Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
File: p5zxDDHy7btVfVVAlzyIB5szIA8.mft (raw, json)
Hash identifier: L+H6KkdAR6HQYMfB7dtoc5u4ndlpPIaHLV3g7wmIT/A=
Subject key identifier: B7:24:CB:B4:3A:BF:AA:42:02:B8:9F:79:44:8E:8F:85:50:C9:00:AA
Authority key identifier: A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
Certificate issuer: /CN=a79cf10c31f2edbb557d5540973c88079b33200f
Certificate serial: 0197722CC7538AE3E673A941835F78214416
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
Manifest number: 0B9B
Signing time: Sun 15 Jun 2025 06:00:26 +0000
Manifest this update: Sun 15 Jun 2025 06:00:26 +0000
Manifest next update: Mon 16 Jun 2025 06:00:26 +0000
Files and hashes: 1: NlHhjU6xWVmXWfNrd-ovT0jtbwk.roa (hash: DrtC0WHpkDSvvmlxYXubm9JL5FSMim6Xx+I+3O4UqVQ=)
2: X2bocyRVhCfvso68Pv43uBx6gHw.roa (hash: ch7Rg28zRrgi0YGzVdKPWQbcu7IjFqyNq5JbEbQ26hc=)
3: p5zxDDHy7btVfVVAlzyIB5szIA8.crl (hash: SFO13LZBmKBwGDTS7UpvaamArkZGxq6xP+4+T5QYwog=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:c7:53:8a:e3:e6:73:a9:41:83:5f:78:21:44:16
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a79cf10c31f2edbb557d5540973c88079b33200f
Validity
Not Before: Jun 15 06:00:26 2025 GMT
Not After : Jun 16 06:00:26 2025 GMT
Subject: CN=b724cbb43abfaa4202b89f79448e8f8550c900aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:13:9d:a4:b8:ee:84:5c:59:93:ae:fe:04:ec:
8b:e3:66:8d:54:49:6b:ff:da:f5:ba:44:b8:6f:e8:
5f:20:c1:c5:b5:5b:e2:f9:60:63:0d:ae:5f:fd:c4:
b6:b1:41:c4:0f:0e:e3:f4:9f:36:3f:38:35:b4:4a:
70:eb:e6:6e:59:f9:bd:52:87:a3:57:10:ac:e1:a6:
6a:19:d3:cb:99:62:c1:ef:61:d9:ae:cf:85:db:57:
cf:53:6a:3b:34:14:0e:34:ef:e8:02:76:b4:a5:b3:
63:89:d0:3d:99:99:9c:d4:98:aa:ca:42:0c:a6:60:
4d:cf:50:fc:0e:49:b9:e8:12:d1:eb:66:67:3b:51:
a9:e0:1c:97:e2:70:0f:22:c6:1f:00:fc:14:ba:7d:
54:cc:cc:11:b0:17:c1:f0:4a:2c:be:78:73:ce:83:
fa:87:d0:04:4f:3f:4b:c1:08:24:2b:e4:7f:43:69:
53:08:72:9b:3a:66:85:66:fc:ec:53:f4:48:98:e5:
b3:a6:24:98:a8:e3:b0:be:64:a7:1f:f5:d5:27:c4:
46:65:5f:3a:7a:4c:b4:d4:84:61:ae:85:fb:b4:45:
37:d1:f9:a2:a9:3b:34:32:ec:39:98:82:e7:b8:0c:
45:db:da:e9:1a:99:11:f3:35:3a:31:59:82:9f:e4:
ea:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B7:24:CB:B4:3A:BF:AA:42:02:B8:9F:79:44:8E:8F:85:50:C9:00:AA
X509v3 Authority Key Identifier:
keyid:A7:9C:F1:0C:31:F2:ED:BB:55:7D:55:40:97:3C:88:07:9B:33:20:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p5zxDDHy7btVfVVAlzyIB5szIA8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/269be9-93ff-4c12-91ba-1a9b1555136a/1/p5zxDDHy7btVfVVAlzyIB5szIA8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:3b:4c:52:a4:bd:b0:17:f4:e2:cb:3f:c2:d3:f9:b9:72:7a:
55:5d:3e:f3:36:16:de:31:e8:2b:7e:fa:9d:00:00:ec:f2:fa:
79:f8:7d:97:58:36:db:8a:79:4b:30:6f:d7:e4:2e:d0:06:fb:
22:ca:c7:2a:ff:11:a0:f5:c4:6a:67:08:93:9b:82:69:ef:1e:
9d:c8:34:6e:7e:11:a3:2d:3e:6a:26:a4:bc:eb:95:9b:9a:9e:
ab:47:ca:9b:e3:ec:7f:35:6e:6a:82:c1:a9:dd:47:60:36:02:
16:d9:2d:43:05:0f:6f:1e:3c:b4:32:d7:ae:6b:d1:e6:90:3f:
d0:f5:94:3c:d3:a1:b7:fe:32:4f:c0:9e:5b:b3:31:64:20:4c:
c0:ee:bb:f9:5d:d4:7e:63:d1:53:7e:6b:f4:b5:77:1e:de:6d:
09:84:ab:7e:ba:46:5e:4d:b5:23:70:54:ae:ed:48:5d:5e:26:
b1:52:b3:7e:a8:d9:f0:e3:4e:aa:65:13:e7:f0:96:a0:c4:53:
c8:ee:4b:ed:42:ac:b4:c6:3a:a0:e3:ac:13:b3:ac:1c:46:e5:
aa:04:dd:f7:9d:71:55:05:6c:06:ce:2e:47:9e:2e:36:19:70:
07:f5:93:ab:43:64:bc:7d:bf:ee:94:c9:8a:bc:97:dc:7d:51:
72:90:35:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLMdTiuPmc6lBg194IUQWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3OWNmMTBjMzFmMmVkYmI1NTdkNTU0MDk3M2M4ODA3OWIz
MzIwMGYwHhcNMjUwNjE1MDYwMDI2WhcNMjUwNjE2MDYwMDI2WjAzMTEwLwYDVQQD
EyhiNzI0Y2JiNDNhYmZhYTQyMDJiODlmNzk0NDhlOGY4NTUwYzkwMGFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsBOdpLjuhFxZk67+BOyL42aNVElr
/9r1ukS4b+hfIMHFtVvi+WBjDa5f/cS2sUHEDw7j9J82Pzg1tEpw6+ZuWfm9Uoej
VxCs4aZqGdPLmWLB72HZrs+F21fPU2o7NBQONO/oAna0pbNjidA9mZmc1JiqykIM
pmBNz1D8Dkm56BLR62ZnO1Gp4ByX4nAPIsYfAPwUun1UzMwRsBfB8EosvnhzzoP6
h9AETz9LwQgkK+R/Q2lTCHKbOmaFZvzsU/RImOWzpiSYqOOwvmSnH/XVJ8RGZV86
eky01IRhroX7tEU30fmiqTs0Muw5mILnuAxF29rpGpkR8zU6MVmCn+TqpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLcky7Q6v6pCArifeUSOj4VQyQCqMB8GA1UdIwQY
MBaAFKec8Qwx8u27VX1VQJc8iAebMyAPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDV6eERESHk3YnRWZlZWQWx6eUlCNXN6SUE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS8yNjliZTktOTNmZi00YzEyLTkxYmEt
MWE5YjE1NTUxMzZhLzEvcDV6eERESHk3YnRWZlZWQWx6eUlCNXN6SUE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS8yNjliZTktOTNmZi00YzEyLTkxYmEtMWE5YjE1NTUxMzZh
LzEvcDV6eERESHk3YnRWZlZWQWx6eUlCNXN6SUE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPjtMUqS9
sBf04ss/wtP5uXJ6VV0+8zYW3jHoK376nQAA7PL6efh9l1g224p5SzBv1+Qu0Ab7
IsrHKv8RoPXEamcIk5uCae8encg0bn4Roy0+aiakvOuVm5qeq0fKm+PsfzVuaoLB
qd1HYDYCFtktQwUPbx48tDLXrmvR5pA/0PWUPNOht/4yT8CeW7MxZCBMwO67+V3U
fmPRU35r9LV3Ht5tCYSrfrpGXk21I3BUru1IXV4msVKzfqjZ8ONOqmUT5/CWoMRT
yO5L7UKstMY6oOOsE7OsHEblqgTd951xVQVsBs4uR54uNhlwB/WTq0NkvH2/7pTJ
iryX3H1RcpA1Hw==
-----END CERTIFICATE-----
Generated at Sun Jun 15 08:37:00 2025 by rpki-client