Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: lK3uyLQC5VKzsw4Q4G8HzqtYlyzsrgheyAz+/Ys9CRs=
Subject key identifier: 7B:A6:D7:A0:86:F6:76:37:19:D1:BD:FD:DE:E0:25:E0:6B:B6:D2:4C
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 019771BF77D45AA93D3FF0E8FCE8B5FABCFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 04:01:02 +0000
Manifest this update: Sun 15 Jun 2025 04:01:02 +0000
Manifest next update: Mon 16 Jun 2025 04:01:02 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: ufGiybJOGKR6U7ixnPILT3f17UFiUvdce89H84pUsTM=)
2: rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa (hash: dOutEmsom2VI++bJk5JwwVxqjGBRuIpfu9it/0+MYW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:77:d4:5a:a9:3d:3f:f0:e8:fc:e8:b5:fa:bc:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Jun 15 04:01:02 2025 GMT
Not After : Jun 16 04:01:02 2025 GMT
Subject: CN=7ba6d7a086f6763719d1bdfddee025e06bb6d24c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:82:0f:08:a2:33:7f:40:47:10:96:ba:11:4f:
8c:b4:e9:9f:2c:16:8e:5c:04:18:2d:b5:26:6a:05:
67:15:f4:90:ca:9b:a4:b9:a9:e0:65:95:d5:99:cb:
25:40:6f:58:67:3b:76:78:bc:9a:04:65:a2:e9:fa:
33:6e:62:53:ee:85:5f:00:22:2b:c6:c6:b0:50:ad:
0f:10:a2:47:e0:56:f3:39:77:9b:b9:a6:60:eb:84:
a9:37:69:e0:25:28:fd:57:54:82:16:78:d4:14:5e:
27:58:df:98:85:29:b1:44:d2:56:bf:f5:fe:fc:36:
3a:88:5d:b2:01:a1:18:2e:c4:52:85:4c:f5:82:9c:
f2:4a:35:a3:01:2f:37:17:e8:2e:51:72:a6:be:7b:
66:6e:88:44:9f:ff:3e:76:f6:19:47:02:ed:f7:8b:
96:4b:0b:6f:35:3d:71:a0:6d:ab:e7:4b:9f:9f:6d:
f9:02:6e:66:07:98:f3:78:3f:c4:1f:aa:ad:0f:a9:
50:93:4f:39:dd:45:74:a9:9e:f9:3f:26:5e:4e:eb:
8e:21:7e:34:1e:29:92:ae:15:cf:90:0d:5e:5d:a0:
17:bc:6b:46:dc:cc:98:46:c2:df:70:2d:43:fd:00:
8e:66:84:26:d9:23:d2:cf:2d:e8:a4:84:92:64:92:
18:75
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:A6:D7:A0:86:F6:76:37:19:D1:BD:FD:DE:E0:25:E0:6B:B6:D2:4C
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
48:47:d6:33:49:1d:ac:b3:46:d0:69:ae:85:3d:80:54:bb:c0:
e0:b0:39:b0:36:19:e9:23:f4:b3:0e:9f:18:69:58:3a:98:29:
2a:ea:f4:c8:a8:62:b7:e1:f6:a5:03:09:11:06:83:ee:0f:31:
4a:90:ce:53:17:53:ad:83:72:c1:7a:f9:7c:a2:c5:1d:e5:1f:
16:4e:e1:fe:6e:0d:6b:04:06:d1:73:82:42:98:0a:db:f0:e8:
3c:a8:93:8f:04:7d:59:d1:fe:f8:4e:79:e5:54:6f:60:80:db:
33:d3:29:cc:f3:75:79:a7:25:ee:7e:d5:8e:25:0a:52:14:02:
82:8b:3f:38:c1:76:80:2c:c2:8a:94:c8:1a:65:2d:70:52:f0:
f0:df:7a:e9:cf:87:f8:ee:b9:1d:30:db:b1:b1:77:13:7f:e4:
44:e4:07:ea:96:3e:27:17:87:2b:2b:7f:02:84:69:05:3c:8d:
63:bd:34:9f:66:6f:0f:e1:52:d6:5d:a8:97:31:f9:d5:ae:de:
3c:eb:28:29:93:51:8f:01:4d:8f:61:de:66:f7:70:08:8e:99:
e2:31:3a:6e:b7:fc:5c:bf:a2:2a:88:4f:57:7f:7d:e3:e1:86:
a8:18:94:a3:89:73:3e:90:9f:53:7b:38:ef:09:cd:50:d0:81:
23:2f:15:99
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxv3fUWqk9P/Do/Oi1+rz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjZjZDMwYjRjZmExOTNlMjI2YmJhOTI4MmUzNjZhMjJh
MzExMGYwHhcNMjUwNjE1MDQwMTAyWhcNMjUwNjE2MDQwMTAyWjAzMTEwLwYDVQQD
Eyg3YmE2ZDdhMDg2ZjY3NjM3MTlkMWJkZmRkZWUwMjVlMDZiYjZkMjRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsYIPCKIzf0BHEJa6EU+MtOmfLBaO
XAQYLbUmagVnFfSQypukuangZZXVmcslQG9YZzt2eLyaBGWi6fozbmJT7oVfACIr
xsawUK0PEKJH4FbzOXebuaZg64SpN2ngJSj9V1SCFnjUFF4nWN+YhSmxRNJWv/X+
/DY6iF2yAaEYLsRShUz1gpzySjWjAS83F+guUXKmvntmbohEn/8+dvYZRwLt94uW
SwtvNT1xoG2r50ufn235Am5mB5jzeD/EH6qtD6lQk0853UV0qZ75PyZeTuuOIX40
HimSrhXPkA1eXaAXvGtG3MyYRsLfcC1D/QCOZoQm2SPSzy3opISSZJIYdQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHum16CG9nY3GdG9/d7gJeBrttJMMB8GA1UdIwQY
MBaAFND2zTC0z6GT4ia7qSguNmoioxEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQt
ZTI5OWU5MTAwMzllLzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQtZTI5OWU5MTAwMzll
LzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASEfWM0kd
rLNG0GmuhT2AVLvA4LA5sDYZ6SP0sw6fGGlYOpgpKur0yKhit+H2pQMJEQaD7g8x
SpDOUxdTrYNywXr5fKLFHeUfFk7h/m4NawQG0XOCQpgK2/DoPKiTjwR9WdH++E55
5VRvYIDbM9MpzPN1eacl7n7VjiUKUhQCgos/OMF2gCzCipTIGmUtcFLw8N966c+H
+O65HTDbsbF3E3/kROQH6pY+JxeHKyt/AoRpBTyNY700n2ZvD+FS1l2olzH51a7e
POsoKZNRjwFNj2HeZvdwCI6Z4jE6brf8XL+iKohPV3994+GGqBiUo4lzPpCfU3s4
7wnNUNCBIy8VmQ==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:36:45 2025 by rpki-client