Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
File: licbYtGOSsd8YQlpDqrkzDTQ6bY.mft (raw, json)
Hash identifier: Ye3H9j05VjfFXsJYdphT/8uVF6XSmKfFCVtZ3wzUFGg=
Subject key identifier: DE:E3:85:FC:75:BA:CD:03:C7:CD:5E:5A:D5:F4:A7:60:22:DD:82:CC
Authority key identifier: 96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
Certificate issuer: /CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Certificate serial: 01975D5CF96A0CB080C960BC37B9347E780A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
Manifest number: 0A3C
Signing time: Wed 11 Jun 2025 05:01:03 +0000
Manifest this update: Wed 11 Jun 2025 05:01:03 +0000
Manifest next update: Thu 12 Jun 2025 05:01:03 +0000
Files and hashes: 1: IaAYctjYC9OdNTPcnTixy2ccUzU.roa (hash: eOFbMC4GCXw4TW2u0+c7a73RmqtvjAxvsy3+jqBN21w=)
2: X6SMQ0jEGeZDJ_4uYPtUEXmYusc.roa (hash: FdAgr11itjQmO3uyq8UgNfN1pT9LErTuoVrKYdZ843k=)
3: licbYtGOSsd8YQlpDqrkzDTQ6bY.crl (hash: zuKFvk/fTuhrWlKvWYPnzbflGu6EtwhPvvLExC7+yms=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 23:00:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:5c:f9:6a:0c:b0:80:c9:60:bc:37:b9:34:7e:78:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=96271b62d18e4ac77c6109690eaae4cc34d0e9b6
Validity
Not Before: Jun 11 05:01:03 2025 GMT
Not After : Jun 12 05:01:03 2025 GMT
Subject: CN=dee385fc75bacd03c7cd5e5ad5f4a76022dd82cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:18:ea:49:45:4b:27:b9:16:7b:ed:40:f7:86:
d0:0b:20:a0:0f:97:3f:f8:7a:29:94:99:55:39:37:
f9:d6:4d:6c:e4:d8:17:91:c4:79:af:8d:c2:40:63:
75:bc:ef:84:ce:c0:82:4a:35:80:1e:1e:50:bc:7a:
5c:3d:52:f2:0f:1f:07:e5:00:34:51:96:6e:44:df:
ee:3c:1b:fc:d7:68:f1:31:90:3d:44:6b:bb:76:e7:
89:32:97:e8:ed:7f:af:8d:0f:29:f4:8d:a3:79:68:
76:4a:74:9f:52:8c:cc:a0:9a:4d:d1:ec:cb:0e:32:
3d:0b:1f:ae:20:09:03:f8:fe:a1:01:88:2e:f1:75:
63:be:68:4f:6e:29:b7:ed:94:bf:70:5b:20:0a:0f:
62:03:f0:be:97:5f:7b:e5:53:46:93:1c:66:4f:17:
2e:d9:25:f4:3a:6d:72:35:41:92:54:59:1c:64:60:
7b:e2:b7:fd:d0:d5:e4:8d:f6:66:98:ce:20:4b:ee:
27:7a:fd:31:26:fe:49:29:c3:4a:e4:f4:72:e8:07:
70:d1:d5:65:0c:04:a6:be:51:eb:0b:66:14:2e:fd:
8e:1d:bc:2c:d6:a1:c3:b8:42:45:08:39:2a:8a:46:
4f:80:bb:0e:b6:97:04:23:81:32:fd:29:42:4d:4a:
fd:e9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E3:85:FC:75:BA:CD:03:C7:CD:5E:5A:D5:F4:A7:60:22:DD:82:CC
X509v3 Authority Key Identifier:
keyid:96:27:1B:62:D1:8E:4A:C7:7C:61:09:69:0E:AA:E4:CC:34:D0:E9:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/licbYtGOSsd8YQlpDqrkzDTQ6bY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/55/f6b60b-5808-48a2-8203-1ca3fbbfba3f/1/licbYtGOSsd8YQlpDqrkzDTQ6bY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a2:4d:c3:6b:04:1d:11:48:e4:a4:ba:90:e8:c2:a5:ae:9c:69:
9d:10:f8:ef:f7:72:74:56:ce:a2:0a:f1:96:2b:58:70:fc:03:
62:05:ce:f4:06:dd:e7:c3:a5:c7:b7:8a:4b:2f:f5:69:bf:e4:
6a:4f:02:9f:1a:8d:3e:42:7c:5f:94:04:c9:b2:cb:03:4a:9e:
04:1e:b5:90:9c:b6:05:cf:dc:7c:11:e4:fc:8c:4d:63:74:6c:
61:be:d0:6f:8d:56:b6:fc:93:ef:c7:e5:3f:ab:1d:d3:60:07:
36:7d:f5:fd:d2:04:a0:01:76:14:b1:f1:ad:8f:c8:79:64:b1:
0e:82:f6:bf:6b:4f:9c:bb:87:f9:d5:b1:2f:90:38:71:b5:ab:
b3:ec:96:82:50:57:d1:f4:9d:0f:15:11:4c:2e:9a:8e:af:f2:
d2:99:a4:54:ce:b8:79:93:37:df:9f:fb:d0:11:91:d4:8a:2e:
db:c8:b9:51:0d:23:f6:cb:33:49:d2:bf:88:79:2a:e4:66:ae:
61:ad:c9:95:34:65:cd:ca:0b:3f:59:29:31:ca:ab:64:94:66:
cf:37:65:76:69:8b:1e:18:3c:5c:cc:21:27:8f:9f:82:a4:e4:
1f:26:6c:61:84:ad:46:41:82:e3:6a:b2:78:b9:c5:ff:a5:65:
a5:81:7c:94
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddXPlqDLCAyWC8N7k0fngKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk2MjcxYjYyZDE4ZTRhYzc3YzYxMDk2OTBlYWFlNGNjMzRk
MGU5YjYwHhcNMjUwNjExMDUwMTAzWhcNMjUwNjEyMDUwMTAzWjAzMTEwLwYDVQQD
EyhkZWUzODVmYzc1YmFjZDAzYzdjZDVlNWFkNWY0YTc2MDIyZGQ4MmNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwBjqSUVLJ7kWe+1A94bQCyCgD5c/
+HoplJlVOTf51k1s5NgXkcR5r43CQGN1vO+EzsCCSjWAHh5QvHpcPVLyDx8H5QA0
UZZuRN/uPBv812jxMZA9RGu7dueJMpfo7X+vjQ8p9I2jeWh2SnSfUozMoJpN0ezL
DjI9Cx+uIAkD+P6hAYgu8XVjvmhPbim37ZS/cFsgCg9iA/C+l1975VNGkxxmTxcu
2SX0Om1yNUGSVFkcZGB74rf90NXkjfZmmM4gS+4nev0xJv5JKcNK5PRy6Adw0dVl
DASmvlHrC2YULv2OHbws1qHDuEJFCDkqikZPgLsOtpcEI4Ey/SlCTUr96QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7jhfx1us0Dx81eWtX0p2Ai3YLMMB8GA1UdIwQY
MBaAFJYnG2LRjkrHfGEJaQ6q5Mw00Om2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMt
MWNhM2ZiYmZiYTNmLzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81NS9mNmI2MGItNTgwOC00OGEyLTgyMDMtMWNhM2ZiYmZiYTNm
LzEvbGljYll0R09Tc2Q4WVFscERxcmt6RFRRNmJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAok3DawQd
EUjkpLqQ6MKlrpxpnRD47/dydFbOogrxlitYcPwDYgXO9Abd58Olx7eKSy/1ab/k
ak8CnxqNPkJ8X5QEybLLA0qeBB61kJy2Bc/cfBHk/IxNY3RsYb7Qb41WtvyT78fl
P6sd02AHNn31/dIEoAF2FLHxrY/IeWSxDoL2v2tPnLuH+dWxL5A4cbWrs+yWglBX
0fSdDxURTC6ajq/y0pmkVM64eZM335/70BGR1Iou28i5UQ0j9sszSdK/iHkq5Gau
Ya3JlTRlzcoLP1kpMcqrZJRmzzdldmmLHhg8XMwhJ4+fgqTkHyZsYYStRkGC42qy
eLnF/6VlpYF8lA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 07:29:55 2025 by rpki-client