Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
File: a7ptDw-bGff0POtD5zWaPYTpnZk.mft (raw, json)
Hash identifier: QoGwOUo4M1wwLlMjfv/ytDGrmDWvLt08n82fRBFvF6o=
Subject key identifier: 4E:98:E2:C7:BC:BE:68:62:BC:84:07:75:1A:D7:D4:F3:4E:DF:01:6C
Authority key identifier: 6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
Certificate issuer: /CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Certificate serial: 019768F2BD23D79C06879BAFB4BA87465F39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
Manifest number: 1595
Signing time: Fri 13 Jun 2025 11:00:27 +0000
Manifest this update: Fri 13 Jun 2025 11:00:27 +0000
Manifest next update: Sat 14 Jun 2025 11:00:27 +0000
Files and hashes: 1: TUphJ-jTdc6RyopsPbQVUooNovI.roa (hash: 5SMLcPW5pd+tHnvqH88hThCDDFketkICiSOllb1LCN8=)
2: a7ptDw-bGff0POtD5zWaPYTpnZk.crl (hash: 2lRfXKC/y7IlkU5Ly319Cfzx1FPh4d2nmMkTHCcDlQM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 11:00:27 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:f2:bd:23:d7:9c:06:87:9b:af:b4:ba:87:46:5f:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bba6d0f0f9b19f7f43ceb43e7359a3d84e99d99
Validity
Not Before: Jun 13 11:00:27 2025 GMT
Not After : Jun 14 11:00:27 2025 GMT
Subject: CN=4e98e2c7bcbe6862bc8407751ad7d4f34edf016c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:80:60:58:60:0f:b5:37:0f:71:cc:44:bb:fb:
7f:dc:9d:02:63:28:ed:26:4e:d5:99:53:23:f2:45:
07:43:df:41:af:37:b4:de:8c:f1:f9:07:f3:64:04:
64:74:54:d1:e8:36:24:89:6e:4a:3e:90:84:e0:c8:
61:4d:78:d7:e0:8d:ac:26:5d:21:80:64:09:ad:62:
41:08:97:e8:e8:06:37:e3:db:9e:48:83:ef:85:0d:
5e:f1:4d:38:6a:cd:18:f0:7c:22:f6:d6:31:f7:bd:
60:c5:57:21:04:51:fc:47:69:fd:b6:03:9e:c6:20:
95:8b:b9:39:99:cc:77:48:fa:c0:63:05:a4:a0:2d:
88:f6:6a:15:1d:62:3a:ee:8a:3c:fb:01:90:a1:41:
ae:f8:e5:54:95:2e:6a:a7:af:ce:d1:ff:62:b1:5f:
da:f9:ed:c2:23:40:16:3b:26:e9:7b:86:d2:5e:49:
52:cc:56:a9:cb:63:25:b4:92:e3:4f:64:f3:9f:e6:
6f:f7:76:76:37:97:2e:70:80:74:63:31:e6:89:7b:
3d:31:b9:5e:64:18:e6:a4:4e:4a:34:bb:1f:f9:f9:
9a:c5:69:23:d3:ee:65:24:15:b2:ab:a4:66:ad:81:
c0:91:03:ce:4d:f9:09:3e:d7:34:a0:e1:f9:78:d7:
ef:7b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:98:E2:C7:BC:BE:68:62:BC:84:07:75:1A:D7:D4:F3:4E:DF:01:6C
X509v3 Authority Key Identifier:
keyid:6B:BA:6D:0F:0F:9B:19:F7:F4:3C:EB:43:E7:35:9A:3D:84:E9:9D:99
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7ptDw-bGff0POtD5zWaPYTpnZk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/632e89-8842-48b1-9dcf-2aeadb966b76/1/a7ptDw-bGff0POtD5zWaPYTpnZk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:63:46:fa:ac:2e:c0:d1:99:9f:86:1f:4f:8b:70:ee:d8:59:
2f:cd:5f:db:aa:7f:2f:44:78:02:70:62:97:cd:3c:7a:1e:56:
d6:87:a1:8e:79:55:a1:51:36:0f:14:61:5b:4d:9d:77:83:70:
f4:ac:7a:da:91:8b:ef:f3:37:e7:9e:db:69:66:1d:9a:29:40:
51:d4:1e:5d:4e:11:51:91:9e:3b:fe:ea:ce:5a:ed:93:8a:17:
2b:d7:36:48:4b:5c:43:21:ff:3b:6a:dd:eb:72:a0:bc:55:88:
01:f9:d3:a6:0d:3d:2c:3d:4b:e4:59:24:c3:2a:ed:05:42:b5:
37:96:77:b3:29:69:05:06:b2:0f:a7:42:c5:73:d0:9d:a9:49:
e5:73:2f:1e:b4:1f:32:3a:f9:0f:82:0c:f7:2a:e7:b3:b0:46:
f7:03:dd:6a:ba:2a:04:94:94:10:b9:1d:9a:59:40:c9:6f:06:
2c:01:7b:a6:8a:5a:60:a6:bd:ba:d3:64:47:a7:9e:95:30:5a:
2c:4f:9c:c5:41:ff:15:3d:54:ef:f5:d1:d1:82:6b:80:fd:47:
15:bd:b1:35:04:01:47:1f:f9:0a:b9:90:a4:c5:65:46:f9:5c:
8f:79:bb:2f:42:64:f0:6d:04:1e:6e:2f:66:d5:4d:7e:ea:1b:
85:6a:38:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdo8r0j15wGh5uvtLqHRl85MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYmE2ZDBmMGY5YjE5ZjdmNDNjZWI0M2U3MzU5YTNkODRl
OTlkOTkwHhcNMjUwNjEzMTEwMDI3WhcNMjUwNjE0MTEwMDI3WjAzMTEwLwYDVQQD
Eyg0ZTk4ZTJjN2JjYmU2ODYyYmM4NDA3NzUxYWQ3ZDRmMzRlZGYwMTZjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA04BgWGAPtTcPccxEu/t/3J0CYyjt
Jk7VmVMj8kUHQ99Brze03ozx+QfzZARkdFTR6DYkiW5KPpCE4MhhTXjX4I2sJl0h
gGQJrWJBCJfo6AY349ueSIPvhQ1e8U04as0Y8Hwi9tYx971gxVchBFH8R2n9tgOe
xiCVi7k5mcx3SPrAYwWkoC2I9moVHWI67oo8+wGQoUGu+OVUlS5qp6/O0f9isV/a
+e3CI0AWOybpe4bSXklSzFapy2MltJLjT2Tzn+Zv93Z2N5cucIB0YzHmiXs9Mble
ZBjmpE5KNLsf+fmaxWkj0+5lJBWyq6RmrYHAkQPOTfkJPtc0oOH5eNfvewIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE6Y4se8vmhivIQHdRrX1PNO3wFsMB8GA1UdIwQY
MBaAFGu6bQ8Pmxn39DzrQ+c1mj2E6Z2ZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi82MzJlODktODg0Mi00OGIxLTlkY2Yt
MmFlYWRiOTY2Yjc2LzEvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi82MzJlODktODg0Mi00OGIxLTlkY2YtMmFlYWRiOTY2Yjc2
LzEvYTdwdER3LWJHZmYwUE90RDV6V2FQWVRwblprLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmGNG+qwu
wNGZn4YfT4tw7thZL81f26p/L0R4AnBil808eh5W1oehjnlVoVE2DxRhW02dd4Nw
9Kx62pGL7/M3557baWYdmilAUdQeXU4RUZGeO/7qzlrtk4oXK9c2SEtcQyH/O2rd
63KgvFWIAfnTpg09LD1L5FkkwyrtBUK1N5Z3sylpBQayD6dCxXPQnalJ5XMvHrQf
Mjr5D4IM9yrns7BG9wPdaroqBJSUELkdmllAyW8GLAF7popaYKa9utNkR6eelTBa
LE+cxUH/FT1U7/XR0YJrgP1HFb2xNQQBRx/5CrmQpMVlRvlcj3m7L0Jk8G0EHm4v
ZtVNfuobhWo4Hg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:17:57 2025 by rpki-client