Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
File: RcXBJi6D17-pAsLIYqFfHkLSVZE.mft (raw, json)
Hash identifier: GvRGcVk8mzwrI/y9/6tB4EERQVK7uxFoVEr1bprkw0I=
Subject key identifier: 61:1B:C1:9E:C1:32:C0:46:69:22:3B:9B:C8:C1:1C:E1:2F:58:68:99
Authority key identifier: 45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
Certificate issuer: /CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Certificate serial: 01976BBD40D7D3DCD95555384105D0D60D3C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
Manifest number: 055F
Signing time: Sat 14 Jun 2025 00:00:54 +0000
Manifest this update: Sat 14 Jun 2025 00:00:54 +0000
Manifest next update: Sun 15 Jun 2025 00:00:54 +0000
Files and hashes: 1: 85JP1EmlrjP9cMbgQ-NLAJZsWYU.roa (hash: MO0sgGxlXYh61dJ8SPvOD77mPT9iIScGfPHBaJnXid0=)
2: RcXBJi6D17-pAsLIYqFfHkLSVZE.crl (hash: lRH1hADyq2ZUFu5hKkP+OFkqli11LMtVP6luNRL4zk4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:40:d7:d3:dc:d9:55:55:38:41:05:d0:d6:0d:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c5c1262e83d7bfa902c2c862a15f1e42d25591
Validity
Not Before: Jun 14 00:00:54 2025 GMT
Not After : Jun 15 00:00:54 2025 GMT
Subject: CN=611bc19ec132c04669223b9bc8c11ce12f586899
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:21:0b:31:71:a0:e5:3f:e2:ab:4b:be:a5:25:
8b:45:7d:70:56:8d:24:46:dd:42:c8:33:64:7f:f9:
bb:62:b4:5c:99:ea:12:7d:19:06:7b:a1:86:fa:80:
6e:a1:1d:d9:69:2f:37:6f:f1:e4:04:d3:ff:8d:a4:
64:eb:1f:68:32:3c:3f:fd:20:88:68:82:8a:d2:63:
80:b5:0a:27:66:35:b0:ed:50:1b:5d:9f:a9:2a:da:
0c:55:5c:5e:63:80:01:0b:98:cc:51:9b:70:d5:8b:
8a:44:6b:65:40:a0:5f:a2:ef:45:4f:9f:d6:e1:86:
08:49:0f:92:60:7c:ba:39:c8:04:0d:b0:ce:78:ca:
94:9f:a0:0d:b1:98:6d:c6:15:b4:5f:15:94:ae:fb:
dc:6b:b4:4b:46:a0:62:33:5c:d4:c3:68:d7:5d:03:
00:28:f9:ae:e5:1a:5d:4f:d5:be:3e:4b:ee:24:80:
80:fc:d2:02:d2:42:f5:3a:05:9c:54:25:4b:9e:c0:
96:d1:d9:c7:89:76:8b:38:db:e6:4f:11:7e:d5:bd:
57:da:74:f5:09:33:64:70:22:d5:9b:ec:4f:0a:e2:
0a:1a:05:73:5c:ce:9a:ca:41:eb:a5:a4:c9:f0:78:
5a:d2:0f:db:4f:58:b2:47:9f:34:4b:44:25:c2:d2:
18:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
61:1B:C1:9E:C1:32:C0:46:69:22:3B:9B:C8:C1:1C:E1:2F:58:68:99
X509v3 Authority Key Identifier:
keyid:45:C5:C1:26:2E:83:D7:BF:A9:02:C2:C8:62:A1:5F:1E:42:D2:55:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RcXBJi6D17-pAsLIYqFfHkLSVZE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1d/f686b2-ff33-41e1-9b1c-f10603b3768d/1/RcXBJi6D17-pAsLIYqFfHkLSVZE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b3:db:7e:0c:3a:a2:52:85:2e:bd:ab:47:a7:3d:09:72:80:
43:5a:16:a5:be:3e:2c:e4:87:90:3c:f3:fa:12:fd:d3:66:97:
8f:b4:fe:68:1a:6a:2a:1c:e8:82:65:b2:49:4f:80:8c:33:eb:
e6:50:97:67:15:18:60:3e:06:d1:13:8a:a4:43:f0:9f:29:1b:
fc:8c:01:9a:bc:ff:91:26:b8:14:63:0c:b8:6c:c2:24:2e:d2:
fe:f8:89:6b:de:7d:95:29:d8:3e:13:b5:cd:af:5d:56:04:28:
f1:1e:a9:ae:8c:19:9a:bd:de:7f:4b:54:51:a6:2e:84:5a:fc:
45:b1:4f:8f:e0:c2:b5:f8:65:08:fe:86:07:de:99:ad:51:80:
b6:d5:30:b2:b9:82:51:f6:53:34:ed:2a:f2:61:b3:9d:cf:81:
82:32:ba:1c:93:1b:79:b6:18:b9:9f:69:6e:cc:0d:70:bf:75:
c9:cf:dc:1f:6c:a6:2b:fc:ab:09:45:3c:4a:85:d7:3b:fb:e7:
10:a7:d9:03:e5:68:a1:32:41:b3:e9:92:ed:0e:e6:45:56:4e:
ab:3a:b7:9d:e0:9c:bf:eb:1f:2e:99:58:cd:bf:ac:ca:fd:58:
a5:23:9f:0c:e6:90:9a:83:87:b4:91:31:eb:d5:0a:be:fd:1a:
be:b8:81:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvUDX09zZVVU4QQXQ1g08MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YzVjMTI2MmU4M2Q3YmZhOTAyYzJjODYyYTE1ZjFlNDJk
MjU1OTEwHhcNMjUwNjE0MDAwMDU0WhcNMjUwNjE1MDAwMDU0WjAzMTEwLwYDVQQD
Eyg2MTFiYzE5ZWMxMzJjMDQ2NjkyMjNiOWJjOGMxMWNlMTJmNTg2ODk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtyELMXGg5T/iq0u+pSWLRX1wVo0k
Rt1CyDNkf/m7YrRcmeoSfRkGe6GG+oBuoR3ZaS83b/HkBNP/jaRk6x9oMjw//SCI
aIKK0mOAtQonZjWw7VAbXZ+pKtoMVVxeY4ABC5jMUZtw1YuKRGtlQKBfou9FT5/W
4YYISQ+SYHy6OcgEDbDOeMqUn6ANsZhtxhW0XxWUrvvca7RLRqBiM1zUw2jXXQMA
KPmu5RpdT9W+PkvuJICA/NIC0kL1OgWcVCVLnsCW0dnHiXaLONvmTxF+1b1X2nT1
CTNkcCLVm+xPCuIKGgVzXM6aykHrpaTJ8Hha0g/bT1iyR580S0QlwtIYPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGEbwZ7BMsBGaSI7m8jBHOEvWGiZMB8GA1UdIwQY
MBaAFEXFwSYug9e/qQLCyGKhXx5C0lWRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmNYQkppNkQxNy1wQXNMSVlxRmZIa0xTVlpFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xZC9mNjg2YjItZmYzMy00MWUxLTliMWMt
ZjEwNjAzYjM3NjhkLzEvUmNYQkppNkQxNy1wQXNMSVlxRmZIa0xTVlpFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xZC9mNjg2YjItZmYzMy00MWUxLTliMWMtZjEwNjAzYjM3Njhk
LzEvUmNYQkppNkQxNy1wQXNMSVlxRmZIa0xTVlpFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbPbfgw6
olKFLr2rR6c9CXKAQ1oWpb4+LOSHkDzz+hL902aXj7T+aBpqKhzogmWySU+AjDPr
5lCXZxUYYD4G0ROKpEPwnykb/IwBmrz/kSa4FGMMuGzCJC7S/viJa959lSnYPhO1
za9dVgQo8R6prowZmr3ef0tUUaYuhFr8RbFPj+DCtfhlCP6GB96ZrVGAttUwsrmC
UfZTNO0q8mGznc+BgjK6HJMbebYYuZ9pbswNcL91yc/cH2ymK/yrCUU8SoXXO/vn
EKfZA+VooTJBs+mS7Q7mRVZOqzq3neCcv+sfLplYzb+syv1YpSOfDOaQmoOHtJEx
69UKvv0avriBLw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:17:24 2025 by rpki-client