Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
File: 0kkXcM6bZjACp5RULZiG0aLOY6s.mft (raw, json)
Hash identifier: eYPerjsmQEOZIVplJIGUwec6FbfIJJzyWkM0FuqieSg=
Subject key identifier: EF:9F:43:7F:81:75:48:91:CB:28:B8:ED:5F:F1:BE:96:AC:F6:D8:CE
Authority key identifier: D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
Certificate issuer: /CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Certificate serial: 01977F0CD458B7B547398EE460BAB8E34644
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
Manifest number: 07FB
Signing time: Tue 17 Jun 2025 18:00:36 +0000
Manifest this update: Tue 17 Jun 2025 18:00:36 +0000
Manifest next update: Wed 18 Jun 2025 18:00:36 +0000
Files and hashes: 1: 0kkXcM6bZjACp5RULZiG0aLOY6s.crl (hash: hQNgz92HNMSPQ/8nz0TXbuNqlwXLHfTeDrVOD9+a33s=)
2: tkNgBbUczBhXw3Q7nsd4bFDL5Ko.roa (hash: 2ZBjCKDVEUumVBdfZIcGHq5+w377C2/RlriHj7O796c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 18 Jun 2025 13:26:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7f:0c:d4:58:b7:b5:47:39:8e:e4:60:ba:b8:e3:46:44
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2491770ce9b663002a794542d9886d1a2ce63ab
Validity
Not Before: Jun 17 18:00:36 2025 GMT
Not After : Jun 18 18:00:36 2025 GMT
Subject: CN=ef9f437f81754891cb28b8ed5ff1be96acf6d8ce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:de:2d:4e:1c:63:eb:18:57:a2:66:71:cb:da:29:
55:ea:fd:eb:ad:d0:e6:3e:0c:04:d1:9b:fa:6d:0c:
1d:19:8d:87:ec:b9:3a:11:65:dc:eb:25:3a:07:1f:
ad:64:9c:c8:95:d3:1d:5c:21:a8:09:97:08:82:14:
a1:e1:f8:ff:9f:b9:66:2a:8f:17:5d:a0:c0:e3:f3:
f4:3f:12:94:d0:1e:61:96:dc:8c:7d:5a:60:88:86:
ba:23:41:d3:4a:7b:ac:43:33:ca:26:68:cb:3c:8e:
66:97:13:99:cc:b2:f4:1e:9e:b3:d5:ea:ab:f8:f6:
cb:bc:8d:05:68:a7:a0:60:8d:22:cc:cd:49:e8:9c:
63:1c:01:07:a0:4c:3a:e6:6c:02:e9:94:af:f0:c3:
15:cd:72:a5:ce:11:ac:d8:48:4f:16:47:93:98:0f:
19:c6:85:17:d6:3b:b2:99:cc:30:4e:4f:01:e5:ea:
c0:24:ad:9d:16:c2:b6:a1:ea:af:c2:e5:e7:59:5d:
45:ba:3a:61:81:8a:43:d6:85:34:77:af:db:97:00:
99:a0:6b:16:14:1a:b5:0e:cd:8b:9e:ac:de:13:99:
7e:c3:0c:e9:ab:20:b6:83:18:20:ae:9d:0c:6b:1a:
6a:88:4f:61:a5:22:84:36:8b:03:75:79:ba:e1:25:
df:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:9F:43:7F:81:75:48:91:CB:28:B8:ED:5F:F1:BE:96:AC:F6:D8:CE
X509v3 Authority Key Identifier:
keyid:D2:49:17:70:CE:9B:66:30:02:A7:94:54:2D:98:86:D1:A2:CE:63:AB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0kkXcM6bZjACp5RULZiG0aLOY6s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bd22ce-772c-4f1e-b4aa-85c0d01f9de2/1/0kkXcM6bZjACp5RULZiG0aLOY6s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
52:21:62:37:f1:47:3f:ff:15:01:5d:3d:89:6f:ec:05:13:4f:
a2:c6:cf:4f:45:c2:5a:db:04:c4:7f:61:52:8a:0a:f9:6d:dd:
6d:98:7a:e1:d1:78:83:85:a9:bb:ff:4e:08:58:bd:22:a7:9b:
29:c2:b0:fa:b5:ec:75:9f:42:11:27:c4:d2:85:7e:14:37:d3:
20:62:01:8e:c1:3d:dc:38:98:dd:02:87:5a:8e:81:f7:64:4c:
c7:56:19:f5:be:59:94:c7:09:f0:ac:6a:dd:e7:f4:ad:39:59:
00:d4:9c:f8:2e:c8:86:21:93:35:19:e7:0c:33:d8:ff:a8:70:
7d:0b:be:12:ca:7b:25:98:da:b9:33:1c:92:38:78:58:4b:f7:
e8:78:cf:2a:de:f4:bd:1e:89:4a:48:c7:b9:b6:b9:9d:fe:b5:
12:eb:f3:46:94:df:08:0c:b7:f4:a3:e4:1a:eb:52:6f:f2:2f:
10:29:65:7d:61:7b:47:80:bf:82:61:0d:e8:cd:84:9a:fb:af:
0e:da:b2:0c:ae:a2:96:d8:6b:de:2a:3e:d7:c2:a0:86:49:7c:
b1:39:31:8e:4f:0c:a8:e0:90:09:8f:63:61:b0:af:52:1f:e5:
73:d3:da:96:62:5c:52:75:28:48:ee:0f:4c:d6:28:8b:75:24:
19:6a:26:77
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd/DNRYt7VHOY7kYLq440ZEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNDkxNzcwY2U5YjY2MzAwMmE3OTQ1NDJkOTg4NmQxYTJj
ZTYzYWIwHhcNMjUwNjE3MTgwMDM2WhcNMjUwNjE4MTgwMDM2WjAzMTEwLwYDVQQD
EyhlZjlmNDM3ZjgxNzU0ODkxY2IyOGI4ZWQ1ZmYxYmU5NmFjZjZkOGNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3i1OHGPrGFeiZnHL2ilV6v3rrdDm
PgwE0Zv6bQwdGY2H7Lk6EWXc6yU6Bx+tZJzIldMdXCGoCZcIghSh4fj/n7lmKo8X
XaDA4/P0PxKU0B5hltyMfVpgiIa6I0HTSnusQzPKJmjLPI5mlxOZzLL0Hp6z1eqr
+PbLvI0FaKegYI0izM1J6JxjHAEHoEw65mwC6ZSv8MMVzXKlzhGs2EhPFkeTmA8Z
xoUX1juymcwwTk8B5erAJK2dFsK2oeqvwuXnWV1FujphgYpD1oU0d6/blwCZoGsW
FBq1Ds2LnqzeE5l+wwzpqyC2gxggrp0MaxpqiE9hpSKENosDdXm64SXf/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO+fQ3+BdUiRyyi47V/xvpas9tjOMB8GA1UdIwQY
MBaAFNJJF3DOm2YwAqeUVC2YhtGizmOrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iZDIyY2UtNzcyYy00ZjFlLWI0YWEt
ODVjMGQwMWY5ZGUyLzEvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iZDIyY2UtNzcyYy00ZjFlLWI0YWEtODVjMGQwMWY5ZGUy
LzEvMGtrWGNNNmJaakFDcDVSVUxaaUcwYUxPWTZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUiFiN/FH
P/8VAV09iW/sBRNPosbPT0XCWtsExH9hUooK+W3dbZh64dF4g4Wpu/9OCFi9Iqeb
KcKw+rXsdZ9CESfE0oV+FDfTIGIBjsE93DiY3QKHWo6B92RMx1YZ9b5ZlMcJ8Kxq
3ef0rTlZANSc+C7IhiGTNRnnDDPY/6hwfQu+Esp7JZjauTMckjh4WEv36HjPKt70
vR6JSkjHuba5nf61EuvzRpTfCAy39KPkGutSb/IvECllfWF7R4C/gmEN6M2Emvuv
DtqyDK6ilthr3io+18Kghkl8sTkxjk8MqOCQCY9jYbCvUh/lc9PalmJcUnUoSO4P
TNYoi3UkGWomdw==
-----END CERTIFICATE-----
Generated at Tue Jun 17 21:03:11 2025 by rpki-client