Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
File: 81bN1aSc5sQqmjX6d7lyeBloiJY.mft (raw, json)
Hash identifier: rF18YZ2+0yZ+lc5fffV6AvzgnCPus9TGEaDW/8gcWH0=
Subject key identifier: C7:AB:73:76:1D:D6:B8:4E:A6:89:75:3A:43:13:78:42:E5:F4:DD:1D
Authority key identifier: F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
Certificate issuer: /CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Certificate serial: 01976D3DAACEE9F368127886539A443ED8CB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
Manifest number: 0C32
Signing time: Sat 14 Jun 2025 07:00:47 +0000
Manifest this update: Sat 14 Jun 2025 07:00:47 +0000
Manifest next update: Sun 15 Jun 2025 07:00:47 +0000
Files and hashes: 1: 81bN1aSc5sQqmjX6d7lyeBloiJY.crl (hash: UzbgaGgA9W01aHME3+h0DiXvupMft8AIgviprI39Ehg=)
2: FFFquzyoI6V8zUirU5qgTnYffFE.roa (hash: UkzzNUPit9F8YYAkgHSPwBmxXN79Y3LDHaSScH7xgPY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:aa:ce:e9:f3:68:12:78:86:53:9a:44:3e:d8:cb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f356cdd5a49ce6c42a9a35fa77b9727819688896
Validity
Not Before: Jun 14 07:00:47 2025 GMT
Not After : Jun 15 07:00:47 2025 GMT
Subject: CN=c7ab73761dd6b84ea689753a43137842e5f4dd1d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:b0:fc:28:7b:cb:68:8e:6d:ee:81:09:db:ab:
70:e0:73:b5:22:73:2d:65:5c:e8:f9:aa:40:54:e1:
cd:d6:2a:dd:68:e7:72:36:7c:e1:3a:54:fc:e9:34:
5d:f0:29:6c:f6:28:44:ba:f8:6c:6d:80:f9:c8:e8:
57:4f:b6:7e:b9:0b:ff:9e:60:59:ac:ef:cf:da:8e:
05:8f:bc:2d:8e:ad:7b:fa:f9:d7:09:f7:c3:fb:65:
cf:06:1c:8f:13:aa:12:95:ed:25:0c:48:ea:3b:39:
13:75:25:23:07:09:81:e1:51:56:a8:cc:cf:e8:8e:
ec:11:9e:92:f4:6f:d7:a3:a8:4b:bc:60:a7:82:35:
58:97:1a:f7:2c:b1:24:f6:b2:50:24:5d:11:b9:32:
80:d9:e8:10:a4:fa:2d:90:c7:b4:1d:f8:d6:88:2d:
c4:8f:1b:da:db:75:a8:cb:07:ad:1a:ee:bc:b4:2e:
6c:40:0d:06:44:5c:7a:64:68:97:51:9d:12:28:05:
a3:e5:49:3c:24:53:ff:15:da:89:2b:a7:5f:6b:16:
d9:ed:63:f2:a2:fb:2f:34:ec:38:8f:36:2a:fb:32:
af:bd:2c:de:a9:96:b5:08:0f:d6:c2:28:a9:bc:4a:
4b:99:25:66:db:f2:3a:9e:d8:19:1f:57:99:00:0a:
5d:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:AB:73:76:1D:D6:B8:4E:A6:89:75:3A:43:13:78:42:E5:F4:DD:1D
X509v3 Authority Key Identifier:
keyid:F3:56:CD:D5:A4:9C:E6:C4:2A:9A:35:FA:77:B9:72:78:19:68:88:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/81bN1aSc5sQqmjX6d7lyeBloiJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/76/72d48b-865a-4e6e-96f3-5768d37f7bb5/1/81bN1aSc5sQqmjX6d7lyeBloiJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:9a:e3:90:ca:19:ee:a8:c9:40:7f:5c:65:d8:ca:0a:b1:aa:
74:04:ab:ea:09:c0:1a:00:94:06:50:1d:76:86:bb:47:e0:ce:
ca:b6:3e:79:62:2b:07:0d:fd:b4:54:0e:2d:e6:b8:7c:d7:4b:
a0:84:92:d8:c3:97:bd:99:7c:4d:66:6d:54:9f:f4:0e:7f:45:
4a:64:87:73:69:d9:34:4d:fd:fe:df:e1:2c:4f:45:00:e1:a1:
d1:75:f5:1a:28:9b:d6:d9:e7:70:40:63:dd:cd:12:7f:b8:2e:
49:4c:fa:18:c5:de:55:ad:4c:23:d9:e2:8f:b6:e5:d3:61:bb:
4a:fb:db:bf:ba:ed:ea:1e:41:56:fe:c8:62:d2:df:a9:c8:7c:
37:03:dd:60:70:7e:f7:4a:74:ac:0e:39:86:e0:b2:66:f6:70:
db:5a:53:c6:3c:f1:5b:a1:59:fc:43:92:fb:79:fb:4b:d5:f2:
20:ea:c1:58:4e:cf:27:fc:1b:43:ff:2b:d1:b7:86:f7:62:54:
db:5c:5b:11:b3:b1:6e:4a:f8:c6:28:a8:5d:24:19:a8:d5:bb:
90:8a:28:40:5f:9a:6f:d9:7c:44:f5:b2:8c:9c:52:d4:2f:6b:
31:56:4f:fe:52:bf:ff:d2:d0:e2:6f:db:ef:8b:35:6e:8d:c3:
04:a3:4c:64
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtParO6fNoEniGU5pEPtjLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzNTZjZGQ1YTQ5Y2U2YzQyYTlhMzVmYTc3Yjk3Mjc4MTk2
ODg4OTYwHhcNMjUwNjE0MDcwMDQ3WhcNMjUwNjE1MDcwMDQ3WjAzMTEwLwYDVQQD
EyhjN2FiNzM3NjFkZDZiODRlYTY4OTc1M2E0MzEzNzg0MmU1ZjRkZDFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAw7D8KHvLaI5t7oEJ26tw4HO1InMt
ZVzo+apAVOHN1irdaOdyNnzhOlT86TRd8Cls9ihEuvhsbYD5yOhXT7Z+uQv/nmBZ
rO/P2o4Fj7wtjq17+vnXCffD+2XPBhyPE6oSle0lDEjqOzkTdSUjBwmB4VFWqMzP
6I7sEZ6S9G/Xo6hLvGCngjVYlxr3LLEk9rJQJF0RuTKA2egQpPotkMe0HfjWiC3E
jxva23WoywetGu68tC5sQA0GRFx6ZGiXUZ0SKAWj5Uk8JFP/FdqJK6dfaxbZ7WPy
ovsvNOw4jzYq+zKvvSzeqZa1CA/WwiipvEpLmSVm2/I6ntgZH1eZAApdbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMerc3Yd1rhOpol1OkMTeELl9N0dMB8GA1UdIwQY
MBaAFPNWzdWknObEKpo1+ne5cngZaIiWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ni83MmQ0OGItODY1YS00ZTZlLTk2ZjMt
NTc2OGQzN2Y3YmI1LzEvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ni83MmQ0OGItODY1YS00ZTZlLTk2ZjMtNTc2OGQzN2Y3YmI1
LzEvODFiTjFhU2M1c1FxbWpYNmQ3bHllQmxvaUpZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXJrjkMoZ
7qjJQH9cZdjKCrGqdASr6gnAGgCUBlAddoa7R+DOyrY+eWIrBw39tFQOLea4fNdL
oISS2MOXvZl8TWZtVJ/0Dn9FSmSHc2nZNE39/t/hLE9FAOGh0XX1Giib1tnncEBj
3c0Sf7guSUz6GMXeVa1MI9nij7bl02G7Svvbv7rt6h5BVv7IYtLfqch8NwPdYHB+
90p0rA45huCyZvZw21pTxjzxW6FZ/EOS+3n7S9XyIOrBWE7PJ/wbQ/8r0beG92JU
21xbEbOxbkr4xiioXSQZqNW7kIooQF+ab9l8RPWyjJxS1C9rMVZP/lK//9LQ4m/b
74s1bo3DBKNMZA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:16:22 2025 by rpki-client