Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
File: P9oppIwld1jI5RjuXIsDzNoCR8k.mft (raw, json)
Hash identifier: vZN9NjJ5HKb/lXgO3gi8VMP5UItK9/l7o05wTJmigOo=
Subject key identifier: 69:7B:BE:1D:88:43:ED:F1:69:2E:2A:B8:B6:39:A7:F6:DB:58:0E:4D
Authority key identifier: 3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
Certificate issuer: /CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Certificate serial: 019777F808F5619FC6D5396061963C1AF4DA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
Manifest number: 1594
Signing time: Mon 16 Jun 2025 09:00:33 +0000
Manifest this update: Mon 16 Jun 2025 09:00:33 +0000
Manifest next update: Tue 17 Jun 2025 09:00:33 +0000
Files and hashes: 1: 8_r7mVCzzc8i5_iqagGhH6oA6lo.roa (hash: NPDOx5bLEHu2ttrvWwMBmay19BA0wMcB6dN9yEUt368=)
2: P9oppIwld1jI5RjuXIsDzNoCR8k.crl (hash: xRlwSCTu02kxw2aMnd/KLWmXbWsYF5KzLyGW1C+WkzQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 09:00:33 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:77:f8:08:f5:61:9f:c6:d5:39:60:61:96:3c:1a:f4:da
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=3fda29a48c257758c8e518ee5c8b03ccda0247c9
Validity
Not Before: Jun 16 09:00:33 2025 GMT
Not After : Jun 17 09:00:33 2025 GMT
Subject: CN=697bbe1d8843edf1692e2ab8b639a7f6db580e4d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:e8:1b:81:3a:87:5c:10:65:e5:00:f0:54:e1:
56:c2:75:df:c1:40:b3:c4:77:e7:6a:25:b3:06:46:
2c:ef:c5:5c:bd:1d:d2:ee:16:cd:aa:4e:5b:58:5f:
b4:12:84:69:f1:e7:4d:5d:d5:60:f7:f2:82:c0:02:
fd:3c:e7:ce:c5:98:68:a7:ec:9b:33:f2:38:56:70:
01:9d:a7:19:2f:e8:f3:11:30:3c:bd:f5:7f:99:25:
cb:3d:86:c0:02:6a:ed:0f:eb:77:14:16:05:d8:de:
51:0b:e6:67:0e:50:60:c1:42:8d:5b:a8:88:ce:95:
57:e4:0c:b7:b9:8f:35:81:f9:e4:87:a8:f7:27:d7:
09:17:5d:3f:7f:08:a3:12:4f:b3:7e:17:ca:05:a1:
cc:63:70:ea:31:26:13:57:a8:8e:52:94:4a:35:f4:
cd:e0:43:d7:6b:1f:38:6c:8a:d2:27:c1:e0:a9:5a:
26:fb:8b:32:f6:c3:2d:ca:40:9b:41:9e:2e:1c:a7:
51:b5:5b:f8:14:25:9f:0b:67:af:eb:ad:a5:c7:da:
06:dd:ab:64:e3:9f:d3:7c:2e:f4:69:a3:7d:58:d1:
d5:10:7a:3e:19:66:6d:5a:38:5b:ff:8e:4c:4e:c7:
8c:05:55:f6:3b:11:cb:a1:00:7f:b8:83:0a:e8:5b:
6d:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
69:7B:BE:1D:88:43:ED:F1:69:2E:2A:B8:B6:39:A7:F6:DB:58:0E:4D
X509v3 Authority Key Identifier:
keyid:3F:DA:29:A4:8C:25:77:58:C8:E5:18:EE:5C:8B:03:CC:DA:02:47:C9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/P9oppIwld1jI5RjuXIsDzNoCR8k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/dd/c1c063-9e49-4353-b8bd-9374f21e6488/1/P9oppIwld1jI5RjuXIsDzNoCR8k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:a7:f2:74:64:40:d0:02:15:9b:e2:01:b7:75:40:47:40:3a:
da:05:b1:8c:a3:30:03:13:06:0c:88:76:6e:92:39:b7:76:a3:
e0:0e:fd:68:a5:9d:fa:62:fb:08:20:06:a7:d3:51:85:fd:cc:
4d:45:82:bd:22:54:50:20:cc:b9:c8:7f:4a:84:c3:8a:bc:71:
83:5b:43:c3:e5:07:eb:b0:3b:96:ae:25:0a:57:63:45:21:16:
30:62:c4:38:0c:8c:a3:bd:b4:c9:67:53:28:2c:d9:ce:2f:9a:
a3:60:3f:55:00:9e:c2:c3:1d:10:12:82:33:1d:eb:bb:86:2b:
d0:8c:de:80:df:bf:42:17:eb:e2:ae:e2:64:07:37:b4:45:00:
0a:dd:7b:13:34:15:c7:25:7c:9b:88:e8:8b:63:02:ae:e3:d9:
e3:a7:8a:e4:14:b2:d3:0b:02:07:77:7c:67:00:3b:0b:93:a9:
34:46:33:bc:17:2e:99:d1:20:39:05:0e:4d:f9:8f:a9:0e:37:
2b:a8:9a:3d:a2:45:99:a9:f8:03:ae:e3:fc:10:3f:ac:25:96:
4f:e2:da:08:ba:f7:a8:ee:11:57:82:b7:da:81:c1:70:77:f7:
73:a4:cd:7a:c5:0b:cf:03:d0:a3:b0:b9:24:cc:76:11:21:fa:
02:f5:65:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd3+Aj1YZ/G1TlgYZY8GvTaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDNmZGEyOWE0OGMyNTc3NThjOGU1MThlZTVjOGIwM2NjZGEw
MjQ3YzkwHhcNMjUwNjE2MDkwMDMzWhcNMjUwNjE3MDkwMDMzWjAzMTEwLwYDVQQD
Eyg2OTdiYmUxZDg4NDNlZGYxNjkyZTJhYjhiNjM5YTdmNmRiNTgwZTRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt+gbgTqHXBBl5QDwVOFWwnXfwUCz
xHfnaiWzBkYs78VcvR3S7hbNqk5bWF+0EoRp8edNXdVg9/KCwAL9POfOxZhop+yb
M/I4VnABnacZL+jzETA8vfV/mSXLPYbAAmrtD+t3FBYF2N5RC+ZnDlBgwUKNW6iI
zpVX5Ay3uY81gfnkh6j3J9cJF10/fwijEk+zfhfKBaHMY3DqMSYTV6iOUpRKNfTN
4EPXax84bIrSJ8HgqVom+4sy9sMtykCbQZ4uHKdRtVv4FCWfC2ev662lx9oG3atk
45/TfC70aaN9WNHVEHo+GWZtWjhb/45MTseMBVX2OxHLoQB/uIMK6FttsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGl7vh2IQ+3xaS4quLY5p/bbWA5NMB8GA1UdIwQY
MBaAFD/aKaSMJXdYyOUY7lyLA8zaAkfJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZC9jMWMwNjMtOWU0OS00MzUzLWI4YmQt
OTM3NGYyMWU2NDg4LzEvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZC9jMWMwNjMtOWU0OS00MzUzLWI4YmQtOTM3NGYyMWU2NDg4
LzEvUDlvcHBJd2xkMWpJNVJqdVhJc0R6Tm9DUjhrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATafydGRA
0AIVm+IBt3VAR0A62gWxjKMwAxMGDIh2bpI5t3aj4A79aKWd+mL7CCAGp9NRhf3M
TUWCvSJUUCDMuch/SoTDirxxg1tDw+UH67A7lq4lCldjRSEWMGLEOAyMo720yWdT
KCzZzi+ao2A/VQCewsMdEBKCMx3ru4Yr0IzegN+/Qhfr4q7iZAc3tEUACt17EzQV
xyV8m4joi2MCruPZ46eK5BSy0wsCB3d8ZwA7C5OpNEYzvBcumdEgOQUOTfmPqQ43
K6iaPaJFman4A67j/BA/rCWWT+LaCLr3qO4RV4K32oHBcHf3c6TNesULzwPQo7C5
JMx2ESH6AvVl2g==
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:29:44 2025 by rpki-client