Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
File: p-cKBbmGOc165X_rGkCzZ-ycQ60.mft (raw, json)
Hash identifier: xULpCThrrme1InfqFLwlTf6F2OdjTTdZe7a5FMeYC5A=
Subject key identifier: 4B:CF:48:69:46:27:26:80:08:D1:E9:CC:39:78:1D:6D:B4:87:08:B9
Authority key identifier: A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
Certificate issuer: /CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Certificate serial: 01977187FF86292282BDE99D5E173576A6F7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
Manifest number: 09D5
Signing time: Sun 15 Jun 2025 03:00:27 +0000
Manifest this update: Sun 15 Jun 2025 03:00:27 +0000
Manifest next update: Mon 16 Jun 2025 03:00:27 +0000
Files and hashes: 1: fbHkL-NwzOez_gqY2PAh-dqPCjE.roa (hash: Q4MsLL7SIokgLjLmWwHX1Dj+xIpsxjtJ9IG++E0gJUc=)
2: p-cKBbmGOc165X_rGkCzZ-ycQ60.crl (hash: l34dEtYnySu+VRLdBXn1/jcHKZWmLEHuHaWaqFbIX3g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:87:ff:86:29:22:82:bd:e9:9d:5e:17:35:76:a6:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7e70a05b98639cd7ae57feb1a40b367ec9c43ad
Validity
Not Before: Jun 15 03:00:27 2025 GMT
Not After : Jun 16 03:00:27 2025 GMT
Subject: CN=4bcf48694627268008d1e9cc39781d6db48708b9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0d:f7:28:5b:e6:8f:79:41:b9:73:bb:dc:88:
53:0f:ce:55:c3:f4:8c:f4:51:90:ba:16:e0:96:d1:
ba:54:66:c5:81:fc:08:c3:d0:99:c9:3e:e2:16:5a:
b4:ae:53:b3:2b:8c:fe:1a:0b:68:be:49:a4:3b:e0:
2c:47:7b:3d:4e:2b:03:ed:22:ba:d1:09:7e:78:33:
87:9e:55:aa:3b:79:2c:90:3d:80:31:04:6d:32:90:
a2:d4:89:53:14:8a:bd:9e:bb:43:85:19:62:49:e8:
a7:6d:d3:83:66:18:7b:ec:0c:db:8d:e3:8e:f3:5e:
c4:d6:86:dd:61:41:e9:2c:2d:b1:67:04:18:5f:90:
45:9b:3c:53:78:d6:d7:c1:56:a4:0d:80:73:0b:e1:
4e:4f:d3:ca:0d:ac:ce:4b:6a:c8:06:e4:b3:bc:f2:
37:af:64:4e:59:de:85:28:27:65:bd:5e:58:e2:2b:
0e:71:81:5b:9c:4d:c6:2b:09:b1:a8:27:b6:5c:50:
1c:61:ee:c6:24:e0:f4:26:2b:d2:19:8d:80:9e:03:
1d:9e:85:78:a6:a2:d8:62:77:5a:76:df:31:3a:fe:
a2:4b:cc:31:4d:87:59:14:d1:72:b2:3a:79:74:9b:
23:b2:ba:76:88:63:0b:31:75:fd:17:70:6f:02:3c:
b2:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4B:CF:48:69:46:27:26:80:08:D1:E9:CC:39:78:1D:6D:B4:87:08:B9
X509v3 Authority Key Identifier:
keyid:A7:E7:0A:05:B9:86:39:CD:7A:E5:7F:EB:1A:40:B3:67:EC:9C:43:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p-cKBbmGOc165X_rGkCzZ-ycQ60.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/1202e2-0b54-42ee-933a-2b1dc992eca2/1/p-cKBbmGOc165X_rGkCzZ-ycQ60.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:23:8d:74:cd:bc:64:74:3c:75:ff:9e:47:81:e1:91:e1:bf:
6d:58:26:a0:15:ae:40:7f:38:4c:35:fb:7e:b6:87:7a:cc:84:
3b:49:c9:ed:a9:58:46:60:aa:2c:c2:15:21:19:e0:37:f6:e1:
d2:ea:1e:73:ef:a0:bf:1a:74:62:b7:35:f3:5a:7c:8e:19:3a:
99:e2:8e:ba:f4:f2:59:c4:46:81:cf:37:29:84:2e:9a:e8:59:
0d:b3:31:4e:3e:1a:f7:0d:87:47:0e:90:44:04:9e:90:94:82:
a9:2d:44:51:39:af:89:cd:51:3f:6d:7a:74:b7:fe:7a:28:58:
19:e4:9a:6d:c7:cf:c9:13:3c:6a:45:2c:11:50:97:12:2a:03:
d4:4b:46:3b:6e:96:15:46:1c:04:8b:11:fc:7f:9b:70:3d:28:
fa:a6:73:b4:7d:43:5d:e6:fc:87:36:5e:4c:5b:8d:bf:30:f6:
34:35:2c:e3:18:0e:15:11:59:d1:aa:24:de:ea:bd:90:76:dc:
74:55:b0:3b:90:b2:72:2e:9d:76:d9:49:8d:b3:c7:b2:4c:e9:
7a:5b:a6:14:e8:a4:b3:1f:f7:fb:01:5c:1d:63:18:05:04:b9:
ed:bb:9c:b5:d8:06:8f:14:82:2d:27:86:01:59:b9:aa:70:f7:
0e:7e:ff:14
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxh/+GKSKCvemdXhc1dqb3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3ZTcwYTA1Yjk4NjM5Y2Q3YWU1N2ZlYjFhNDBiMzY3ZWM5
YzQzYWQwHhcNMjUwNjE1MDMwMDI3WhcNMjUwNjE2MDMwMDI3WjAzMTEwLwYDVQQD
Eyg0YmNmNDg2OTQ2MjcyNjgwMDhkMWU5Y2MzOTc4MWQ2ZGI0ODcwOGI5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnA33KFvmj3lBuXO73IhTD85Vw/SM
9FGQuhbgltG6VGbFgfwIw9CZyT7iFlq0rlOzK4z+GgtovkmkO+AsR3s9TisD7SK6
0Ql+eDOHnlWqO3kskD2AMQRtMpCi1IlTFIq9nrtDhRliSeinbdODZhh77AzbjeOO
817E1obdYUHpLC2xZwQYX5BFmzxTeNbXwVakDYBzC+FOT9PKDazOS2rIBuSzvPI3
r2ROWd6FKCdlvV5Y4isOcYFbnE3GKwmxqCe2XFAcYe7GJOD0JivSGY2AngMdnoV4
pqLYYndadt8xOv6iS8wxTYdZFNFysjp5dJsjsrp2iGMLMXX9F3BvAjyy5wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEvPSGlGJyaACNHpzDl4HW20hwi5MB8GA1UdIwQY
MBaAFKfnCgW5hjnNeuV/6xpAs2fsnEOtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcC1jS0JibUdPYzE2NVhfckdrQ3paLXljUTYwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS8xMjAyZTItMGI1NC00MmVlLTkzM2Et
MmIxZGM5OTJlY2EyLzEvcC1jS0JibUdPYzE2NVhfckdrQ3paLXljUTYwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS8xMjAyZTItMGI1NC00MmVlLTkzM2EtMmIxZGM5OTJlY2Ey
LzEvcC1jS0JibUdPYzE2NVhfckdrQ3paLXljUTYwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASCONdM28
ZHQ8df+eR4HhkeG/bVgmoBWuQH84TDX7fraHesyEO0nJ7alYRmCqLMIVIRngN/bh
0uoec++gvxp0Yrc181p8jhk6meKOuvTyWcRGgc83KYQumuhZDbMxTj4a9w2HRw6Q
RASekJSCqS1EUTmvic1RP216dLf+eihYGeSabcfPyRM8akUsEVCXEioD1EtGO26W
FUYcBIsR/H+bcD0o+qZztH1DXeb8hzZeTFuNvzD2NDUs4xgOFRFZ0aok3uq9kHbc
dFWwO5Cyci6ddtlJjbPHskzpelumFOiksx/3+wFcHWMYBQS57buctdgGjxSCLSeG
AVm5qnD3Dn7/FA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:38:20 2025 by rpki-client