Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
File: bQ1uHM2JDfL16cFF7LpGiZzOs70.mft (raw, json)
Hash identifier: 9oFABGFLYJhQzWClF5iMR16uvxyk6QKJgvUk2Ehr9NA=
Subject key identifier: B2:A6:07:83:AB:E0:8A:D2:C8:E0:89:2C:FA:29:AA:46:94:65:A8:24
Authority key identifier: 6D:0D:6E:1C:CD:89:0D:F2:F5:E9:C1:45:EC:BA:46:89:9C:CE:B3:BD
Certificate issuer: /CN=6d0d6e1ccd890df2f5e9c145ecba46899cceb3bd
Certificate serial: 019750B377CAAF2A47F0E184D522E6BFD44C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
Manifest number: 1210
Signing time: Sun 08 Jun 2025 18:00:28 +0000
Manifest this update: Sun 08 Jun 2025 18:00:28 +0000
Manifest next update: Mon 09 Jun 2025 18:00:28 +0000
Files and hashes: 1: bQ1uHM2JDfL16cFF7LpGiZzOs70.crl (hash: NCcJ4zvNYMCDjX+7J4+nrzTES4OLTNkwxjo/MVrNvGU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b3:77:ca:af:2a:47:f0:e1:84:d5:22:e6:bf:d4:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6d0d6e1ccd890df2f5e9c145ecba46899cceb3bd
Validity
Not Before: Jun 8 18:00:28 2025 GMT
Not After : Jun 9 18:00:28 2025 GMT
Subject: CN=b2a60783abe08ad2c8e0892cfa29aa469465a824
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:23:e2:b3:3f:a3:0d:2c:92:c8:6b:17:a0:d7:
a3:d3:9f:0e:74:01:ee:0d:18:bd:bf:ef:28:ed:fb:
30:cb:2a:0f:34:ac:2a:4b:f4:e3:67:84:b3:2c:e9:
a5:69:58:49:67:e3:4b:3b:89:8b:c4:0c:6b:d8:00:
c1:48:7c:ef:ec:ca:fb:c8:34:cc:d8:5d:e9:27:a1:
36:8f:57:66:24:c1:f4:2d:5a:c6:5d:36:70:68:60:
45:07:08:a4:8d:ca:93:eb:20:a2:d3:88:01:98:ee:
df:d0:c6:5e:75:a4:26:25:c9:50:fe:03:ea:7d:d5:
c1:ea:61:9e:12:03:16:4c:50:25:7f:4d:e8:23:03:
71:a0:46:a7:2d:c8:19:c6:91:08:bd:d8:9e:67:fa:
8f:b9:1f:75:ad:4a:fd:9d:8c:ec:a3:cc:46:37:2b:
b1:2b:cc:99:cd:4b:1f:39:c1:a6:53:7d:48:6a:63:
e3:ef:e6:ad:77:1e:83:17:6a:8b:4b:d6:15:0d:b7:
23:4f:20:89:98:1a:e4:74:ab:83:cc:32:87:51:a8:
88:d5:a3:d1:38:58:87:fd:09:6d:29:c1:0b:3f:0e:
57:49:47:a1:14:7a:65:d8:17:a9:68:2f:1c:4a:c8:
d7:80:7b:29:89:e4:7d:ea:b3:e2:0e:96:f6:18:38:
17:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:A6:07:83:AB:E0:8A:D2:C8:E0:89:2C:FA:29:AA:46:94:65:A8:24
X509v3 Authority Key Identifier:
keyid:6D:0D:6E:1C:CD:89:0D:F2:F5:E9:C1:45:EC:BA:46:89:9C:CE:B3:BD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/bQ1uHM2JDfL16cFF7LpGiZzOs70.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/277154-efba-48ed-bb0c-650b70bad7a9/1/bQ1uHM2JDfL16cFF7LpGiZzOs70.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:6b:11:d0:87:1f:8f:15:6a:a4:23:1d:4c:15:a7:fa:46:46:
97:cb:bf:a2:db:83:21:22:8c:3f:21:6a:17:01:21:be:8d:d1:
02:65:d1:93:6d:0a:51:34:37:8b:ec:de:52:28:ce:e0:68:63:
49:a4:7e:c7:b2:35:7a:b7:81:4c:d8:5f:a8:dd:52:dd:b9:d4:
bb:94:84:ee:e9:af:33:6b:16:6f:0a:9f:25:9a:f0:08:ec:50:
42:d3:a4:be:c0:dc:cd:27:a7:be:b3:c5:e2:e4:b6:02:86:68:
66:fe:e5:ff:74:ca:23:84:6c:00:a2:a6:bc:c5:ee:81:ce:21:
c8:9a:93:3d:3c:bb:d7:74:49:69:55:63:ae:92:3e:b9:3c:a6:
a3:8f:36:ae:a8:b3:24:c2:00:48:bf:75:cb:dd:71:47:9a:b9:
dc:ff:e8:f0:ef:e6:c2:4b:46:39:ff:0e:35:8a:8e:eb:7a:bb:
be:b7:33:29:8f:7c:a4:5e:e7:ff:d8:87:53:08:4d:b1:54:19:
bc:a4:1a:57:aa:a0:f4:e6:13:e7:82:3f:46:7e:fa:95:d9:74:
f3:aa:cc:b7:56:4d:7d:6c:d3:d0:c3:70:84:1b:3a:29:c0:87:
22:5f:e0:21:77:f1:8f:f1:f2:f2:38:39:1d:be:a8:db:26:52:
33:34:90:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQs3fKrypH8OGE1SLmv9RMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZkMGQ2ZTFjY2Q4OTBkZjJmNWU5YzE0NWVjYmE0Njg5OWNj
ZWIzYmQwHhcNMjUwNjA4MTgwMDI4WhcNMjUwNjA5MTgwMDI4WjAzMTEwLwYDVQQD
EyhiMmE2MDc4M2FiZTA4YWQyYzhlMDg5MmNmYTI5YWE0Njk0NjVhODI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyPisz+jDSySyGsXoNej058OdAHu
DRi9v+8o7fswyyoPNKwqS/TjZ4SzLOmlaVhJZ+NLO4mLxAxr2ADBSHzv7Mr7yDTM
2F3pJ6E2j1dmJMH0LVrGXTZwaGBFBwikjcqT6yCi04gBmO7f0MZedaQmJclQ/gPq
fdXB6mGeEgMWTFAlf03oIwNxoEanLcgZxpEIvdieZ/qPuR91rUr9nYzso8xGNyux
K8yZzUsfOcGmU31IamPj7+atdx6DF2qLS9YVDbcjTyCJmBrkdKuDzDKHUaiI1aPR
OFiH/QltKcELPw5XSUehFHpl2BepaC8cSsjXgHspieR96rPiDpb2GDgXYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLKmB4Or4IrSyOCJLPopqkaUZagkMB8GA1UdIwQY
MBaAFG0NbhzNiQ3y9enBRey6RomczrO9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYlExdUhNMkpEZkwxNmNGRjdMcEdpWnpPczcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC8yNzcxNTQtZWZiYS00OGVkLWJiMGMt
NjUwYjcwYmFkN2E5LzEvYlExdUhNMkpEZkwxNmNGRjdMcEdpWnpPczcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC8yNzcxNTQtZWZiYS00OGVkLWJiMGMtNjUwYjcwYmFkN2E5
LzEvYlExdUhNMkpEZkwxNmNGRjdMcEdpWnpPczcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS2sR0Icf
jxVqpCMdTBWn+kZGl8u/otuDISKMPyFqFwEhvo3RAmXRk20KUTQ3i+zeUijO4Ghj
SaR+x7I1ereBTNhfqN1S3bnUu5SE7umvM2sWbwqfJZrwCOxQQtOkvsDczSenvrPF
4uS2AoZoZv7l/3TKI4RsAKKmvMXugc4hyJqTPTy713RJaVVjrpI+uTymo482rqiz
JMIASL91y91xR5q53P/o8O/mwktGOf8ONYqO63q7vrczKY98pF7n/9iHUwhNsVQZ
vKQaV6qg9OYT54I/Rn76ldl086rMt1ZNfWzT0MNwhBs6KcCHIl/gIXfxj/Hy8jg5
Hb6o2yZSMzSQMw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 22:51:45 2025 by rpki-client