Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
File: mRQlj7nTZXszdhQr_GPazk-CEcQ.mft (raw, json)
Hash identifier: 3N9m3byRKh981v9N9/dkDB6asv1Drl+l4m8K6RikbUo=
Subject key identifier: 75:B9:03:6C:EC:D9:82:0E:77:B4:87:5D:B0:C4:E1:72:E7:38:88:5D
Authority key identifier: 99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
Certificate issuer: /CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Certificate serial: 0197481E24B2DC30B7BA48D812E06346A23C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 02:00:24 +0000
Manifest this update: Sat 07 Jun 2025 02:00:24 +0000
Manifest next update: Sun 08 Jun 2025 02:00:24 +0000
Files and hashes: 1: 2JXcaA80r7d-EIDaMijpbBPasoc.roa (hash: gf95/nywAYIZdNJbfxynwrtY4coqSX3R7aiF8YJONgo=)
2: mRQlj7nTZXszdhQr_GPazk-CEcQ.crl (hash: zQifRXY1dUrOXNJ/mSf7MpDFtQ4Cw4igxWuYDZuyTZQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 02:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:1e:24:b2:dc:30:b7:ba:48:d8:12:e0:63:46:a2:3c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9914258fb9d3657b3376142bfc63dace4f8211c4
Validity
Not Before: Jun 7 02:00:24 2025 GMT
Not After : Jun 8 02:00:24 2025 GMT
Subject: CN=75b9036cecd9820e77b4875db0c4e172e738885d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:88:0f:02:d3:23:c9:97:f0:cd:60:d5:04:59:
b3:38:27:7c:9c:d6:cd:46:20:4a:7f:fc:76:34:28:
b7:6d:ec:5c:d4:28:a4:28:d2:5e:f9:3b:25:53:b5:
6d:11:63:12:b7:b5:f4:22:8f:29:fc:1d:17:4c:b8:
50:4f:50:51:6c:47:46:b7:56:f3:c7:48:d2:21:c6:
75:4c:48:67:6c:af:5a:b2:c2:cd:4f:f6:4a:8f:ba:
25:ef:99:f6:b1:8c:2e:3a:20:9a:6d:d1:6a:9e:93:
79:65:70:ce:c8:3d:9a:f1:27:da:f4:2d:f8:f7:67:
34:7a:88:de:00:87:fd:78:57:26:ff:3d:54:d9:ff:
9e:0b:b5:b8:09:09:b2:3c:64:a8:35:7c:f5:5e:8f:
30:d1:14:8a:73:6f:40:c3:a4:95:1b:e7:b1:62:b2:
db:ab:2f:2f:7a:fd:60:2b:62:8d:51:d7:07:f3:23:
02:08:5a:d5:cf:f0:a6:a2:17:92:e6:88:44:84:78:
55:6b:fb:cb:93:5d:45:2e:a6:d3:3d:05:e2:51:55:
9b:05:85:82:db:b6:5c:fa:b2:ff:e7:9f:7c:de:0c:
23:4a:d5:f8:41:62:4b:46:de:5e:12:4c:4e:39:97:
95:28:87:f6:e2:3c:84:23:03:b3:3a:ef:4f:25:5e:
a0:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:B9:03:6C:EC:D9:82:0E:77:B4:87:5D:B0:C4:E1:72:E7:38:88:5D
X509v3 Authority Key Identifier:
keyid:99:14:25:8F:B9:D3:65:7B:33:76:14:2B:FC:63:DA:CE:4F:82:11:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRQlj7nTZXszdhQr_GPazk-CEcQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/86641e-669c-4a8d-ae0b-fe341b3005e3/1/mRQlj7nTZXszdhQr_GPazk-CEcQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:79:cb:d9:66:9a:30:84:12:1d:00:81:b7:c3:0b:ba:a3:73:
16:c0:cc:56:73:57:6d:be:af:a8:43:27:16:32:e7:28:6f:bb:
16:01:fe:fe:95:58:5e:8e:cb:53:f7:40:c9:62:5e:d0:b7:14:
cf:79:95:99:dc:3e:91:d7:56:1c:45:a3:ea:a4:77:1e:05:6c:
4c:2c:9b:16:79:8f:9b:4d:b5:74:25:a4:f3:6c:31:bb:e6:cf:
52:a6:f9:05:d8:9f:73:57:0f:7e:86:a7:39:82:f2:26:18:1a:
b8:88:28:72:64:53:a3:e2:12:02:c0:81:30:b8:84:93:29:08:
9c:9f:64:42:62:0a:38:95:0c:63:61:8c:6f:91:f9:0f:46:c2:
cd:4b:4b:64:95:d0:88:65:75:b1:bf:c5:b6:82:46:14:48:0a:
2a:22:78:ea:ad:a1:e5:f6:58:2d:e4:14:28:9c:56:22:e5:4d:
ea:8e:9a:f2:7b:ee:69:88:5c:80:15:66:23:65:a0:6b:1e:61:
c4:fe:9d:70:5a:4d:3c:73:14:74:4b:a0:de:90:3c:17:35:c2:
b1:33:3d:51:ad:a2:9b:aa:94:98:ac:07:ef:22:1a:37:c8:86:
a5:21:79:01:45:32:b6:9e:f7:9a:02:41:ec:a5:89:87:99:99:
fc:c2:e4:d7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIHiSy3DC3ukjYEuBjRqI8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MTQyNThmYjlkMzY1N2IzMzc2MTQyYmZjNjNkYWNlNGY4
MjExYzQwHhcNMjUwNjA3MDIwMDI0WhcNMjUwNjA4MDIwMDI0WjAzMTEwLwYDVQQD
Eyg3NWI5MDM2Y2VjZDk4MjBlNzdiNDg3NWRiMGM0ZTE3MmU3Mzg4ODVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4gPAtMjyZfwzWDVBFmzOCd8nNbN
RiBKf/x2NCi3bexc1CikKNJe+TslU7VtEWMSt7X0Io8p/B0XTLhQT1BRbEdGt1bz
x0jSIcZ1TEhnbK9assLNT/ZKj7ol75n2sYwuOiCabdFqnpN5ZXDOyD2a8Sfa9C34
92c0eojeAIf9eFcm/z1U2f+eC7W4CQmyPGSoNXz1Xo8w0RSKc29Aw6SVG+exYrLb
qy8vev1gK2KNUdcH8yMCCFrVz/CmoheS5ohEhHhVa/vLk11FLqbTPQXiUVWbBYWC
27Zc+rL/55983gwjStX4QWJLRt5eEkxOOZeVKIf24jyEIwOzOu9PJV6gjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHW5A2zs2YIOd7SHXbDE4XLnOIhdMB8GA1UdIwQY
MBaAFJkUJY+502V7M3YUK/xj2s5PghHEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJRbGo3blRaWHN6ZGhRcl9HUGF6ay1DRWNRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS84NjY0MWUtNjY5Yy00YThkLWFlMGIt
ZmUzNDFiMzAwNWUzLzEvbVJRbGo3blRaWHN6ZGhRcl9HUGF6ay1DRWNRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS84NjY0MWUtNjY5Yy00YThkLWFlMGItZmUzNDFiMzAwNWUz
LzEvbVJRbGo3blRaWHN6ZGhRcl9HUGF6ay1DRWNRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVnnL2Waa
MIQSHQCBt8MLuqNzFsDMVnNXbb6vqEMnFjLnKG+7FgH+/pVYXo7LU/dAyWJe0LcU
z3mVmdw+kddWHEWj6qR3HgVsTCybFnmPm021dCWk82wxu+bPUqb5Bdifc1cPfoan
OYLyJhgauIgocmRTo+ISAsCBMLiEkykInJ9kQmIKOJUMY2GMb5H5D0bCzUtLZJXQ
iGV1sb/FtoJGFEgKKiJ46q2h5fZYLeQUKJxWIuVN6o6a8nvuaYhcgBVmI2Wgax5h
xP6dcFpNPHMUdEug3pA8FzXCsTM9Ua2im6qUmKwH7yIaN8iGpSF5AUUytp73mgJB
7KWJh5mZ/MLk1w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 10:47:15 2025 by rpki-client