Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
File: dK68FUpWyDAly9hkGprDFctVHAY.mft (raw, json)
Hash identifier: jc0zjR0iNJiaDbP5yFfvOtkIG9XkGnlhzCXryEqJSJE=
Subject key identifier: 5A:EE:E4:78:D3:D1:80:D0:B2:4B:56:AB:C3:6A:2E:73:F0:AA:C6:3B
Authority key identifier: 74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
Certificate issuer: /CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Certificate serial: 01973DD1FB27B3E4308C4F8827F3C60CD5EC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
Manifest number: 157D
Signing time: Thu 05 Jun 2025 02:01:00 +0000
Manifest this update: Thu 05 Jun 2025 02:01:00 +0000
Manifest next update: Fri 06 Jun 2025 02:01:00 +0000
Files and hashes: 1: QSiu2o8yvX-7lTIYlrRdn3A1iGo.roa (hash: 7IpNvDtHzCXBqYppLIWhOXhyXloL9H2f5Plfi2MJpdo=)
2: R0_MeNcCGsgFbXPPMSbNiNB6onw.roa (hash: jCCdHzd1f1vyFj3zrZb6H/YnXBVmEiivGeOlhoHJWc0=)
3: dK68FUpWyDAly9hkGprDFctVHAY.crl (hash: LFFkZqLPHy+rolH1GWXKK/ciBV2/HXZ2xEBu0On8cvc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 02:01:00 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3d:d1:fb:27:b3:e4:30:8c:4f:88:27:f3:c6:0c:d5:ec
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=74aebc154a56c83025cbd8641a9ac315cb551c06
Validity
Not Before: Jun 5 02:01:00 2025 GMT
Not After : Jun 6 02:01:00 2025 GMT
Subject: CN=5aeee478d3d180d0b24b56abc36a2e73f0aac63b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:3e:28:43:cd:18:29:42:c5:aa:96:40:80:2c:
35:56:fc:6b:1b:9c:91:5a:ac:07:13:13:f4:ed:58:
ee:83:66:54:73:08:16:e1:d2:1c:33:93:b3:89:22:
38:b2:13:01:c0:38:bf:70:4e:43:8d:a4:e2:77:dd:
91:80:2f:8e:c8:86:c4:d8:5f:27:65:70:c7:6d:53:
f8:7f:92:0e:b6:ca:6d:2f:62:a4:55:df:57:46:9e:
67:cb:ac:c9:0c:c4:a1:c8:f8:65:6c:21:91:bf:c4:
ff:ab:a2:83:b4:68:66:85:bb:56:ab:40:5f:3b:0d:
57:6c:88:ce:cc:47:db:e7:d5:b0:aa:95:f1:64:7f:
a1:7e:55:44:a7:bc:ec:75:00:ff:9d:95:99:bf:47:
ee:36:c8:8c:9d:90:03:70:c3:d7:e3:e3:d7:9c:ed:
58:71:16:40:b0:5b:05:bb:af:ab:b4:ef:45:8d:e9:
42:39:67:c0:ae:cf:81:3d:0e:0a:ce:74:75:6e:1f:
5a:ba:05:78:02:04:22:11:01:ff:68:48:c8:55:13:
ea:7a:97:7d:52:14:16:8b:ad:c7:2a:df:a4:2a:16:
41:94:42:0b:e8:56:40:36:11:a9:20:b0:f2:ef:90:
4d:fa:d8:1b:38:bd:ac:82:c6:66:5b:a7:fc:e0:14:
e9:27
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5A:EE:E4:78:D3:D1:80:D0:B2:4B:56:AB:C3:6A:2E:73:F0:AA:C6:3B
X509v3 Authority Key Identifier:
keyid:74:AE:BC:15:4A:56:C8:30:25:CB:D8:64:1A:9A:C3:15:CB:55:1C:06
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dK68FUpWyDAly9hkGprDFctVHAY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/13/6de7a0-4073-4272-bf44-07a1d65548ba/1/dK68FUpWyDAly9hkGprDFctVHAY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
92:10:16:a5:a9:e9:14:ed:30:02:8a:35:4d:4d:65:f8:08:2c:
66:04:ef:7b:bb:f2:c9:29:b2:3d:9d:45:28:e8:fb:5c:80:6a:
97:9e:56:60:a3:71:74:2e:e5:02:ac:bb:06:00:b5:ce:fd:ba:
69:b7:bb:62:a4:bf:63:2a:9f:03:07:fa:17:94:97:86:9e:2b:
d7:da:ad:af:47:91:bd:5b:2f:61:e4:c6:7c:3c:54:5f:16:85:
51:72:42:f0:e8:20:f6:11:91:5b:a1:1b:9f:09:67:38:a4:61:
ee:ef:87:f2:4f:96:72:ba:5d:7c:24:ae:3d:ab:dd:66:ae:87:
c5:c8:f7:6c:1c:d6:d7:bc:c7:f9:fe:3f:4e:40:8e:19:58:85:
48:5b:af:62:9e:72:d1:e1:2f:b0:b2:93:6d:ef:60:b4:33:80:
49:36:93:0a:05:e5:ff:2e:c0:e9:46:dc:0b:11:74:00:7b:dc:
7a:85:bf:9c:aa:f2:97:11:7e:f8:ae:3b:14:88:e3:b2:db:90:
e7:f3:a4:61:f9:e9:a2:0e:6b:c5:63:c0:e6:e1:84:9d:bb:85:
47:49:34:e2:11:4e:d6:91:e4:32:29:41:d2:0e:44:d2:2d:94:
f4:49:c2:e7:ee:ba:f3:d0:d2:f2:ae:80:dc:5a:2c:de:eb:72:
f7:47:9c:bd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc90fsns+QwjE+IJ/PGDNXsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc0YWViYzE1NGE1NmM4MzAyNWNiZDg2NDFhOWFjMzE1Y2I1
NTFjMDYwHhcNMjUwNjA1MDIwMTAwWhcNMjUwNjA2MDIwMTAwWjAzMTEwLwYDVQQD
Eyg1YWVlZTQ3OGQzZDE4MGQwYjI0YjU2YWJjMzZhMmU3M2YwYWFjNjNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvz4oQ80YKULFqpZAgCw1VvxrG5yR
WqwHExP07Vjug2ZUcwgW4dIcM5OziSI4shMBwDi/cE5DjaTid92RgC+OyIbE2F8n
ZXDHbVP4f5IOtsptL2KkVd9XRp5ny6zJDMShyPhlbCGRv8T/q6KDtGhmhbtWq0Bf
Ow1XbIjOzEfb59WwqpXxZH+hflVEp7zsdQD/nZWZv0fuNsiMnZADcMPX4+PXnO1Y
cRZAsFsFu6+rtO9FjelCOWfArs+BPQ4KznR1bh9augV4AgQiEQH/aEjIVRPqepd9
UhQWi63HKt+kKhZBlEIL6FZANhGpILDy75BN+tgbOL2sgsZmW6f84BTpJwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFru5HjT0YDQsktWq8NqLnPwqsY7MB8GA1UdIwQY
MBaAFHSuvBVKVsgwJcvYZBqawxXLVRwGMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQt
MDdhMWQ2NTU0OGJhLzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMy82ZGU3YTAtNDA3My00MjcyLWJmNDQtMDdhMWQ2NTU0OGJh
LzEvZEs2OEZVcFd5REFseTloa0dwckRGY3RWSEFZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkhAWpanp
FO0wAoo1TU1l+AgsZgTve7vyySmyPZ1FKOj7XIBql55WYKNxdC7lAqy7BgC1zv26
abe7YqS/YyqfAwf6F5SXhp4r19qtr0eRvVsvYeTGfDxUXxaFUXJC8Ogg9hGRW6Eb
nwlnOKRh7u+H8k+WcrpdfCSuPavdZq6Hxcj3bBzW17zH+f4/TkCOGViFSFuvYp5y
0eEvsLKTbe9gtDOASTaTCgXl/y7A6UbcCxF0AHvceoW/nKrylxF++K47FIjjstuQ
5/OkYfnpog5rxWPA5uGEnbuFR0k04hFO1pHkMilB0g5E0i2U9EnC5+6689DS8q6A
3Fos3uty90ecvQ==
-----END CERTIFICATE-----
Generated at Thu Jun 5 07:08:22 2025 by rpki-client