Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
File: 2vtkXxNPT9raRecLz82TuJfb1yU.mft (raw, json)
Hash identifier: W5G0Lq8/0xXqaCpv+cECBqfY10DAGlMCeiXThXKwBYw=
Subject key identifier: D0:91:C4:7D:3F:8B:21:B9:A9:8C:63:84:77:42:1A:BC:45:21:88:21
Authority key identifier: DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
Certificate issuer: /CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Certificate serial: 0197499F7095E6B4982810D069F535F02A74
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
Manifest number: 158D
Signing time: Sat 07 Jun 2025 09:01:15 +0000
Manifest this update: Sat 07 Jun 2025 09:01:15 +0000
Manifest next update: Sun 08 Jun 2025 09:01:15 +0000
Files and hashes: 1: 1-ANTwxkMiMKQB8xGwWXlceOK28w.roa (hash: CGGHdGVU7wSNMOEYT0PFZuvvNwO+aPmiIHIahEg7OsM=)
2: 2vtkXxNPT9raRecLz82TuJfb1yU.crl (hash: mjgNP68u7flX9CaAOfD0Fhekui4e0tgg4IAjz0RkL1o=)
3: OVvSE0umfCafdF8GBhnUzkw6GgQ.roa (hash: uBO3ZxlAsPptAYBmUB8o0+apZBCG8SM73O12SZ0wtoI=)
4: PB7iIGKrDK97LW2R8MB2s86RYac.roa (hash: WmZvf5hoyroankBIMBpV0PHxkWR9+aExsWVo3nYOgg0=)
5: S7t59LlNCvxgMI7DsGNSR4qMw34.roa (hash: 4sO8Qj6ryDL8EQZQIGGVCpEKJDIwq55BmcA8TSzv0hc=)
6: bPTKlYF7fifjOqSTQNeQoeP_kuk.roa (hash: Ig5CuSUtEUSpLkPiPPlcB0rfKh8VZMxcp4q355338uk=)
7: k2MwpYy3078S260mykYqGyjDM9M.roa (hash: B5YQnM96hhYb/liddrILOeInZbquc/XQMtKwLnspcOk=)
8: tDMe4xxusG4_nRn5fi_c_u7WdKk.roa (hash: mHno5k7JcmFvfoqPEzv0djEKAYVxO3uLY89gsIjau0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:70:95:e6:b4:98:28:10:d0:69:f5:35:f0:2a:74
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dafb645f134f4fdada45e70bcfcd93b897dbd725
Validity
Not Before: Jun 7 09:01:15 2025 GMT
Not After : Jun 8 09:01:15 2025 GMT
Subject: CN=d091c47d3f8b21b9a98c638477421abc45218821
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e8:f6:b2:99:9b:16:94:7b:7d:b2:09:29:95:
d0:e9:f3:cb:59:2a:2b:11:52:2b:bf:65:92:65:54:
fe:e6:16:1c:3c:83:65:17:9d:5e:65:9d:bd:22:0d:
43:7f:b7:55:51:59:1e:94:64:47:7b:83:0e:45:4f:
db:7a:43:e1:9e:4e:5d:18:63:5c:ec:ef:dd:9b:f4:
4f:39:15:1f:06:27:c6:f8:bc:f0:7e:8a:51:fe:f9:
26:c9:19:b3:ad:f1:85:a7:74:1c:7d:65:c2:1d:02:
4b:5a:9f:9e:41:49:ac:f1:cd:10:23:9b:09:94:fa:
e1:ac:8a:ef:fe:63:fd:86:04:45:aa:9c:31:bc:15:
b0:a6:0f:6c:56:6a:a5:c5:9f:57:c8:b0:0b:f1:a4:
2d:1f:bd:63:a7:e9:1a:c6:ea:35:95:8f:28:ee:42:
34:55:2b:07:a0:c4:d6:b3:8d:f0:6a:0f:d0:f0:e9:
9a:a2:a8:4e:b5:a1:c5:36:0c:b1:12:e7:d3:c2:16:
b2:4b:1c:e3:8a:ee:f6:c0:f0:3d:4e:a5:1b:b4:56:
a4:8e:4c:c8:10:17:28:97:29:26:35:0b:96:d0:7e:
4b:56:16:e9:8b:f9:82:eb:af:89:27:91:2c:63:79:
73:31:78:08:ce:3d:f7:ac:c9:66:e6:ea:5d:5e:df:
d7:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:91:C4:7D:3F:8B:21:B9:A9:8C:63:84:77:42:1A:BC:45:21:88:21
X509v3 Authority Key Identifier:
keyid:DA:FB:64:5F:13:4F:4F:DA:DA:45:E7:0B:CF:CD:93:B8:97:DB:D7:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2vtkXxNPT9raRecLz82TuJfb1yU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/52/7a48f5-bd24-4dc4-8cca-6ba0a0ce01ed/1/2vtkXxNPT9raRecLz82TuJfb1yU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:ac:bf:d4:76:83:d4:82:34:69:35:8c:36:ba:57:d1:bd:36:
cc:70:3b:e1:13:9b:20:cf:f8:11:ae:2a:41:01:e0:c5:33:ae:
02:88:84:26:b8:8e:54:58:4a:91:8c:ce:67:51:07:ec:71:73:
61:44:3f:39:f2:54:2e:ab:3f:a7:32:74:5e:16:db:43:36:c5:
71:e3:82:69:50:73:68:e1:9a:9a:5b:0f:0b:3b:b0:6e:d9:ea:
21:16:69:98:4d:70:ac:0b:f9:4d:ad:1c:dd:9c:be:78:29:7d:
b5:ee:52:59:ba:36:0c:aa:79:07:af:c4:cf:3b:03:c9:0f:e6:
8d:c8:93:d9:59:b1:fe:74:29:68:dd:52:44:28:22:64:ed:c1:
c7:7a:04:a8:81:ab:a0:06:74:03:bc:1c:6f:8b:f4:d4:7c:f4:
8b:4c:92:ab:5b:6e:df:84:66:a2:74:43:0c:bc:73:95:6c:e5:
cb:9e:19:3f:4c:17:c0:e8:b8:6c:ff:65:18:2b:0a:7b:be:79:
40:fd:1a:1f:23:35:85:e3:92:bc:43:ec:ad:01:4a:7e:64:ed:
c8:a4:96:ea:6b:70:4f:ef:e2:b6:94:5d:34:4b:61:c3:98:68:
4b:84:81:dd:27:14:1a:b4:ef:ae:0c:13:62:09:a4:f4:37:15:
d9:59:40:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn3CV5rSYKBDQafU18Cp0MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZmI2NDVmMTM0ZjRmZGFkYTQ1ZTcwYmNmY2Q5M2I4OTdk
YmQ3MjUwHhcNMjUwNjA3MDkwMTE1WhcNMjUwNjA4MDkwMTE1WjAzMTEwLwYDVQQD
EyhkMDkxYzQ3ZDNmOGIyMWI5YTk4YzYzODQ3NzQyMWFiYzQ1MjE4ODIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+j2spmbFpR7fbIJKZXQ6fPLWSor
EVIrv2WSZVT+5hYcPINlF51eZZ29Ig1Df7dVUVkelGRHe4MORU/bekPhnk5dGGNc
7O/dm/RPORUfBifG+LzwfopR/vkmyRmzrfGFp3QcfWXCHQJLWp+eQUms8c0QI5sJ
lPrhrIrv/mP9hgRFqpwxvBWwpg9sVmqlxZ9XyLAL8aQtH71jp+kaxuo1lY8o7kI0
VSsHoMTWs43wag/Q8OmaoqhOtaHFNgyxEufTwhaySxzjiu72wPA9TqUbtFakjkzI
EBcolykmNQuW0H5LVhbpi/mC66+JJ5EsY3lzMXgIzj33rMlm5updXt/XpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNCRxH0/iyG5qYxjhHdCGrxFIYghMB8GA1UdIwQY
MBaAFNr7ZF8TT0/a2kXnC8/Nk7iX29clMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2Et
NmJhMGEwY2UwMWVkLzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Mi83YTQ4ZjUtYmQyNC00ZGM0LThjY2EtNmJhMGEwY2UwMWVk
LzEvMnZ0a1h4TlBUOXJhUmVjTHo4MlR1SmZiMXlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASay/1HaD
1II0aTWMNrpX0b02zHA74RObIM/4Ea4qQQHgxTOuAoiEJriOVFhKkYzOZ1EH7HFz
YUQ/OfJULqs/pzJ0XhbbQzbFceOCaVBzaOGamlsPCzuwbtnqIRZpmE1wrAv5Ta0c
3Zy+eCl9te5SWbo2DKp5B6/EzzsDyQ/mjciT2Vmx/nQpaN1SRCgiZO3Bx3oEqIGr
oAZ0A7wcb4v01Hz0i0ySq1tu34RmonRDDLxzlWzly54ZP0wXwOi4bP9lGCsKe755
QP0aHyM1heOSvEPsrQFKfmTtyKSW6mtwT+/itpRdNEthw5hoS4SB3ScUGrTvrgwT
Ygmk9DcV2VlA1A==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:50:25 2025 by rpki-client