Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
File: 7512O0ngJKe2oZ6vffuYkRqclMg.mft (raw, json)
Hash identifier: d8KEIsIAj2+ZEcHwY0Mz4Ag4R2t5ZcyV3keKvwiZ6SA=
Subject key identifier: 9A:F5:79:D2:99:FC:10:36:53:9C:FE:9D:C4:49:10:84:97:53:FA:80
Authority key identifier: EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
Certificate issuer: /CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Certificate serial: 01976D3DE76E1D0F37349A2112F9E340BA0A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
Manifest number: 1599
Signing time: Sat 14 Jun 2025 07:01:02 +0000
Manifest this update: Sat 14 Jun 2025 07:01:02 +0000
Manifest next update: Sun 15 Jun 2025 07:01:02 +0000
Files and hashes: 1: 7512O0ngJKe2oZ6vffuYkRqclMg.crl (hash: cm/mT5uBg0QsJmZzdotmRdsdZx7H5joeXReFKoEk3Bw=)
2: LSx9OlKUNiN9N5Lzmn4mpgYUaYM.roa (hash: SRtMriKTJRyDfQ60LOh5mHm3HAzdoYJatQZ33jFO0KY=)
3: Yzpl7dcbDV1oc45l6H78VWlDWek.roa (hash: rLWJRRPMzAUWRBDLzYpnEF8zI53ESvU9cKsYN1kvko0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:e7:6e:1d:0f:37:34:9a:21:12:f9:e3:40:ba:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef9d763b49e024a7b6a19eaf7dfb98911a9c94c8
Validity
Not Before: Jun 14 07:01:02 2025 GMT
Not After : Jun 15 07:01:02 2025 GMT
Subject: CN=9af579d299fc1036539cfe9dc44910849753fa80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:4b:66:9c:2a:93:fc:81:f7:64:cf:1e:ac:86:
78:6c:bc:16:69:68:80:e4:5f:97:3b:f6:54:09:b7:
fa:83:62:0d:10:11:2c:18:67:48:ee:58:69:b5:7b:
28:52:31:2e:e6:8b:89:02:97:3a:82:2b:7e:46:9b:
ec:ef:40:68:c8:44:72:e3:16:b8:46:52:ce:ba:49:
72:68:4c:a5:20:15:58:9b:6a:da:b3:c1:72:78:ce:
b3:39:46:0b:7a:6b:aa:10:2a:af:c5:68:eb:f9:fd:
09:13:7b:b7:c0:23:f4:96:ed:f0:59:96:89:00:59:
21:df:93:2c:3b:1d:ff:2f:c0:2f:99:b3:0c:8f:26:
31:81:ea:0a:95:c5:1a:5f:43:f1:a1:87:9f:66:35:
b7:14:7c:64:c7:71:11:17:b4:f8:6c:9d:f0:cd:7d:
34:2f:c6:72:42:0e:78:65:80:ce:92:3d:a7:be:3e:
e7:2d:0b:0f:35:9b:b1:5f:df:c6:cf:44:1d:ba:b0:
6c:92:f0:af:87:78:a1:a9:4a:a2:a6:8e:74:a0:1e:
a3:05:42:f4:3a:60:eb:f4:cc:84:43:64:4a:15:e8:
49:43:1b:80:38:7d:91:8a:05:ea:97:74:03:cd:16:
95:bc:b9:5b:4c:4f:d3:e5:63:43:fd:87:a3:ab:47:
5c:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:F5:79:D2:99:FC:10:36:53:9C:FE:9D:C4:49:10:84:97:53:FA:80
X509v3 Authority Key Identifier:
keyid:EF:9D:76:3B:49:E0:24:A7:B6:A1:9E:AF:7D:FB:98:91:1A:9C:94:C8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/7512O0ngJKe2oZ6vffuYkRqclMg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/79/59cf8e-dc67-43fb-bd37-0870e659645b/1/7512O0ngJKe2oZ6vffuYkRqclMg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:52:cf:53:5c:64:e7:4c:6c:54:25:5d:2a:bd:60:ea:3d:b3:
93:75:b7:33:61:cc:0a:ad:cc:86:75:85:b5:aa:e0:a4:31:28:
80:cd:de:48:59:b1:dd:25:d2:e7:a2:05:2f:8a:be:33:5e:95:
50:5e:f0:e7:a1:95:d0:cb:9f:40:17:5e:af:75:ad:d2:a2:fb:
ff:de:aa:4f:5a:1e:cc:40:10:26:9f:96:66:58:b5:d8:8a:a7:
98:52:43:85:6d:7a:d6:ea:1c:07:3e:d1:4e:8a:02:ab:ca:f3:
d2:f6:d8:73:94:47:b8:23:7e:f5:e5:32:4d:2f:cb:6a:3b:ad:
df:1f:4b:bd:9f:4a:bd:2a:24:7e:ad:6e:a2:0a:70:d3:09:df:
46:d1:f7:47:5e:14:29:13:e9:af:13:75:4e:51:b0:c2:4a:8a:
97:7c:28:19:27:a2:a8:65:f5:db:9c:62:e8:76:b0:38:4e:23:
50:5a:4d:dd:47:f2:2e:75:1a:68:6c:cf:87:d8:bb:30:04:4c:
10:ee:74:7f:4b:20:0d:1d:e3:72:a2:25:f3:e0:38:c3:66:76:
34:ac:8f:8f:b1:ad:69:57:15:9d:59:ea:a6:be:6e:b5:bb:75:
e9:8d:5b:ca:e2:6a:de:c1:77:9f:99:17:99:c1:f2:9a:e4:cd:
1d:d4:1e:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPeduHQ83NJohEvnjQLoKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmOWQ3NjNiNDllMDI0YTdiNmExOWVhZjdkZmI5ODkxMWE5
Yzk0YzgwHhcNMjUwNjE0MDcwMTAyWhcNMjUwNjE1MDcwMTAyWjAzMTEwLwYDVQQD
Eyg5YWY1NzlkMjk5ZmMxMDM2NTM5Y2ZlOWRjNDQ5MTA4NDk3NTNmYTgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlktmnCqT/IH3ZM8erIZ4bLwWaWiA
5F+XO/ZUCbf6g2INEBEsGGdI7lhptXsoUjEu5ouJApc6git+Rpvs70BoyERy4xa4
RlLOuklyaEylIBVYm2ras8FyeM6zOUYLemuqECqvxWjr+f0JE3u3wCP0lu3wWZaJ
AFkh35MsOx3/L8AvmbMMjyYxgeoKlcUaX0PxoYefZjW3FHxkx3ERF7T4bJ3wzX00
L8ZyQg54ZYDOkj2nvj7nLQsPNZuxX9/Gz0QdurBskvCvh3ihqUqipo50oB6jBUL0
OmDr9MyEQ2RKFehJQxuAOH2RigXql3QDzRaVvLlbTE/T5WND/Yejq0dchQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJr1edKZ/BA2U5z+ncRJEISXU/qAMB8GA1UdIwQY
MBaAFO+ddjtJ4CSntqGer337mJEanJTIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzUxMk8wbmdKS2Uyb1o2dmZmdVlrUnFjbE1nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OS81OWNmOGUtZGM2Ny00M2ZiLWJkMzct
MDg3MGU2NTk2NDViLzEvNzUxMk8wbmdKS2Uyb1o2dmZmdVlrUnFjbE1nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OS81OWNmOGUtZGM2Ny00M2ZiLWJkMzctMDg3MGU2NTk2NDVi
LzEvNzUxMk8wbmdKS2Uyb1o2dmZmdVlrUnFjbE1nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE1LPU1xk
50xsVCVdKr1g6j2zk3W3M2HMCq3MhnWFtargpDEogM3eSFmx3SXS56IFL4q+M16V
UF7w56GV0MufQBder3Wt0qL7/96qT1oezEAQJp+WZli12IqnmFJDhW161uocBz7R
TooCq8rz0vbYc5RHuCN+9eUyTS/Lajut3x9LvZ9KvSokfq1uogpw0wnfRtH3R14U
KRPprxN1TlGwwkqKl3woGSeiqGX125xi6HawOE4jUFpN3UfyLnUaaGzPh9i7MARM
EO50f0sgDR3jcqIl8+A4w2Z2NKyPj7GtaVcVnVnqpr5utbt16Y1byuJq3sF3n5kX
mcHymuTNHdQewQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:01:01 2025 by rpki-client