4C9A35A38491D822F93008DA49350E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
Manifest number: 01B1
Signing time: Wed 02 Jul 2025 18:01:01 +0000
Manifest this update: Wed 02 Jul 2025 18:01:01 +0000
Manifest next update: Thu 03 Jul 2025 18:01:01 +0000
Files and hashes: 1: vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl (hash: zqEUKhJGS8bz/H0nuNtbvTlWIKcEXjau0ZxOafy263I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cc:4c:9a:35:a3:84:91:d8:22:f9:30:08:da:49:35:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bd7e757d043ad317f2d4043a73cc5faf9743460e
Validity
Not Before: Jul 2 18:01:01 2025 GMT
Not After : Jul 3 18:01:01 2025 GMT
Subject: CN=e62628720e886bc736f8f3a659fbb1875c3fc2b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:0a:9d:22:14:3b:87:ba:55:6e:02:27:2e:34:
64:79:80:f7:61:df:6b:52:e3:d4:75:32:3a:6c:b6:
56:0e:22:0c:23:fe:f4:a8:10:2f:32:d4:38:ee:a0:
4e:e0:10:c9:59:6f:fc:94:dd:a7:d3:78:a9:09:b5:
b4:c4:0a:2f:18:9a:0f:56:9a:36:f6:55:a0:9c:ba:
69:34:67:6f:7b:81:10:f1:cb:7b:3f:13:5a:27:48:
3d:55:35:5c:48:04:01:1d:88:16:fc:02:6e:6f:79:
0d:0f:1a:26:1e:2a:12:b8:ca:e5:08:dc:93:e7:ba:
33:26:37:c3:3f:d1:a2:7b:6e:b7:08:4c:01:78:6f:
61:71:a4:ef:f2:ad:18:4a:bd:b5:de:b6:8f:3b:33:
52:e5:01:bd:19:d6:72:dd:ea:19:bd:ee:dc:2d:1a:
e5:f1:6c:93:35:df:69:26:44:dc:cb:ec:26:f1:47:
1e:8f:77:b6:ce:e6:6c:a6:6a:75:d6:27:eb:3d:25:
66:c2:d2:e0:44:f9:05:61:21:60:f2:d0:1b:1c:02:
b9:ca:0e:ba:40:90:ab:4f:25:87:61:54:3b:5b:ae:
bd:56:e7:74:d5:d5:19:21:31:f6:27:90:8f:d0:e3:
70:bc:93:77:f4:d9:44:c6:3e:a8:65:08:90:97:8a:
b2:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:26:28:72:0E:88:6B:C7:36:F8:F3:A6:59:FB:B1:87:5C:3F:C2:B8
X509v3 Authority Key Identifier:
keyid:BD:7E:75:7D:04:3A:D3:17:F2:D4:04:3A:73:CC:5F:AF:97:43:46:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/vX51fQQ60xfy1AQ6c8xfr5dDRg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/471700-bc43-4efd-9ce5-6dd8670fa3e0/1/vX51fQQ60xfy1AQ6c8xfr5dDRg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a5:4d:1b:68:aa:bd:37:44:88:b7:2f:ae:d6:9b:70:cd:c8:ec:
55:59:79:01:02:ec:b1:19:7b:97:61:6f:e0:e6:98:d8:07:48:
57:54:ba:03:c1:b8:9b:99:84:37:92:16:73:44:c3:3f:60:0d:
48:78:02:20:46:e7:b9:c4:3e:83:e4:0a:e9:5e:3e:cc:f9:fd:
80:19:31:32:5e:4e:dd:99:7f:f2:df:56:04:e6:9c:05:0e:9f:
80:d2:3c:af:8f:cd:41:50:92:f0:48:9f:f0:e2:1b:16:a7:9e:
ac:02:d5:75:94:f1:61:92:ce:17:0b:47:90:18:e1:21:c5:7b:
d4:b7:55:9c:28:d1:ee:3a:fc:b4:f7:e2:d4:2c:b0:f0:26:af:
ca:00:9c:39:2e:8b:10:34:c4:ab:07:f0:0f:88:c0:a6:f8:7f:
7b:ed:52:ca:f7:fd:ec:c2:c4:ab:7e:89:87:15:a1:97:d9:76:
5b:0c:1f:bd:53:fe:ea:17:4e:9d:ca:4b:55:c7:1e:97:dc:80:
37:bd:da:d2:fc:d4:0d:bd:73:81:de:19:14:59:61:72:21:b3:
a4:aa:2b:9a:24:a6:8b:d0:82:7a:cf:82:8d:da:7f:2a:f1:7e:
cd:4f:de:7c:dd:33:ee:ea:56:54:88:92:a9:b4:84:31:88:d8:
96:2e:51:70
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfMTJo1o4SR2CL5MAjaSTUOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJkN2U3NTdkMDQzYWQzMTdmMmQ0MDQzYTczY2M1ZmFmOTc0
MzQ2MGUwHhcNMjUwNzAyMTgwMTAxWhcNMjUwNzAzMTgwMTAxWjAzMTEwLwYDVQQD
EyhlNjI2Mjg3MjBlODg2YmM3MzZmOGYzYTY1OWZiYjE4NzVjM2ZjMmI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0gqdIhQ7h7pVbgInLjRkeYD3Yd9r
UuPUdTI6bLZWDiIMI/70qBAvMtQ47qBO4BDJWW/8lN2n03ipCbW0xAovGJoPVpo2
9lWgnLppNGdve4EQ8ct7PxNaJ0g9VTVcSAQBHYgW/AJub3kNDxomHioSuMrlCNyT
57ozJjfDP9Gie263CEwBeG9hcaTv8q0YSr213raPOzNS5QG9GdZy3eoZve7cLRrl
8WyTNd9pJkTcy+wm8Ucej3e2zuZspmp11ifrPSVmwtLgRPkFYSFg8tAbHAK5yg66
QJCrTyWHYVQ7W669Vud01dUZITH2J5CP0ONwvJN39NlExj6oZQiQl4qydQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOYmKHIOiGvHNvjzpln7sYdcP8K4MB8GA1UdIwQY
MBaAFL1+dX0EOtMX8tQEOnPMX6+XQ0YOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdlg1MWZRUTYweGZ5MUFRNmM4eGZyNWREUmc0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi80NzE3MDAtYmM0My00ZWZkLTljZTUt
NmRkODY3MGZhM2UwLzEvdlg1MWZRUTYweGZ5MUFRNmM4eGZyNWREUmc0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi80NzE3MDAtYmM0My00ZWZkLTljZTUtNmRkODY3MGZhM2Uw
LzEvdlg1MWZRUTYweGZ5MUFRNmM4eGZyNWREUmc0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEApU0baKq9
N0SIty+u1ptwzcjsVVl5AQLssRl7l2Fv4OaY2AdIV1S6A8G4m5mEN5IWc0TDP2AN
SHgCIEbnucQ+g+QK6V4+zPn9gBkxMl5O3Zl/8t9WBOacBQ6fgNI8r4/NQVCS8Eif
8OIbFqeerALVdZTxYZLOFwtHkBjhIcV71LdVnCjR7jr8tPfi1Cyw8CavygCcOS6L
EDTEqwfwD4jApvh/e+1Syvf97MLEq36JhxWhl9l2WwwfvVP+6hdOncpLVccel9yA
N73a0vzUDb1zgd4ZFFlhciGzpKormiSmi9CCes+Cjdp/KvF+zU/efN0z7upWVIiS
qbSEMYjYli5RcA==
-----END CERTIFICATE-----
Generated at Wed Jul 2 20:06:14 2025 by rpki-client