Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
File: t6x4DrIELIxXABtl7xVub1kxI5s.mft (raw, json)
Hash identifier: D+g58s59Pio3HbkzGCqbmJlMLge124BsYHRC1WliejY=
Subject key identifier: 28:1E:97:D6:C8:84:59:FD:A5:6D:3D:18:5A:96:EC:50:C7:91:ED:06
Authority key identifier: B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
Certificate issuer: /CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Certificate serial: 019769CE51B6C10C355DBD71942424B1C2F4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
Manifest number: 0E8D
Signing time: Fri 13 Jun 2025 15:00:18 +0000
Manifest this update: Fri 13 Jun 2025 15:00:18 +0000
Manifest next update: Sat 14 Jun 2025 15:00:18 +0000
Files and hashes: 1: jop9I76IYZwBELNaT-ZQAcQ49rU.roa (hash: r++agSStViQ3qw07RB4HAaR5ym/8f71PVZva/QwS050=)
2: t6x4DrIELIxXABtl7xVub1kxI5s.crl (hash: Rh4KesgRwGnHPyzJXYTBVCtJnSymmTSQtg5cNxw2UbI=)
3: v7txDad3obC4fM89n81NhQg4Yeg.roa (hash: SQrktdz+pjDoi2qLtFhS7eNuomu/ooHtDXvC3qLXy1c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:51:b6:c1:0c:35:5d:bd:71:94:24:24:b1:c2:f4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b7ac780eb2042c8c57001b65ef156e6f5931239b
Validity
Not Before: Jun 13 15:00:18 2025 GMT
Not After : Jun 14 15:00:18 2025 GMT
Subject: CN=281e97d6c88459fda56d3d185a96ec50c791ed06
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:9b:de:ba:91:93:df:d1:46:9e:d6:6e:69:57:
52:e5:fb:a6:ee:60:59:9b:4d:c0:53:c8:5c:c3:f0:
bd:ad:22:4a:ef:8c:9a:09:f3:81:0c:53:39:4b:3f:
1c:a3:6f:af:04:7f:a9:09:a6:9a:60:05:12:65:59:
66:56:31:4f:61:e2:0e:b7:61:80:9e:7e:35:e8:84:
c0:7d:0a:85:b0:aa:dc:f6:2f:45:59:6f:33:54:6f:
2a:3e:4e:9b:5c:c2:70:7f:53:44:c4:e7:06:44:3b:
4a:b9:64:70:5c:77:f5:24:9f:88:a1:80:1a:d0:4c:
79:f7:9b:4f:42:2f:cb:a8:6b:a9:58:3b:c1:a8:88:
88:ce:65:75:a1:d5:c1:ec:c1:d4:cd:03:39:3d:e4:
21:28:f4:6e:62:e3:f9:e9:4c:9a:f1:4f:12:7d:d9:
07:90:ad:93:bc:85:21:43:ef:3e:37:4b:62:70:b9:
1d:6f:3e:52:91:77:d5:b3:72:07:c9:77:c4:42:7f:
c8:22:fe:3c:76:27:b9:2b:b8:c4:1b:1e:07:3d:c9:
04:b3:2e:b6:c4:3b:58:c6:b4:b6:7f:85:55:9b:22:
93:aa:6c:fe:66:0e:d5:f0:7e:4f:c9:90:f6:90:2b:
4e:a6:73:5d:ec:b2:c8:33:05:35:a4:35:cc:42:5c:
34:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
28:1E:97:D6:C8:84:59:FD:A5:6D:3D:18:5A:96:EC:50:C7:91:ED:06
X509v3 Authority Key Identifier:
keyid:B7:AC:78:0E:B2:04:2C:8C:57:00:1B:65:EF:15:6E:6F:59:31:23:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/t6x4DrIELIxXABtl7xVub1kxI5s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/190d47-68da-44d2-950e-37664d75b254/1/t6x4DrIELIxXABtl7xVub1kxI5s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
be:f1:7e:04:48:c2:b7:85:31:18:41:99:09:4a:af:4c:2b:41:
8c:d7:25:92:21:a1:92:bc:f0:64:73:95:07:6e:d9:20:68:bf:
4e:5a:11:7e:ec:47:64:dc:d7:cb:ac:cf:6f:f8:ba:b4:f5:c8:
77:76:28:51:8d:4c:4e:ba:bf:84:40:f0:b4:55:85:9d:e5:a3:
e3:88:0b:9f:48:05:a3:f9:9e:3b:8c:5d:37:2b:2e:a8:fb:1a:
c5:a1:af:cc:a3:bd:0a:b7:c0:cc:53:13:92:06:be:95:ae:89:
40:f5:8d:ad:8b:8e:17:c0:c8:37:80:91:e1:c3:ba:f3:5e:25:
89:18:6c:68:f2:da:ce:71:b0:69:51:cb:d3:3c:75:18:8c:a3:
0c:d6:5b:45:a9:1a:16:21:68:33:30:7a:8c:dd:2b:26:0c:49:
62:2f:b2:18:d5:ef:a3:44:50:28:0e:b9:5f:25:72:e0:85:17:
75:a8:3d:04:ef:47:fa:c9:4f:95:d3:ad:1e:dd:c7:d9:f7:b7:
13:b4:b9:e7:3c:c1:9c:59:f0:7f:a8:e7:66:5a:d6:88:dc:62:
3f:65:cd:7c:d7:ed:31:48:47:eb:87:36:2d:e3:87:00:4f:d5:
d2:34:f0:49:8b:55:68:d3:23:91:df:47:bd:10:95:38:13:8d:
9a:a1:2f:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzlG2wQw1Xb1xlCQkscL0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI3YWM3ODBlYjIwNDJjOGM1NzAwMWI2NWVmMTU2ZTZmNTkz
MTIzOWIwHhcNMjUwNjEzMTUwMDE4WhcNMjUwNjE0MTUwMDE4WjAzMTEwLwYDVQQD
EygyODFlOTdkNmM4ODQ1OWZkYTU2ZDNkMTg1YTk2ZWM1MGM3OTFlZDA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArpveupGT39FGntZuaVdS5fum7mBZ
m03AU8hcw/C9rSJK74yaCfOBDFM5Sz8co2+vBH+pCaaaYAUSZVlmVjFPYeIOt2GA
nn416ITAfQqFsKrc9i9FWW8zVG8qPk6bXMJwf1NExOcGRDtKuWRwXHf1JJ+IoYAa
0Ex595tPQi/LqGupWDvBqIiIzmV1odXB7MHUzQM5PeQhKPRuYuP56Uya8U8SfdkH
kK2TvIUhQ+8+N0ticLkdbz5SkXfVs3IHyXfEQn/IIv48die5K7jEGx4HPckEsy62
xDtYxrS2f4VVmyKTqmz+Zg7V8H5PyZD2kCtOpnNd7LLIMwU1pDXMQlw0xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCgel9bIhFn9pW09GFqW7FDHke0GMB8GA1UdIwQY
MBaAFLeseA6yBCyMVwAbZe8Vbm9ZMSObMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdDZ4NERySUVMSXhYQUJ0bDd4VnViMWt4STVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi8xOTBkNDctNjhkYS00NGQyLTk1MGUt
Mzc2NjRkNzViMjU0LzEvdDZ4NERySUVMSXhYQUJ0bDd4VnViMWt4STVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi8xOTBkNDctNjhkYS00NGQyLTk1MGUtMzc2NjRkNzViMjU0
LzEvdDZ4NERySUVMSXhYQUJ0bDd4VnViMWt4STVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAvvF+BEjC
t4UxGEGZCUqvTCtBjNclkiGhkrzwZHOVB27ZIGi/TloRfuxHZNzXy6zPb/i6tPXI
d3YoUY1MTrq/hEDwtFWFneWj44gLn0gFo/meO4xdNysuqPsaxaGvzKO9CrfAzFMT
kga+la6JQPWNrYuOF8DIN4CR4cO6814liRhsaPLaznGwaVHL0zx1GIyjDNZbRaka
FiFoMzB6jN0rJgxJYi+yGNXvo0RQKA65XyVy4IUXdag9BO9H+slPldOtHt3H2fe3
E7S55zzBnFnwf6jnZlrWiNxiP2XNfNftMUhH64c2LeOHAE/V0jTwSYtVaNMjkd9H
vRCVOBONmqEv9A==
-----END CERTIFICATE-----
Generated at Fri Jun 13 20:14:20 2025 by rpki-client