Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
File: byDBquA8J08ClCjuoKRCQgjU8-0.mft (raw, json)
Hash identifier: vRkteVUMGcuRt3IZg9VgwWp6qawgeD4Ch1N4zqzv7e0=
Subject key identifier: 95:5E:EC:8F:A3:FF:CD:C7:9A:84:F3:75:D0:12:B3:9A:E7:C4:2E:4E
Authority key identifier: 6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
Certificate issuer: /CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Certificate serial: 01984AE5B6B65DAD28B41E7F3225AEDB3599
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
Manifest number: 1603
Signing time: Sun 27 Jul 2025 08:00:25 +0000
Manifest this update: Sun 27 Jul 2025 08:00:25 +0000
Manifest next update: Mon 28 Jul 2025 08:00:25 +0000
Files and hashes: 1: QR-XfIkw00mD51XnwCvsG-9T89w.roa (hash: a0XDBbD/tQURYMLpVooHaNMf9NXfcD/rGt0gapo+gwA=)
2: byDBquA8J08ClCjuoKRCQgjU8-0.crl (hash: GJMF7nD/XoTKtzDzFzWeYTXO+R21LRqd83TWTVrPy9Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 05:00:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:e5:b6:b6:5d:ad:28:b4:1e:7f:32:25:ae:db:35:99
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f20c1aae03c274f029428eea0a4424208d4f3ed
Validity
Not Before: Jul 27 08:00:25 2025 GMT
Not After : Jul 28 08:00:25 2025 GMT
Subject: CN=955eec8fa3ffcdc79a84f375d012b39ae7c42e4e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:31:00:c4:fb:70:6b:0e:b4:3c:8b:b2:ce:c2:
56:c5:ad:25:ce:7e:12:fa:a3:34:d5:88:fd:d1:be:
7a:58:5b:0d:a8:ae:f5:90:f6:ef:5b:df:8c:bb:af:
e1:f3:38:c1:9b:0a:1f:e9:4d:9f:56:a7:a3:dd:b2:
a8:c5:49:29:54:a6:07:8f:ef:d8:6d:08:31:c5:4e:
5a:77:d4:ce:e1:2a:cc:d6:5f:5a:4a:82:49:d4:65:
8c:42:93:d3:16:45:50:2c:41:be:50:da:04:93:1c:
3f:f1:27:07:a0:bf:1c:8d:c3:82:82:ac:5e:37:0a:
de:73:f9:12:25:de:36:a9:fb:5a:88:dc:5e:c8:ad:
0d:4a:03:f7:e9:11:0b:34:25:39:08:b9:a8:72:b3:
fe:b6:13:13:49:45:51:42:2f:44:d2:ba:8d:72:ee:
d4:10:ba:03:70:02:02:6c:62:27:a8:40:75:ad:79:
c6:37:f2:98:c1:e5:5f:66:aa:e9:3a:61:b1:6b:f7:
6b:61:c6:92:88:68:3a:45:65:89:0d:30:7a:aa:77:
e3:43:55:8d:c0:b9:46:d9:e6:c2:31:54:ba:36:d0:
97:b7:72:f7:44:5e:5a:28:f7:fe:4e:74:dd:53:06:
f0:0f:56:55:a8:b7:8c:b4:60:45:07:c9:c1:db:f9:
2f:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:5E:EC:8F:A3:FF:CD:C7:9A:84:F3:75:D0:12:B3:9A:E7:C4:2E:4E
X509v3 Authority Key Identifier:
keyid:6F:20:C1:AA:E0:3C:27:4F:02:94:28:EE:A0:A4:42:42:08:D4:F3:ED
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/byDBquA8J08ClCjuoKRCQgjU8-0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/35/7e4ba7-f592-4eec-bcae-095d0bd2555f/1/byDBquA8J08ClCjuoKRCQgjU8-0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:54:43:5d:e1:a2:7f:0e:c1:0b:29:98:7b:31:c1:8b:bb:a0:
21:4b:9e:b1:9a:15:68:59:68:75:d4:85:b6:fc:90:fe:8a:f6:
1d:b7:e7:5b:04:5b:8e:37:87:1a:e9:3f:d8:53:e2:35:e6:c6:
51:9e:f7:dc:15:09:2a:eb:9a:1f:95:62:cd:5f:3f:4b:05:d2:
0e:27:0d:f8:ad:34:9f:70:76:57:a6:87:6b:55:58:bf:ac:6d:
d2:83:4d:66:86:55:b9:69:56:ba:5f:e8:81:d0:f4:ac:81:ab:
02:c7:8e:50:02:4c:7d:b1:33:a7:1c:39:49:a5:ec:09:55:1c:
15:00:0a:65:44:a1:81:2a:ba:90:fd:85:79:70:bc:9f:e4:b1:
e8:3c:3a:c4:57:98:85:96:18:b5:77:4b:e9:88:32:0a:28:4a:
ed:46:8a:dd:cb:a5:f6:bd:31:88:2f:32:a3:44:0f:49:44:8d:
31:51:79:4d:4f:70:8a:21:06:7b:a5:35:a4:af:db:86:87:ca:
01:42:7a:fc:8f:49:de:0c:39:92:55:36:64:68:12:41:4a:d0:
18:14:9d:2d:1a:03:6d:cd:1d:1a:e5:94:45:24:0e:80:02:51:
e2:2f:05:2f:3a:12:fd:e9:73:05:30:fc:e0:b0:c5:6d:12:6d:
c4:fc:8e:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhK5ba2Xa0otB5/MiWu2zWZMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmMjBjMWFhZTAzYzI3NGYwMjk0MjhlZWEwYTQ0MjQyMDhk
NGYzZWQwHhcNMjUwNzI3MDgwMDI1WhcNMjUwNzI4MDgwMDI1WjAzMTEwLwYDVQQD
Eyg5NTVlZWM4ZmEzZmZjZGM3OWE4NGYzNzVkMDEyYjM5YWU3YzQyZTRlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtTEAxPtwaw60PIuyzsJWxa0lzn4S
+qM01Yj90b56WFsNqK71kPbvW9+Mu6/h8zjBmwof6U2fVqej3bKoxUkpVKYHj+/Y
bQgxxU5ad9TO4SrM1l9aSoJJ1GWMQpPTFkVQLEG+UNoEkxw/8ScHoL8cjcOCgqxe
Nwrec/kSJd42qftaiNxeyK0NSgP36RELNCU5CLmocrP+thMTSUVRQi9E0rqNcu7U
ELoDcAICbGInqEB1rXnGN/KYweVfZqrpOmGxa/drYcaSiGg6RWWJDTB6qnfjQ1WN
wLlG2ebCMVS6NtCXt3L3RF5aKPf+TnTdUwbwD1ZVqLeMtGBFB8nB2/kv0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJVe7I+j/83HmoTzddASs5rnxC5OMB8GA1UdIwQY
MBaAFG8gwargPCdPApQo7qCkQkII1PPtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYnlEQnF1QThKMDhDbENqdW9LUkNRZ2pVOC0wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zNS83ZTRiYTctZjU5Mi00ZWVjLWJjYWUt
MDk1ZDBiZDI1NTVmLzEvYnlEQnF1QThKMDhDbENqdW9LUkNRZ2pVOC0wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zNS83ZTRiYTctZjU5Mi00ZWVjLWJjYWUtMDk1ZDBiZDI1NTVm
LzEvYnlEQnF1QThKMDhDbENqdW9LUkNRZ2pVOC0wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI1RDXeGi
fw7BCymYezHBi7ugIUuesZoVaFloddSFtvyQ/or2HbfnWwRbjjeHGuk/2FPiNebG
UZ733BUJKuuaH5VizV8/SwXSDicN+K00n3B2V6aHa1VYv6xt0oNNZoZVuWlWul/o
gdD0rIGrAseOUAJMfbEzpxw5SaXsCVUcFQAKZUShgSq6kP2FeXC8n+Sx6Dw6xFeY
hZYYtXdL6YgyCihK7UaK3cul9r0xiC8yo0QPSUSNMVF5TU9wiiEGe6U1pK/bhofK
AUJ6/I9J3gw5klU2ZGgSQUrQGBSdLRoDbc0dGuWURSQOgAJR4i8FLzoS/elzBTD8
4LDFbRJtxPyOvQ==
-----END CERTIFICATE-----
Generated at Sun Jul 27 12:01:56 2025 by rpki-client