Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
File: fdw2QUyZG_qNkvYCflMINwsitqY.mft (raw, json)
Hash identifier: NLJ0XTXE9xU6ZKBzRczj39lAHj0Y+aI/pW0S6wrylQA=
Subject key identifier: 78:47:E7:D6:C1:85:2D:2D:DA:71:C1:FE:11:3A:FD:72:A4:02:85:09
Authority key identifier: 7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
Certificate issuer: /CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Certificate serial: 01976EBE24925305DEC8A2329384A20D500D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
Manifest number: 06E6
Signing time: Sat 14 Jun 2025 14:00:44 +0000
Manifest this update: Sat 14 Jun 2025 14:00:44 +0000
Manifest next update: Sun 15 Jun 2025 14:00:44 +0000
Files and hashes: 1: fIi6Y7TMQAIgGM-S2BYF-rhLP0U.roa (hash: frVihHDK+8j5US3CUXtBypHsqdv++cToSbTh8ao+mTk=)
2: fdw2QUyZG_qNkvYCflMINwsitqY.crl (hash: D2aySPfHaeWOWGvmCJNcKLovJSiYz1gG0ndg8xBU6pc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:be:24:92:53:05:de:c8:a2:32:93:84:a2:0d:50:0d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7ddc36414c991bfa8d92f6027e5308370b22b6a6
Validity
Not Before: Jun 14 14:00:44 2025 GMT
Not After : Jun 15 14:00:44 2025 GMT
Subject: CN=7847e7d6c1852d2dda71c1fe113afd72a4028509
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:88:7b:c4:74:25:2f:2d:24:ca:bd:92:c3:59:
2d:64:2d:36:0a:40:b8:bd:4c:1a:e0:65:0f:48:c9:
bc:8b:76:bd:f5:78:ea:0e:f9:cb:da:89:5c:84:1c:
ca:f7:53:3f:c2:0a:ea:31:3e:bf:2b:d2:bc:30:f3:
19:0a:84:2b:c9:94:6b:dd:af:d3:c8:44:3f:a0:44:
b1:3b:38:10:37:bb:a9:8c:a1:00:f7:64:47:45:01:
1e:cb:e8:63:6e:87:79:57:71:b7:88:fd:a7:25:20:
16:6d:c2:21:42:0d:80:4a:c9:60:21:87:59:62:ae:
4f:0f:41:1a:16:b7:fb:7a:12:d9:50:49:11:ad:5c:
6c:96:59:88:25:51:59:cf:b8:c5:2d:28:fb:75:fa:
3b:6b:bf:a2:1f:f7:38:4b:6e:26:0a:c9:f8:8a:ad:
e9:e7:d0:c1:dc:81:51:c7:c7:ca:49:37:7e:8b:29:
4b:23:1c:38:6d:09:97:87:22:90:b7:e1:8c:8d:c4:
2a:85:fc:24:bf:cc:7e:c1:48:81:f5:88:56:53:c0:
35:13:97:6f:9f:c0:2f:d8:2e:a9:40:44:b4:24:12:
7c:68:72:34:cc:f0:bc:8c:17:1a:9d:a0:d7:84:63:
03:24:72:a4:7f:20:0a:9c:ab:3a:84:da:c3:3d:94:
91:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:47:E7:D6:C1:85:2D:2D:DA:71:C1:FE:11:3A:FD:72:A4:02:85:09
X509v3 Authority Key Identifier:
keyid:7D:DC:36:41:4C:99:1B:FA:8D:92:F6:02:7E:53:08:37:0B:22:B6:A6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fdw2QUyZG_qNkvYCflMINwsitqY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/aacdcc-aa17-42f8-9ade-7c379a551c12/1/fdw2QUyZG_qNkvYCflMINwsitqY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
18:77:c0:a3:78:0b:a8:68:02:52:58:35:99:b7:31:8f:36:13:
09:2f:fb:b5:0a:ef:ef:6b:3f:80:34:0b:00:f3:af:6a:6e:6d:
fd:16:0e:64:15:19:10:21:3f:89:63:cf:f8:28:43:6c:97:fb:
9d:ad:23:2c:cc:ad:8a:af:b6:f2:6d:96:25:42:1f:0f:9b:83:
9d:5d:9a:5e:ef:02:52:25:ea:a6:68:39:d6:d7:52:3d:ef:87:
40:f9:5e:c5:33:0c:8a:df:9a:f7:8b:fd:b9:83:c2:03:23:34:
0e:23:a8:67:7b:75:2f:31:f1:ce:69:64:b4:38:5e:4c:15:7b:
58:de:f6:31:8c:f0:4b:c9:21:96:02:c0:7b:04:d7:86:83:b2:
e6:58:f0:b1:a3:03:c7:b2:f7:b3:55:84:0f:5b:bf:b0:34:f8:
5f:9e:a8:33:7e:7f:4f:06:90:83:14:fe:68:9a:f7:eb:2b:4f:
0a:86:18:5c:cf:27:66:36:45:c4:16:49:d2:2e:59:a1:74:fe:
12:36:2b:80:05:42:60:63:4a:60:80:2f:fb:a9:00:d9:62:89:
64:c0:b9:38:04:3e:38:16:8a:be:50:ae:27:61:a5:4e:54:b3:
fe:7f:73:98:d7:01:fc:7b:74:d1:5c:67:82:16:dd:26:ab:db:
19:71:11:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduviSSUwXeyKIyk4SiDVANMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZGMzNjQxNGM5OTFiZmE4ZDkyZjYwMjdlNTMwODM3MGIy
MmI2YTYwHhcNMjUwNjE0MTQwMDQ0WhcNMjUwNjE1MTQwMDQ0WjAzMTEwLwYDVQQD
Eyg3ODQ3ZTdkNmMxODUyZDJkZGE3MWMxZmUxMTNhZmQ3MmE0MDI4NTA5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlYh7xHQlLy0kyr2Sw1ktZC02CkC4
vUwa4GUPSMm8i3a99XjqDvnL2olchBzK91M/wgrqMT6/K9K8MPMZCoQryZRr3a/T
yEQ/oESxOzgQN7upjKEA92RHRQEey+hjbod5V3G3iP2nJSAWbcIhQg2ASslgIYdZ
Yq5PD0EaFrf7ehLZUEkRrVxsllmIJVFZz7jFLSj7dfo7a7+iH/c4S24mCsn4iq3p
59DB3IFRx8fKSTd+iylLIxw4bQmXhyKQt+GMjcQqhfwkv8x+wUiB9YhWU8A1E5dv
n8Av2C6pQES0JBJ8aHI0zPC8jBcanaDXhGMDJHKkfyAKnKs6hNrDPZSRtwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhH59bBhS0t2nHB/hE6/XKkAoUJMB8GA1UdIwQY
MBaAFH3cNkFMmRv6jZL2An5TCDcLIramMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmR3MlFVeVpHX3FOa3ZZQ2ZsTUlOd3NpdHFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9hYWNkY2MtYWExNy00MmY4LTlhZGUt
N2MzNzlhNTUxYzEyLzEvZmR3MlFVeVpHX3FOa3ZZQ2ZsTUlOd3NpdHFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9hYWNkY2MtYWExNy00MmY4LTlhZGUtN2MzNzlhNTUxYzEy
LzEvZmR3MlFVeVpHX3FOa3ZZQ2ZsTUlOd3NpdHFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGHfAo3gL
qGgCUlg1mbcxjzYTCS/7tQrv72s/gDQLAPOvam5t/RYOZBUZECE/iWPP+ChDbJf7
na0jLMytiq+28m2WJUIfD5uDnV2aXu8CUiXqpmg51tdSPe+HQPlexTMMit+a94v9
uYPCAyM0DiOoZ3t1LzHxzmlktDheTBV7WN72MYzwS8khlgLAewTXhoOy5ljwsaMD
x7L3s1WED1u/sDT4X56oM35/TwaQgxT+aJr36ytPCoYYXM8nZjZFxBZJ0i5ZoXT+
EjYrgAVCYGNKYIAv+6kA2WKJZMC5OAQ+OBaKvlCuJ2GlTlSz/n9zmNcB/Ht00Vxn
ghbdJqvbGXER1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 19:56:42 2025 by rpki-client