Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
File: 9fqTbNBbJl9g8zNAqMY952gvw18.mft (raw, json)
Hash identifier: H5X6jISzj8VfuxTRYLGnVoQOFY/h59hKPwpNG483FVo=
Subject key identifier: B8:28:B9:2C:6E:E1:10:41:68:FF:1D:B0:6A:DC:96:F3:FD:61:23:C2
Authority key identifier: F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
Certificate issuer: /CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Certificate serial: 0197518F7D63C03C0FB343B27B713EC2276B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
Manifest number: 056E
Signing time: Sun 08 Jun 2025 22:00:47 +0000
Manifest this update: Sun 08 Jun 2025 22:00:47 +0000
Manifest next update: Mon 09 Jun 2025 22:00:47 +0000
Files and hashes: 1: 9fqTbNBbJl9g8zNAqMY952gvw18.crl (hash: 43qxS/WfN0wiw/SRV68kTVzfPw8kb6SlnClwO0dLNE0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 21:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:51:8f:7d:63:c0:3c:0f:b3:43:b2:7b:71:3e:c2:27:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f5fa936cd05b265f60f33340a8c63de7682fc35f
Validity
Not Before: Jun 8 22:00:47 2025 GMT
Not After : Jun 9 22:00:47 2025 GMT
Subject: CN=b828b92c6ee1104168ff1db06adc96f3fd6123c2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:93:bf:6a:cc:c1:a1:09:e6:43:6d:f5:56:da:
b3:33:60:cd:6d:a2:f7:be:64:d9:59:62:4b:c7:76:
e3:19:5a:7a:00:73:47:d6:ef:c0:90:fa:03:6f:d7:
ca:3f:a0:0b:41:e7:51:63:70:e6:ce:62:44:21:3f:
92:cd:4b:d5:2d:51:59:df:50:3c:23:f6:a1:9b:74:
d2:85:50:1d:7b:b6:18:0f:3d:a7:d2:38:61:62:5d:
23:ab:28:f7:32:70:7d:15:a8:0a:4e:47:30:b6:82:
8a:92:cf:f2:ee:63:22:2c:57:a3:44:7c:42:97:e5:
32:9a:ec:5c:2a:ae:9a:5d:da:07:94:92:c7:7e:a1:
1f:fc:ab:46:5a:06:eb:7a:8b:4f:d2:92:44:5e:14:
8a:4e:98:c0:1b:18:47:d8:47:0e:3d:6b:ba:69:83:
3d:c4:51:c1:bd:7e:af:64:d4:c5:6e:7a:ea:31:3e:
e3:f7:91:59:0d:23:8e:99:53:21:19:e5:4b:eb:6f:
43:5f:76:d3:04:f5:0f:8c:4a:44:f6:a6:3e:05:88:
56:e4:fb:5f:64:23:71:2f:09:b2:31:3a:dd:62:87:
74:da:38:7d:6c:3e:e4:e1:f3:83:6e:88:70:ea:7f:
a4:2e:6e:b9:dd:1c:7d:ff:84:03:e8:d5:91:a5:8b:
a5:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:28:B9:2C:6E:E1:10:41:68:FF:1D:B0:6A:DC:96:F3:FD:61:23:C2
X509v3 Authority Key Identifier:
keyid:F5:FA:93:6C:D0:5B:26:5F:60:F3:33:40:A8:C6:3D:E7:68:2F:C3:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9fqTbNBbJl9g8zNAqMY952gvw18.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/6e7670-631d-4787-aeda-f1586fbde81a/1/9fqTbNBbJl9g8zNAqMY952gvw18.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:81:ff:73:a8:d3:db:89:18:ca:79:4c:96:2b:32:13:3b:32:
b0:b9:34:4b:ca:c2:92:77:f4:69:44:ac:44:51:8c:2e:f3:e6:
39:4a:e4:e6:c1:f5:d3:ca:76:73:f0:66:5a:18:98:50:96:ac:
28:ff:e4:e7:aa:d0:f7:a7:38:97:28:d5:ad:da:c2:fe:3b:a4:
fc:ac:53:7b:ef:0e:f3:bb:5b:4c:63:cb:09:54:92:97:31:08:
01:1c:86:7d:10:1e:c8:a0:0c:4d:ec:ee:ad:d9:1f:62:13:5e:
88:c4:3c:e5:57:5a:1a:4b:91:a1:f0:03:e8:e9:8d:42:68:13:
07:d3:59:9b:48:41:62:d6:97:ef:21:d8:4b:01:8d:be:76:4b:
fd:9b:83:4a:db:b0:92:db:1f:45:59:9e:ee:ab:9c:02:93:12:
6c:ad:20:66:5c:f1:39:8a:73:03:2a:a2:01:91:ee:83:4a:d4:
fd:07:10:7f:0a:32:32:6d:cc:25:f8:de:06:b4:4b:e5:3e:ed:
dd:20:1d:6f:95:f8:99:58:f3:fc:c1:c2:36:44:f0:0d:50:b3:
1c:3d:a5:26:13:4f:da:4f:f4:be:dd:f7:b0:db:46:11:54:4e:
b7:ba:64:67:fb:b0:82:7f:49:67:e5:94:58:39:ff:fc:2c:71:
9f:c5:8e:2e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdRj31jwDwPs0Oye3E+widrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY1ZmE5MzZjZDA1YjI2NWY2MGYzMzM0MGE4YzYzZGU3Njgy
ZmMzNWYwHhcNMjUwNjA4MjIwMDQ3WhcNMjUwNjA5MjIwMDQ3WjAzMTEwLwYDVQQD
EyhiODI4YjkyYzZlZTExMDQxNjhmZjFkYjA2YWRjOTZmM2ZkNjEyM2MyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpO/aszBoQnmQ231VtqzM2DNbaL3
vmTZWWJLx3bjGVp6AHNH1u/AkPoDb9fKP6ALQedRY3DmzmJEIT+SzUvVLVFZ31A8
I/ahm3TShVAde7YYDz2n0jhhYl0jqyj3MnB9FagKTkcwtoKKks/y7mMiLFejRHxC
l+UymuxcKq6aXdoHlJLHfqEf/KtGWgbreotP0pJEXhSKTpjAGxhH2EcOPWu6aYM9
xFHBvX6vZNTFbnrqMT7j95FZDSOOmVMhGeVL629DX3bTBPUPjEpE9qY+BYhW5Ptf
ZCNxLwmyMTrdYod02jh9bD7k4fODbohw6n+kLm653Rx9/4QD6NWRpYuleQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLgouSxu4RBBaP8dsGrclvP9YSPCMB8GA1UdIwQY
MBaAFPX6k2zQWyZfYPMzQKjGPedoL8NfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWZxVGJOQmJKbDlnOHpOQXFNWTk1Mmd2dzE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC82ZTc2NzAtNjMxZC00Nzg3LWFlZGEt
ZjE1ODZmYmRlODFhLzEvOWZxVGJOQmJKbDlnOHpOQXFNWTk1Mmd2dzE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC82ZTc2NzAtNjMxZC00Nzg3LWFlZGEtZjE1ODZmYmRlODFh
LzEvOWZxVGJOQmJKbDlnOHpOQXFNWTk1Mmd2dzE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACYH/c6jT
24kYynlMlisyEzsysLk0S8rCknf0aUSsRFGMLvPmOUrk5sH108p2c/BmWhiYUJas
KP/k56rQ96c4lyjVrdrC/juk/KxTe+8O87tbTGPLCVSSlzEIARyGfRAeyKAMTezu
rdkfYhNeiMQ85VdaGkuRofAD6OmNQmgTB9NZm0hBYtaX7yHYSwGNvnZL/ZuDStuw
ktsfRVme7qucApMSbK0gZlzxOYpzAyqiAZHug0rU/QcQfwoyMm3MJfjeBrRL5T7t
3SAdb5X4mVjz/MHCNkTwDVCzHD2lJhNP2k/0vt33sNtGEVROt7pkZ/uwgn9JZ+WU
WDn//Cxxn8WOLg==
-----END CERTIFICATE-----
Generated at Mon Jun 9 06:17:45 2025 by rpki-client