Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
File: 24P1T0UTHZIHwhWgmKKmvNb_BQs.mft (raw, json)
Hash identifier: bTbF1BU9aLXh7XEaYdbPaCl8uCMGdxTORRU4l2hdn2U=
Subject key identifier: AB:0D:94:7F:D4:9D:BA:33:EF:79:30:FF:C0:5E:02:92:00:D9:97:46
Authority key identifier: DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
Certificate issuer: /CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Certificate serial: 01984DE68E84264FD338AB18F6E75D53959D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
Manifest number: 0CFD
Signing time: Sun 27 Jul 2025 22:00:12 +0000
Manifest this update: Sun 27 Jul 2025 22:00:12 +0000
Manifest next update: Mon 28 Jul 2025 22:00:12 +0000
Files and hashes: 1: 24P1T0UTHZIHwhWgmKKmvNb_BQs.crl (hash: PL9LJOfyyaZpTkUKNcS5vEtFw17sri4gcrlNwzovHVc=)
2: Qfno-jAugdwOIbQTtdk6Qt14vp0.roa (hash: K+5ZvY56wsKUyUpWT9EX8Ty0xGLLwMy0SXranx21Z8w=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 22:00:12 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4d:e6:8e:84:26:4f:d3:38:ab:18:f6:e7:5d:53:95:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db83f54f45131d9207c215a098a2a6bcd6ff050b
Validity
Not Before: Jul 27 22:00:12 2025 GMT
Not After : Jul 28 22:00:12 2025 GMT
Subject: CN=ab0d947fd49dba33ef7930ffc05e029200d99746
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:3c:c5:29:68:19:4c:df:bc:62:28:1f:93:2a:
62:72:9a:e7:59:57:a8:30:df:88:f9:34:ec:9f:58:
b2:2f:d8:75:d6:cd:2a:b6:20:18:31:d5:00:e6:0b:
d4:28:1c:a9:c2:d3:08:6a:31:9f:5a:7b:44:f3:dd:
5d:d9:23:d8:01:f3:9f:b4:84:2f:34:51:0e:9d:4a:
72:bc:f0:46:77:50:82:9c:3d:cf:94:f0:d3:e8:68:
73:de:c0:f7:12:fb:23:f3:f9:ad:c5:07:ed:ee:6c:
37:cd:7a:54:24:49:cd:ba:52:25:e7:64:36:8f:04:
c9:93:e0:55:20:34:68:4e:6f:26:95:1d:2c:fd:ab:
c4:a4:21:e2:0c:32:de:a2:9b:e3:b6:98:e6:34:e8:
b3:87:2b:46:00:ee:ea:49:4e:c5:66:f0:e7:8d:75:
4b:fc:70:98:9f:1a:1c:b4:2d:83:c3:4b:66:d3:35:
85:79:96:21:c3:6b:34:4c:fa:a6:8e:f1:50:78:db:
94:fc:5d:1b:a6:5d:51:33:ae:da:11:49:b5:47:46:
2a:f9:43:37:53:d4:d0:6a:e4:0f:05:e7:cd:c5:e5:
89:28:7e:db:1d:06:ca:43:67:d5:97:33:a2:d8:d0:
8a:aa:a5:8a:5f:12:79:e1:df:a6:c2:dd:00:7c:03:
be:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:0D:94:7F:D4:9D:BA:33:EF:79:30:FF:C0:5E:02:92:00:D9:97:46
X509v3 Authority Key Identifier:
keyid:DB:83:F5:4F:45:13:1D:92:07:C2:15:A0:98:A2:A6:BC:D6:FF:05:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/24P1T0UTHZIHwhWgmKKmvNb_BQs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/e50c70-0a70-45ac-9ad4-326764a68cfb/1/24P1T0UTHZIHwhWgmKKmvNb_BQs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:18:06:81:96:74:60:8f:4f:21:6a:ac:ce:70:9d:7d:36:ad:
b7:d6:d7:4a:25:bc:99:f1:80:7e:ce:38:e6:83:16:66:04:f9:
dc:a7:d4:8b:30:c2:a2:6e:34:ac:7f:e5:b5:d1:42:64:a6:24:
46:1b:7f:6c:9e:7b:0d:f6:06:9e:2c:d4:8e:37:59:cd:35:74:
17:f8:03:50:37:9a:60:d6:ea:2e:a9:96:15:ab:99:4f:53:81:
0d:0a:8d:64:de:64:6c:76:e4:7e:35:e5:ff:9d:46:97:38:f4:
5b:bf:f6:5d:54:b3:f6:46:08:cb:cc:7a:97:db:11:6d:b9:29:
76:d2:f0:a0:98:59:bb:46:21:f7:7b:d1:de:d2:f5:77:0d:cd:
78:62:c6:1c:81:f9:40:63:a1:a9:7b:ea:67:3e:01:27:08:19:
6c:21:58:d6:94:c7:c2:9f:49:95:bc:86:91:26:17:04:e1:62:
5d:d0:e4:ae:36:e1:31:7d:f3:2d:11:d3:6d:2c:10:97:94:4a:
81:82:35:3b:77:ef:d9:af:74:80:92:78:b2:6f:e9:80:12:a2:
06:16:1d:cc:cd:95:d1:10:ae:51:83:1a:71:57:42:31:71:d4:
84:f1:7c:59:1d:61:03:3f:a1:b6:41:df:87:66:cf:5f:1f:7f:
1c:94:0b:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhN5o6EJk/TOKsY9uddU5WdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiODNmNTRmNDUxMzFkOTIwN2MyMTVhMDk4YTJhNmJjZDZm
ZjA1MGIwHhcNMjUwNzI3MjIwMDEyWhcNMjUwNzI4MjIwMDEyWjAzMTEwLwYDVQQD
EyhhYjBkOTQ3ZmQ0OWRiYTMzZWY3OTMwZmZjMDVlMDI5MjAwZDk5NzQ2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7zzFKWgZTN+8YigfkypicprnWVeo
MN+I+TTsn1iyL9h11s0qtiAYMdUA5gvUKBypwtMIajGfWntE891d2SPYAfOftIQv
NFEOnUpyvPBGd1CCnD3PlPDT6Ghz3sD3Evsj8/mtxQft7mw3zXpUJEnNulIl52Q2
jwTJk+BVIDRoTm8mlR0s/avEpCHiDDLeopvjtpjmNOizhytGAO7qSU7FZvDnjXVL
/HCYnxoctC2Dw0tm0zWFeZYhw2s0TPqmjvFQeNuU/F0bpl1RM67aEUm1R0Yq+UM3
U9TQauQPBefNxeWJKH7bHQbKQ2fVlzOi2NCKqqWKXxJ54d+mwt0AfAO+iwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKsNlH/Unboz73kw/8BeApIA2ZdGMB8GA1UdIwQY
MBaAFNuD9U9FEx2SB8IVoJiiprzW/wULMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9lNTBjNzAtMGE3MC00NWFjLTlhZDQt
MzI2NzY0YTY4Y2ZiLzEvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9lNTBjNzAtMGE3MC00NWFjLTlhZDQtMzI2NzY0YTY4Y2Zi
LzEvMjRQMVQwVVRIWklId2hXZ21LS212TmJfQlFzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASRgGgZZ0
YI9PIWqsznCdfTatt9bXSiW8mfGAfs445oMWZgT53KfUizDCom40rH/ltdFCZKYk
Rht/bJ57DfYGnizUjjdZzTV0F/gDUDeaYNbqLqmWFauZT1OBDQqNZN5kbHbkfjXl
/51Glzj0W7/2XVSz9kYIy8x6l9sRbbkpdtLwoJhZu0Yh93vR3tL1dw3NeGLGHIH5
QGOhqXvqZz4BJwgZbCFY1pTHwp9JlbyGkSYXBOFiXdDkrjbhMX3zLRHTbSwQl5RK
gYI1O3fv2a90gJJ4sm/pgBKiBhYdzM2V0RCuUYMacVdCMXHUhPF8WR1hAz+htkHf
h2bPXx9/HJQLiQ==
-----END CERTIFICATE-----
Generated at Mon Jul 28 05:47:27 2025 by rpki-client