Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
File: A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft (raw, json)
Hash identifier: R+KArN/yIu8qfKYSmq7pxOM4c6mk+xaDtFHQyVIAePs=
Subject key identifier: 1A:BB:A7:C3:70:78:A9:18:EC:39:D5:AC:88:50:F7:D5:0B:BE:3A:6A
Authority key identifier: 03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
Certificate issuer: /CN=036aac34c66fda64b67eb96b02d819789febe861
Certificate serial: 019769978071AD5F7F0D5D144417C71FFFC2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
Manifest number: 158D
Signing time: Fri 13 Jun 2025 14:00:25 +0000
Manifest this update: Fri 13 Jun 2025 14:00:25 +0000
Manifest next update: Sat 14 Jun 2025 14:00:25 +0000
Files and hashes: 1: A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl (hash: l88380dlBglxPxUg/RCZtixIeOV75TK6w4R1rkI6qgQ=)
2: Xw_JxFKBt0xay86EnT10Cffhb2o.roa (hash: CcdZeMl6Gy8SVuqOk3A/APDzafeJm+A13qmOxZHMPq0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:97:80:71:ad:5f:7f:0d:5d:14:44:17:c7:1f:ff:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=036aac34c66fda64b67eb96b02d819789febe861
Validity
Not Before: Jun 13 14:00:25 2025 GMT
Not After : Jun 14 14:00:25 2025 GMT
Subject: CN=1abba7c37078a918ec39d5ac8850f7d50bbe3a6a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:af:78:33:c1:a4:c9:d0:bc:e1:c2:84:ea:51:
85:f8:1d:ed:69:c3:20:0b:97:92:40:d5:92:cd:71:
b3:50:4a:4c:d5:38:5e:90:07:35:e8:79:3d:79:45:
b0:b8:80:cf:06:34:5d:d4:3d:0c:75:4d:82:0d:26:
cf:47:78:98:6b:d4:09:10:02:0b:75:93:e1:0e:54:
1a:f7:5b:65:e8:62:b7:cf:59:23:96:ad:56:0d:4b:
c9:fd:b3:bf:77:5f:4c:f1:66:21:04:82:29:d5:00:
2e:0b:0e:fd:83:01:c6:a4:62:29:7f:89:43:7e:7c:
bd:10:6a:01:e3:ac:60:d7:64:81:a5:6b:20:63:e8:
1e:7d:ee:43:54:5b:6c:59:95:19:96:e9:83:cf:de:
e4:fc:42:77:c1:d0:d0:68:e3:b5:fc:40:68:f3:f0:
a1:e9:91:9e:9e:48:ee:ed:36:73:50:36:46:b1:c4:
95:f7:f0:c0:05:5f:3b:48:ba:10:3b:74:66:c0:97:
61:b6:d2:a8:e5:ec:23:d9:47:d1:04:c9:fa:35:e4:
c5:0b:4f:a7:07:46:88:af:24:ec:2d:0f:a0:27:d2:
71:64:e0:36:ce:fd:b7:c7:d1:82:55:da:82:5d:48:
a3:31:16:e5:12:f3:0b:2a:13:07:3a:72:5a:e9:18:
6a:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1A:BB:A7:C3:70:78:A9:18:EC:39:D5:AC:88:50:F7:D5:0B:BE:3A:6A
X509v3 Authority Key Identifier:
keyid:03:6A:AC:34:C6:6F:DA:64:B6:7E:B9:6B:02:D8:19:78:9F:EB:E8:61
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/A2qsNMZv2mS2frlrAtgZeJ_r6GE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f4/5a3bda-c688-4a42-946f-963993ce5181/1/A2qsNMZv2mS2frlrAtgZeJ_r6GE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
82:2f:f9:c1:bc:c4:b2:34:04:f0:b4:66:be:e0:7c:8a:f6:f2:
b2:1a:cd:e1:bc:09:28:58:f8:0e:6d:d8:b1:1b:6e:5e:08:3f:
88:90:9d:02:48:46:aa:aa:ce:72:2b:e1:0d:23:1d:23:5f:4f:
46:a7:c3:02:e8:39:89:c6:84:31:72:e6:ef:03:c4:e2:31:58:
8a:d4:42:d6:c7:91:b8:e7:66:f8:85:4f:6c:15:3a:db:89:2f:
c3:21:9a:ef:20:a0:f0:07:ea:cc:a2:dc:99:d4:7a:8a:ba:cc:
a4:cf:60:43:92:49:6f:36:09:8c:bc:78:e0:e8:e2:4c:32:90:
4a:4b:5b:ec:3e:7f:ba:07:cc:0d:bb:d4:d9:90:e5:bc:2c:66:
bf:ea:f3:5d:1e:fd:95:cf:3c:e2:92:1f:76:a7:f7:25:3d:cb:
b9:f0:c9:b2:21:d1:76:84:0b:f4:25:77:e8:3a:00:f3:03:6d:
f3:75:f7:21:31:b7:3b:7d:9b:e0:18:73:15:f9:d6:dc:2d:be:
cc:80:ee:09:5e:91:33:89:59:17:0c:ff:f7:9a:9d:ec:e3:cc:
90:90:e6:27:04:42:f3:28:03:55:3b:24:8b:69:5b:8a:5d:29:
b7:03:be:08:20:16:db:73:a9:27:73:f2:da:5b:a4:2e:71:31:
76:66:fa:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpl4BxrV9/DV0URBfHH//CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAzNmFhYzM0YzY2ZmRhNjRiNjdlYjk2YjAyZDgxOTc4OWZl
YmU4NjEwHhcNMjUwNjEzMTQwMDI1WhcNMjUwNjE0MTQwMDI1WjAzMTEwLwYDVQQD
EygxYWJiYTdjMzcwNzhhOTE4ZWMzOWQ1YWM4ODUwZjdkNTBiYmUzYTZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsq94M8GkydC84cKE6lGF+B3tacMg
C5eSQNWSzXGzUEpM1ThekAc16Hk9eUWwuIDPBjRd1D0MdU2CDSbPR3iYa9QJEAIL
dZPhDlQa91tl6GK3z1kjlq1WDUvJ/bO/d19M8WYhBIIp1QAuCw79gwHGpGIpf4lD
fny9EGoB46xg12SBpWsgY+gefe5DVFtsWZUZlumDz97k/EJ3wdDQaOO1/EBo8/Ch
6ZGenkju7TZzUDZGscSV9/DABV87SLoQO3RmwJdhttKo5ewj2UfRBMn6NeTFC0+n
B0aIryTsLQ+gJ9JxZOA2zv23x9GCVdqCXUijMRblEvMLKhMHOnJa6RhqtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBq7p8NweKkY7DnVrIhQ99ULvjpqMB8GA1UdIwQY
MBaAFANqrDTGb9pktn65awLYGXif6+hhMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYt
OTYzOTkzY2U1MTgxLzEvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNC81YTNiZGEtYzY4OC00YTQyLTk0NmYtOTYzOTkzY2U1MTgx
LzEvQTJxc05NWnYybVMyZnJsckF0Z1plSl9yNkdFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgi/5wbzE
sjQE8LRmvuB8ivbyshrN4bwJKFj4Dm3YsRtuXgg/iJCdAkhGqqrOcivhDSMdI19P
RqfDAug5icaEMXLm7wPE4jFYitRC1seRuOdm+IVPbBU624kvwyGa7yCg8AfqzKLc
mdR6irrMpM9gQ5JJbzYJjLx44OjiTDKQSktb7D5/ugfMDbvU2ZDlvCxmv+rzXR79
lc884pIfdqf3JT3LufDJsiHRdoQL9CV36DoA8wNt83X3ITG3O32b4BhzFfnW3C2+
zIDuCV6RM4lZFwz/95qd7OPMkJDmJwRC8ygDVTski2lbil0ptwO+CCAW23OpJ3Py
2lukLnExdmb6PQ==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:29:50 2025 by rpki-client