Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
File: V7dxGL1WsrO0SZxWanxkiq16bp8.mft (raw, json)
Hash identifier: b/L3SkpuZw0Gi2NBxahONHNQ9+G+66upgQT6zQpes/4=
Subject key identifier: D0:68:72:CC:51:4F:07:AA:AC:DD:44:F6:9E:19:42:E4:C5:E0:A0:36
Authority key identifier: 57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
Certificate issuer: /CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Certificate serial: 0197594904BE24DF57DDB217C3387407CD9D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
Manifest number: 14B6
Signing time: Tue 10 Jun 2025 10:00:46 +0000
Manifest this update: Tue 10 Jun 2025 10:00:46 +0000
Manifest next update: Wed 11 Jun 2025 10:00:46 +0000
Files and hashes: 1: 3AgNndxC3sa0yZvKsMQhIngarPI.roa (hash: ZMLpockLoP2nXNAFFK4mODjHzPZHkVrx4CiFq319wa8=)
2: V7dxGL1WsrO0SZxWanxkiq16bp8.crl (hash: zPZJaewtYJTqvjZc6OKSodhdoB/uG59ru6YIiSzonUE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 11 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:59:49:04:be:24:df:57:dd:b2:17:c3:38:74:07:cd:9d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=57b77118bd56b2b3b4499c566a7c648aad7a6e9f
Validity
Not Before: Jun 10 10:00:46 2025 GMT
Not After : Jun 11 10:00:46 2025 GMT
Subject: CN=d06872cc514f07aaacdd44f69e1942e4c5e0a036
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:ff:3c:a4:6f:3e:f7:5b:89:8b:d3:51:19:a6:
51:3a:17:1a:dd:f5:69:8f:46:58:53:a3:83:e2:cd:
71:ca:39:35:c3:6a:17:5b:bb:c3:7e:ee:c8:f2:30:
b9:98:17:47:7f:0b:0b:a9:ad:99:ef:ca:b7:7a:2b:
42:e8:37:20:dc:a4:2c:33:19:da:ba:0e:cb:34:6a:
1c:86:29:fa:5d:c3:5e:f9:78:f4:1b:99:90:46:99:
0f:b9:10:4a:9c:9d:25:d5:44:e2:47:16:c8:e8:77:
f1:a9:51:22:47:12:c9:6b:1b:d8:cf:10:95:36:ec:
16:05:34:c4:b1:81:39:6d:f5:58:87:67:7d:7f:4e:
de:b0:30:e2:e4:89:e0:a1:ab:8f:25:ef:4b:c5:a4:
c6:82:62:56:1e:84:29:60:93:aa:e4:08:e9:66:a5:
21:29:3a:29:fa:e3:64:64:bf:be:16:48:e8:c9:99:
50:c5:ec:4c:28:69:f7:c1:1d:35:07:5a:34:87:7f:
83:9e:ab:ca:77:ef:8a:e9:b0:59:c4:a6:ca:ea:6f:
fe:eb:18:29:30:13:76:7b:04:8c:dd:b2:08:09:d2:
13:0d:7e:14:27:b9:40:9b:8b:fb:2f:9b:fc:83:39:
41:9b:b2:39:f3:b0:a1:ab:57:db:0c:8c:a8:dc:19:
9e:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D0:68:72:CC:51:4F:07:AA:AC:DD:44:F6:9E:19:42:E4:C5:E0:A0:36
X509v3 Authority Key Identifier:
keyid:57:B7:71:18:BD:56:B2:B3:B4:49:9C:56:6A:7C:64:8A:AD:7A:6E:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V7dxGL1WsrO0SZxWanxkiq16bp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/68/b64837-5e86-4909-a07b-065aa4155ed4/1/V7dxGL1WsrO0SZxWanxkiq16bp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
34:8a:a6:88:c5:df:a0:5e:82:ae:97:9a:8a:0d:b7:21:ca:f8:
13:7d:5e:b8:3d:9b:a8:b9:87:bc:17:e1:61:9e:d1:9b:a7:6e:
16:e0:24:16:44:e0:c7:df:f0:2c:c2:58:b2:2c:2f:8a:8a:cb:
90:4b:6b:dc:10:de:e2:ec:29:2d:bb:ca:a6:ad:73:16:02:28:
60:20:aa:3e:be:2b:26:fe:c3:21:f9:2b:c1:bd:0c:ee:7e:be:
e5:2b:cb:9f:da:ac:66:d5:64:83:e3:bf:aa:a8:51:9b:9b:01:
1c:a7:65:e4:2c:0c:9c:51:e5:db:cb:50:6c:e1:4f:20:4c:6f:
67:0d:5d:3c:80:bf:0f:9e:a2:15:aa:9b:15:95:c0:45:d5:dc:
bc:c1:3a:6f:8a:53:83:4f:78:9a:ce:20:7a:c9:91:42:bd:21:
7b:33:5e:2b:f2:ac:33:f9:b6:2e:ee:68:3a:87:eb:12:41:e4:
49:f6:34:ef:13:c8:7c:e5:26:08:1a:c1:ca:3e:27:57:a6:a4:
ed:49:b0:d6:2a:cf:7a:8d:90:6e:68:e3:58:e1:2f:9b:82:70:
6c:38:b7:d2:74:cd:a3:13:3c:c3:b7:20:a2:a7:73:31:0d:9e:
89:a7:fe:cb:f6:34:4e:45:f3:48:bc:cd:e6:66:58:e1:e1:5b:
e4:6a:3a:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdZSQS+JN9X3bIXwzh0B82dMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3Yjc3MTE4YmQ1NmIyYjNiNDQ5OWM1NjZhN2M2NDhhYWQ3
YTZlOWYwHhcNMjUwNjEwMTAwMDQ2WhcNMjUwNjExMTAwMDQ2WjAzMTEwLwYDVQQD
EyhkMDY4NzJjYzUxNGYwN2FhYWNkZDQ0ZjY5ZTE5NDJlNGM1ZTBhMDM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoP88pG8+91uJi9NRGaZROhca3fVp
j0ZYU6OD4s1xyjk1w2oXW7vDfu7I8jC5mBdHfwsLqa2Z78q3eitC6Dcg3KQsMxna
ug7LNGochin6XcNe+Xj0G5mQRpkPuRBKnJ0l1UTiRxbI6HfxqVEiRxLJaxvYzxCV
NuwWBTTEsYE5bfVYh2d9f07esDDi5IngoauPJe9LxaTGgmJWHoQpYJOq5AjpZqUh
KTop+uNkZL++FkjoyZlQxexMKGn3wR01B1o0h3+DnqvKd++K6bBZxKbK6m/+6xgp
MBN2ewSM3bIICdITDX4UJ7lAm4v7L5v8gzlBm7I587Chq1fbDIyo3BmeKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNBocsxRTweqrN1E9p4ZQuTF4KA2MB8GA1UdIwQY
MBaAFFe3cRi9VrKztEmcVmp8ZIqtem6fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OC9iNjQ4MzctNWU4Ni00OTA5LWEwN2It
MDY1YWE0MTU1ZWQ0LzEvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OC9iNjQ4MzctNWU4Ni00OTA5LWEwN2ItMDY1YWE0MTU1ZWQ0
LzEvVjdkeEdMMVdzck8wU1p4V2FueGtpcTE2YnA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANIqmiMXf
oF6Crpeaig23Icr4E31euD2bqLmHvBfhYZ7Rm6duFuAkFkTgx9/wLMJYsiwviorL
kEtr3BDe4uwpLbvKpq1zFgIoYCCqPr4rJv7DIfkrwb0M7n6+5SvLn9qsZtVkg+O/
qqhRm5sBHKdl5CwMnFHl28tQbOFPIExvZw1dPIC/D56iFaqbFZXARdXcvME6b4pT
g094ms4gesmRQr0hezNeK/KsM/m2Lu5oOofrEkHkSfY07xPIfOUmCBrByj4nV6ak
7Umw1irPeo2QbmjjWOEvm4JwbDi30nTNoxM8w7cgoqdzMQ2eiaf+y/Y0TkXzSLzN
5mZY4eFb5Go6Gw==
-----END CERTIFICATE-----
Generated at Tue Jun 10 12:26:07 2025 by rpki-client