Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
File: c2iuvB1FhbmzYS7MIgNFTWWocuM.mft (raw, json)
Hash identifier: t9IrgKROVvMa2Cs3648NLF7n2SK2He04jR4uAuJ6jQw=
Subject key identifier: 91:9F:17:A0:64:D6:50:14:3B:D1:45:72:10:60:1F:86:00:83:25:56
Authority key identifier: 73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
Certificate issuer: /CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Certificate serial: 01976DAB14EDA3A3374BCABCAE71A19DA0E4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
Manifest number: 158D
Signing time: Sat 14 Jun 2025 09:00:17 +0000
Manifest this update: Sat 14 Jun 2025 09:00:17 +0000
Manifest next update: Sun 15 Jun 2025 09:00:17 +0000
Files and hashes: 1: I9vgIWuaiEwVbrWFIv7mFggy9a0.roa (hash: CuGCVrXCD5akH61wJYu8Ar6/+5VEgpmtOisQYkqg0kQ=)
2: c2iuvB1FhbmzYS7MIgNFTWWocuM.crl (hash: QhEJD0F4lCutsrAZoommRf9+AJRfbmCFRGF/Z2l54YQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:ab:14:ed:a3:a3:37:4b:ca:bc:ae:71:a1:9d:a0:e4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7368aebc1d4585b9b3612ecc2203454d65a872e3
Validity
Not Before: Jun 14 09:00:17 2025 GMT
Not After : Jun 15 09:00:17 2025 GMT
Subject: CN=919f17a064d650143bd1457210601f8600832556
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:1b:85:c1:df:9f:00:3e:be:c5:5f:c2:7c:e9:
52:b6:2c:2c:43:41:88:81:6a:49:05:07:1f:5c:9b:
32:50:ae:d0:7e:44:10:a3:b3:ca:c3:0c:04:48:7e:
ff:24:03:dd:02:d0:a3:5d:93:2e:46:e5:57:c6:fc:
e0:71:02:9b:89:5d:49:8a:30:64:08:e0:7d:8f:c7:
6c:19:81:67:c3:df:ad:de:17:43:93:e8:7a:c2:00:
8d:f0:eb:68:e6:98:06:7d:e9:22:8a:b8:3e:05:91:
38:26:a3:b7:76:07:a5:7e:b1:1e:66:39:f0:52:7d:
f2:39:f9:21:ba:a1:77:86:8d:bf:25:c5:26:2b:73:
62:63:1f:fd:60:e0:2e:2b:8d:26:da:c9:a7:3b:ac:
35:4d:e9:90:a9:ee:80:36:e7:75:94:5b:e6:40:a1:
78:3e:b3:a4:79:46:df:7b:88:1f:d2:2d:5e:2c:2e:
28:b8:2d:1c:11:40:26:42:df:db:ce:3c:3b:1c:ce:
e1:7d:05:b5:77:52:98:80:06:0d:8e:75:2b:87:71:
8a:34:7b:74:83:fc:44:ca:71:e6:c8:09:81:ae:a1:
53:f0:95:cf:01:88:e0:cc:27:ab:8b:b7:4b:3d:39:
81:45:49:03:ef:98:fa:4f:21:c7:f5:fe:54:95:2f:
69:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:9F:17:A0:64:D6:50:14:3B:D1:45:72:10:60:1F:86:00:83:25:56
X509v3 Authority Key Identifier:
keyid:73:68:AE:BC:1D:45:85:B9:B3:61:2E:CC:22:03:45:4D:65:A8:72:E3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2iuvB1FhbmzYS7MIgNFTWWocuM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/a01ebb-ee18-4fb7-a73b-f5951c7ccbd3/1/c2iuvB1FhbmzYS7MIgNFTWWocuM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:cb:99:2a:45:7a:f0:b0:ea:b8:83:ae:d1:42:fe:2a:d4:6f:
eb:af:fe:0e:6e:67:42:1f:70:da:a8:5f:62:6d:02:26:92:66:
77:43:73:87:65:81:49:4c:3d:fc:45:df:88:b6:76:f5:c9:52:
2a:50:5b:fe:b4:0e:b9:32:79:ca:44:fc:e9:fc:53:28:ac:cf:
2c:0e:ad:78:89:ee:b6:9c:d8:fa:a5:65:73:ac:1a:dd:ab:2c:
53:ad:56:3d:26:0d:6d:21:9d:9a:fb:02:9e:28:ae:d9:97:20:
4f:38:a6:c1:e0:2a:6d:fc:9b:15:87:a1:6f:49:9e:6b:85:f7:
69:ba:85:36:dd:c1:8d:eb:a4:44:95:09:4e:78:46:92:07:5d:
1e:b7:f9:b5:16:5b:20:25:c4:9c:27:f4:41:35:ac:80:25:d0:
3e:1e:22:1f:92:0b:a8:78:81:dd:35:b8:d1:b3:ee:72:e3:cc:
23:38:e8:f3:04:c6:13:43:65:ca:4b:27:20:e7:17:8e:2a:ee:
76:0e:91:1d:5b:3b:e6:27:ca:98:34:56:dc:a5:90:d6:5c:c7:
18:ea:07:5b:cf:8b:9f:c5:37:be:88:33:12:fe:f1:8e:58:a2:
cf:69:d3:36:33:91:a4:69:6b:0f:95:2d:4c:84:8d:72:7f:05:
9d:f7:52:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtqxTto6M3S8q8rnGhnaDkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNjhhZWJjMWQ0NTg1YjliMzYxMmVjYzIyMDM0NTRkNjVh
ODcyZTMwHhcNMjUwNjE0MDkwMDE3WhcNMjUwNjE1MDkwMDE3WjAzMTEwLwYDVQQD
Eyg5MTlmMTdhMDY0ZDY1MDE0M2JkMTQ1NzIxMDYwMWY4NjAwODMyNTU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAphuFwd+fAD6+xV/CfOlStiwsQ0GI
gWpJBQcfXJsyUK7QfkQQo7PKwwwESH7/JAPdAtCjXZMuRuVXxvzgcQKbiV1JijBk
COB9j8dsGYFnw9+t3hdDk+h6wgCN8Oto5pgGfekiirg+BZE4JqO3dgelfrEeZjnw
Un3yOfkhuqF3ho2/JcUmK3NiYx/9YOAuK40m2smnO6w1TemQqe6ANud1lFvmQKF4
PrOkeUbfe4gf0i1eLC4ouC0cEUAmQt/bzjw7HM7hfQW1d1KYgAYNjnUrh3GKNHt0
g/xEynHmyAmBrqFT8JXPAYjgzCeri7dLPTmBRUkD75j6TyHH9f5UlS9pSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJGfF6Bk1lAUO9FFchBgH4YAgyVWMB8GA1UdIwQY
MBaAFHNorrwdRYW5s2EuzCIDRU1lqHLjMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy9hMDFlYmItZWUxOC00ZmI3LWE3M2It
ZjU5NTFjN2NjYmQzLzEvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy9hMDFlYmItZWUxOC00ZmI3LWE3M2ItZjU5NTFjN2NjYmQz
LzEvYzJpdXZCMUZoYm16WVM3TUlnTkZUV1dvY3VNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMMuZKkV6
8LDquIOu0UL+KtRv66/+Dm5nQh9w2qhfYm0CJpJmd0Nzh2WBSUw9/EXfiLZ29clS
KlBb/rQOuTJ5ykT86fxTKKzPLA6teInutpzY+qVlc6wa3assU61WPSYNbSGdmvsC
niiu2ZcgTzimweAqbfybFYehb0mea4X3abqFNt3BjeukRJUJTnhGkgddHrf5tRZb
ICXEnCf0QTWsgCXQPh4iH5ILqHiB3TW40bPucuPMIzjo8wTGE0NlyksnIOcXjiru
dg6RHVs75ifKmDRW3KWQ1lzHGOoHW8+Ln8U3vogzEv7xjliiz2nTNjORpGlrD5Ut
TISNcn8FnfdSWg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 11:15:28 2025 by rpki-client