Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
File: p18lqzxmADstWvg9KzZR-I0VHyo.mft (raw, json)
Hash identifier: qYlixqkvgu/JJTNekLboc0lFFGc41BxumFSd3xS04RQ=
Subject key identifier: 6B:0A:C1:C8:9E:E4:74:96:BD:E4:10:25:8C:55:EB:54:2D:65:CB:0C
Authority key identifier: A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A
Certificate issuer: /CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
Certificate serial: 01975F146C9E66CC7B798FCEB3D72B64ADB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
Manifest number: 0723
Signing time: Wed 11 Jun 2025 13:01:03 +0000
Manifest this update: Wed 11 Jun 2025 13:01:03 +0000
Manifest next update: Thu 12 Jun 2025 13:01:03 +0000
Files and hashes: 1: Ox_5wctFyZuvInmQs0hviVdHYTY.roa (hash: g8iHju69S1V2EgutTovP9pVMh3pNWKkzCgYSyMGlRgE=)
2: p18lqzxmADstWvg9KzZR-I0VHyo.crl (hash: KjItdsFVWftcU8yOvDGs7VGo/Ze/Ue8zw2dzHwcoz70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl
rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 13:01:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:14:6c:9e:66:cc:7b:79:8f:ce:b3:d7:2b:64:ad:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a75f25ab3c66003b2d5af83d2b3651f88d151f2a
Validity
Not Before: Jun 11 13:01:03 2025 GMT
Not After : Jun 12 13:01:03 2025 GMT
Subject: CN=6b0ac1c89ee47496bde410258c55eb542d65cb0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:f9:5a:5b:37:0e:4e:67:4d:1a:d7:54:36:2a:
50:5b:ce:60:ab:6b:3a:8c:5f:b3:ea:b7:62:73:54:
c7:60:e1:51:b2:5c:62:e3:75:79:88:7c:03:c0:40:
3a:51:dd:e9:c9:6d:16:78:e8:66:6a:16:85:d2:2d:
e7:35:3f:10:cc:3c:10:0a:f7:6b:cf:68:77:c2:94:
86:26:11:3c:bb:33:12:9e:93:15:7d:3d:73:ce:19:
60:4d:78:00:ba:b5:fd:be:61:fc:7a:44:81:96:e5:
4f:cb:07:bd:77:87:04:0f:63:25:49:37:ee:64:0c:
33:22:50:8e:a3:b3:55:b8:69:2b:1b:0a:58:28:c6:
8a:6b:be:d3:85:e1:b3:bf:27:99:ce:11:65:52:9e:
7f:1c:3c:8b:81:36:bf:d6:85:86:9f:3e:da:c1:81:
8d:88:41:ad:e3:26:1d:6a:dc:cf:ca:7a:91:b6:42:
86:09:39:71:c8:cb:c8:e9:ee:50:ae:bc:ec:39:e7:
6a:a8:c6:93:81:e7:93:29:5b:22:19:55:81:30:63:
2b:af:e2:f5:4e:4f:cc:9a:30:db:eb:20:18:72:ad:
1c:16:6d:d2:75:1e:a8:7e:d7:1c:3e:01:6f:c4:45:
c2:46:bf:e3:bc:50:31:c8:dc:0f:c5:6d:90:af:6d:
2c:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6B:0A:C1:C8:9E:E4:74:96:BD:E4:10:25:8C:55:EB:54:2D:65:CB:0C
X509v3 Authority Key Identifier:
keyid:A7:5F:25:AB:3C:66:00:3B:2D:5A:F8:3D:2B:36:51:F8:8D:15:1F:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p18lqzxmADstWvg9KzZR-I0VHyo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/72/d0ef31-991d-496d-9635-b6f4a4d6053b/1/p18lqzxmADstWvg9KzZR-I0VHyo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
30:3f:71:1c:6f:f1:2d:65:d0:7f:03:2f:10:5b:d8:9c:26:4a:
72:3b:34:5e:a8:2d:be:fa:00:39:64:3b:38:d2:96:27:ca:36:
00:5b:c5:b4:cf:5a:83:97:b8:8b:52:f8:e7:15:ca:ed:2e:fc:
8f:63:da:70:39:b9:56:e0:89:23:04:15:23:f2:0f:b8:1b:70:
a1:71:de:08:b5:90:1d:23:d7:31:98:1f:91:c7:51:0c:02:e8:
12:e6:72:79:c1:d5:71:96:8e:68:c5:3a:21:ca:81:13:af:5c:
1c:b6:16:cf:e4:08:f4:07:7f:71:99:1d:7f:b1:48:0a:03:b6:
b8:f0:90:b0:80:1a:82:30:23:dd:b8:6a:3e:48:08:3b:13:37:
f3:82:e5:22:51:8d:d0:18:72:88:80:8f:fe:8b:02:25:5f:b1:
a9:d5:0f:33:2c:5b:68:74:49:e1:eb:e1:91:69:d7:94:ba:68:
d6:5f:44:83:0d:94:1c:1c:d4:2a:bb:12:51:aa:50:e8:4b:58:
a7:9e:df:33:66:3a:0c:df:65:9a:d9:75:30:41:7a:b4:37:ca:
58:e9:46:0a:68:be:84:8b:17:81:62:ab:52:0f:f6:0c:57:2a:
72:6c:c9:58:ec:d1:2c:39:66:fa:b2:49:83:b2:7f:6c:b8:d1:
e7:85:a2:00
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfFGyeZsx7eY/Os9crZK24MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NWYyNWFiM2M2NjAwM2IyZDVhZjgzZDJiMzY1MWY4OGQx
NTFmMmEwHhcNMjUwNjExMTMwMTAzWhcNMjUwNjEyMTMwMTAzWjAzMTEwLwYDVQQD
Eyg2YjBhYzFjODllZTQ3NDk2YmRlNDEwMjU4YzU1ZWI1NDJkNjVjYjBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmPlaWzcOTmdNGtdUNipQW85gq2s6
jF+z6rdic1THYOFRslxi43V5iHwDwEA6Ud3pyW0WeOhmahaF0i3nNT8QzDwQCvdr
z2h3wpSGJhE8uzMSnpMVfT1zzhlgTXgAurX9vmH8ekSBluVPywe9d4cED2MlSTfu
ZAwzIlCOo7NVuGkrGwpYKMaKa77TheGzvyeZzhFlUp5/HDyLgTa/1oWGnz7awYGN
iEGt4yYdatzPynqRtkKGCTlxyMvI6e5QrrzsOedqqMaTgeeTKVsiGVWBMGMrr+L1
Tk/MmjDb6yAYcq0cFm3SdR6oftccPgFvxEXCRr/jvFAxyNwPxW2Qr20s8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGsKwcie5HSWveQQJYxV61QtZcsMMB8GA1UdIwQY
MBaAFKdfJas8ZgA7LVr4PSs2UfiNFR8qMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDE4bHF6eG1BRHN0V3ZnOUt6WlItSTBWSHlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Mi9kMGVmMzEtOTkxZC00OTZkLTk2MzUt
YjZmNGE0ZDYwNTNiLzEvcDE4bHF6eG1BRHN0V3ZnOUt6WlItSTBWSHlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Mi9kMGVmMzEtOTkxZC00OTZkLTk2MzUtYjZmNGE0ZDYwNTNi
LzEvcDE4bHF6eG1BRHN0V3ZnOUt6WlItSTBWSHlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMD9xHG/x
LWXQfwMvEFvYnCZKcjs0XqgtvvoAOWQ7ONKWJ8o2AFvFtM9ag5e4i1L45xXK7S78
j2PacDm5VuCJIwQVI/IPuBtwoXHeCLWQHSPXMZgfkcdRDALoEuZyecHVcZaOaMU6
IcqBE69cHLYWz+QI9Ad/cZkdf7FICgO2uPCQsIAagjAj3bhqPkgIOxM384LlIlGN
0BhyiICP/osCJV+xqdUPMyxbaHRJ4evhkWnXlLpo1l9Egw2UHBzUKrsSUapQ6EtY
p57fM2Y6DN9lmtl1MEF6tDfKWOlGCmi+hIsXgWKrUg/2DFcqcmzJWOzRLDlm+rJJ
g7J/bLjR54WiAA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 20:46:50 2025 by rpki-client