Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
File: cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft (raw, json)
Hash identifier: MkI+y8JMe7GBKvj9C9yniKfmcbs+ZmKp9vVo9W9iHvI=
Subject key identifier: AC:36:E2:0E:20:CF:E4:D7:C1:92:EA:66:C9:6C:5C:B5:9A:5E:1B:6F
Authority key identifier: 70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
Certificate issuer: /CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Certificate serial: 019769CE90EA13A01F41C3EF8B9FBDDC1DDD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 15:00:34 +0000
Manifest this update: Fri 13 Jun 2025 15:00:34 +0000
Manifest next update: Sat 14 Jun 2025 15:00:34 +0000
Files and hashes: 1: cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl (hash: ZiuUUwPhB9Za7xsiHGBXPFQ2zwTiH+gyjhgdqXYJofo=)
2: gEcPKMyXsq8EnU4MPoFeY2Uidb0.roa (hash: 43PR1hTJL7tXyu9/IcMkUlMdJ9SOinPx2dKMQk9nNKw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl
rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ce:90:ea:13:a0:1f:41:c3:ef:8b:9f:bd:dc:1d:dd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=707f7ee6ab9cf448f9949367fb7c0ede1073f97f
Validity
Not Before: Jun 13 15:00:34 2025 GMT
Not After : Jun 14 15:00:34 2025 GMT
Subject: CN=ac36e20e20cfe4d7c192ea66c96c5cb59a5e1b6f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:8e:8d:40:07:56:ce:68:ec:88:74:8f:b7:05:
83:62:79:65:d5:11:28:78:62:fe:d1:12:08:74:36:
bd:94:4e:1b:b3:dd:c3:87:64:aa:d3:44:a6:62:e1:
d1:33:76:03:aa:aa:c0:09:30:d6:4a:59:f0:dc:85:
09:55:83:4e:d9:6f:16:da:c9:b2:66:cb:91:6b:84:
9e:d3:61:5b:aa:cf:fa:fd:63:71:52:28:2c:1d:ce:
81:1d:d3:de:55:bd:99:43:9b:87:cb:4d:17:bd:a8:
eb:8b:4f:b3:a7:a0:99:f3:47:9d:05:02:72:7b:51:
77:11:5b:a2:68:8e:da:91:2b:99:f2:03:c8:90:58:
6d:9d:c6:bf:4a:22:8c:03:be:ed:01:91:8e:4c:3d:
da:f7:26:e5:a8:46:95:1f:3a:46:c4:56:32:cd:64:
4a:44:a2:54:3b:6a:aa:ea:f7:d4:5d:bd:24:87:b5:
65:fe:57:34:b1:2c:03:39:22:73:8c:5a:d4:f4:a9:
9b:4e:78:b5:31:60:2b:b6:ca:6b:0b:0e:60:ed:88:
0a:f6:d8:e2:88:35:b0:6b:b1:14:97:f4:68:ad:de:
ae:af:7e:8c:a9:25:f1:96:16:21:05:fc:3b:ab:d4:
4c:6a:67:1d:f6:57:8d:de:6d:6f:99:2d:dc:a7:5e:
d3:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:36:E2:0E:20:CF:E4:D7:C1:92:EA:66:C9:6C:5C:B5:9A:5E:1B:6F
X509v3 Authority Key Identifier:
keyid:70:7F:7E:E6:AB:9C:F4:48:F9:94:93:67:FB:7C:0E:DE:10:73:F9:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cH9-5quc9Ej5lJNn-3wO3hBz-X8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/96/3b45b3-18a4-47f8-8264-f708bc70e6ee/1/cH9-5quc9Ej5lJNn-3wO3hBz-X8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
60:f5:35:d9:a6:55:2b:3e:a6:14:2a:13:b9:b7:51:44:fb:d5:
66:68:e2:e2:85:d9:87:4c:d2:9d:86:a5:10:f5:d1:18:d0:eb:
f7:f3:4c:08:a3:85:71:2c:41:55:4d:b9:75:b9:b3:fc:f1:ad:
d8:1e:c1:b7:51:42:54:e0:cb:87:84:38:bf:33:23:eb:df:3d:
6c:bf:0e:55:33:da:fe:21:4c:83:fc:99:b3:42:44:37:f3:f7:
19:05:f0:e8:fe:90:ba:b4:22:1a:aa:a5:b7:e1:4a:92:bc:c6:
ab:8e:0e:5f:d6:af:f4:06:35:7f:f3:ae:f6:1b:29:6b:4f:b3:
f3:68:db:c8:d4:94:61:9c:21:08:bb:83:0a:78:89:ff:cd:f4:
d9:39:2c:9d:d5:b1:cc:88:8e:e0:61:fa:25:a2:1c:df:77:09:
40:f4:a0:68:18:07:66:08:a5:b4:74:da:c7:69:39:d2:a5:a7:
8c:56:d1:d4:70:2c:be:16:cd:56:e3:ea:60:62:3c:ac:0b:9e:
4b:84:ef:a7:de:58:6d:c9:4c:fc:4c:53:f1:c1:ec:41:8e:0b:
41:57:37:6a:b7:12:4c:4a:ba:b8:34:8c:ab:20:55:c3:94:c5:
ea:d2:b7:cd:56:48:cc:33:9b:c7:5c:be:4c:2a:a6:de:fa:a2:
ae:a9:11:4f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpzpDqE6AfQcPvi5+93B3dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwN2Y3ZWU2YWI5Y2Y0NDhmOTk0OTM2N2ZiN2MwZWRlMTA3
M2Y5N2YwHhcNMjUwNjEzMTUwMDM0WhcNMjUwNjE0MTUwMDM0WjAzMTEwLwYDVQQD
EyhhYzM2ZTIwZTIwY2ZlNGQ3YzE5MmVhNjZjOTZjNWNiNTlhNWUxYjZmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuI6NQAdWzmjsiHSPtwWDYnll1REo
eGL+0RIIdDa9lE4bs93Dh2Sq00SmYuHRM3YDqqrACTDWSlnw3IUJVYNO2W8W2smy
ZsuRa4Se02Fbqs/6/WNxUigsHc6BHdPeVb2ZQ5uHy00Xvajri0+zp6CZ80edBQJy
e1F3EVuiaI7akSuZ8gPIkFhtnca/SiKMA77tAZGOTD3a9yblqEaVHzpGxFYyzWRK
RKJUO2qq6vfUXb0kh7Vl/lc0sSwDOSJzjFrU9KmbTni1MWArtsprCw5g7YgK9tji
iDWwa7EUl/Rord6ur36MqSXxlhYhBfw7q9RMamcd9leN3m1vmS3cp17TbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKw24g4gz+TXwZLqZslsXLWaXhtvMB8GA1UdIwQY
MBaAFHB/fuarnPRI+ZSTZ/t8Dt4Qc/l/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0g5LTVxdWM5RWo1bEpObi0zd08zaEJ6LVg4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ni8zYjQ1YjMtMThhNC00N2Y4LTgyNjQt
ZjcwOGJjNzBlNmVlLzEvY0g5LTVxdWM5RWo1bEpObi0zd08zaEJ6LVg4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ni8zYjQ1YjMtMThhNC00N2Y4LTgyNjQtZjcwOGJjNzBlNmVl
LzEvY0g5LTVxdWM5RWo1bEpObi0zd08zaEJ6LVg4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYPU12aZV
Kz6mFCoTubdRRPvVZmji4oXZh0zSnYalEPXRGNDr9/NMCKOFcSxBVU25dbmz/PGt
2B7Bt1FCVODLh4Q4vzMj6989bL8OVTPa/iFMg/yZs0JEN/P3GQXw6P6QurQiGqql
t+FKkrzGq44OX9av9AY1f/Ou9hspa0+z82jbyNSUYZwhCLuDCniJ/8302TksndWx
zIiO4GH6JaIc33cJQPSgaBgHZgiltHTax2k50qWnjFbR1HAsvhbNVuPqYGI8rAue
S4Tvp95YbclM/ExT8cHsQY4LQVc3arcSTEq6uDSMqyBVw5TF6tK3zVZIzDObx1y+
TCqm3vqirqkRTw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:38 2025 by rpki-client