Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
File: inQVrmNNYTFZy9LOdKwmGn1axNQ.mft (raw, json)
Hash identifier: Kxxrr7LEDNt6vo1dj4LlPRHzf/KJEkfmRUr6djs7mOk=
Subject key identifier: 53:5B:5E:81:7C:CF:1E:BF:50:7E:5C:77:45:FD:4B:4F:D3:A4:14:A4
Authority key identifier: 8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
Certificate issuer: /CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Certificate serial: 019754906D77023C6D820FF1A5FA162DA454
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
Manifest number: 1584
Signing time: Mon 09 Jun 2025 12:00:40 +0000
Manifest this update: Mon 09 Jun 2025 12:00:40 +0000
Manifest next update: Tue 10 Jun 2025 12:00:40 +0000
Files and hashes: 1: inQVrmNNYTFZy9LOdKwmGn1axNQ.crl (hash: k7J2tQ6ItPBTU93VeKPEeTlK/4YVpCX/BKk8vuprg9M=)
2: oIUHNd2flzQuApFJl7WS3G_Ds7Q.roa (hash: r9vW54cG8T4ZtS4qpMsUDsSVtPyOl8cyq1L4laCQ/ag=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 11:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:54:90:6d:77:02:3c:6d:82:0f:f1:a5:fa:16:2d:a4:54
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8a7415ae634d613159cbd2ce74ac261a7d5ac4d4
Validity
Not Before: Jun 9 12:00:40 2025 GMT
Not After : Jun 10 12:00:40 2025 GMT
Subject: CN=535b5e817ccf1ebf507e5c7745fd4b4fd3a414a4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e2:1e:20:f8:d3:cd:68:6c:21:3b:f2:3b:2d:03:
04:e7:e9:54:d5:f8:e5:c9:36:ac:c2:85:3a:81:91:
b3:8e:61:5d:65:fc:f3:55:43:2b:ad:ef:85:43:13:
96:99:80:cc:0f:61:06:0c:89:9a:db:41:7e:00:a5:
14:26:dd:cf:14:c6:af:79:c9:81:ed:5a:49:99:34:
1f:ff:85:d9:9b:bb:b3:cf:cd:ce:ce:de:73:69:b3:
22:b7:e9:af:7a:79:b4:62:dc:d6:fc:5e:7d:f2:72:
b8:82:bf:ce:91:49:33:61:c9:f6:00:81:e4:b1:53:
ed:44:57:5d:d8:e4:71:8a:b5:6f:20:72:53:00:6f:
22:e2:85:37:d8:a5:2b:07:37:b0:07:82:43:d5:b7:
23:0b:e1:2a:04:18:e7:b2:0e:80:13:b1:68:08:a2:
cd:34:0d:e6:0d:35:b3:c6:75:a5:bb:9d:dc:29:9d:
dd:0c:ca:3f:9f:88:28:d9:16:41:aa:52:de:73:15:
d4:e6:e1:ca:50:4e:a9:80:ac:a2:00:24:c8:57:4c:
65:4e:26:ec:8c:82:ce:68:7d:5e:7b:50:b8:8c:89:
fb:29:a4:ed:69:e0:d0:e4:3a:61:c5:db:35:d7:94:
80:06:41:d2:4e:33:a7:83:24:4b:4f:f1:f3:71:05:
2d:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:5B:5E:81:7C:CF:1E:BF:50:7E:5C:77:45:FD:4B:4F:D3:A4:14:A4
X509v3 Authority Key Identifier:
keyid:8A:74:15:AE:63:4D:61:31:59:CB:D2:CE:74:AC:26:1A:7D:5A:C4:D4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/inQVrmNNYTFZy9LOdKwmGn1axNQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/7dbfe7-3614-456e-bf4c-ef7f56842546/1/inQVrmNNYTFZy9LOdKwmGn1axNQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:a6:45:22:08:6c:c6:cb:dd:40:42:65:5b:74:6e:70:ac:5f:
1a:e4:c5:6e:10:c9:e2:a1:55:94:2b:ba:58:75:bf:32:0b:9c:
bc:38:67:a5:82:b8:dd:52:63:a7:57:8a:b4:08:79:d8:8d:4d:
dd:9c:da:6f:4e:73:ed:95:15:f8:44:89:ce:e0:e2:79:37:b7:
72:66:b3:2e:57:4f:63:64:3f:e9:e0:af:45:22:d3:b1:4d:ac:
34:54:cc:4c:ee:a0:1f:0f:37:16:9a:86:1d:39:0e:da:40:da:
e6:29:60:32:e4:8a:79:6e:41:99:d5:6c:3f:ff:46:67:36:64:
5c:84:03:e0:60:9b:16:ce:d2:a2:b8:f2:af:e1:96:6a:f7:ce:
21:68:3d:1b:d9:23:2d:ac:d3:1a:76:74:ab:d7:b0:9c:69:23:
98:96:69:b4:f4:96:ff:25:ba:e2:62:a7:82:91:4a:33:7b:88:
b1:ae:61:ff:bc:2d:37:e0:9e:18:37:d1:d2:f3:49:b7:25:76:
db:44:74:3f:bb:be:47:04:bf:eb:39:68:2c:06:2f:88:08:93:
e0:88:2f:06:8b:7e:92:ed:6f:73:11:36:df:f4:6c:4d:75:d8:
12:04:36:24:ca:7a:65:bb:b4:47:55:98:2e:84:e8:be:98:1f:
1a:be:18:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdUkG13Ajxtgg/xpfoWLaRUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhNzQxNWFlNjM0ZDYxMzE1OWNiZDJjZTc0YWMyNjFhN2Q1
YWM0ZDQwHhcNMjUwNjA5MTIwMDQwWhcNMjUwNjEwMTIwMDQwWjAzMTEwLwYDVQQD
Eyg1MzViNWU4MTdjY2YxZWJmNTA3ZTVjNzc0NWZkNGI0ZmQzYTQxNGE0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4h4g+NPNaGwhO/I7LQME5+lU1fjl
yTaswoU6gZGzjmFdZfzzVUMrre+FQxOWmYDMD2EGDIma20F+AKUUJt3PFMavecmB
7VpJmTQf/4XZm7uzz83Ozt5zabMit+mvenm0YtzW/F598nK4gr/OkUkzYcn2AIHk
sVPtRFdd2ORxirVvIHJTAG8i4oU32KUrBzewB4JD1bcjC+EqBBjnsg6AE7FoCKLN
NA3mDTWzxnWlu53cKZ3dDMo/n4go2RZBqlLecxXU5uHKUE6pgKyiACTIV0xlTibs
jILOaH1ee1C4jIn7KaTtaeDQ5Dphxds115SABkHSTjOngyRLT/HzcQUt3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNbXoF8zx6/UH5cd0X9S0/TpBSkMB8GA1UdIwQY
MBaAFIp0Fa5jTWExWcvSznSsJhp9WsTUMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS83ZGJmZTctMzYxNC00NTZlLWJmNGMt
ZWY3ZjU2ODQyNTQ2LzEvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS83ZGJmZTctMzYxNC00NTZlLWJmNGMtZWY3ZjU2ODQyNTQ2
LzEvaW5RVnJtTk5ZVEZaeTlMT2RLd21HbjFheE5RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACKZFIghs
xsvdQEJlW3RucKxfGuTFbhDJ4qFVlCu6WHW/MgucvDhnpYK43VJjp1eKtAh52I1N
3Zzab05z7ZUV+ESJzuDieTe3cmazLldPY2Q/6eCvRSLTsU2sNFTMTO6gHw83FpqG
HTkO2kDa5ilgMuSKeW5BmdVsP/9GZzZkXIQD4GCbFs7Sorjyr+GWavfOIWg9G9kj
LazTGnZ0q9ewnGkjmJZptPSW/yW64mKngpFKM3uIsa5h/7wtN+CeGDfR0vNJtyV2
20R0P7u+RwS/6zloLAYviAiT4IgvBot+ku1vcxE23/RsTXXYEgQ2JMp6Zbu0R1WY
LoTovpgfGr4YZw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 19:06:38 2025 by rpki-client