Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
File: p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft (raw, json)
Hash identifier: MG+pBWS0juvwXqQo4jtrkv96+CdTwndYDickubctIkM=
Subject key identifier: 62:E9:10:61:9A:AD:52:94:BF:C4:E7:3A:6A:52:55:7D:13:4E:BC:46
Authority key identifier: A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
Certificate issuer: /CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Certificate serial: 0197692A0D60500C9548055284A22488A1C2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 12:00:52 +0000
Manifest this update: Fri 13 Jun 2025 12:00:52 +0000
Manifest next update: Sat 14 Jun 2025 12:00:52 +0000
Files and hashes: 1: I9i0WWS-frfVjqHawC8I642O_Mk.roa (hash: itGdqF9tI2l3tL7Dy0ty9ZBwR6g1Row8wxamV2kVAqE=)
2: p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl (hash: 4SN64ssUSZfkq8UeM3QLmz2VZdHr9J/DCq+/xWnfC28=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:52 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:0d:60:50:0c:95:48:05:52:84:a2:24:88:a1:c2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a76a90e716530f15f7399b7ac3e0d2939a21a210
Validity
Not Before: Jun 13 12:00:52 2025 GMT
Not After : Jun 14 12:00:52 2025 GMT
Subject: CN=62e910619aad5294bfc4e73a6a52557d134ebc46
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:eb:57:68:78:86:82:7d:e2:d5:8b:d3:32:ea:
ab:5b:8b:83:d2:a9:42:0c:90:f3:32:de:e7:1d:35:
a8:09:0a:c6:42:5e:1f:48:5f:8c:f2:d2:c8:b2:a7:
a6:5a:10:78:6a:cd:7d:77:8e:ce:0e:27:c0:4c:e3:
2f:94:df:3e:ec:e9:aa:d9:36:13:43:c6:d3:9b:aa:
0d:e8:49:21:0f:7b:30:86:0b:c5:68:90:a1:9d:c8:
97:98:33:b4:85:eb:72:d5:88:c0:c4:5b:73:3f:02:
b2:32:ce:80:3e:c4:33:88:98:65:48:2f:da:6a:56:
48:59:c9:6b:1d:2c:46:d8:93:5f:f0:8c:c3:62:c9:
62:7a:b8:c1:a7:50:3a:19:28:29:e4:14:6a:ea:c2:
87:74:cd:63:59:5a:f1:e1:3d:41:72:fb:e4:d7:ba:
df:97:9d:86:17:de:a5:a2:98:91:83:37:32:d3:ed:
9b:ec:98:e4:34:cc:55:e9:21:d6:db:98:10:34:80:
e6:a1:d0:dc:ad:75:0a:6e:88:32:9d:3c:73:2e:8e:
77:c0:56:97:8f:f9:37:89:fd:70:12:4c:96:f2:ec:
f4:3a:03:87:df:f7:9d:4f:6d:d3:25:96:cf:95:90:
4a:a2:15:77:77:72:30:f6:9e:a7:d6:0b:c0:91:93:
6a:b1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
62:E9:10:61:9A:AD:52:94:BF:C4:E7:3A:6A:52:55:7D:13:4E:BC:46
X509v3 Authority Key Identifier:
keyid:A7:6A:90:E7:16:53:0F:15:F7:39:9B:7A:C3:E0:D2:93:9A:21:A2:10
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p2qQ5xZTDxX3OZt6w-DSk5ohohA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fe/f01f9a-cdea-4d03-aa8a-85b65bacd4fb/1/p2qQ5xZTDxX3OZt6w-DSk5ohohA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:0a:6a:59:9b:de:49:75:a6:ba:c7:f1:7a:87:fb:15:c2:3a:
3e:f8:33:de:8e:16:e9:a9:7b:ee:7e:b5:67:d0:69:5a:bc:03:
15:a3:b9:58:53:2f:be:a8:a0:26:e9:24:1f:59:f1:48:b2:2a:
ec:85:4c:68:ca:94:b6:3e:82:6e:00:86:8e:01:3d:03:54:93:
37:0b:10:ea:52:e7:3d:d5:c8:cd:5b:63:43:ef:b6:43:28:be:
da:bd:f1:66:7b:06:12:d6:f9:19:c8:09:4f:8b:75:03:cb:a2:
77:0c:11:52:95:a3:75:fe:b6:34:f1:bb:96:ef:f0:82:e5:4d:
f8:e8:42:45:27:c0:30:72:21:96:38:39:af:0e:85:ec:0a:10:
06:73:59:9e:2c:f0:ca:23:e9:d3:c5:d1:d1:76:e0:7a:6a:a1:
2f:ba:07:71:58:2c:2b:03:3b:a6:4a:78:e1:b0:73:2c:41:2e:
34:b8:a5:f4:ca:f3:38:89:29:08:4a:d1:b5:ea:5c:cb:83:46:
06:27:32:17:44:e6:7e:c6:6c:7c:94:ba:f3:b7:94:40:4c:41:
51:f3:bc:4e:2b:0e:a7:ea:be:df:db:e9:8d:d2:7d:bf:c3:90:
29:b9:02:91:fe:92:4a:63:0a:e0:ec:cc:a1:ce:71:61:06:8b:
21:16:d8:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKg1gUAyVSAVShKIkiKHCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NmE5MGU3MTY1MzBmMTVmNzM5OWI3YWMzZTBkMjkzOWEy
MWEyMTAwHhcNMjUwNjEzMTIwMDUyWhcNMjUwNjE0MTIwMDUyWjAzMTEwLwYDVQQD
Eyg2MmU5MTA2MTlhYWQ1Mjk0YmZjNGU3M2E2YTUyNTU3ZDEzNGViYzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvutXaHiGgn3i1YvTMuqrW4uD0qlC
DJDzMt7nHTWoCQrGQl4fSF+M8tLIsqemWhB4as19d47ODifATOMvlN8+7Omq2TYT
Q8bTm6oN6EkhD3swhgvFaJChnciXmDO0hety1YjAxFtzPwKyMs6APsQziJhlSC/a
alZIWclrHSxG2JNf8IzDYslierjBp1A6GSgp5BRq6sKHdM1jWVrx4T1Bcvvk17rf
l52GF96lopiRgzcy0+2b7JjkNMxV6SHW25gQNIDmodDcrXUKbogynTxzLo53wFaX
j/k3if1wEkyW8uz0OgOH3/edT23TJZbPlZBKohV3d3Iw9p6n1gvAkZNqsQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGLpEGGarVKUv8TnOmpSVX0TTrxGMB8GA1UdIwQY
MBaAFKdqkOcWUw8V9zmbesPg0pOaIaIQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZS9mMDFmOWEtY2RlYS00ZDAzLWFhOGEt
ODViNjViYWNkNGZiLzEvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZS9mMDFmOWEtY2RlYS00ZDAzLWFhOGEtODViNjViYWNkNGZi
LzEvcDJxUTV4WlREeFgzT1p0NnctRFNrNW9ob2hBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADQpqWZve
SXWmusfxeof7FcI6Pvgz3o4W6al77n61Z9BpWrwDFaO5WFMvvqigJukkH1nxSLIq
7IVMaMqUtj6CbgCGjgE9A1STNwsQ6lLnPdXIzVtjQ++2Qyi+2r3xZnsGEtb5GcgJ
T4t1A8uidwwRUpWjdf62NPG7lu/wguVN+OhCRSfAMHIhljg5rw6F7AoQBnNZnizw
yiPp08XR0XbgemqhL7oHcVgsKwM7pkp44bBzLEEuNLil9MrzOIkpCErRtepcy4NG
BicyF0TmfsZsfJS687eUQExBUfO8TisOp+q+39vpjdJ9v8OQKbkCkf6SSmMK4OzM
oc5xYQaLIRbYTg==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:06:59 2025 by rpki-client