Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
File: dRSDZVs1orhHGF9onI_RYB3McYc.mft (raw, json)
Hash identifier: OvH8xPLzaJW+jC7eZMtL9tiRwSTKSatpAK42RvHCOcA=
Subject key identifier: BF:92:3B:51:33:A9:B2:A9:3E:52:A3:CC:DC:03:57:04:89:A9:00:E6
Authority key identifier: 75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
Certificate issuer: /CN=751483655b35a2b847185f689c8fd1601dcc7187
Certificate serial: 0197499EF8DCEFBAF733335EAC2752661917
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 09:00:44 +0000
Manifest this update: Sat 07 Jun 2025 09:00:44 +0000
Manifest next update: Sun 08 Jun 2025 09:00:44 +0000
Files and hashes: 1: dRSDZVs1orhHGF9onI_RYB3McYc.crl (hash: dSIG5JW757DJeZXBJ8omc9BfEBwyjLN5pdJcCwJm48Y=)
2: qzRYbIxueG7BxO2kIyNYDm59o0o.roa (hash: ZxnZOMA5hmEug+cRf8g9nRIfM3tLtcITJFQSj4Zq/Vg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9e:f8:dc:ef:ba:f7:33:33:5e:ac:27:52:66:19:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=751483655b35a2b847185f689c8fd1601dcc7187
Validity
Not Before: Jun 7 09:00:44 2025 GMT
Not After : Jun 8 09:00:44 2025 GMT
Subject: CN=bf923b5133a9b2a93e52a3ccdc03570489a900e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:94:95:68:51:9c:a2:cf:57:cd:2c:b2:5a:02:
a3:96:89:9f:6a:d5:88:1f:9e:6d:64:53:0c:24:0d:
ad:af:f1:4f:21:ed:97:e6:b8:ec:83:da:53:a5:f9:
99:62:64:5f:5a:2e:03:b4:56:2e:3d:40:1a:11:ea:
44:8c:f0:75:49:75:2b:4d:ac:4a:85:f2:6e:e2:96:
cc:c2:4f:8a:0e:24:e3:06:4d:cd:97:9a:ea:54:42:
cb:d0:df:0e:ec:cf:85:2e:a2:cf:dc:1b:50:f6:ab:
2f:03:ce:64:70:29:82:b3:cb:01:df:fb:43:98:db:
49:62:fe:29:2e:d7:4e:68:78:1e:8e:1f:e2:86:ec:
85:37:bb:d0:00:6e:cf:5a:d6:80:82:32:d9:0d:30:
f6:06:60:6f:cc:44:88:09:3b:35:ca:9f:e1:ff:15:
07:d1:36:90:7d:09:21:ae:3d:8f:19:62:58:6b:d6:
a5:32:71:c0:53:a1:aa:ec:68:c1:26:0f:ce:4f:d6:
9c:a9:5f:e7:f1:69:24:57:3f:f2:68:64:3f:bc:c8:
c3:3e:c6:75:82:a7:22:0a:be:8e:70:31:7d:dc:ad:
7e:5e:33:29:e6:aa:b9:4c:2b:b0:a1:d1:f4:4d:e7:
ce:69:3e:1d:fc:7e:cd:4c:0d:66:1b:60:1d:07:9c:
4e:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:92:3B:51:33:A9:B2:A9:3E:52:A3:CC:DC:03:57:04:89:A9:00:E6
X509v3 Authority Key Identifier:
keyid:75:14:83:65:5B:35:A2:B8:47:18:5F:68:9C:8F:D1:60:1D:CC:71:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dRSDZVs1orhHGF9onI_RYB3McYc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/1279fc-1b27-407c-81f4-a7fb36cc2fe3/1/dRSDZVs1orhHGF9onI_RYB3McYc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
41:ad:4b:7e:0d:03:83:45:5e:68:43:51:37:76:36:7e:5b:78:
64:6d:29:f2:36:b0:21:18:51:aa:e3:7f:0e:1f:cd:bb:66:92:
d6:48:6a:f5:06:02:ff:1c:cd:e5:7e:f6:c7:a9:b0:d1:f1:a8:
50:e2:64:c4:cf:92:88:46:de:89:23:81:d0:b3:98:39:d7:cb:
ed:01:92:b2:6d:4b:c4:df:dd:0c:c7:e9:f9:74:1f:11:ed:18:
bb:66:d7:1a:f0:ee:83:bb:d2:cd:a4:0c:1a:8d:11:0c:b0:f0:
3f:41:f8:81:21:87:2b:4b:83:ea:fc:8d:0d:a1:8d:30:c5:9b:
27:bc:46:51:be:30:db:08:60:aa:47:b0:ed:4b:49:e5:87:6a:
71:03:61:13:5a:69:76:14:d6:74:dc:a3:7e:d1:ae:cd:91:e3:
12:9d:55:fa:35:36:3e:03:61:8a:3d:b9:5f:96:13:95:ef:6c:
ce:79:5b:b2:08:28:89:e1:64:f6:a5:1c:f8:f5:c9:9f:ed:ae:
c3:11:ea:27:14:66:7d:f5:b4:98:68:3b:65:d2:93:90:e1:d1:
1a:ff:e4:27:9a:a5:db:be:64:fc:d3:1b:a6:d0:e6:d2:1a:bc:
e5:71:a6:de:32:4b:36:ab:97:c2:e9:d6:a1:67:9b:93:fd:65:
05:4b:28:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJnvjc77r3MzNerCdSZhkXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1MTQ4MzY1NWIzNWEyYjg0NzE4NWY2ODljOGZkMTYwMWRj
YzcxODcwHhcNMjUwNjA3MDkwMDQ0WhcNMjUwNjA4MDkwMDQ0WjAzMTEwLwYDVQQD
EyhiZjkyM2I1MTMzYTliMmE5M2U1MmEzY2NkYzAzNTcwNDg5YTkwMGU2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxJSVaFGcos9XzSyyWgKjlomfatWI
H55tZFMMJA2tr/FPIe2X5rjsg9pTpfmZYmRfWi4DtFYuPUAaEepEjPB1SXUrTaxK
hfJu4pbMwk+KDiTjBk3Nl5rqVELL0N8O7M+FLqLP3BtQ9qsvA85kcCmCs8sB3/tD
mNtJYv4pLtdOaHgejh/ihuyFN7vQAG7PWtaAgjLZDTD2BmBvzESICTs1yp/h/xUH
0TaQfQkhrj2PGWJYa9alMnHAU6Gq7GjBJg/OT9acqV/n8WkkVz/yaGQ/vMjDPsZ1
gqciCr6OcDF93K1+XjMp5qq5TCuwodH0TefOaT4d/H7NTA1mG2AdB5xOpQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL+SO1EzqbKpPlKjzNwDVwSJqQDmMB8GA1UdIwQY
MBaAFHUUg2VbNaK4RxhfaJyP0WAdzHGHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8xMjc5ZmMtMWIyNy00MDdjLTgxZjQt
YTdmYjM2Y2MyZmUzLzEvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8xMjc5ZmMtMWIyNy00MDdjLTgxZjQtYTdmYjM2Y2MyZmUz
LzEvZFJTRFpWczFvcmhIR0Y5b25JX1JZQjNNY1ljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQa1Lfg0D
g0VeaENRN3Y2flt4ZG0p8jawIRhRquN/Dh/Nu2aS1khq9QYC/xzN5X72x6mw0fGo
UOJkxM+SiEbeiSOB0LOYOdfL7QGSsm1LxN/dDMfp+XQfEe0Yu2bXGvDug7vSzaQM
Go0RDLDwP0H4gSGHK0uD6vyNDaGNMMWbJ7xGUb4w2whgqkew7UtJ5YdqcQNhE1pp
dhTWdNyjftGuzZHjEp1V+jU2PgNhij25X5YTle9sznlbsggoieFk9qUc+PXJn+2u
wxHqJxRmffW0mGg7ZdKTkOHRGv/kJ5ql275k/NMbptDm0hq85XGm3jJLNquXwunW
oWebk/1lBUsoTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:46:20 2025 by rpki-client