Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
File: pJ0uULdziu0KzBoOwv7jAIAlWDg.mft (raw, json)
Hash identifier: GJsH4Cjs6+B7BByHlX97yIteuvHT4JhUt9zns3av9bk=
Subject key identifier: 5B:17:D7:E4:35:6D:F4:75:0F:35:AA:94:7A:27:32:47:FB:AE:8D:46
Authority key identifier: A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
Certificate issuer: /CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Certificate serial: 019768BC4535196D602F7FA9810FD75FB47A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
Manifest number: 08CE
Signing time: Fri 13 Jun 2025 10:00:58 +0000
Manifest this update: Fri 13 Jun 2025 10:00:58 +0000
Manifest next update: Sat 14 Jun 2025 10:00:58 +0000
Files and hashes: 1: cGGNHHL2taAbcfw5rMUB84kQw_k.roa (hash: J56YjCbrct/bNrc5fidg1pLfrEEsu9MaAGzXOMhbxY8=)
2: pJ0uULdziu0KzBoOwv7jAIAlWDg.crl (hash: Nk4RrjN4tjH+EhxP3mKa+vPLKn/lT97fEov+fQOxH5I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 10:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:bc:45:35:19:6d:60:2f:7f:a9:81:0f:d7:5f:b4:7a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a49d2e50b7738aed0acc1a0ec2fee30080255838
Validity
Not Before: Jun 13 10:00:58 2025 GMT
Not After : Jun 14 10:00:58 2025 GMT
Subject: CN=5b17d7e4356df4750f35aa947a273247fbae8d46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:09:4a:d5:56:ff:93:87:34:1f:29:8c:a5:56:
bc:8e:4e:84:df:f4:18:d0:c4:9d:31:96:87:8f:a3:
8a:3a:50:a5:98:bd:3d:20:27:9e:af:67:37:2a:d1:
3c:a6:42:6d:0c:c7:24:d9:6e:34:d0:31:e8:7f:dc:
51:fa:ca:78:2c:7b:c9:ae:cf:b3:0c:ea:5a:bf:b0:
fc:17:7b:61:50:c3:83:4d:13:3a:fc:d8:e8:b2:6a:
ae:2c:8c:61:1b:7f:97:f5:34:8a:96:47:01:80:86:
44:83:04:08:fc:b8:67:bc:9c:ed:2c:4b:56:07:63:
04:ec:0a:a6:01:16:eb:42:3c:cd:79:dc:42:a5:11:
b0:5b:70:a0:86:b2:30:72:9d:59:d3:4f:1d:91:0f:
b9:1e:ea:bf:5d:5c:97:d5:fb:4f:15:12:c1:1b:5f:
af:2e:01:42:df:47:98:e5:41:e6:a7:02:f0:fa:d5:
45:60:33:9a:a0:cc:42:9b:b6:7f:33:2a:62:17:9f:
d0:b3:df:e3:c9:d8:17:95:cd:ed:6c:ca:ab:6a:cb:
c9:06:30:90:5e:0e:ae:d9:91:2e:0b:f2:8d:0d:99:
fb:27:ce:d2:5c:85:f6:71:b1:08:91:9f:53:68:03:
f4:7c:c3:58:53:10:af:39:5d:df:e2:6b:ac:a1:01:
5d:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:17:D7:E4:35:6D:F4:75:0F:35:AA:94:7A:27:32:47:FB:AE:8D:46
X509v3 Authority Key Identifier:
keyid:A4:9D:2E:50:B7:73:8A:ED:0A:CC:1A:0E:C2:FE:E3:00:80:25:58:38
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/pJ0uULdziu0KzBoOwv7jAIAlWDg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/393218-46e5-468b-b58b-7f3352234e21/1/pJ0uULdziu0KzBoOwv7jAIAlWDg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:89:8a:b8:39:ad:27:4e:8d:ad:4e:d0:f9:a9:54:ce:94:e3:
fe:81:a9:49:be:97:20:d4:0f:a7:03:39:d1:9f:5a:32:02:17:
17:c9:1f:fd:58:d9:f7:22:5d:24:dd:93:8f:85:4a:16:ed:c7:
07:62:35:c8:f5:a5:be:4d:d0:f3:8a:8b:9b:31:d7:6e:39:e0:
a4:76:b3:ee:3a:6d:89:9f:c7:f0:93:85:87:28:86:ce:63:fe:
f8:6d:f5:f6:79:19:b0:02:01:6a:9d:07:22:6c:11:5a:77:74:
bb:7b:30:2f:8f:d7:49:67:4d:27:df:d5:5a:f2:dc:9a:b5:74:
bb:16:cf:db:22:b1:9d:c3:15:22:dd:17:b9:1d:65:40:f0:80:
11:23:b9:35:4c:ff:37:c1:90:d9:d9:c5:c5:ec:67:39:09:21:
da:45:d7:32:c0:d2:ca:e4:84:0f:bd:e8:e0:bf:2d:6e:b5:52:
f4:0f:e1:1a:93:d3:21:83:92:ee:fc:7f:73:00:63:c6:25:31:
e7:07:ea:33:09:af:00:ce:e3:17:5a:86:3d:14:52:2a:cb:b5:
31:ad:f4:67:83:66:5d:42:74:b8:90:34:f2:a0:5d:de:f9:75:
82:a9:53:d1:23:88:23:50:7a:50:61:55:80:cf:93:71:93:9e:
c7:61:f7:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdovEU1GW1gL3+pgQ/XX7R6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE0OWQyZTUwYjc3MzhhZWQwYWNjMWEwZWMyZmVlMzAwODAy
NTU4MzgwHhcNMjUwNjEzMTAwMDU4WhcNMjUwNjE0MTAwMDU4WjAzMTEwLwYDVQQD
Eyg1YjE3ZDdlNDM1NmRmNDc1MGYzNWFhOTQ3YTI3MzI0N2ZiYWU4ZDQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApwlK1Vb/k4c0HymMpVa8jk6E3/QY
0MSdMZaHj6OKOlClmL09ICeer2c3KtE8pkJtDMck2W400DHof9xR+sp4LHvJrs+z
DOpav7D8F3thUMODTRM6/NjosmquLIxhG3+X9TSKlkcBgIZEgwQI/LhnvJztLEtW
B2ME7AqmARbrQjzNedxCpRGwW3CghrIwcp1Z008dkQ+5Huq/XVyX1ftPFRLBG1+v
LgFC30eY5UHmpwLw+tVFYDOaoMxCm7Z/MypiF5/Qs9/jydgXlc3tbMqrasvJBjCQ
Xg6u2ZEuC/KNDZn7J87SXIX2cbEIkZ9TaAP0fMNYUxCvOV3f4musoQFdYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFsX1+Q1bfR1DzWqlHonMkf7ro1GMB8GA1UdIwQY
MBaAFKSdLlC3c4rtCswaDsL+4wCAJVg4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny8zOTMyMTgtNDZlNS00NjhiLWI1OGIt
N2YzMzUyMjM0ZTIxLzEvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny8zOTMyMTgtNDZlNS00NjhiLWI1OGItN2YzMzUyMjM0ZTIx
LzEvcEowdVVMZHppdTBLekJvT3d2N2pBSUFsV0RnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmomKuDmt
J06NrU7Q+alUzpTj/oGpSb6XINQPpwM50Z9aMgIXF8kf/VjZ9yJdJN2Tj4VKFu3H
B2I1yPWlvk3Q84qLmzHXbjngpHaz7jptiZ/H8JOFhyiGzmP++G319nkZsAIBap0H
ImwRWnd0u3swL4/XSWdNJ9/VWvLcmrV0uxbP2yKxncMVIt0XuR1lQPCAESO5NUz/
N8GQ2dnFxexnOQkh2kXXMsDSyuSED73o4L8tbrVS9A/hGpPTIYOS7vx/cwBjxiUx
5wfqMwmvAM7jF1qGPRRSKsu1Ma30Z4NmXUJ0uJA08qBd3vl1gqlT0SOII1B6UGFV
gM+TcZOex2H3yQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:48:53 2025 by rpki-client