Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
File: pb7DLWxk_7YB4nDO280-__XOekA.mft (raw, json)
Hash identifier: 2JZQCC84hpgnPtGdLUbmCfEmw4rjh9nk3wczQcLo2x8=
Subject key identifier: 46:CF:A2:C1:83:A4:ED:8F:0D:9C:38:5B:96:4A:7A:56:F1:60:75:35
Authority key identifier: A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
Certificate issuer: /CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Certificate serial: 01976FD141A7F1AF2E6C122EDF34C4C6CD0C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 19:01:14 +0000
Manifest this update: Sat 14 Jun 2025 19:01:14 +0000
Manifest next update: Sun 15 Jun 2025 19:01:14 +0000
Files and hashes: 1: pb7DLWxk_7YB4nDO280-__XOekA.crl (hash: Pupn+YX2gWw5rJfhY9WZB/+OdYPCMZMjl8TVNKZK38o=)
2: qjNgLrezTzPzPZHoRa0PyC-9c_E.roa (hash: gjQzNWtyWkBxUXT4We5fyARX6Waght/4yDMrIeCr6j8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:41:a7:f1:af:2e:6c:12:2e:df:34:c4:c6:cd:0c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a5bec32d6c64ffb601e270cedbcd3efff5ce7a40
Validity
Not Before: Jun 14 19:01:14 2025 GMT
Not After : Jun 15 19:01:14 2025 GMT
Subject: CN=46cfa2c183a4ed8f0d9c385b964a7a56f1607535
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:fc:d9:25:68:a3:43:aa:b6:4c:08:1f:b4:dc:
9e:0d:6e:98:94:3b:88:52:46:69:62:fc:6b:e5:f3:
36:df:20:b3:8f:cf:8c:21:81:9b:73:2c:92:47:47:
9f:d5:87:68:44:77:93:61:39:ab:0c:a6:1f:09:74:
d0:6d:e9:06:03:2d:94:40:9a:d1:28:d2:8b:77:b6:
3e:eb:2e:f2:f4:73:dd:23:3d:8e:e0:1d:48:04:74:
98:cf:5d:b9:fa:07:5e:f2:06:4d:2a:65:13:69:a2:
46:cc:e4:7c:64:68:cf:1c:39:7d:83:ba:c1:56:8e:
ca:e5:f1:04:fa:23:2f:91:4c:3d:90:3f:1b:ab:71:
75:40:52:9a:14:d2:3d:1f:29:b4:9a:2b:f5:94:2a:
2e:6b:bc:7a:0f:61:28:7e:01:bd:73:10:4f:19:d2:
9b:4b:aa:09:37:67:74:09:12:6a:62:e7:1d:f8:4f:
2c:e6:f5:cc:40:d4:32:e9:64:54:b0:70:88:2b:9b:
07:54:75:87:37:be:ab:55:1b:ec:30:99:06:04:45:
3c:77:9c:60:75:da:fd:60:b0:c5:d8:b9:c3:b0:47:
c7:43:76:37:a9:fe:e8:54:c1:aa:f2:d7:78:77:c1:
3f:42:30:3d:ea:0e:34:06:1f:68:92:4a:c0:c8:35:
54:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
46:CF:A2:C1:83:A4:ED:8F:0D:9C:38:5B:96:4A:7A:56:F1:60:75:35
X509v3 Authority Key Identifier:
keyid:A5:BE:C3:2D:6C:64:FF:B6:01:E2:70:CE:DB:CD:3E:FF:F5:CE:7A:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pb7DLWxk_7YB4nDO280-__XOekA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/7d64f1-3d64-42eb-a275-2179644f3788/1/pb7DLWxk_7YB4nDO280-__XOekA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:2c:a2:c7:d5:8c:f2:23:23:34:f6:07:77:49:9a:12:95:ea:
f7:12:df:4e:99:62:0d:3e:d0:01:46:76:9c:27:2a:f0:8d:ed:
56:7a:bb:14:77:46:64:a9:43:bf:6c:7a:19:6c:4a:f4:68:73:
02:ab:c4:27:80:ee:91:0a:e0:08:be:ab:50:0c:ac:1c:e3:93:
85:cc:dc:21:22:2f:fd:e6:2b:c6:54:61:32:60:f2:97:eb:67:
9a:aa:ef:e5:56:5e:8f:9a:55:0d:8f:88:b1:62:b4:14:4f:f4:
9d:4b:81:bd:44:30:39:57:0a:7c:a8:de:3a:fd:d2:60:43:2e:
55:a0:44:0a:6d:22:89:55:ed:80:eb:8a:54:1d:33:bc:a1:c4:
24:1a:dd:28:d0:94:51:4a:8e:da:46:5f:9d:fd:b5:7c:50:89:
f2:a9:ad:d3:dc:46:20:08:2e:29:eb:e6:01:a5:d2:c2:8c:93:
2d:b5:d2:12:46:d3:9d:1f:38:10:37:18:fa:da:85:7a:ac:8e:
08:99:1f:fc:be:b9:19:9b:fd:f0:8e:1e:d8:1e:49:40:a0:0d:
5e:01:ba:47:7f:81:f0:9d:84:b5:b8:ef:92:a9:f7:95:7d:b2:
e5:07:94:82:97:af:9e:13:e1:b2:7e:00:fa:49:02:48:cb:6c:
2c:be:d8:fa
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0UGn8a8ubBIu3zTExs0MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE1YmVjMzJkNmM2NGZmYjYwMWUyNzBjZWRiY2QzZWZmZjVj
ZTdhNDAwHhcNMjUwNjE0MTkwMTE0WhcNMjUwNjE1MTkwMTE0WjAzMTEwLwYDVQQD
Eyg0NmNmYTJjMTgzYTRlZDhmMGQ5YzM4NWI5NjRhN2E1NmYxNjA3NTM1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4/zZJWijQ6q2TAgftNyeDW6YlDuI
UkZpYvxr5fM23yCzj8+MIYGbcyySR0ef1YdoRHeTYTmrDKYfCXTQbekGAy2UQJrR
KNKLd7Y+6y7y9HPdIz2O4B1IBHSYz125+gde8gZNKmUTaaJGzOR8ZGjPHDl9g7rB
Vo7K5fEE+iMvkUw9kD8bq3F1QFKaFNI9Hym0miv1lCoua7x6D2EofgG9cxBPGdKb
S6oJN2d0CRJqYucd+E8s5vXMQNQy6WRUsHCIK5sHVHWHN76rVRvsMJkGBEU8d5xg
ddr9YLDF2LnDsEfHQ3Y3qf7oVMGq8td4d8E/QjA96g40Bh9okkrAyDVUeQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEbPosGDpO2PDZw4W5ZKelbxYHU1MB8GA1UdIwQY
MBaAFKW+wy1sZP+2AeJwztvNPv/1znpAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUt
MjE3OTY0NGYzNzg4LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi83ZDY0ZjEtM2Q2NC00MmViLWEyNzUtMjE3OTY0NGYzNzg4
LzEvcGI3RExXeGtfN1lCNG5ETzI4MC1fX1hPZWtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYCyix9WM
8iMjNPYHd0maEpXq9xLfTpliDT7QAUZ2nCcq8I3tVnq7FHdGZKlDv2x6GWxK9Ghz
AqvEJ4DukQrgCL6rUAysHOOThczcISIv/eYrxlRhMmDyl+tnmqrv5VZej5pVDY+I
sWK0FE/0nUuBvUQwOVcKfKjeOv3SYEMuVaBECm0iiVXtgOuKVB0zvKHEJBrdKNCU
UUqO2kZfnf21fFCJ8qmt09xGIAguKevmAaXSwoyTLbXSEkbTnR84EDcY+tqFeqyO
CJkf/L65GZv98I4e2B5JQKANXgG6R3+B8J2Etbjvkqn3lX2y5QeUgpevnhPhsn4A
+kkCSMtsLL7Y+g==
-----END CERTIFICATE-----
Generated at Sun Jun 15 01:09:26 2025 by rpki-client