Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
File: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft (raw, json)
Hash identifier: q87c8NzMy1QYyclKYrOJrq/dG0Q4+yxPu/TL1dvJzKs=
Subject key identifier: AF:E7:94:B1:06:93:33:87:C8:CA:5B:D7:16:61:27:80:F0:48:22:3B
Authority key identifier: D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C
Certificate issuer: /CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
Certificate serial: 019783FC3D72311A0A3576EA88AAA205A188
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
Manifest number: 072E
Signing time: Wed 18 Jun 2025 17:00:35 +0000
Manifest this update: Wed 18 Jun 2025 17:00:35 +0000
Manifest next update: Thu 19 Jun 2025 17:00:35 +0000
Files and hashes: 1: 0TM8RaOIPFOpyp7Wz-Yo2ky-FH4.roa (hash: XeQkg3QeFHikM/cwWNNdphRvfPZiBaMh4xO56QjpXcM=)
2: 1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl (hash: m+E47hv75IW7lzsiSPWVaBN4OozNeBTou6O102fIo88=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl
rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 17:00:35 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:83:fc:3d:72:31:1a:0a:35:76:ea:88:aa:a2:05:a1:88
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d5f5e7dddc47c71044865bc5cdc2587efdab0b9c
Validity
Not Before: Jun 18 17:00:35 2025 GMT
Not After : Jun 19 17:00:35 2025 GMT
Subject: CN=afe794b106933387c8ca5bd716612780f048223b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:ed:6b:87:09:d2:a2:11:6c:bb:25:56:75:fb:
4a:04:5c:06:b3:f0:4f:ee:0b:06:f4:75:46:ec:bf:
9a:04:9a:cf:97:59:0b:54:07:f0:c1:3b:f4:27:c3:
5f:a5:cf:9f:d5:0f:8e:6d:a7:df:21:a5:83:ec:a6:
79:28:0d:fd:2b:a5:2d:c8:1a:9e:86:35:12:e8:80:
8f:6c:b7:ab:dc:51:dd:80:25:4e:a3:e7:83:12:ad:
cb:5c:4d:43:98:f4:33:50:84:01:25:53:9f:35:0d:
74:61:d4:85:df:9a:e5:8c:31:2c:1f:f5:5c:75:20:
d2:0a:24:ec:00:23:61:d0:36:6e:ea:d9:68:6e:9f:
5d:4f:51:74:de:7c:8d:68:35:9e:33:fb:e1:e8:27:
e0:ac:3f:da:be:04:8b:d2:2a:a7:81:0f:b2:47:cb:
4b:5b:ef:e4:70:fe:25:12:8b:5b:7b:e6:02:ed:d0:
f7:8b:3a:54:f6:9e:52:1e:86:15:bf:b1:f0:c1:f7:
f8:8d:f6:10:f0:6e:f8:cc:31:55:01:1f:5a:d1:de:
a3:f4:e2:07:e8:c9:2a:c4:3f:7b:60:43:df:4e:04:
88:db:aa:0d:8b:29:39:da:99:56:ed:b9:13:bd:6d:
a9:ab:d2:80:86:89:0f:9e:bc:5f:fa:3c:98:99:cb:
71:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AF:E7:94:B1:06:93:33:87:C8:CA:5B:D7:16:61:27:80:F0:48:22:3B
X509v3 Authority Key Identifier:
keyid:D5:F5:E7:DD:DC:47:C7:10:44:86:5B:C5:CD:C2:58:7E:FD:AB:0B:9C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1fXn3dxHxxBEhlvFzcJYfv2rC5w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7c/826faf-37b4-438f-8f90-29fe7cc66c8d/1/1fXn3dxHxxBEhlvFzcJYfv2rC5w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
20:47:39:e7:ec:be:18:fc:6c:1d:34:61:7a:c8:d4:36:18:ad:
05:cb:85:fa:11:38:5a:55:7a:eb:8f:0f:0c:26:f0:db:21:dd:
b2:4f:41:ab:17:e3:e5:ae:0a:c7:0d:d6:4a:2a:74:6f:e3:17:
7e:98:c3:8a:42:e2:8b:ad:1f:cd:90:5b:1b:a3:cc:f1:d8:0c:
9f:21:bd:e0:cc:1d:f3:f6:29:e4:5e:df:04:b0:8e:d9:2f:04:
d2:6a:c0:b3:a3:2f:88:58:96:81:ae:43:5e:8d:b7:22:f5:2b:
a9:b8:c4:fb:ca:4d:f5:1c:e1:04:e7:8f:77:bb:2b:ca:39:ca:
5a:b0:fd:2b:e0:08:1a:59:03:51:11:42:0d:e5:77:0b:57:9a:
4b:e1:61:99:d4:d9:e8:33:a4:5e:ea:1e:84:f2:89:fc:3e:63:
47:af:c4:1d:3c:c1:31:a6:b1:46:be:7f:44:e3:70:6d:54:2f:
57:95:15:23:1b:aa:db:d8:2d:7c:2e:bf:cf:98:08:56:82:13:
b8:dc:a2:5a:da:76:f1:20:f6:0a:f1:ec:94:95:57:1d:e5:6b:
2c:7e:02:9a:2b:36:16:8a:8f:cb:00:fa:ed:2e:67:5e:00:17:
b7:dc:2b:b8:97:ef:00:32:98:57:d1:cf:69:c1:f8:91:0c:4b:
df:e1:0d:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeD/D1yMRoKNXbqiKqiBaGIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ1ZjVlN2RkZGM0N2M3MTA0NDg2NWJjNWNkYzI1ODdlZmRh
YjBiOWMwHhcNMjUwNjE4MTcwMDM1WhcNMjUwNjE5MTcwMDM1WjAzMTEwLwYDVQQD
EyhhZmU3OTRiMTA2OTMzMzg3YzhjYTViZDcxNjYxMjc4MGYwNDgyMjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqO1rhwnSohFsuyVWdftKBFwGs/BP
7gsG9HVG7L+aBJrPl1kLVAfwwTv0J8Nfpc+f1Q+ObaffIaWD7KZ5KA39K6UtyBqe
hjUS6ICPbLer3FHdgCVOo+eDEq3LXE1DmPQzUIQBJVOfNQ10YdSF35rljDEsH/Vc
dSDSCiTsACNh0DZu6tlobp9dT1F03nyNaDWeM/vh6CfgrD/avgSL0iqngQ+yR8tL
W+/kcP4lEotbe+YC7dD3izpU9p5SHoYVv7Hwwff4jfYQ8G74zDFVAR9a0d6j9OIH
6MkqxD97YEPfTgSI26oNiyk52plW7bkTvW2pq9KAhokPnrxf+jyYmctxFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK/nlLEGkzOHyMpb1xZhJ4DwSCI7MB8GA1UdIwQY
MBaAFNX1593cR8cQRIZbxc3CWH79qwucMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWZYbjNkeEh4eEJFaGx2RnpjSllmdjJyQzV3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yy84MjZmYWYtMzdiNC00MzhmLThmOTAt
MjlmZTdjYzY2YzhkLzEvMWZYbjNkeEh4eEJFaGx2RnpjSllmdjJyQzV3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yy84MjZmYWYtMzdiNC00MzhmLThmOTAtMjlmZTdjYzY2Yzhk
LzEvMWZYbjNkeEh4eEJFaGx2RnpjSllmdjJyQzV3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIEc55+y+
GPxsHTRhesjUNhitBcuF+hE4WlV6648PDCbw2yHdsk9Bqxfj5a4Kxw3WSip0b+MX
fpjDikLii60fzZBbG6PM8dgMnyG94Mwd8/Yp5F7fBLCO2S8E0mrAs6MviFiWga5D
Xo23IvUrqbjE+8pN9RzhBOePd7sryjnKWrD9K+AIGlkDURFCDeV3C1eaS+FhmdTZ
6DOkXuoehPKJ/D5jR6/EHTzBMaaxRr5/RONwbVQvV5UVIxuq29gtfC6/z5gIVoIT
uNyiWtp28SD2CvHslJVXHeVrLH4Cmis2FoqPywD67S5nXgAXt9wruJfvADKYV9HP
acH4kQxL3+ENiA==
-----END CERTIFICATE-----
Generated at Thu Jun 19 03:10:41 2025 by rpki-client