Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
File: S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft (raw, json)
Hash identifier: Ro4ESAl5gHv3i/Tood8PwC/Ia56UZC5CmYghXdcJKA4=
Subject key identifier: 69:5D:9E:5A:44:A0:02:02:69:90:90:99:0B:04:EF:B1:90:4F:EE:65
Authority key identifier: 4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
Certificate issuer: /CN=4b8d822165e7f01f722c973967f7554605240802
Certificate serial: 01976F631F03516A74A289277B8BB39FBF1F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
Manifest number: 12B3
Signing time: Sat 14 Jun 2025 17:00:56 +0000
Manifest this update: Sat 14 Jun 2025 17:00:56 +0000
Manifest next update: Sun 15 Jun 2025 17:00:56 +0000
Files and hashes: 1: S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl (hash: g6zg36jfWPOOHaA5aUdhPhub694thQsW7QeTh/KMmhk=)
2: bL9sAOLGYhfURofnKnFBFn1wsJo.roa (hash: MQ9wm3ykSQpWjdkgAkUhN5KBzQ/fKRTzO8IDNPZe+jY=)
3: kjcDWuGIuX0pVG6bb41NnKIPOqs.roa (hash: YFnfiVE6rUbpB2uXyovY7NmRfmouuM77f2tO5i352qM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:63:1f:03:51:6a:74:a2:89:27:7b:8b:b3:9f:bf:1f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b8d822165e7f01f722c973967f7554605240802
Validity
Not Before: Jun 14 17:00:56 2025 GMT
Not After : Jun 15 17:00:56 2025 GMT
Subject: CN=695d9e5a44a00202699090990b04efb1904fee65
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d2:c1:b0:0c:85:b8:d4:a2:58:f6:0f:23:b1:8f:
8c:3a:af:d0:22:5c:34:df:45:57:c5:30:64:25:22:
56:af:8c:03:27:9e:d5:03:e7:97:db:63:84:8b:4a:
b7:d7:2f:d4:98:30:83:89:19:e1:5c:a5:c7:32:9c:
e1:49:d4:22:52:10:59:e5:7d:96:19:4c:83:85:91:
a4:56:9e:1e:3a:94:0b:67:5e:33:31:17:a7:9e:6c:
be:05:ba:c5:d4:08:1e:49:e2:07:6a:6e:5e:23:39:
12:a1:a0:d4:37:20:3a:6c:3d:ad:2b:e2:d0:58:1f:
be:3a:68:04:0b:01:27:8c:13:a4:43:8e:98:b9:e2:
62:ca:69:11:d2:96:d2:c0:3d:60:5b:2c:d5:69:df:
0f:90:bc:ef:72:07:9f:88:a1:02:78:d9:0e:6c:69:
1a:6b:39:75:11:57:f3:36:10:e6:c7:e8:23:97:9e:
28:46:b2:a2:9b:67:a6:fb:ad:f9:e3:40:01:31:3c:
e0:30:58:c2:da:ef:3e:94:25:da:f8:7d:98:8b:21:
5a:8b:2a:6a:35:6d:c8:f3:2c:e6:1d:62:12:cd:5d:
22:df:9f:a1:c7:d4:20:ca:4d:40:51:59:5c:32:08:
73:30:e1:66:a1:9d:4e:0f:3a:f0:68:7b:5a:18:3d:
d5:17
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:5D:9E:5A:44:A0:02:02:69:90:90:99:0B:04:EF:B1:90:4F:EE:65
X509v3 Authority Key Identifier:
keyid:4B:8D:82:21:65:E7:F0:1F:72:2C:97:39:67:F7:55:46:05:24:08:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S42CIWXn8B9yLJc5Z_dVRgUkCAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/32e776-8f36-4d16-956a-5af958ceaf6e/1/S42CIWXn8B9yLJc5Z_dVRgUkCAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:20:e8:83:bc:50:11:aa:b9:c2:7d:51:34:fb:9f:20:12:1b:
e0:2f:8c:34:ca:f0:8b:c4:75:ac:5f:43:85:df:bb:64:3c:da:
d4:9f:e8:c5:ac:bb:0e:fc:c9:7a:3e:07:9b:4c:0f:5d:a3:ae:
37:2b:e4:7e:6c:1a:2f:9c:70:3c:dd:c6:d2:3f:8d:e1:72:43:
b7:ec:6f:53:88:c2:22:48:cf:e5:be:19:5e:ee:12:66:41:2f:
89:82:10:eb:33:e6:ce:91:cc:ba:97:35:36:f7:43:ff:0c:8d:
da:54:7f:8b:25:22:20:95:56:3d:76:71:0d:59:29:26:8b:28:
53:fa:f7:0d:4b:f2:5e:5e:0b:47:94:1d:8b:23:ce:40:9b:e3:
cc:e4:7e:70:24:bd:56:1d:01:9d:31:1d:36:72:27:6b:58:a8:
4c:f4:6c:bc:23:0e:44:d5:aa:af:13:a3:bb:e3:1e:e2:06:42:
14:ec:29:41:e4:1d:3d:eb:1e:3d:e2:60:ca:77:26:b6:ea:26:
7b:02:b3:e4:4b:79:d6:83:32:cf:86:0b:ca:7f:7b:76:66:ac:
7d:8d:f2:59:ae:ec:f1:72:cb:31:10:e5:3a:84:7e:b6:6e:52:
ac:34:c4:df:71:c4:71:d6:bc:5d:60:21:7f:ff:a5:ef:b2:ad:
16:05:61:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYx8DUWp0ookne4uzn78fMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOGQ4MjIxNjVlN2YwMWY3MjJjOTczOTY3Zjc1NTQ2MDUy
NDA4MDIwHhcNMjUwNjE0MTcwMDU2WhcNMjUwNjE1MTcwMDU2WjAzMTEwLwYDVQQD
Eyg2OTVkOWU1YTQ0YTAwMjAyNjk5MDkwOTkwYjA0ZWZiMTkwNGZlZTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0sGwDIW41KJY9g8jsY+MOq/QIlw0
30VXxTBkJSJWr4wDJ57VA+eX22OEi0q31y/UmDCDiRnhXKXHMpzhSdQiUhBZ5X2W
GUyDhZGkVp4eOpQLZ14zMRennmy+BbrF1AgeSeIHam5eIzkSoaDUNyA6bD2tK+LQ
WB++OmgECwEnjBOkQ46YueJiymkR0pbSwD1gWyzVad8PkLzvcgefiKECeNkObGka
azl1EVfzNhDmx+gjl54oRrKim2em+63540ABMTzgMFjC2u8+lCXa+H2YiyFaiypq
NW3I8yzmHWISzV0i35+hx9Qgyk1AUVlcMghzMOFmoZ1ODzrwaHtaGD3VFwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGldnlpEoAICaZCQmQsE77GQT+5lMB8GA1UdIwQY
MBaAFEuNgiFl5/AfciyXOWf3VUYFJAgCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEt
NWFmOTU4Y2VhZjZlLzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zMmU3NzYtOGYzNi00ZDE2LTk1NmEtNWFmOTU4Y2VhZjZl
LzEvUzQyQ0lXWG44Qjl5TEpjNVpfZFZSZ1VrQ0FJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATCDog7xQ
Eaq5wn1RNPufIBIb4C+MNMrwi8R1rF9Dhd+7ZDza1J/oxay7DvzJej4Hm0wPXaOu
NyvkfmwaL5xwPN3G0j+N4XJDt+xvU4jCIkjP5b4ZXu4SZkEviYIQ6zPmzpHMupc1
NvdD/wyN2lR/iyUiIJVWPXZxDVkpJosoU/r3DUvyXl4LR5QdiyPOQJvjzOR+cCS9
Vh0BnTEdNnIna1ioTPRsvCMORNWqrxOju+Me4gZCFOwpQeQdPesePeJgyncmtuom
ewKz5Et51oMyz4YLyn97dmasfY3yWa7s8XLLMRDlOoR+tm5SrDTE33HEcda8XWAh
f/+l77KtFgVhgg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:09:44 2025 by rpki-client