Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
File: tWGrEAAXphJTFvzGEzhKr73mAYk.mft (raw, json)
Hash identifier: Tr6m471itPRJtR9I7/CpWM+ZF8jfwXSdvsJnHLjSS/8=
Subject key identifier: 1E:B8:92:1E:93:81:DF:5D:33:BB:06:54:83:59:8D:85:77:D7:9A:5A
Authority key identifier: B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
Certificate issuer: /CN=b561ab100017a6125316fcc613384aafbde60189
Certificate serial: 01974DB2B84B15CBEB53AC01DB8F3243F612
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
Manifest number: 05FA
Signing time: Sun 08 Jun 2025 04:00:47 +0000
Manifest this update: Sun 08 Jun 2025 04:00:47 +0000
Manifest next update: Mon 09 Jun 2025 04:00:47 +0000
Files and hashes: 1: 54hiEVCu42nmTIhQ3bS5shMqgPg.roa (hash: Rk0IIWWSef2+X2JeCku/njRK3YOnsndfGq7YFCHBZaw=)
2: tWGrEAAXphJTFvzGEzhKr73mAYk.crl (hash: conAULiVmG/Nov1D7zT9ArXmjsfO+EdAC+1MdWJJhgw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4d:b2:b8:4b:15:cb:eb:53:ac:01:db:8f:32:43:f6:12
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b561ab100017a6125316fcc613384aafbde60189
Validity
Not Before: Jun 8 04:00:47 2025 GMT
Not After : Jun 9 04:00:47 2025 GMT
Subject: CN=1eb8921e9381df5d33bb065483598d8577d79a5a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dc:3b:ab:3d:db:e7:e7:f9:66:52:36:5d:03:59:
f1:44:c8:f4:2e:c6:1b:45:c5:75:97:ea:24:d9:0a:
84:df:33:ce:f6:ac:01:6e:75:23:b8:45:87:84:ae:
f0:2c:c3:63:b6:21:71:4d:fc:c7:5b:6a:b3:3f:79:
25:81:10:c5:a6:7f:f1:aa:25:ea:03:c2:46:5d:c8:
fb:a0:ed:4e:5c:d5:6b:80:1d:dc:3f:9f:ed:e9:a6:
1a:af:89:28:bd:ae:bd:a2:47:4d:89:51:a4:d5:97:
f6:fb:9d:71:84:ae:88:79:f7:4c:ee:85:74:7b:87:
c2:44:66:81:c0:99:65:3e:77:62:88:bc:ce:3a:f2:
f2:9d:40:09:1e:0e:bc:2a:a4:db:45:11:f2:5f:35:
20:39:29:6d:ae:b8:80:47:cf:a1:f9:6f:8c:87:ef:
4d:47:b7:7f:8c:c8:80:ef:d9:8f:7a:ff:1c:4e:64:
e9:9e:0a:15:3a:af:44:27:52:98:01:c3:96:a8:35:
6c:3a:78:55:d6:a1:58:23:ff:56:aa:d7:6e:f1:ac:
1c:0a:36:8c:6d:13:7f:e8:3c:36:3c:35:db:b4:39:
c0:02:22:9a:18:ab:c3:e3:69:18:9e:5d:74:41:95:
65:ad:f4:d2:1b:bd:c8:55:23:23:c9:61:ee:29:25:
5a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:B8:92:1E:93:81:DF:5D:33:BB:06:54:83:59:8D:85:77:D7:9A:5A
X509v3 Authority Key Identifier:
keyid:B5:61:AB:10:00:17:A6:12:53:16:FC:C6:13:38:4A:AF:BD:E6:01:89
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tWGrEAAXphJTFvzGEzhKr73mAYk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6a/80ee8f-867a-4b25-ae5d-92b9daa00379/1/tWGrEAAXphJTFvzGEzhKr73mAYk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:1b:ad:4a:13:51:bb:14:74:36:38:6a:01:f0:e0:d1:d9:cd:
24:0e:e7:b9:ba:69:c8:20:00:31:d5:81:32:2e:37:f7:bf:ad:
07:ea:4c:6e:f9:c8:34:4c:69:9a:a6:b4:e6:08:24:5c:69:6b:
ff:a5:4e:f8:1d:1e:f2:f6:48:49:b3:25:71:8a:ee:04:f3:5d:
13:a0:37:3f:b8:5f:56:13:7a:f5:fd:7f:15:c0:05:96:2d:e7:
8f:97:c4:d6:a4:fe:3d:a9:c8:ee:3b:e7:00:88:03:cf:b1:41:
fb:e5:25:50:ca:c2:35:e1:3c:37:09:9c:dc:cb:df:7c:80:dc:
20:9d:d8:d5:74:03:6c:b4:08:64:d3:91:3c:11:9c:9b:67:fd:
6c:92:d0:7f:f3:50:49:b5:e9:57:12:25:a3:fe:69:8c:d9:20:
09:6d:f3:ca:4c:83:a6:62:f2:5c:9b:0c:37:d8:8e:80:da:38:
8f:5c:db:ab:c2:5c:3b:aa:f7:db:b8:69:13:4a:af:bf:10:04:
57:52:ec:c1:28:05:e7:9a:46:b7:70:0b:9a:80:33:db:fb:2e:
a4:3f:e2:5a:da:17:ea:19:39:7c:fa:58:4b:b8:8b:ec:dd:55:
8e:a5:59:f6:43:64:41:3e:ad:29:e7:e0:03:bf:44:6d:55:84:
1f:9f:6e:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdNsrhLFcvrU6wB248yQ/YSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1NjFhYjEwMDAxN2E2MTI1MzE2ZmNjNjEzMzg0YWFmYmRl
NjAxODkwHhcNMjUwNjA4MDQwMDQ3WhcNMjUwNjA5MDQwMDQ3WjAzMTEwLwYDVQQD
EygxZWI4OTIxZTkzODFkZjVkMzNiYjA2NTQ4MzU5OGQ4NTc3ZDc5YTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3DurPdvn5/lmUjZdA1nxRMj0LsYb
RcV1l+ok2QqE3zPO9qwBbnUjuEWHhK7wLMNjtiFxTfzHW2qzP3klgRDFpn/xqiXq
A8JGXcj7oO1OXNVrgB3cP5/t6aYar4kova69okdNiVGk1Zf2+51xhK6IefdM7oV0
e4fCRGaBwJllPndiiLzOOvLynUAJHg68KqTbRRHyXzUgOSltrriAR8+h+W+Mh+9N
R7d/jMiA79mPev8cTmTpngoVOq9EJ1KYAcOWqDVsOnhV1qFYI/9Wqtdu8awcCjaM
bRN/6Dw2PDXbtDnAAiKaGKvD42kYnl10QZVlrfTSG73IVSMjyWHuKSVaKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB64kh6Tgd9dM7sGVINZjYV315paMB8GA1UdIwQY
MBaAFLVhqxAAF6YSUxb8xhM4Sq+95gGJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82YS84MGVlOGYtODY3YS00YjI1LWFlNWQt
OTJiOWRhYTAwMzc5LzEvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82YS84MGVlOGYtODY3YS00YjI1LWFlNWQtOTJiOWRhYTAwMzc5
LzEvdFdHckVBQVhwaEpURnZ6R0V6aEtyNzNtQVlrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdxutShNR
uxR0NjhqAfDg0dnNJA7nubppyCAAMdWBMi4397+tB+pMbvnINExpmqa05ggkXGlr
/6VO+B0e8vZISbMlcYruBPNdE6A3P7hfVhN69f1/FcAFli3nj5fE1qT+PanI7jvn
AIgDz7FB++UlUMrCNeE8Nwmc3MvffIDcIJ3Y1XQDbLQIZNORPBGcm2f9bJLQf/NQ
SbXpVxIlo/5pjNkgCW3zykyDpmLyXJsMN9iOgNo4j1zbq8JcO6r327hpE0qvvxAE
V1LswSgF55pGt3ALmoAz2/supD/iWtoX6hk5fPpYS7iL7N1VjqVZ9kNkQT6tKefg
A79EbVWEH59uMA==
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:02:33 2025 by rpki-client