Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
File: SZ8D5I7WKpaEDrLy15w-whon8c4.mft (raw, json)
Hash identifier: oLY6/QpDYBDHMAf7OY6Rw6QMiVXv1AHzGHo4FImJ45Y=
Subject key identifier: CB:B3:81:DF:72:D4:F2:12:13:72:20:0B:CD:80:70:1C:A1:DC:5A:75
Authority key identifier: 49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
Certificate issuer: /CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Certificate serial: 01976FD139784C0ED3B97BCB26DACDAC1E6E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 19:01:12 +0000
Manifest this update: Sat 14 Jun 2025 19:01:12 +0000
Manifest next update: Sun 15 Jun 2025 19:01:12 +0000
Files and hashes: 1: SZ8D5I7WKpaEDrLy15w-whon8c4.crl (hash: paEno+osVAHmyHtaIWe1fN1QGig7n6+u57xu0UiNkh0=)
2: yzTNOCEQUyiIncYM071wY64qAlg.roa (hash: hLDsFeTn5OhhHpxN9Rt6KZxw/jMGMbLdQEqz1BHAxCk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:d1:39:78:4c:0e:d3:b9:7b:cb:26:da:cd:ac:1e:6e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=499f03e48ed62a96840eb2f2d79c3ec21a27f1ce
Validity
Not Before: Jun 14 19:01:12 2025 GMT
Not After : Jun 15 19:01:12 2025 GMT
Subject: CN=cbb381df72d4f2121372200bcd80701ca1dc5a75
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:b3:e8:54:a0:f0:59:3d:80:9a:9d:d9:a5:7d:
53:0e:58:2b:ba:8b:2e:cb:2c:d5:73:e6:d8:ce:20:
a4:2a:9b:39:9e:26:d3:4c:fb:78:0a:10:90:bb:2d:
06:ae:e3:43:1c:96:b0:8d:55:3c:8f:23:90:cc:be:
ec:08:f8:d1:f5:af:ed:83:45:05:02:87:cb:e4:21:
12:6b:01:be:bd:21:da:b9:b1:7b:8f:96:aa:48:6f:
96:26:ba:27:40:28:22:c7:30:6a:74:aa:65:c3:aa:
d9:34:df:6a:3b:64:6d:3a:76:89:c9:b2:e9:0c:6b:
26:a2:a1:90:43:ef:d1:be:74:50:fa:7a:a0:2a:9a:
68:67:37:09:22:ec:f4:31:bd:28:9b:45:13:01:ff:
74:9f:82:04:42:1e:0a:e3:df:8a:87:8f:ec:34:f4:
c8:ab:ec:3c:85:aa:8b:06:40:e9:23:61:0f:8b:0a:
ea:d8:c1:e9:91:64:50:69:21:21:54:1e:29:b7:bf:
0d:b2:1a:bf:e6:eb:67:45:8d:e5:75:f6:38:2e:27:
ef:3f:d2:58:9d:11:7d:59:88:84:68:f2:6e:4d:cc:
7e:0e:c0:d8:e8:c1:7f:a3:bc:1f:39:4c:98:7d:b5:
dd:7e:ad:36:17:08:e0:86:55:3c:63:d7:b2:75:19:
95:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:B3:81:DF:72:D4:F2:12:13:72:20:0B:CD:80:70:1C:A1:DC:5A:75
X509v3 Authority Key Identifier:
keyid:49:9F:03:E4:8E:D6:2A:96:84:0E:B2:F2:D7:9C:3E:C2:1A:27:F1:CE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/SZ8D5I7WKpaEDrLy15w-whon8c4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/ac0950-2273-4ee1-a830-422e6d3fe93e/1/SZ8D5I7WKpaEDrLy15w-whon8c4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
bb:c8:53:ae:62:ed:4a:57:ab:4b:ea:4f:5d:98:36:c0:c7:45:
cb:ab:6d:f0:60:f1:9a:79:36:f0:cb:41:a0:68:0f:e1:e1:07:
05:dd:1a:12:30:af:35:c4:b4:fa:3b:82:d4:a8:b2:22:cf:96:
5e:a9:a9:6b:f7:0b:ca:b4:c3:bd:b0:c7:8d:9b:e1:71:b7:61:
20:af:e6:c9:99:4f:92:31:c4:ac:a7:af:39:9b:e9:45:4b:87:
d2:5a:c5:cb:a9:88:3d:6a:74:43:0c:51:6f:c7:33:e8:4f:78:
f4:fb:5e:5a:8a:e7:1c:b7:73:78:74:42:04:19:f6:51:e9:7c:
75:4a:55:5d:b6:da:af:f3:6c:c4:8c:b9:17:39:e1:4a:83:b8:
65:f0:6f:80:45:3a:d7:17:78:e9:1c:00:01:31:15:85:3a:80:
f9:67:00:e2:ad:72:dd:5a:d6:af:6e:ca:01:2c:68:88:c7:54:
71:7e:ed:9d:9a:dd:71:ee:8a:5b:ac:33:3c:c1:e9:46:cd:a7:
2d:6b:d4:e4:c7:20:6b:32:19:2a:a6:cc:cf:e6:d1:80:bb:4a:
d9:8b:03:48:5d:11:88:c0:4b:d5:0a:c6:6c:5f:90:95:44:02:
a4:0c:85:1f:5a:5c:85:55:27:3f:de:c6:62:16:e8:33:cb:76:
75:03:8f:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdv0Tl4TA7TuXvLJtrNrB5uMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ5OWYwM2U0OGVkNjJhOTY4NDBlYjJmMmQ3OWMzZWMyMWEy
N2YxY2UwHhcNMjUwNjE0MTkwMTEyWhcNMjUwNjE1MTkwMTEyWjAzMTEwLwYDVQQD
EyhjYmIzODFkZjcyZDRmMjEyMTM3MjIwMGJjZDgwNzAxY2ExZGM1YTc1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwLPoVKDwWT2Amp3ZpX1TDlgruosu
yyzVc+bYziCkKps5nibTTPt4ChCQuy0GruNDHJawjVU8jyOQzL7sCPjR9a/tg0UF
AofL5CESawG+vSHaubF7j5aqSG+WJronQCgixzBqdKplw6rZNN9qO2RtOnaJybLp
DGsmoqGQQ+/RvnRQ+nqgKppoZzcJIuz0Mb0om0UTAf90n4IEQh4K49+Kh4/sNPTI
q+w8haqLBkDpI2EPiwrq2MHpkWRQaSEhVB4pt78Nshq/5utnRY3ldfY4LifvP9JY
nRF9WYiEaPJuTcx+DsDY6MF/o7wfOUyYfbXdfq02FwjghlU8Y9eydRmVQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMuzgd9y1PISE3IgC82AcByh3Fp1MB8GA1UdIwQY
MBaAFEmfA+SO1iqWhA6y8tecPsIaJ/HOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvU1o4RDVJN1dLcGFFRHJMeTE1dy13aG9uOGM0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9hYzA5NTAtMjI3My00ZWUxLWE4MzAt
NDIyZTZkM2ZlOTNlLzEvU1o4RDVJN1dLcGFFRHJMeTE1dy13aG9uOGM0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9hYzA5NTAtMjI3My00ZWUxLWE4MzAtNDIyZTZkM2ZlOTNl
LzEvU1o4RDVJN1dLcGFFRHJMeTE1dy13aG9uOGM0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAu8hTrmLt
SlerS+pPXZg2wMdFy6tt8GDxmnk28MtBoGgP4eEHBd0aEjCvNcS0+juC1KiyIs+W
Xqmpa/cLyrTDvbDHjZvhcbdhIK/myZlPkjHErKevOZvpRUuH0lrFy6mIPWp0QwxR
b8cz6E949PteWornHLdzeHRCBBn2Uel8dUpVXbbar/NsxIy5FznhSoO4ZfBvgEU6
1xd46RwAATEVhTqA+WcA4q1y3VrWr27KASxoiMdUcX7tnZrdce6KW6wzPMHpRs2n
LWvU5McgazIZKqbMz+bRgLtK2YsDSF0RiMBL1QrGbF+QlUQCpAyFH1pchVUnP97G
YhboM8t2dQOPvg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:10:18 2025 by rpki-client