Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
File: 1-muQgEgTpldoh5it3nvb0ObQ5T4.mft (raw, json)
Hash identifier: ERVWWQVChIeLtopBO17M+qqlziUTbKLbWIIYxzE2bsY=
Subject key identifier: 79:3D:B5:51:54:91:DD:8C:D3:9B:82:9F:B0:10:32:76:E6:28:38:1B
Authority key identifier: FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
Certificate issuer: /CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Certificate serial: 0197499F3C0B2CC6EF5E7A7D2BBB4DB5005B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
Manifest number: 04A1
Signing time: Sat 07 Jun 2025 09:01:01 +0000
Manifest this update: Sat 07 Jun 2025 09:01:01 +0000
Manifest next update: Sun 08 Jun 2025 09:01:01 +0000
Files and hashes: 1: 1-muQgEgTpldoh5it3nvb0ObQ5T4.crl (hash: TfZe3LFE40dUkacagIygK1cfcL900j822zwSUcE2qQ8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:3c:0b:2c:c6:ef:5e:7a:7d:2b:bb:4d:b5:00:5b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fa6b90804813a657688798adde7bdbd0e6d0e53e
Validity
Not Before: Jun 7 09:01:01 2025 GMT
Not After : Jun 8 09:01:01 2025 GMT
Subject: CN=793db5515491dd8cd39b829fb0103276e628381b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:13:b9:ef:ae:20:90:b6:05:58:ca:e6:b0:b9:
bc:5a:43:9d:7f:76:7e:d8:57:89:c1:ff:c6:de:c9:
f8:7c:6a:56:f5:c6:95:6c:ec:46:5e:fa:12:58:84:
fe:f1:77:0f:22:3d:0c:94:14:c9:ce:2b:a2:64:f6:
0f:4f:a0:24:84:0b:db:1b:73:6c:98:ee:4d:ab:78:
fd:da:ce:ce:e5:56:85:74:67:87:24:e0:a3:aa:47:
b5:8a:c5:cc:7e:7d:3b:1f:dd:8e:04:0d:c0:5d:5c:
24:6c:3e:cb:ff:64:2a:b3:d1:85:27:1a:8a:69:cc:
d2:8e:08:e4:13:77:36:40:be:63:7b:74:bb:c1:a3:
82:69:4b:68:a8:80:d1:95:96:89:d6:60:f2:60:ec:
e6:95:a9:c2:ab:fa:54:8b:61:55:fe:db:6b:eb:f6:
fe:0d:2f:97:ce:e7:e8:0b:57:fe:50:62:68:b3:70:
5c:1d:7b:28:44:89:ca:d9:95:4c:a0:1e:02:fe:83:
08:69:81:02:c7:87:51:13:8c:fc:0c:2b:e3:0c:c0:
72:95:6d:7b:b8:99:cc:8c:61:e1:b3:8d:fe:54:57:
ec:9f:5a:fa:41:4d:07:73:52:c4:b7:ac:ca:ef:86:
64:9e:5b:63:4b:da:15:2f:53:da:0a:72:b9:a8:ff:
0b:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
79:3D:B5:51:54:91:DD:8C:D3:9B:82:9F:B0:10:32:76:E6:28:38:1B
X509v3 Authority Key Identifier:
keyid:FA:6B:90:80:48:13:A6:57:68:87:98:AD:DE:7B:DB:D0:E6:D0:E5:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-muQgEgTpldoh5it3nvb0ObQ5T4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/a9e3db-226d-41e2-be09-8d7d4affb59f/1/1-muQgEgTpldoh5it3nvb0ObQ5T4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
14:ac:8c:51:d9:b6:df:e4:79:85:a4:01:7a:e2:19:47:0e:67:
7f:79:ac:6e:17:cb:27:cd:19:76:a9:5f:90:1b:5f:54:7f:8a:
f1:43:41:d6:a1:60:e7:dd:c7:b3:5a:a0:6b:65:8d:31:5d:fe:
c4:dd:c1:2d:93:a9:af:c6:8a:86:09:c7:32:6d:43:ab:67:10:
52:43:00:9c:99:91:fa:61:8f:02:04:0b:48:72:74:bc:c9:62:
1a:ca:a6:34:5e:08:c5:56:e3:f8:da:c6:c9:ca:b4:b0:49:c5:
46:d1:a3:cd:12:27:28:08:6a:51:45:a7:30:f4:e5:31:25:ea:
40:d5:24:db:c1:76:cc:6e:59:63:ad:28:1e:fd:a6:ef:a6:1a:
8a:82:28:da:8d:92:f9:77:17:17:ae:12:6d:07:8b:ea:38:8f:
61:5e:48:74:b8:a4:f1:4d:a8:8c:d5:30:94:e8:21:6f:44:46:
8c:23:8d:f9:56:04:f5:f6:60:28:ec:f1:17:85:44:f5:b0:98:
04:ed:10:45:ec:ea:c6:d8:bd:93:ea:07:e2:ba:e2:a7:58:1d:
8c:81:5b:af:c5:ae:f8:4a:c3:02:56:1e:70:25:1d:f2:30:3e:
c8:f1:5f:a1:b8:f5:0a:e2:56:c0:03:ca:db:b8:d1:06:42:5a:
60:08:4f:15
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdJnzwLLMbvXnp9K7tNtQBbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZhNmI5MDgwNDgxM2E2NTc2ODg3OThhZGRlN2JkYmQwZTZk
MGU1M2UwHhcNMjUwNjA3MDkwMTAxWhcNMjUwNjA4MDkwMTAxWjAzMTEwLwYDVQQD
Eyg3OTNkYjU1MTU0OTFkZDhjZDM5YjgyOWZiMDEwMzI3NmU2MjgzODFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApBO5764gkLYFWMrmsLm8WkOdf3Z+
2FeJwf/G3sn4fGpW9caVbOxGXvoSWIT+8XcPIj0MlBTJziuiZPYPT6AkhAvbG3Ns
mO5Nq3j92s7O5VaFdGeHJOCjqke1isXMfn07H92OBA3AXVwkbD7L/2Qqs9GFJxqK
aczSjgjkE3c2QL5je3S7waOCaUtoqIDRlZaJ1mDyYOzmlanCq/pUi2FV/ttr6/b+
DS+XzufoC1f+UGJos3BcHXsoRInK2ZVMoB4C/oMIaYECx4dRE4z8DCvjDMBylW17
uJnMjGHhs43+VFfsn1r6QU0Hc1LEt6zK74ZknltjS9oVL1PaCnK5qP8LtwIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFHk9tVFUkd2M05uCn7AQMnbmKDgbMB8GA1UdIwQY
MBaAFPprkIBIE6ZXaIeYrd5729Dm0OU+MA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1tdVFnRWdUcGxkb2g1aXQzbnZiME9iUTVUNC5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvZjYvYTllM2RiLTIyNmQtNDFlMi1iZTA5
LThkN2Q0YWZmYjU5Zi8xLzEtbXVRZ0VnVHBsZG9oNWl0M252YjBPYlE1VDQubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2Y2L2E5ZTNkYi0yMjZkLTQxZTItYmUwOS04ZDdkNGFmZmI1
OWYvMS8xLW11UWdFZ1RwbGRvaDVpdDNudmIwT2JRNVQ0LmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFKyM
Udm23+R5haQBeuIZRw5nf3msbhfLJ80ZdqlfkBtfVH+K8UNB1qFg593Hs1qga2WN
MV3+xN3BLZOpr8aKhgnHMm1Dq2cQUkMAnJmR+mGPAgQLSHJ0vMliGsqmNF4IxVbj
+NrGycq0sEnFRtGjzRInKAhqUUWnMPTlMSXqQNUk28F2zG5ZY60oHv2m76YaioIo
2o2S+XcXF64SbQeL6jiPYV5IdLik8U2ojNUwlOghb0RGjCON+VYE9fZgKOzxF4VE
9bCYBO0QRezqxti9k+oH4rrip1gdjIFbr8Wu+ErDAlYecCUd8jA+yPFfobj1CuJW
wAPK27jRBkJaYAhPFQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 18:32:39 2025 by rpki-client