Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
File: r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft (raw, json)
Hash identifier: R60lf5E9PMorYyiMSnCKL72OiGvTe9DKWsRnYrqhWyU=
Subject key identifier: 40:27:02:11:6C:41:2B:3F:CA:27:41:65:54:DA:A1:4C:86:65:E3:94
Authority key identifier: AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
Certificate issuer: /CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Certificate serial: 019769EC8658006B629F5786F6747588EB99
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 15:33:17 +0000
Manifest this update: Fri 13 Jun 2025 15:33:17 +0000
Manifest next update: Sat 14 Jun 2025 15:33:17 +0000
Files and hashes: 1: WRw_zQ2egi-s7g_XDa3-zCzmCZo.roa (hash: 02LV3UJv16rTHuq6tHPlIKsn2U/3pYjP8DRzavT1ujg=)
2: r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl (hash: tlFyXL4mh7Bz+4/ShQ8vbGNkN0w3b6BXA7vVvt7snXw=)
3: tMXBcGUIKGTfYRMTtfG6biesR-c.roa (hash: JWcwNHGeY4nL5R6D6KA+SUTM4UCaSarGczrFPqLJ+XI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:ec:86:58:00:6b:62:9f:57:86:f6:74:75:88:eb:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afe4a0d5fda600c5d5b7f618f686d7e93051b4d7
Validity
Not Before: Jun 13 15:33:17 2025 GMT
Not After : Jun 14 15:33:17 2025 GMT
Subject: CN=402702116c412b3fca27416554daa14c8665e394
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:fd:39:ae:87:f3:96:5d:af:66:50:ae:6f:95:
f1:cc:12:0e:d4:9a:71:a6:0d:14:83:69:24:e2:20:
42:6f:94:56:b1:0c:34:7c:b2:bf:9a:55:b4:45:40:
a8:d0:40:7b:64:42:43:9b:5a:7f:87:24:a5:1b:ba:
75:77:ce:cc:ba:8d:70:e4:d8:65:c2:a5:6f:7e:3d:
db:de:e5:a5:93:b2:ee:88:e6:d7:95:9e:02:ae:40:
01:6d:d6:d4:ec:46:7e:c3:84:46:72:32:e1:7d:fd:
55:42:18:fb:0b:15:ea:42:ce:d1:29:00:7c:20:7f:
89:b2:92:e5:9b:1e:fd:af:83:c6:93:ad:e2:5f:59:
32:ea:53:bd:bd:a7:6d:c8:fd:a9:b5:10:c4:03:14:
85:e7:e3:a2:50:87:81:f4:42:7a:33:27:49:f2:36:
6c:c2:f7:d7:2b:97:40:0c:0e:34:91:f6:90:3d:8f:
af:01:9c:73:fa:6f:f1:ff:a8:5b:fe:ae:75:47:20:
f3:9d:ed:61:5e:51:94:5c:2d:4b:85:95:2d:60:a3:
8e:be:83:55:d2:15:5d:45:23:fe:72:65:ad:68:05:
3f:d4:6b:2e:c5:07:15:c5:be:5f:a2:e2:d9:27:da:
42:44:e9:6a:e8:f1:02:6e:c6:79:cd:21:9f:0a:a3:
f3:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:27:02:11:6C:41:2B:3F:CA:27:41:65:54:DA:A1:4C:86:65:E3:94
X509v3 Authority Key Identifier:
keyid:AF:E4:A0:D5:FD:A6:00:C5:D5:B7:F6:18:F6:86:D7:E9:30:51:B4:D7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r-Sg1f2mAMXVt_YY9obX6TBRtNc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/9467c8-0c90-46e1-91c0-e107d9f16c2d/1/r-Sg1f2mAMXVt_YY9obX6TBRtNc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:c6:b9:e3:04:7a:91:4f:bc:ea:8f:4f:81:c1:23:ce:e8:b4:
b2:ad:4c:27:e5:f8:08:36:05:d0:7d:66:fb:60:57:26:b6:53:
00:16:f5:e1:c8:86:71:eb:ac:3c:25:18:39:47:c8:90:97:f1:
3f:b5:7c:d4:5d:45:d3:7c:9a:dc:02:b2:2b:5a:1c:ca:cb:fa:
17:78:72:a0:9c:46:fd:3a:1f:d0:ed:8a:81:16:d2:9b:90:33:
b0:46:df:05:f6:1b:32:be:1b:39:db:e7:28:3f:87:71:0d:f0:
9b:9f:4e:50:22:9e:32:b3:1c:77:d8:dc:e7:d6:5a:cc:42:17:
52:f3:40:05:e1:e5:5a:9d:9e:08:32:bf:86:c3:7f:81:82:21:
81:de:ce:41:e7:e6:2e:17:56:d9:d6:10:1d:b1:89:4e:dd:c5:
60:d2:69:8c:bd:c5:8b:80:df:8a:e7:09:91:1f:9b:48:26:f0:
88:f8:5c:45:a9:ab:91:80:fd:6c:cb:34:e7:68:3b:50:a6:e2:
7b:87:f7:2e:50:fd:0f:eb:4f:2f:2d:07:77:67:ae:36:a7:b8:
07:bd:2d:61:8e:86:00:39:c8:bd:d9:e5:08:15:0a:a6:91:17:
aa:81:76:28:6e:96:e9:45:ed:d9:70:3b:83:ad:e3:9c:a9:af:
98:ce:ff:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdp7IZYAGtin1eG9nR1iOuZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmZTRhMGQ1ZmRhNjAwYzVkNWI3ZjYxOGY2ODZkN2U5MzA1
MWI0ZDcwHhcNMjUwNjEzMTUzMzE3WhcNMjUwNjE0MTUzMzE3WjAzMTEwLwYDVQQD
Eyg0MDI3MDIxMTZjNDEyYjNmY2EyNzQxNjU1NGRhYTE0Yzg2NjVlMzk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAov05rofzll2vZlCub5XxzBIO1Jpx
pg0Ug2kk4iBCb5RWsQw0fLK/mlW0RUCo0EB7ZEJDm1p/hySlG7p1d87Muo1w5Nhl
wqVvfj3b3uWlk7LuiObXlZ4CrkABbdbU7EZ+w4RGcjLhff1VQhj7CxXqQs7RKQB8
IH+JspLlmx79r4PGk63iX1ky6lO9vadtyP2ptRDEAxSF5+OiUIeB9EJ6MydJ8jZs
wvfXK5dADA40kfaQPY+vAZxz+m/x/6hb/q51RyDzne1hXlGUXC1LhZUtYKOOvoNV
0hVdRSP+cmWtaAU/1GsuxQcVxb5fouLZJ9pCROlq6PECbsZ5zSGfCqPz4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAnAhFsQSs/yidBZVTaoUyGZeOUMB8GA1UdIwQY
MBaAFK/koNX9pgDF1bf2GPaG1+kwUbTXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi85NDY3YzgtMGM5MC00NmUxLTkxYzAt
ZTEwN2Q5ZjE2YzJkLzEvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi85NDY3YzgtMGM5MC00NmUxLTkxYzAtZTEwN2Q5ZjE2YzJk
LzEvci1TZzFmMm1BTVhWdF9ZWTlvYlg2VEJSdE5jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVsa54wR6
kU+86o9PgcEjzui0sq1MJ+X4CDYF0H1m+2BXJrZTABb14ciGceusPCUYOUfIkJfx
P7V81F1F03ya3AKyK1ocysv6F3hyoJxG/Tof0O2KgRbSm5AzsEbfBfYbMr4bOdvn
KD+HcQ3wm59OUCKeMrMcd9jc59ZazEIXUvNABeHlWp2eCDK/hsN/gYIhgd7OQefm
LhdW2dYQHbGJTt3FYNJpjL3Fi4DfiucJkR+bSCbwiPhcRamrkYD9bMs052g7UKbi
e4f3LlD9D+tPLy0Hd2euNqe4B70tYY6GADnIvdnlCBUKppEXqoF2KG6W6UXt2XA7
g63jnKmvmM7/Iw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:07:08 2025 by rpki-client