Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
File: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft (raw, json)
Hash identifier: WHp7zwlbV1I5xxrc8nLT+F4mtmO6BZtJlXrOKo1Kvyk=
Subject key identifier: A6:52:D6:85:C0:6D:DB:C3:55:B7:BB:7B:0D:D7:DD:10:1A:C8:1A:B0
Authority key identifier: D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
Certificate issuer: /CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Certificate serial: 019750B43E715CCB35BAAC48E3EB2F4A56E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
Manifest number: 11D7
Signing time: Sun 08 Jun 2025 18:01:19 +0000
Manifest this update: Sun 08 Jun 2025 18:01:19 +0000
Manifest next update: Mon 09 Jun 2025 18:01:19 +0000
Files and hashes: 1: 2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl (hash: d8kgzsViapWw0Qs9aKuG4r9I2zjnM8ou0nsmE7nik88=)
2: a0IOHkR8Hy4G4S5yuBNMKITBrOY.roa (hash: 1vK3mpE9sJgd81KLmucTH/3OWCFME4WKb3CLP0pv4Go=)
3: rYY4LoHLKvwtUeUNSpp95Qcfcq8.roa (hash: /s16opQaCPrDK0FCkiKZL+BAqy0vK7xfbC0nU+PFPrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 17:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:b4:3e:71:5c:cb:35:ba:ac:48:e3:eb:2f:4a:56:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d98ac0b1066d0defcb1695643dcbaa0739975ca8
Validity
Not Before: Jun 8 18:01:19 2025 GMT
Not After : Jun 9 18:01:19 2025 GMT
Subject: CN=a652d685c06ddbc355b7bb7b0dd7dd101ac81ab0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f1:87:5f:88:ec:b1:32:d6:b8:2b:13:f0:74:73:
b2:2c:f3:56:5c:27:4b:aa:b4:53:b7:fd:73:12:ea:
e8:d4:b1:1f:94:d6:db:5f:33:30:a2:eb:96:89:de:
34:27:2e:52:3e:3a:8b:72:94:5a:bf:05:d9:f3:9a:
8e:ce:fa:28:23:e4:65:69:f0:cb:09:f0:93:94:ce:
3f:c2:6f:e7:4d:4f:11:21:f2:eb:38:76:95:90:4c:
c4:69:90:97:96:0f:d4:50:7b:e2:f0:4a:76:40:f3:
25:af:4e:1b:f0:a7:ac:f2:04:74:a4:20:6b:01:ec:
f2:55:21:ab:01:b0:fe:ee:34:b0:3f:91:b3:2c:9b:
6d:59:0c:f9:4e:23:79:a7:00:0a:24:e1:1d:2b:52:
fa:ea:26:8f:7b:34:1c:15:e9:3b:2f:cb:03:e8:a1:
73:aa:25:25:f1:96:f2:23:09:8f:51:f1:b4:0b:dc:
13:36:61:69:7a:78:8e:1a:84:10:7d:9f:fc:a2:e2:
84:f6:76:7a:f0:44:a7:ae:2d:d1:83:ed:c0:75:6b:
62:da:21:95:d3:51:67:aa:94:e0:14:d7:82:c4:a4:
8e:2b:60:dd:43:68:e4:bb:7d:ba:da:39:61:68:f5:
71:77:31:7e:44:56:61:aa:47:a0:ef:25:55:50:f4:
b1:5f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A6:52:D6:85:C0:6D:DB:C3:55:B7:BB:7B:0D:D7:DD:10:1A:C8:1A:B0
X509v3 Authority Key Identifier:
keyid:D9:8A:C0:B1:06:6D:0D:EF:CB:16:95:64:3D:CB:AA:07:39:97:5C:A8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2YrAsQZtDe_LFpVkPcuqBzmXXKg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5e/0f50bb-1fe1-4c83-8c88-e35d2d5f00f8/1/2YrAsQZtDe_LFpVkPcuqBzmXXKg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:2b:8c:dd:aa:af:37:63:f3:82:18:7c:a2:e6:71:ca:db:ff:
88:2a:10:eb:0e:1a:34:16:52:8e:1f:ab:f8:41:75:06:be:3e:
cf:34:e2:60:11:1b:fd:a4:9e:d4:c1:3c:f5:a0:8b:2f:af:5b:
37:83:4e:32:b1:cf:c3:c0:b0:75:05:6c:b2:47:0d:bc:33:5e:
35:76:d4:d7:56:f2:4d:2c:71:a0:de:3f:2b:69:78:49:ff:c6:
60:38:c3:6f:7f:4f:1e:0e:0b:b8:8a:0b:69:f8:72:a3:89:99:
84:17:aa:fe:cb:0b:a9:d8:49:ae:24:c9:ae:2b:39:38:be:14:
31:eb:c8:41:97:90:9a:7f:72:22:52:54:a8:f0:32:e1:a4:33:
2d:66:fb:d3:f0:2c:99:61:12:c1:4d:23:7a:57:9c:8e:55:3a:
9c:3b:df:37:87:25:2b:0a:37:35:27:9b:a8:76:4d:84:56:63:
bb:b9:1e:7e:c2:77:98:a9:58:1a:06:a3:f0:a3:e0:8c:0c:0e:
e5:32:45:97:8e:e3:69:f0:1e:60:93:4a:e7:b7:61:06:17:49:
10:f4:ad:42:bc:1d:8b:e8:9a:7d:28:f0:cc:55:16:ca:d9:18:
30:ef:80:bd:0c:24:50:a8:42:95:f9:ba:f1:f5:4f:ee:a1:07:
c1:9a:4a:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQtD5xXMs1uqxI4+svSlbiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ5OGFjMGIxMDY2ZDBkZWZjYjE2OTU2NDNkY2JhYTA3Mzk5
NzVjYTgwHhcNMjUwNjA4MTgwMTE5WhcNMjUwNjA5MTgwMTE5WjAzMTEwLwYDVQQD
EyhhNjUyZDY4NWMwNmRkYmMzNTViN2JiN2IwZGQ3ZGQxMDFhYzgxYWIwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA8YdfiOyxMta4KxPwdHOyLPNWXCdL
qrRTt/1zEuro1LEflNbbXzMwouuWid40Jy5SPjqLcpRavwXZ85qOzvooI+RlafDL
CfCTlM4/wm/nTU8RIfLrOHaVkEzEaZCXlg/UUHvi8Ep2QPMlr04b8Kes8gR0pCBr
AezyVSGrAbD+7jSwP5GzLJttWQz5TiN5pwAKJOEdK1L66iaPezQcFek7L8sD6KFz
qiUl8ZbyIwmPUfG0C9wTNmFpeniOGoQQfZ/8ouKE9nZ68ESnri3Rg+3AdWti2iGV
01FnqpTgFNeCxKSOK2DdQ2jku3262jlhaPVxdzF+RFZhqkeg7yVVUPSxXwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKZS1oXAbdvDVbe7ew3X3RAayBqwMB8GA1UdIwQY
MBaAFNmKwLEGbQ3vyxaVZD3Lqgc5l1yoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81ZS8wZjUwYmItMWZlMS00YzgzLThjODgt
ZTM1ZDJkNWYwMGY4LzEvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81ZS8wZjUwYmItMWZlMS00YzgzLThjODgtZTM1ZDJkNWYwMGY4
LzEvMllyQXNRWnREZV9MRnBWa1BjdXFCem1YWEtnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmCuM3aqv
N2Pzghh8ouZxytv/iCoQ6w4aNBZSjh+r+EF1Br4+zzTiYBEb/aSe1ME89aCLL69b
N4NOMrHPw8CwdQVsskcNvDNeNXbU11byTSxxoN4/K2l4Sf/GYDjDb39PHg4LuIoL
afhyo4mZhBeq/ssLqdhJriTJris5OL4UMevIQZeQmn9yIlJUqPAy4aQzLWb70/As
mWESwU0jelecjlU6nDvfN4clKwo3NSebqHZNhFZju7kefsJ3mKlYGgaj8KPgjAwO
5TJFl47jafAeYJNK57dhBhdJEPStQrwdi+iafSjwzFUWytkYMO+AvQwkUKhClfm6
8fVP7qEHwZpKgw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 00:15:00 2025 by rpki-client