Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
File: C279o-3LL3RczKu0XiC3nnmp_Jg.mft (raw, json)
Hash identifier: pZaBv6cGa+aEb+lYDK3U1VvSzG7VdBSNY/nLWbkFUlM=
Subject key identifier: 1D:04:6D:FE:99:C2:B3:BC:D6:C3:29:6E:49:F3:70:29:42:FB:C3:76
Authority key identifier: 0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
Certificate issuer: /CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Certificate serial: 0197462FF794B7C8499A8A7CFE597ED9BE4C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
Manifest number: 157D
Signing time: Fri 06 Jun 2025 17:00:37 +0000
Manifest this update: Fri 06 Jun 2025 17:00:37 +0000
Manifest next update: Sat 07 Jun 2025 17:00:37 +0000
Files and hashes: 1: 0w0EpLZYR7z2XsoCgghcY3pUnoU.roa (hash: lVpl8mTP6YZbuLjsob401TFZW5nVn9qmK2OvSpdRlfk=)
2: C279o-3LL3RczKu0XiC3nnmp_Jg.crl (hash: L2PeDxIWGFncEq+UUDdYFUlj26Nx8se/TvzArVFhn+k=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 17:00:37 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:2f:f7:94:b7:c8:49:9a:8a:7c:fe:59:7e:d9:be:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b6efda3edcb2f745cccabb45e20b79e79a9fc98
Validity
Not Before: Jun 6 17:00:37 2025 GMT
Not After : Jun 7 17:00:37 2025 GMT
Subject: CN=1d046dfe99c2b3bcd6c3296e49f3702942fbc376
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:ec:4c:12:54:e3:2d:81:ea:db:db:84:c8:c8:
20:44:6a:de:79:e8:7e:ea:ab:cb:f6:f8:45:5d:15:
47:90:78:ad:6c:7e:49:e7:26:aa:8a:79:3a:f4:b6:
43:9a:9a:0f:a4:b1:cc:f7:f4:94:d2:38:9a:86:ac:
f3:93:ed:95:50:17:a8:32:8c:a8:33:78:a6:cb:7c:
e6:b9:e3:a5:87:51:d2:6c:d9:80:16:3a:18:0f:5c:
79:19:2a:d2:06:43:b1:34:85:3e:aa:ae:6d:2a:7e:
d7:53:6f:83:f2:cf:10:9d:9a:38:9e:4f:20:44:77:
c3:11:d6:6b:af:c9:49:c0:a3:c3:50:4e:1f:4a:78:
8e:42:90:96:c0:5a:f6:43:1d:e8:7d:7c:c5:03:3a:
f5:82:ea:f5:19:d1:d3:fa:70:59:b6:62:fb:eb:c5:
9c:78:d1:53:ad:30:c8:13:cc:b0:ab:e7:f1:a2:5f:
e6:c4:13:a6:fb:4f:e7:a1:cb:5a:86:1d:52:ce:79:
6f:0b:cc:21:0d:94:a7:a2:97:58:7d:c9:7c:49:1c:
a4:74:6e:90:be:90:97:f2:be:61:8e:25:44:cc:ff:
a0:8f:39:1c:54:c6:2c:1c:8c:f3:03:8b:c2:64:09:
ad:cf:9e:51:af:57:a4:18:6a:83:75:1e:9e:b2:6f:
fc:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1D:04:6D:FE:99:C2:B3:BC:D6:C3:29:6E:49:F3:70:29:42:FB:C3:76
X509v3 Authority Key Identifier:
keyid:0B:6E:FD:A3:ED:CB:2F:74:5C:CC:AB:B4:5E:20:B7:9E:79:A9:FC:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C279o-3LL3RczKu0XiC3nnmp_Jg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/5835be-69e0-469b-bcba-00d14a203eb1/1/C279o-3LL3RczKu0XiC3nnmp_Jg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:8c:c7:66:55:de:d2:b4:72:2f:0b:97:78:e1:df:14:cd:93:
99:ca:96:80:ce:ab:08:3d:83:52:24:30:c4:16:78:1b:4e:90:
1b:7e:78:3e:10:a4:c5:9a:bb:c4:65:79:c5:40:d3:70:94:65:
36:1b:4e:f8:87:e5:4d:b2:d0:62:37:5d:de:c1:0c:33:81:f0:
6d:a2:d9:4b:56:6a:99:63:23:fe:77:b0:7f:6a:da:82:2f:4b:
f6:2c:b6:45:50:5a:df:d7:06:0e:15:fd:09:9d:6f:5c:63:7c:
71:1c:c4:01:ab:ec:2e:4a:e0:f8:4e:bb:73:ae:69:4c:9b:7d:
4a:18:1e:a1:aa:2c:d6:73:74:c6:be:19:c3:e6:53:3b:1b:13:
8b:60:00:b2:5a:56:a4:c6:3d:1f:f9:27:a9:3b:12:43:eb:68:
73:66:b2:f6:b9:b5:42:bb:bc:fe:ab:1f:97:34:40:9b:c5:21:
19:a1:f0:01:a3:7f:e1:09:ed:c1:cc:72:b1:51:9f:40:b2:00:
7f:f3:ce:dc:b2:a7:04:84:ac:39:99:57:b3:4e:9b:ec:8f:ed:
87:69:19:99:9a:c4:0f:6b:c4:5d:1f:30:ee:78:5c:50:82:5c:
c4:b5:c2:a3:60:29:cc:1b:9d:67:ed:15:3d:54:62:ec:bc:46:
50:a6:8f:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGL/eUt8hJmop8/ll+2b5MMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNmVmZGEzZWRjYjJmNzQ1Y2NjYWJiNDVlMjBiNzllNzlh
OWZjOTgwHhcNMjUwNjA2MTcwMDM3WhcNMjUwNjA3MTcwMDM3WjAzMTEwLwYDVQQD
EygxZDA0NmRmZTk5YzJiM2JjZDZjMzI5NmU0OWYzNzAyOTQyZmJjMzc2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxexMElTjLYHq29uEyMggRGreeeh+
6qvL9vhFXRVHkHitbH5J5yaqink69LZDmpoPpLHM9/SU0jiahqzzk+2VUBeoMoyo
M3imy3zmueOlh1HSbNmAFjoYD1x5GSrSBkOxNIU+qq5tKn7XU2+D8s8QnZo4nk8g
RHfDEdZrr8lJwKPDUE4fSniOQpCWwFr2Qx3ofXzFAzr1gur1GdHT+nBZtmL768Wc
eNFTrTDIE8ywq+fxol/mxBOm+0/noctahh1SznlvC8whDZSnopdYfcl8SRykdG6Q
vpCX8r5hjiVEzP+gjzkcVMYsHIzzA4vCZAmtz55Rr1ekGGqDdR6esm/8kwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB0Ebf6ZwrO81sMpbknzcClC+8N2MB8GA1UdIwQY
MBaAFAtu/aPtyy90XMyrtF4gt555qfyYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzI3OW8tM0xMM1Jjekt1MFhpQzNubm1wX0pnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS81ODM1YmUtNjllMC00NjliLWJjYmEt
MDBkMTRhMjAzZWIxLzEvQzI3OW8tM0xMM1Jjekt1MFhpQzNubm1wX0pnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS81ODM1YmUtNjllMC00NjliLWJjYmEtMDBkMTRhMjAzZWIx
LzEvQzI3OW8tM0xMM1Jjekt1MFhpQzNubm1wX0pnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANozHZlXe
0rRyLwuXeOHfFM2TmcqWgM6rCD2DUiQwxBZ4G06QG354PhCkxZq7xGV5xUDTcJRl
NhtO+IflTbLQYjdd3sEMM4HwbaLZS1ZqmWMj/newf2ragi9L9iy2RVBa39cGDhX9
CZ1vXGN8cRzEAavsLkrg+E67c65pTJt9Shgeoaos1nN0xr4Zw+ZTOxsTi2AAslpW
pMY9H/knqTsSQ+toc2ay9rm1Qru8/qsflzRAm8UhGaHwAaN/4QntwcxysVGfQLIA
f/PO3LKnBISsOZlXs06b7I/th2kZmZrED2vEXR8w7nhcUIJcxLXCo2ApzBudZ+0V
PVRi7LxGUKaP1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:22:46 2025 by rpki-client