Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
File: CFl4byJsttSQv7VClOYRp9Uajx4.mft (raw, json)
Hash identifier: ncUIU0S6buRjDKA8hjzbmIHc4C4U/9s4Ujc5f8xZhA0=
Subject key identifier: 3F:D7:77:A8:B9:A2:D9:95:93:49:8B:31:58:8D:65:F1:B2:C9:1B:28
Authority key identifier: 08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
Certificate issuer: /CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Certificate serial: 019767E0A8761B5CF074DD83596A34F9BA4E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
Manifest number: 158F
Signing time: Fri 13 Jun 2025 06:01:05 +0000
Manifest this update: Fri 13 Jun 2025 06:01:05 +0000
Manifest next update: Sat 14 Jun 2025 06:01:05 +0000
Files and hashes: 1: CFl4byJsttSQv7VClOYRp9Uajx4.crl (hash: QbPIxPxjzmC6kdd4o92Z+iPIftOa/+fNgOVmu79ZP4c=)
2: khdNE-TXPiQU7_zhseWvcPNxKjs.roa (hash: Y6s3dJ3krWnGKL8gHHrqA2GAVorou6mJqcyj5OaAz3U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 06:01:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:67:e0:a8:76:1b:5c:f0:74:dd:83:59:6a:34:f9:ba:4e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0859786f226cb6d490bfb54294e611a7d51a8f1e
Validity
Not Before: Jun 13 06:01:05 2025 GMT
Not After : Jun 14 06:01:05 2025 GMT
Subject: CN=3fd777a8b9a2d99593498b31588d65f1b2c91b28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ba:87:20:4a:f6:d3:ab:f1:77:16:75:9b:35:41:
ad:1e:37:f2:45:e4:95:fe:a2:d1:41:b7:bf:85:87:
82:d1:1a:a7:ed:6a:f5:40:ac:4d:26:5c:02:84:a9:
ea:84:33:7e:99:5a:b3:87:e3:18:ec:a7:fa:b4:15:
98:aa:8c:f3:69:b7:8d:32:67:2c:5b:5e:86:ea:78:
90:21:9d:bc:0a:b1:25:9c:d8:f4:dd:a3:48:02:9e:
e1:55:b3:f0:09:20:b4:05:17:fd:54:fa:72:85:14:
8c:9b:db:61:fa:88:cc:19:8a:76:44:38:56:9f:6e:
b3:6e:0d:84:be:40:99:b0:48:dd:16:7d:39:dd:5d:
c8:82:63:e0:7d:00:24:ac:a1:17:fb:a3:e5:cf:77:
ec:54:55:2c:0c:80:de:66:a3:c7:ec:f1:53:e4:c6:
1e:63:d7:7b:0d:d4:69:fd:4b:8c:c6:3d:f8:25:4d:
95:dc:47:b5:b3:08:1e:6d:1b:84:b7:d3:b1:61:eb:
73:71:d5:c9:32:25:b3:0e:8e:71:ed:00:f3:bc:a2:
67:d6:99:96:9c:bb:17:c7:75:64:44:b9:ca:9b:b4:
94:b6:31:60:61:ac:0b:de:90:9a:99:7f:30:3f:5b:
82:28:32:ce:05:3c:4d:b5:bc:f5:f2:c5:cc:e2:9a:
8a:8d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:D7:77:A8:B9:A2:D9:95:93:49:8B:31:58:8D:65:F1:B2:C9:1B:28
X509v3 Authority Key Identifier:
keyid:08:59:78:6F:22:6C:B6:D4:90:BF:B5:42:94:E6:11:A7:D5:1A:8F:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CFl4byJsttSQv7VClOYRp9Uajx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6d/684ee3-fbed-4226-91ad-52fe4434350e/1/CFl4byJsttSQv7VClOYRp9Uajx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:c9:93:78:82:b2:c8:05:23:7d:c1:ce:b8:f2:e8:39:da:03:
45:b6:e8:90:13:ca:93:07:85:2e:2b:c3:a3:62:22:2b:bd:c3:
b1:b3:73:44:32:f0:ac:8c:b5:01:3c:03:0e:0e:31:bd:65:2a:
83:bc:2a:db:0c:c3:7e:77:f2:5d:ad:00:47:c4:50:a1:d4:0f:
a2:d3:4f:5e:f7:bc:e9:f7:50:78:5e:0d:c9:76:e2:6c:18:87:
d5:e1:19:ff:34:79:5f:bd:f6:1d:0f:f3:7a:b9:d2:2b:35:8e:
63:62:36:14:b1:6e:b5:2b:18:ed:70:6e:76:9f:f4:6a:83:bd:
21:ca:c0:5d:59:c4:54:c1:29:5f:ca:5f:f1:11:32:ea:65:58:
6c:26:6e:0e:15:f9:61:d1:45:4d:dd:bf:44:4f:39:de:bb:20:
f5:22:e6:67:bc:87:29:99:0c:ab:60:59:69:42:8c:a9:c8:37:
90:49:8a:1e:8b:0a:e8:b1:f0:12:b3:12:cb:45:b3:d8:f4:f5:
8f:39:48:ef:23:89:db:ec:cb:c3:ea:1a:77:77:fe:05:8f:df:
8a:c6:9b:32:bf:c9:a2:3d:d6:2a:b8:ed:15:b3:6d:cc:3b:1d:
5b:5e:04:e0:59:1b:19:9f:4d:86:ca:12:e3:cd:5c:9a:6f:20:
a7:91:db:44
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdn4Kh2G1zwdN2DWWo0+bpOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDA4NTk3ODZmMjI2Y2I2ZDQ5MGJmYjU0Mjk0ZTYxMWE3ZDUx
YThmMWUwHhcNMjUwNjEzMDYwMTA1WhcNMjUwNjE0MDYwMTA1WjAzMTEwLwYDVQQD
EygzZmQ3NzdhOGI5YTJkOTk1OTM0OThiMzE1ODhkNjVmMWIyYzkxYjI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuocgSvbTq/F3FnWbNUGtHjfyReSV
/qLRQbe/hYeC0Rqn7Wr1QKxNJlwChKnqhDN+mVqzh+MY7Kf6tBWYqozzabeNMmcs
W16G6niQIZ28CrElnNj03aNIAp7hVbPwCSC0BRf9VPpyhRSMm9th+ojMGYp2RDhW
n26zbg2EvkCZsEjdFn053V3IgmPgfQAkrKEX+6Plz3fsVFUsDIDeZqPH7PFT5MYe
Y9d7DdRp/UuMxj34JU2V3Ee1swgebRuEt9OxYetzcdXJMiWzDo5x7QDzvKJn1pmW
nLsXx3VkRLnKm7SUtjFgYawL3pCamX8wP1uCKDLOBTxNtbz18sXM4pqKjQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD/Xd6i5otmVk0mLMViNZfGyyRsoMB8GA1UdIwQY
MBaAFAhZeG8ibLbUkL+1QpTmEafVGo8eMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ0ZsNGJ5SnN0dFNRdjdWQ2xPWVJwOVVhang0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZC82ODRlZTMtZmJlZC00MjI2LTkxYWQt
NTJmZTQ0MzQzNTBlLzEvQ0ZsNGJ5SnN0dFNRdjdWQ2xPWVJwOVVhang0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZC82ODRlZTMtZmJlZC00MjI2LTkxYWQtNTJmZTQ0MzQzNTBl
LzEvQ0ZsNGJ5SnN0dFNRdjdWQ2xPWVJwOVVhang0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUcmTeIKy
yAUjfcHOuPLoOdoDRbbokBPKkweFLivDo2IiK73DsbNzRDLwrIy1ATwDDg4xvWUq
g7wq2wzDfnfyXa0AR8RQodQPotNPXve86fdQeF4NyXbibBiH1eEZ/zR5X732HQ/z
ernSKzWOY2I2FLFutSsY7XBudp/0aoO9IcrAXVnEVMEpX8pf8REy6mVYbCZuDhX5
YdFFTd2/RE853rsg9SLmZ7yHKZkMq2BZaUKMqcg3kEmKHosK6LHwErMSy0Wz2PT1
jzlI7yOJ2+zLw+oad3f+BY/fisabMr/Joj3WKrjtFbNtzDsdW14E4FkbGZ9NhsoS
481cmm8gp5HbRA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 15:44:01 2025 by rpki-client