Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
File: a08STJHKoMyRw7m7T4rbBjJiJKE.mft (raw, json)
Hash identifier: kZVsrNUZEsjLa0cmhwJfs+i3f8oB7SD29nSV3/Avfwg=
Subject key identifier: 5B:A8:04:20:70:6D:0E:76:E4:AF:6F:1B:51:33:D1:BC:F9:7B:C2:F6
Authority key identifier: 6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
Certificate issuer: /CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Certificate serial: 01976C2ADD88E03343550129D74A7EE64396
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
Manifest number: 0AE7
Signing time: Sat 14 Jun 2025 02:00:37 +0000
Manifest this update: Sat 14 Jun 2025 02:00:37 +0000
Manifest next update: Sun 15 Jun 2025 02:00:37 +0000
Files and hashes: 1: a08STJHKoMyRw7m7T4rbBjJiJKE.crl (hash: YNvv05fdbGP90++1+4W+E50YxR/gBVNXnn5lpKZoyD4=)
2: ww5W_AzyvORyhz7R6e4M2kGu004.roa (hash: h+p5BWiNgVQT+Ps96Xby3wyi4OgT8Zpuq9hDEAln8lQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:2a:dd:88:e0:33:43:55:01:29:d7:4a:7e:e6:43:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6b4f124c91caa0cc91c3b9bb4f8adb06326224a1
Validity
Not Before: Jun 14 02:00:37 2025 GMT
Not After : Jun 15 02:00:37 2025 GMT
Subject: CN=5ba80420706d0e76e4af6f1b5133d1bcf97bc2f6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e8:15:00:25:2a:81:8d:b5:a0:39:a2:17:10:96:
a5:d0:f9:ac:da:aa:3c:29:c8:44:d7:48:7c:a3:b7:
54:63:3d:86:cb:9b:69:f9:b3:73:f6:86:83:5f:1c:
1c:a3:8a:06:49:0f:70:5a:fe:1d:85:6e:97:32:bd:
02:67:26:25:c8:47:6e:ce:e9:68:2e:f6:36:6b:06:
1e:81:83:2a:c7:b7:08:2c:b1:af:73:4a:5e:93:8b:
b5:cd:72:a2:82:17:4e:c0:89:9a:77:66:7e:9e:dd:
05:45:44:9a:6c:6b:35:57:af:92:ce:d9:0b:e7:a0:
28:35:2a:7b:17:73:71:a3:a3:f3:ee:2a:3f:5c:07:
03:08:31:87:fa:f4:ef:31:6d:24:8e:7e:51:7c:35:
d5:a5:8a:38:40:4f:6f:87:34:fe:c7:43:8f:c8:72:
f5:de:da:f6:7c:b1:65:8b:27:1f:70:bc:cc:1d:50:
09:c3:9b:6a:85:60:90:dd:8f:24:be:16:8e:e4:44:
e7:e3:42:3e:38:33:f3:56:0e:30:2e:be:44:dd:32:
a3:4e:08:d3:dd:0a:a9:46:88:b3:9e:3f:c3:56:23:
85:1e:79:d9:05:b1:ea:95:73:3f:27:3d:13:b1:ce:
71:0c:82:da:34:09:4d:8c:67:fa:3c:09:8c:2a:7b:
bd:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:A8:04:20:70:6D:0E:76:E4:AF:6F:1B:51:33:D1:BC:F9:7B:C2:F6
X509v3 Authority Key Identifier:
keyid:6B:4F:12:4C:91:CA:A0:CC:91:C3:B9:BB:4F:8A:DB:06:32:62:24:A1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a08STJHKoMyRw7m7T4rbBjJiJKE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/c24ac9-ad1c-4ec7-9373-b65262cf1983/1/a08STJHKoMyRw7m7T4rbBjJiJKE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
28:40:f6:b8:82:88:d0:d6:aa:79:42:b0:e3:39:6c:d9:fa:db:
d3:eb:63:03:9f:0d:c7:b8:b8:9b:4b:d7:f8:26:0d:9f:db:48:
04:0f:2d:7c:d1:e6:96:ba:27:df:33:dc:da:e7:60:6b:b4:dc:
6a:34:26:2b:50:33:f7:a8:9f:47:94:00:e8:f1:eb:30:ae:c9:
63:a3:07:98:ec:4c:8a:8a:77:f9:0d:7e:9c:d7:a8:67:f6:ef:
31:23:ed:bc:50:29:14:25:4c:40:50:72:b4:4c:0c:ea:71:ea:
aa:52:48:ce:ba:9c:06:ec:6d:7f:d3:5e:1a:12:6a:4c:aa:9d:
9d:42:4d:df:7f:7b:f5:76:a7:23:ee:8c:aa:51:89:4d:2b:88:
f8:68:48:f8:89:96:f3:e4:33:1a:3e:e6:0e:32:6f:c6:0c:84:
d5:09:80:28:df:55:f6:34:a3:15:f4:12:dd:ca:0c:63:51:2c:
70:46:ff:9a:d0:78:7d:75:92:06:9e:da:44:7e:11:9e:30:e4:
28:8b:ef:2c:03:0b:5d:93:7a:d4:75:b4:28:d2:66:5f:28:35:
6e:ce:ce:69:39:69:ee:8b:17:24:24:c1:ad:0d:9b:47:66:2e:
c8:17:02:99:67:86:1d:cc:04:55:67:b6:a4:b4:2c:8d:fa:81:
81:31:85:7b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsKt2I4DNDVQEp10p+5kOWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiNGYxMjRjOTFjYWEwY2M5MWMzYjliYjRmOGFkYjA2MzI2
MjI0YTEwHhcNMjUwNjE0MDIwMDM3WhcNMjUwNjE1MDIwMDM3WjAzMTEwLwYDVQQD
Eyg1YmE4MDQyMDcwNmQwZTc2ZTRhZjZmMWI1MTMzZDFiY2Y5N2JjMmY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6BUAJSqBjbWgOaIXEJal0Pms2qo8
KchE10h8o7dUYz2Gy5tp+bNz9oaDXxwco4oGSQ9wWv4dhW6XMr0CZyYlyEduzulo
LvY2awYegYMqx7cILLGvc0pek4u1zXKighdOwImad2Z+nt0FRUSabGs1V6+SztkL
56AoNSp7F3Nxo6Pz7io/XAcDCDGH+vTvMW0kjn5RfDXVpYo4QE9vhzT+x0OPyHL1
3tr2fLFliycfcLzMHVAJw5tqhWCQ3Y8kvhaO5ETn40I+ODPzVg4wLr5E3TKjTgjT
3QqpRoiznj/DViOFHnnZBbHqlXM/Jz0Tsc5xDILaNAlNjGf6PAmMKnu9VwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFuoBCBwbQ525K9vG1Ez0bz5e8L2MB8GA1UdIwQY
MBaAFGtPEkyRyqDMkcO5u0+K2wYyYiShMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMt
YjY1MjYyY2YxOTgzLzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy9jMjRhYzktYWQxYy00ZWM3LTkzNzMtYjY1MjYyY2YxOTgz
LzEvYTA4U1RKSEtvTXlSdzdtN1Q0cmJCakppSktFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAKED2uIKI
0NaqeUKw4zls2frb0+tjA58Nx7i4m0vX+CYNn9tIBA8tfNHmlron3zPc2udga7Tc
ajQmK1Az96ifR5QA6PHrMK7JY6MHmOxMiop3+Q1+nNeoZ/bvMSPtvFApFCVMQFBy
tEwM6nHqqlJIzrqcBuxtf9NeGhJqTKqdnUJN33979XanI+6MqlGJTSuI+GhI+ImW
8+QzGj7mDjJvxgyE1QmAKN9V9jSjFfQS3coMY1EscEb/mtB4fXWSBp7aRH4RnjDk
KIvvLAMLXZN61HW0KNJmXyg1bs7OaTlp7osXJCTBrQ2bR2YuyBcCmWeGHcwEVWe2
pLQsjfqBgTGFew==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:44:21 2025 by rpki-client