Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
File: ap1tJuVsEy3bvABaxCT7U2rLoCA.mft (raw, json)
Hash identifier: MkEDM2xonm4I9HKWNcUMaVWHsGoz5kcPYd2MBeX4rUU=
Subject key identifier: E4:3A:21:31:AF:21:CC:AD:DA:DA:BA:F0:51:7C:DC:2F:AC:29:A5:87
Authority key identifier: 6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
Certificate issuer: /CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Certificate serial: 019747796CB5F0CFC1ABE7530C2995CF760B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
Manifest number: 150D
Signing time: Fri 06 Jun 2025 23:00:29 +0000
Manifest this update: Fri 06 Jun 2025 23:00:29 +0000
Manifest next update: Sat 07 Jun 2025 23:00:29 +0000
Files and hashes: 1: 5lxdXXMFxYxoygmdkLHDVycf6Ls.roa (hash: 8akqgrA1gBkLMeQEUc+FbsTSvkiKqDW9xlyu0c6xU6A=)
2: ap1tJuVsEy3bvABaxCT7U2rLoCA.crl (hash: fAxI8sACJjo9wcmdxWDcYS2J+QfTmsn6Jqi8Y+3vXLo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:6c:b5:f0:cf:c1:ab:e7:53:0c:29:95:cf:76:0b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a9d6d26e56c132ddbbc005ac424fb536acba020
Validity
Not Before: Jun 6 23:00:29 2025 GMT
Not After : Jun 7 23:00:29 2025 GMT
Subject: CN=e43a2131af21ccaddadabaf0517cdc2fac29a587
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:ab:0b:b0:69:95:c9:ff:50:bc:f6:b3:a1:74:
17:4d:f8:ff:45:35:78:c2:8b:ec:d4:10:0b:61:4a:
4f:fd:1f:85:20:d0:96:1b:32:4e:e8:12:24:80:4f:
83:4c:d2:36:19:36:bc:d0:b1:d0:f7:58:4d:d7:77:
82:d9:e0:0d:fa:f2:93:ac:59:33:1a:7d:a2:0f:b6:
69:d1:8e:b5:09:c9:c6:59:bc:da:cb:a5:61:c5:f5:
a5:ad:eb:07:f5:34:6d:b5:3e:5a:9d:ec:a8:cc:e3:
80:d9:63:d5:03:0b:9f:dc:48:43:a6:53:16:c6:19:
0f:cd:47:c0:a7:9a:4b:5c:f2:d0:cf:b3:f3:6f:e4:
56:49:8e:a9:45:0c:64:02:8c:c5:d6:a6:7d:ca:c1:
da:62:1f:9d:e6:c0:a9:f0:59:f9:10:9b:25:f8:47:
85:85:31:a2:95:b9:4e:29:bf:0d:73:2a:ea:92:71:
de:b7:21:36:ac:20:45:44:53:e7:d3:0b:a4:e0:28:
e2:54:4d:f9:85:6c:e3:74:62:2a:09:bf:73:09:19:
04:a5:49:4a:7e:77:2f:97:08:7b:c3:df:c9:3e:49:
28:fe:95:7f:ed:8f:22:25:4b:21:ed:05:89:25:f1:
83:aa:a8:9d:f6:c4:cb:75:0b:ae:6a:d0:d1:1a:ea:
22:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E4:3A:21:31:AF:21:CC:AD:DA:DA:BA:F0:51:7C:DC:2F:AC:29:A5:87
X509v3 Authority Key Identifier:
keyid:6A:9D:6D:26:E5:6C:13:2D:DB:BC:00:5A:C4:24:FB:53:6A:CB:A0:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ap1tJuVsEy3bvABaxCT7U2rLoCA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/30/99dd6e-0856-4a27-aecd-d8928f5e1b40/1/ap1tJuVsEy3bvABaxCT7U2rLoCA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7b:ab:bb:0d:e7:cd:cf:ce:c5:a4:f3:bf:dc:5b:79:b8:2b:79:
7b:e6:7a:ef:f5:f2:4c:4c:23:cf:ee:51:05:58:95:14:07:ce:
b7:14:83:50:e1:21:33:43:a6:47:31:3f:81:9b:b7:82:e2:ad:
24:b9:fe:f6:f7:4e:8a:0e:4b:6c:ef:a4:48:f3:29:d0:04:9a:
0c:2a:11:42:e4:4f:ab:59:2c:fe:50:32:04:86:5a:24:65:32:
00:21:2f:74:a6:20:3d:3f:78:e1:0f:f4:91:9a:70:4d:59:10:
a6:79:e7:e0:02:73:d8:66:66:47:f0:70:2d:f0:89:c2:94:34:
41:b5:61:d6:35:d6:09:de:c0:a8:62:8f:fe:73:04:12:86:3c:
e4:1f:b8:3f:44:7f:5f:47:6a:54:1a:78:89:08:3d:47:9e:1a:
10:36:13:9a:c0:30:b0:88:bc:0b:25:33:91:cf:c3:f7:1e:7f:
23:81:30:b5:ee:a4:21:77:69:2a:d1:74:d2:c5:be:9d:ad:c1:
b1:74:5d:55:28:0f:44:df:b6:c7:e1:90:e4:44:c7:e9:08:77:
20:2b:77:88:07:f8:19:e8:e7:3b:05:6d:11:ce:db:0d:7e:ec:
87:45:de:16:d3:05:49:f3:33:84:53:90:35:49:66:16:01:da:
18:0c:60:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeWy18M/Bq+dTDCmVz3YLMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOWQ2ZDI2ZTU2YzEzMmRkYmJjMDA1YWM0MjRmYjUzNmFj
YmEwMjAwHhcNMjUwNjA2MjMwMDI5WhcNMjUwNjA3MjMwMDI5WjAzMTEwLwYDVQQD
EyhlNDNhMjEzMWFmMjFjY2FkZGFkYWJhZjA1MTdjZGMyZmFjMjlhNTg3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnasLsGmVyf9QvPazoXQXTfj/RTV4
wovs1BALYUpP/R+FINCWGzJO6BIkgE+DTNI2GTa80LHQ91hN13eC2eAN+vKTrFkz
Gn2iD7Zp0Y61CcnGWbzay6VhxfWlresH9TRttT5aneyozOOA2WPVAwuf3EhDplMW
xhkPzUfAp5pLXPLQz7Pzb+RWSY6pRQxkAozF1qZ9ysHaYh+d5sCp8Fn5EJsl+EeF
hTGilblOKb8NcyrqknHetyE2rCBFRFPn0wuk4CjiVE35hWzjdGIqCb9zCRkEpUlK
fncvlwh7w9/JPkko/pV/7Y8iJUsh7QWJJfGDqqid9sTLdQuuatDRGuoiYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOQ6ITGvIcyt2tq68FF83C+sKaWHMB8GA1UdIwQY
MBaAFGqdbSblbBMt27wAWsQk+1Nqy6AgMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zMC85OWRkNmUtMDg1Ni00YTI3LWFlY2Qt
ZDg5MjhmNWUxYjQwLzEvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zMC85OWRkNmUtMDg1Ni00YTI3LWFlY2QtZDg5MjhmNWUxYjQw
LzEvYXAxdEp1VnNFeTNidkFCYXhDVDdVMnJMb0NBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAe6u7DefN
z87FpPO/3Ft5uCt5e+Z67/XyTEwjz+5RBViVFAfOtxSDUOEhM0OmRzE/gZu3guKt
JLn+9vdOig5LbO+kSPMp0ASaDCoRQuRPq1ks/lAyBIZaJGUyACEvdKYgPT944Q/0
kZpwTVkQpnnn4AJz2GZmR/BwLfCJwpQ0QbVh1jXWCd7AqGKP/nMEEoY85B+4P0R/
X0dqVBp4iQg9R54aEDYTmsAwsIi8CyUzkc/D9x5/I4Ewte6kIXdpKtF00sW+na3B
sXRdVSgPRN+2x+GQ5ETH6Qh3ICt3iAf4GejnOwVtEc7bDX7sh0XeFtMFSfMzhFOQ
NUlmFgHaGAxgQQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:01 2025 by rpki-client