Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
File: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft (raw, json)
Hash identifier: mCVoTlKiuN1L6NMYpfwr9av528rChGNTm18gBFb1zjc=
Subject key identifier: 70:AD:43:E3:DF:08:5F:43:AF:8D:60:AF:C1:08:AB:A8:B0:46:53:FD
Authority key identifier: 83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
Certificate issuer: /CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Certificate serial: 01976960880D7A683BD4C8479EBA6B9FC5A3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
Manifest number: 0491
Signing time: Fri 13 Jun 2025 13:00:23 +0000
Manifest this update: Fri 13 Jun 2025 13:00:23 +0000
Manifest next update: Sat 14 Jun 2025 13:00:23 +0000
Files and hashes: 1: g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl (hash: VIaH1Bg/7aXme929ihi+SSHvCSkDT64vj0BWJIadGCU=)
2: hQt6fLvth7yhZ_gy-eWM04fH0Vo.roa (hash: 5eRa0XK3oy+0XVVEDTa2qZR1cDbvimVVidnig16u0uM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:60:88:0d:7a:68:3b:d4:c8:47:9e:ba:6b:9f:c5:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=83b5b4913cc78e40803c00bec6b1a9dc48ff3684
Validity
Not Before: Jun 13 13:00:23 2025 GMT
Not After : Jun 14 13:00:23 2025 GMT
Subject: CN=70ad43e3df085f43af8d60afc108aba8b04653fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:ea:d2:d0:80:4b:e6:5e:5b:d5:58:50:5f:ce:
3c:12:88:88:8d:f7:6b:73:d8:67:62:c6:e4:cb:4a:
98:3e:b0:24:29:c6:c5:48:7d:93:aa:61:36:c2:a2:
1d:a7:5f:26:33:e8:4d:da:09:4c:b5:4d:be:4a:6b:
84:b0:29:e2:05:1a:0f:49:a3:d8:90:57:9b:d1:6c:
6c:e7:b6:81:56:1a:2c:cd:61:85:46:b3:ae:35:1a:
bd:a2:80:86:3e:49:5a:0b:cf:df:69:b0:2d:2d:8f:
bc:b6:0d:f1:4a:84:36:e3:78:c8:24:8c:83:3b:f2:
0b:8d:55:1d:09:88:ed:5c:8a:d8:f8:54:a2:a3:1f:
3f:55:85:8e:3b:aa:f4:78:0e:2c:c2:f0:5e:af:65:
96:7e:71:6f:ed:3a:7d:79:27:0d:26:93:9c:e8:26:
5d:2a:9b:31:04:9c:42:4f:c8:ce:c5:49:37:53:5c:
fc:fa:50:7a:9a:b7:64:20:47:08:db:57:ae:78:28:
ec:c4:75:a0:0f:a2:88:7e:49:0d:7c:0f:34:88:cb:
f4:8b:3b:a3:f6:39:1e:58:05:e7:9e:de:57:56:68:
c0:fb:0e:14:db:a4:75:cc:37:6d:f3:9d:e0:62:f2:
36:3c:1e:6d:59:54:7a:f3:bb:d2:91:f8:d4:44:3d:
53:65
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
70:AD:43:E3:DF:08:5F:43:AF:8D:60:AF:C1:08:AB:A8:B0:46:53:FD
X509v3 Authority Key Identifier:
keyid:83:B5:B4:91:3C:C7:8E:40:80:3C:00:BE:C6:B1:A9:DC:48:FF:36:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/dc573d-a3db-41f9-8c3f-867965eb50ca/1/g7W0kTzHjkCAPAC-xrGp3Ej_NoQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1b:22:6b:dc:75:95:2d:fe:63:31:7e:96:59:88:df:d4:2d:9c:
64:7c:ab:b6:91:6e:79:b4:00:ca:6d:5e:27:e4:7e:7f:83:e5:
d7:78:70:b7:7d:50:44:5a:1c:ce:96:6c:36:39:94:4a:ed:ef:
5c:99:1c:e1:95:6b:ac:5b:9f:a9:88:5b:be:16:cb:57:ff:88:
fd:01:99:87:76:9c:9a:22:4d:6e:82:08:a0:61:e1:b1:bb:4f:
32:31:4d:46:18:ce:1a:90:ae:97:aa:db:34:db:e2:12:87:81:
bd:8d:c6:a5:7c:8a:12:01:5c:1a:9f:bb:80:2d:71:8b:b6:c1:
09:f1:c8:be:a9:b3:92:db:3a:e7:e1:7d:d9:3b:5e:45:78:2a:
b7:26:4d:df:e7:f6:93:8e:e4:e4:93:ff:03:ad:4d:a1:1f:77:
74:b2:e4:33:2e:8d:ee:ad:36:ed:10:3e:43:4f:eb:52:48:be:
42:10:e8:69:00:06:70:c5:9e:6e:53:85:44:c4:9a:6a:16:e4:
4e:53:13:a3:6d:13:68:0c:03:02:f6:91:2a:0f:b1:41:35:af:
cb:9d:8b:07:40:d6:31:66:1c:8f:95:02:b4:ac:21:86:9b:d5:
44:c8:c1:f3:aa:86:9d:f0:cc:39:04:da:e5:64:2f:5e:70:42:
c4:14:80:97
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpYIgNemg71MhHnrprn8WjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDgzYjViNDkxM2NjNzhlNDA4MDNjMDBiZWM2YjFhOWRjNDhm
ZjM2ODQwHhcNMjUwNjEzMTMwMDIzWhcNMjUwNjE0MTMwMDIzWjAzMTEwLwYDVQQD
Eyg3MGFkNDNlM2RmMDg1ZjQzYWY4ZDYwYWZjMTA4YWJhOGIwNDY1M2ZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1+rS0IBL5l5b1VhQX848EoiIjfdr
c9hnYsbky0qYPrAkKcbFSH2TqmE2wqIdp18mM+hN2glMtU2+SmuEsCniBRoPSaPY
kFeb0Wxs57aBVhoszWGFRrOuNRq9ooCGPklaC8/fabAtLY+8tg3xSoQ243jIJIyD
O/ILjVUdCYjtXIrY+FSiox8/VYWOO6r0eA4swvBer2WWfnFv7Tp9eScNJpOc6CZd
KpsxBJxCT8jOxUk3U1z8+lB6mrdkIEcI21eueCjsxHWgD6KIfkkNfA80iMv0izuj
9jkeWAXnnt5XVmjA+w4U26R1zDdt853gYvI2PB5tWVR687vSkfjURD1TZQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHCtQ+PfCF9Dr41gr8EIq6iwRlP9MB8GA1UdIwQY
MBaAFIO1tJE8x45AgDwAvsaxqdxI/zaEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS9kYzU3M2QtYTNkYi00MWY5LThjM2Yt
ODY3OTY1ZWI1MGNhLzEvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS9kYzU3M2QtYTNkYi00MWY5LThjM2YtODY3OTY1ZWI1MGNh
LzEvZzdXMGtUekhqa0NBUEFDLXhyR3AzRWpfTm9RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGyJr3HWV
Lf5jMX6WWYjf1C2cZHyrtpFuebQAym1eJ+R+f4Pl13hwt31QRFoczpZsNjmUSu3v
XJkc4ZVrrFufqYhbvhbLV/+I/QGZh3acmiJNboIIoGHhsbtPMjFNRhjOGpCul6rb
NNviEoeBvY3GpXyKEgFcGp+7gC1xi7bBCfHIvqmzkts65+F92TteRXgqtyZN3+f2
k47k5JP/A61NoR93dLLkMy6N7q027RA+Q0/rUki+QhDoaQAGcMWeblOFRMSaahbk
TlMTo20TaAwDAvaRKg+xQTWvy52LB0DWMWYcj5UCtKwhhpvVRMjB86qGnfDMOQTa
5WQvXnBCxBSAlw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:10:01 2025 by rpki-client