Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
File: 9l95H50M9str44nJRWjId0BeUUQ.mft (raw, json)
Hash identifier: d715EpHuImwXg/sD8YSVKFIZCnBe3PzpXd5B6XqD0FY=
Subject key identifier: 99:AB:F2:1D:3A:7D:DF:EC:AC:71:B4:EE:37:9F:D8:DD:E1:B5:39:67
Authority key identifier: F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
Certificate issuer: /CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Certificate serial: 019767DFFAA17B79E4CE1247040B6EA768B8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
Manifest number: 04F6
Signing time: Fri 13 Jun 2025 06:00:21 +0000
Manifest this update: Fri 13 Jun 2025 06:00:21 +0000
Manifest next update: Sat 14 Jun 2025 06:00:21 +0000
Files and hashes: 1: 9l95H50M9str44nJRWjId0BeUUQ.crl (hash: PySb9F6MoN5RkWEeTmPpDZ4cF509b1YwgauaHNHW3R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:df:fa:a1:7b:79:e4:ce:12:47:04:0b:6e:a7:68:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f65f791f9d0cf6cb6be389c94568c877405e5144
Validity
Not Before: Jun 13 06:00:21 2025 GMT
Not After : Jun 14 06:00:21 2025 GMT
Subject: CN=99abf21d3a7ddfecac71b4ee379fd8dde1b53967
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:29:e3:3a:72:27:14:26:b3:2d:3a:c5:df:fd:
83:de:f2:dc:fe:c0:b6:68:6c:fd:93:a3:5c:63:93:
d1:f1:87:d5:c0:79:76:c7:0b:c1:b4:7b:03:c0:cd:
63:2d:94:23:66:3d:65:92:57:eb:b0:9e:f3:64:40:
2e:11:ef:7e:9e:a2:d5:8d:d2:19:dd:64:89:fe:f7:
6d:58:ce:28:dc:0d:15:1b:ab:3e:84:6c:f6:a1:a2:
97:94:10:00:38:aa:93:3a:9b:37:ff:ac:a6:52:df:
7e:d9:6f:94:30:5c:70:a8:24:24:fd:4d:dd:0b:d9:
70:5a:b8:f7:c5:51:96:4f:c9:97:20:47:e4:a4:09:
8d:68:87:78:ff:c0:71:47:e5:55:63:cf:62:99:e3:
d3:40:40:72:3f:52:74:f5:e0:41:9e:7c:a7:39:26:
75:af:bc:6a:fd:77:ff:e4:19:46:cc:92:48:f2:16:
b9:a6:86:ae:13:75:d6:25:8b:ec:88:c2:0d:79:65:
be:23:2e:34:93:cf:8e:b7:35:b5:ce:69:e7:06:5b:
89:4e:0e:ce:72:ab:10:9e:d8:cd:f4:2f:e7:b4:33:
dc:82:89:eb:52:5f:4c:65:ed:b0:aa:aa:02:0a:18:
62:ee:60:b0:77:ce:e9:7e:7c:30:76:b8:6e:66:7d:
75:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:AB:F2:1D:3A:7D:DF:EC:AC:71:B4:EE:37:9F:D8:DD:E1:B5:39:67
X509v3 Authority Key Identifier:
keyid:F6:5F:79:1F:9D:0C:F6:CB:6B:E3:89:C9:45:68:C8:77:40:5E:51:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9l95H50M9str44nJRWjId0BeUUQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/173894-20d5-4d04-be70-cd03741d26b5/1/9l95H50M9str44nJRWjId0BeUUQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:36:f8:ff:26:64:0c:d6:60:ee:d3:f4:7a:ef:7a:ae:8f:4b:
6e:33:b8:f9:9c:88:02:c2:e9:54:fb:5f:38:85:79:b8:0b:55:
93:c0:a7:38:25:b8:26:dd:b3:fd:34:1a:41:f3:6f:1b:78:af:
b3:7e:1b:2b:33:a9:41:ac:56:bb:9d:30:ff:26:f1:11:74:45:
35:a2:0f:10:32:00:13:b2:4b:c7:6a:c4:4b:c6:c1:81:fa:c7:
65:96:28:f0:a2:93:6d:72:18:9a:02:73:6b:89:6f:54:48:90:
d5:6b:a2:97:8d:7a:de:3d:56:ae:c1:f5:d6:95:cb:2f:34:69:
8b:a5:1b:42:16:c3:05:94:1f:4c:cd:39:f0:37:6e:f1:e2:a6:
e2:68:88:80:5b:fe:25:59:5d:83:62:07:82:9c:fb:1c:4e:9e:
ed:57:84:25:e8:6a:7d:d5:5a:cc:23:82:92:85:af:03:6a:d6:
ca:e5:67:29:30:dd:19:a4:64:8c:b1:25:e9:34:07:a0:43:7b:
72:b9:96:85:ee:42:74:6a:6e:67:a5:3a:ed:25:fe:b1:df:c6:
70:9a:c0:72:57:5a:4a:e8:86:b6:f1:03:db:38:17:a2:96:98:
fa:3c:9e:0e:7b:72:12:ec:a5:3d:03:0c:8e:cc:01:7d:dc:b3:
89:37:63:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdn3/qhe3nkzhJHBAtup2i4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY2NWY3OTFmOWQwY2Y2Y2I2YmUzODljOTQ1NjhjODc3NDA1
ZTUxNDQwHhcNMjUwNjEzMDYwMDIxWhcNMjUwNjE0MDYwMDIxWjAzMTEwLwYDVQQD
Eyg5OWFiZjIxZDNhN2RkZmVjYWM3MWI0ZWUzNzlmZDhkZGUxYjUzOTY3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1ynjOnInFCazLTrF3/2D3vLc/sC2
aGz9k6NcY5PR8YfVwHl2xwvBtHsDwM1jLZQjZj1lklfrsJ7zZEAuEe9+nqLVjdIZ
3WSJ/vdtWM4o3A0VG6s+hGz2oaKXlBAAOKqTOps3/6ymUt9+2W+UMFxwqCQk/U3d
C9lwWrj3xVGWT8mXIEfkpAmNaId4/8BxR+VVY89imePTQEByP1J09eBBnnynOSZ1
r7xq/Xf/5BlGzJJI8ha5poauE3XWJYvsiMINeWW+Iy40k8+OtzW1zmnnBluJTg7O
cqsQntjN9C/ntDPcgonrUl9MZe2wqqoCChhi7mCwd87pfnwwdrhuZn11nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJmr8h06fd/srHG07jef2N3htTlnMB8GA1UdIwQY
MBaAFPZfeR+dDPbLa+OJyUVoyHdAXlFEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi8xNzM4OTQtMjBkNS00ZDA0LWJlNzAt
Y2QwMzc0MWQyNmI1LzEvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi8xNzM4OTQtMjBkNS00ZDA0LWJlNzAtY2QwMzc0MWQyNmI1
LzEvOWw5NUg1ME05c3RyNDRuSlJXaklkMEJlVVVRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATTb4/yZk
DNZg7tP0eu96ro9LbjO4+ZyIAsLpVPtfOIV5uAtVk8CnOCW4Jt2z/TQaQfNvG3iv
s34bKzOpQaxWu50w/ybxEXRFNaIPEDIAE7JLx2rES8bBgfrHZZYo8KKTbXIYmgJz
a4lvVEiQ1Wuil4163j1WrsH11pXLLzRpi6UbQhbDBZQfTM058Ddu8eKm4miIgFv+
JVldg2IHgpz7HE6e7VeEJehqfdVazCOCkoWvA2rWyuVnKTDdGaRkjLEl6TQHoEN7
crmWhe5CdGpuZ6U67SX+sd/GcJrAcldaSuiGtvED2zgXopaY+jyeDntyEuylPQMM
jswBfdyziTdjjQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 14:25:17 2025 by rpki-client