Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
File: _Tq5WEdps0xpXg7zvkAN5chwX1g.mft (raw, json)
Hash identifier: JWoHjY3Fw1J3esnWbdV/DtxsRs7/XokhzDbwtPEXL2g=
Subject key identifier: AB:D8:43:D4:29:4A:9E:DB:3E:03:FA:52:2C:EF:6A:F0:DC:C1:A9:D8
Authority key identifier: FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
Certificate issuer: /CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Certificate serial: 01974EFC4070A05B1758061AED3D8916855D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
Manifest number: 0187
Signing time: Sun 08 Jun 2025 10:00:43 +0000
Manifest this update: Sun 08 Jun 2025 10:00:43 +0000
Manifest next update: Mon 09 Jun 2025 10:00:43 +0000
Files and hashes: 1: _Tq5WEdps0xpXg7zvkAN5chwX1g.crl (hash: T74VqiSILDcH/fxsU9vlcut3k25q1iYNYABW/RKbJyk=)
2: mm8C4Ou63If70LPWFRCmCNEI28c.roa (hash: g2mAP9bfs0Z2vFldLFVJmnHsqx5+Iksx21QgfS4cMys=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:fc:40:70:a0:5b:17:58:06:1a:ed:3d:89:16:85:5d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fd3ab9584769b34c695e0ef3be400de5c8705f58
Validity
Not Before: Jun 8 10:00:43 2025 GMT
Not After : Jun 9 10:00:43 2025 GMT
Subject: CN=abd843d4294a9edb3e03fa522cef6af0dcc1a9d8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a6:6c:81:d9:36:cc:3c:c6:10:e5:f6:0a:8b:fe:
5a:a8:cc:a3:88:54:13:4a:90:37:ea:f8:01:3f:0b:
4b:27:00:91:83:2d:1e:b2:cb:51:45:42:30:10:85:
13:ba:d4:5e:f0:65:89:26:30:cf:5c:fd:b6:e0:f0:
60:54:5a:41:fe:fd:4b:b1:24:e8:7a:39:5c:ff:c2:
2b:d1:74:be:8b:3d:b8:02:e5:6d:29:cd:80:60:9c:
bf:00:f4:c3:e3:6c:93:9a:4d:6d:55:c4:37:f7:7b:
79:53:71:87:b0:4a:a9:72:db:d1:92:e2:ad:ab:05:
bf:09:55:c5:de:fc:05:d7:94:38:6a:95:5b:c3:d6:
0d:79:b8:aa:9a:fe:6a:1d:93:57:a4:30:0f:c5:11:
3e:7a:ee:5a:46:1a:14:12:b7:0d:03:de:59:53:89:
bb:d3:0c:6e:d8:af:2a:4d:d3:e4:7b:8b:34:86:2c:
36:70:26:a1:a2:8c:29:5e:fc:02:9e:ae:d8:a9:0a:
a7:b1:bb:75:ce:de:4b:4b:4e:9e:ad:00:6a:6c:d0:
04:a7:1c:d9:1b:05:ef:9e:ff:26:16:1e:62:77:d6:
0a:52:03:9d:d1:1d:7d:6f:a8:e8:94:e1:4a:6c:60:
6c:67:da:ba:f4:b5:e1:59:74:23:97:bb:ee:c0:25:
32:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:D8:43:D4:29:4A:9E:DB:3E:03:FA:52:2C:EF:6A:F0:DC:C1:A9:D8
X509v3 Authority Key Identifier:
keyid:FD:3A:B9:58:47:69:B3:4C:69:5E:0E:F3:BE:40:0D:E5:C8:70:5F:58
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_Tq5WEdps0xpXg7zvkAN5chwX1g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/ad9e9c-aca2-480c-82e8-06faf1496693/1/_Tq5WEdps0xpXg7zvkAN5chwX1g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:87:b7:53:93:19:2a:8b:1f:86:a2:c4:4c:dd:2d:05:aa:72:
5d:b3:25:f6:af:0f:1a:31:30:05:25:5f:10:6b:0f:d6:36:42:
84:5b:65:15:0d:9d:ee:03:34:e7:03:ab:33:6b:12:2b:b8:24:
c1:95:36:2f:05:61:63:08:86:77:9b:86:10:7f:50:e2:5c:4f:
9d:82:23:7c:4c:85:a7:6a:99:96:79:4e:0c:8e:5e:b9:9d:33:
a1:51:8f:88:52:51:6a:a6:14:a8:d7:26:fe:f4:fc:ec:b6:33:
e2:8e:0d:13:2f:c9:78:fc:7f:fa:b4:e4:de:99:e4:1e:9a:7c:
db:e0:3b:71:1c:17:20:1c:15:64:51:0f:3c:e7:2d:f9:52:f8:
10:90:ad:ec:a0:3e:85:1d:dd:d7:d0:98:32:45:69:a0:08:48:
8e:49:29:5f:7c:c7:03:85:d5:33:10:70:0f:14:8d:04:d7:3a:
37:44:8a:c8:f6:8c:bf:c6:e6:44:88:ad:10:50:23:3f:72:de:
4e:83:08:9e:37:3b:fb:e4:8a:44:6d:0c:27:e0:e5:c4:94:69:
59:74:e7:4a:f7:a9:91:ae:a3:fe:a6:92:d7:ef:92:85:5a:bb:
e2:c9:e0:91:5a:88:c8:71:cd:e2:05:4a:3e:7a:e7:ea:cd:51:
99:30:5f:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdO/EBwoFsXWAYa7T2JFoVdMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZkM2FiOTU4NDc2OWIzNGM2OTVlMGVmM2JlNDAwZGU1Yzg3
MDVmNTgwHhcNMjUwNjA4MTAwMDQzWhcNMjUwNjA5MTAwMDQzWjAzMTEwLwYDVQQD
EyhhYmQ4NDNkNDI5NGE5ZWRiM2UwM2ZhNTIyY2VmNmFmMGRjYzFhOWQ4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApmyB2TbMPMYQ5fYKi/5aqMyjiFQT
SpA36vgBPwtLJwCRgy0esstRRUIwEIUTutRe8GWJJjDPXP224PBgVFpB/v1LsSTo
ejlc/8Ir0XS+iz24AuVtKc2AYJy/APTD42yTmk1tVcQ393t5U3GHsEqpctvRkuKt
qwW/CVXF3vwF15Q4apVbw9YNebiqmv5qHZNXpDAPxRE+eu5aRhoUErcNA95ZU4m7
0wxu2K8qTdPke4s0hiw2cCahoowpXvwCnq7YqQqnsbt1zt5LS06erQBqbNAEpxzZ
GwXvnv8mFh5id9YKUgOd0R19b6jolOFKbGBsZ9q69LXhWXQjl7vuwCUyMQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKvYQ9QpSp7bPgP6UizvavDcwanYMB8GA1UdIwQY
MBaAFP06uVhHabNMaV4O875ADeXIcF9YMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS9hZDllOWMtYWNhMi00ODBjLTgyZTgt
MDZmYWYxNDk2NjkzLzEvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS9hZDllOWMtYWNhMi00ODBjLTgyZTgtMDZmYWYxNDk2Njkz
LzEvX1RxNVdFZHBzMHhwWGc3enZrQU41Y2h3WDFnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ4e3U5MZ
KosfhqLETN0tBapyXbMl9q8PGjEwBSVfEGsP1jZChFtlFQ2d7gM05wOrM2sSK7gk
wZU2LwVhYwiGd5uGEH9Q4lxPnYIjfEyFp2qZlnlODI5euZ0zoVGPiFJRaqYUqNcm
/vT87LYz4o4NEy/JePx/+rTk3pnkHpp82+A7cRwXIBwVZFEPPOct+VL4EJCt7KA+
hR3d19CYMkVpoAhIjkkpX3zHA4XVMxBwDxSNBNc6N0SKyPaMv8bmRIitEFAjP3Le
ToMInjc7++SKRG0MJ+DlxJRpWXTnSvepka6j/qaS1++ShVq74sngkVqIyHHN4gVK
Pnrn6s1RmTBfJg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:39:55 2025 by rpki-client