Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
File: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft (raw, json)
Hash identifier: 9U1pc9tKNHtRIIgWIcz0FZ7mZysF8vjojsq4yDTKZak=
Subject key identifier: 57:5E:09:6A:A8:67:6D:DC:66:A5:97:3A:A0:7F:1B:0E:E2:C9:AE:AA
Authority key identifier: 11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
Certificate issuer: /CN=1171641f157cb57b532626359e71582742c2dccb
Certificate serial: 019749D59909FB0B700BA1921048991C8731
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
Manifest number: 144E
Signing time: Sat 07 Jun 2025 10:00:24 +0000
Manifest this update: Sat 07 Jun 2025 10:00:24 +0000
Manifest next update: Sun 08 Jun 2025 10:00:24 +0000
Files and hashes: 1: EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl (hash: usP4cLbXKqQEOdBPB5rpj4HOuZW0npMvkanghf5LLU4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d5:99:09:fb:0b:70:0b:a1:92:10:48:99:1c:87:31
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1171641f157cb57b532626359e71582742c2dccb
Validity
Not Before: Jun 7 10:00:24 2025 GMT
Not After : Jun 8 10:00:24 2025 GMT
Subject: CN=575e096aa8676ddc66a5973aa07f1b0ee2c9aeaa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d1:ef:1c:c8:3a:1a:86:cd:28:f2:ff:a7:9b:57:
dc:d2:cf:f7:3a:7c:da:66:b9:03:79:f2:81:ed:49:
7a:81:1d:85:60:1c:01:7e:c1:db:75:ae:06:62:20:
9b:63:79:fe:b9:45:af:76:4b:98:8a:59:06:aa:31:
37:89:9f:d7:a6:ce:90:c4:07:6c:09:65:23:79:cd:
8d:ef:0e:1b:6f:72:7d:a2:96:53:ff:b7:0b:90:6e:
f8:43:e8:ac:f9:25:24:9a:a6:7d:7f:9a:fc:27:4f:
01:e6:a5:1f:d4:ad:98:e6:c0:58:04:d6:b9:d4:40:
84:bc:3d:60:dd:6c:8c:5a:dc:54:89:31:f5:9b:a7:
e2:9e:d3:24:07:0c:1f:8d:28:41:dc:91:4f:b6:e1:
48:0e:6d:98:3a:3e:4a:c0:30:a5:38:7a:b3:a5:21:
37:51:6b:eb:b5:d4:36:37:4c:74:af:3f:fa:6c:6d:
22:3a:25:36:04:a3:d6:16:3f:d4:00:1c:13:e9:fd:
94:5a:12:b4:7c:6a:7e:8f:d6:22:b5:ba:52:f1:5c:
5d:23:e5:53:0e:90:7b:84:0f:6b:ae:7d:ae:e2:33:
62:76:2d:29:36:75:82:a4:bb:41:ac:05:2c:81:5a:
1d:a9:b3:14:37:3b:7c:57:b0:8e:34:66:5c:47:e6:
85:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
57:5E:09:6A:A8:67:6D:DC:66:A5:97:3A:A0:7F:1B:0E:E2:C9:AE:AA
X509v3 Authority Key Identifier:
keyid:11:71:64:1F:15:7C:B5:7B:53:26:26:35:9E:71:58:27:42:C2:DC:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f3/3fa711-06b0-41e3-9c72-3cb9e102afe0/1/EXFkHxV8tXtTJiY1nnFYJ0LC3Ms.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:c1:0e:46:18:f3:a0:12:dd:f9:85:d9:31:a2:33:73:10:01:
4d:5c:b0:67:17:7e:9d:27:9b:46:87:29:8d:5d:b2:e0:c8:c4:
56:2a:c3:3b:73:fe:7a:dd:de:6c:08:7e:f5:ab:38:80:09:35:
05:b4:15:b4:4e:43:b8:97:52:cb:e0:51:65:c3:ff:35:e3:b1:
21:de:34:7e:62:25:31:a8:22:86:34:0d:d2:af:f2:c8:23:a7:
bf:5e:1a:c3:bd:11:12:4d:30:0e:16:cf:57:9c:38:bc:3f:4e:
75:09:33:b6:2a:41:8f:67:e8:b2:f8:eb:ca:cc:41:21:03:63:
21:cd:98:7b:8f:28:51:50:1a:c3:e5:a6:cb:e0:6e:7b:ca:d2:
7d:80:5c:7f:d5:aa:e2:79:a2:49:c4:a2:29:d9:2d:f0:e4:51:
43:5e:95:20:6d:b9:7e:e5:06:fd:5a:e2:9f:c6:69:52:24:73:
92:b6:61:02:35:9c:8f:ce:0d:4d:b8:d9:67:44:31:c3:5a:d2:
96:53:66:c1:8f:01:dd:cc:66:9c:c9:28:29:40:5b:f7:22:2e:
4e:54:11:39:9e:d8:8e:cd:e9:33:97:9c:aa:65:19:5b:44:df:
03:3c:1b:54:79:70:8b:d4:51:46:6b:fd:85:6f:5e:f8:45:fc:
a3:a0:8d:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1ZkJ+wtwC6GSEEiZHIcxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDExNzE2NDFmMTU3Y2I1N2I1MzI2MjYzNTllNzE1ODI3NDJj
MmRjY2IwHhcNMjUwNjA3MTAwMDI0WhcNMjUwNjA4MTAwMDI0WjAzMTEwLwYDVQQD
Eyg1NzVlMDk2YWE4Njc2ZGRjNjZhNTk3M2FhMDdmMWIwZWUyYzlhZWFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0e8cyDoahs0o8v+nm1fc0s/3Onza
ZrkDefKB7Ul6gR2FYBwBfsHbda4GYiCbY3n+uUWvdkuYilkGqjE3iZ/Xps6QxAds
CWUjec2N7w4bb3J9opZT/7cLkG74Q+is+SUkmqZ9f5r8J08B5qUf1K2Y5sBYBNa5
1ECEvD1g3WyMWtxUiTH1m6fintMkBwwfjShB3JFPtuFIDm2YOj5KwDClOHqzpSE3
UWvrtdQ2N0x0rz/6bG0iOiU2BKPWFj/UABwT6f2UWhK0fGp+j9YitbpS8VxdI+VT
DpB7hA9rrn2u4jNidi0pNnWCpLtBrAUsgVodqbMUNzt8V7CONGZcR+aF/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFdeCWqoZ23cZqWXOqB/Gw7iya6qMB8GA1UdIwQY
MBaAFBFxZB8VfLV7UyYmNZ5xWCdCwtzLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMy8zZmE3MTEtMDZiMC00MWUzLTljNzIt
M2NiOWUxMDJhZmUwLzEvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMy8zZmE3MTEtMDZiMC00MWUzLTljNzItM2NiOWUxMDJhZmUw
LzEvRVhGa0h4Vjh0WHRUSmlZMW5uRllKMExDM01zLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAacEORhjz
oBLd+YXZMaIzcxABTVywZxd+nSebRocpjV2y4MjEVirDO3P+et3ebAh+9as4gAk1
BbQVtE5DuJdSy+BRZcP/NeOxId40fmIlMagihjQN0q/yyCOnv14aw70REk0wDhbP
V5w4vD9OdQkztipBj2fosvjrysxBIQNjIc2Ye48oUVAaw+Wmy+Bue8rSfYBcf9Wq
4nmiScSiKdkt8ORRQ16VIG25fuUG/Vrin8ZpUiRzkrZhAjWcj84NTbjZZ0Qxw1rS
llNmwY8B3cxmnMkoKUBb9yIuTlQROZ7Yjs3pM5ecqmUZW0TfAzwbVHlwi9RRRmv9
hW9e+EX8o6CNNQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:29:56 2025 by rpki-client