Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
File: Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft (raw, json)
Hash identifier: 3lk5vT44dw7VyhdsY+Pe8/Gxn0vzJETy3sNryZ9ysfw=
Subject key identifier: 39:81:63:6C:46:13:6D:8B:D2:97:96:B2:9B:90:17:B5:5C:F6:E1:EC
Authority key identifier: 4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
Certificate issuer: /CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Certificate serial: 019749314397594A7074CA1AD4FD94C86125
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
Manifest number: 157E
Signing time: Sat 07 Jun 2025 07:00:54 +0000
Manifest this update: Sat 07 Jun 2025 07:00:54 +0000
Manifest next update: Sun 08 Jun 2025 07:00:54 +0000
Files and hashes: 1: Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl (hash: p39BjffbOdaFrg2BSOw+3h083+Zuwhq0auk0psEcE+k=)
2: j2scll5jpWJtbLkshsiLm7lQWV4.roa (hash: oBr/N8q4deuJLs5MxsiKxc5IMYfXJKPf/aAvK/FNRFg=)
3: kZMSHFwhjt5ByeIL4QTKEiDJjZQ.roa (hash: WpstqOcmslj7HDAeoS/gg7u0eBQmjbTvTylTqyOzeKc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl
rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 07:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:31:43:97:59:4a:70:74:ca:1a:d4:fd:94:c8:61:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4ddd0f9dcd88949b8f3a3771063562a057679290
Validity
Not Before: Jun 7 07:00:54 2025 GMT
Not After : Jun 8 07:00:54 2025 GMT
Subject: CN=3981636c46136d8bd29796b29b9017b55cf6e1ec
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:0f:d2:8a:98:46:4a:81:44:26:53:e6:3b:d0:
51:5c:e2:2f:94:33:ae:a4:b9:da:4e:1f:56:32:45:
34:d2:0e:96:b1:78:78:3c:0e:c9:7e:1c:be:5a:8e:
29:da:ed:ef:8f:82:12:63:1c:d5:20:09:c7:4c:0f:
32:b4:9b:79:c5:73:77:6f:c8:ef:2a:9b:b1:5b:a7:
f8:15:e7:22:3d:6e:32:6a:52:4e:cc:1c:3e:9a:f0:
a8:01:fe:7e:8a:c5:46:21:94:f5:1b:69:36:96:2f:
b2:15:12:27:12:7d:8b:40:88:91:aa:53:25:9b:29:
60:71:f4:dd:db:82:ba:5c:8a:52:2a:3e:de:d2:56:
f6:df:b0:79:6e:b8:6d:de:5c:c9:1f:08:61:a5:9e:
ca:0f:f6:33:c7:1a:a7:a8:f6:71:ef:98:58:f8:28:
33:87:01:25:92:44:4e:a4:b2:b5:38:6e:c6:71:c3:
cf:9f:94:f8:3a:05:db:47:b8:a1:af:eb:1f:bd:15:
18:54:57:9e:ae:a4:e1:76:24:d1:d5:89:bf:65:c1:
ff:45:5e:0f:e3:93:cb:25:27:47:50:96:f2:b9:f4:
27:03:a9:94:e1:bc:eb:66:37:b6:7c:03:18:56:be:
f8:ae:27:ea:cd:41:0c:48:ae:58:fe:38:02:67:70:
a8:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
39:81:63:6C:46:13:6D:8B:D2:97:96:B2:9B:90:17:B5:5C:F6:E1:EC
X509v3 Authority Key Identifier:
keyid:4D:DD:0F:9D:CD:88:94:9B:8F:3A:37:71:06:35:62:A0:57:67:92:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Td0Pnc2IlJuPOjdxBjVioFdnkpA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/74/3a7e49-9d27-4e4e-aa36-6f6ccb6e2cda/1/Td0Pnc2IlJuPOjdxBjVioFdnkpA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:13:06:f3:20:2e:41:e3:6a:11:cf:93:c3:8a:b0:d3:38:2e:
4c:86:15:c8:ca:dc:8b:76:8e:af:ff:ca:f0:af:e6:22:6d:87:
a2:6b:57:59:0e:a3:63:6e:10:32:da:14:43:5d:2c:50:aa:00:
8f:86:77:90:75:a0:34:ab:47:fb:fc:f2:38:a6:12:93:b4:99:
5f:95:79:6e:00:66:eb:bb:0b:6a:a2:fe:1e:68:6c:98:1a:bf:
0b:2e:76:6a:29:cb:9b:d0:08:c9:07:d4:62:4c:b9:75:1a:3d:
50:56:04:f9:ec:f1:0f:69:6d:54:f3:f7:94:eb:52:9d:8c:3f:
68:b7:7d:f7:e2:d9:61:f0:63:ef:19:db:06:ea:88:40:94:0a:
09:b4:91:11:de:3f:c1:19:4d:07:6e:56:05:59:2e:95:e8:2c:
d3:79:6e:00:a3:16:39:0a:b7:ee:1c:b3:50:cd:b6:14:18:f9:
dd:cc:35:14:19:c2:67:9a:e4:74:43:0d:65:5c:f9:56:ce:21:
2e:0b:88:23:ca:1e:d8:82:b8:c5:77:89:c4:b1:db:1e:0e:24:
25:a1:29:86:c3:43:64:e5:42:00:74:48:94:11:7e:57:e7:2d:
c7:80:09:70:8e:ab:31:88:84:da:56:db:92:92:3d:d5:a2:6b:
0f:6b:81:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJMUOXWUpwdMoa1P2UyGElMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRkZGQwZjlkY2Q4ODk0OWI4ZjNhMzc3MTA2MzU2MmEwNTc2
NzkyOTAwHhcNMjUwNjA3MDcwMDU0WhcNMjUwNjA4MDcwMDU0WjAzMTEwLwYDVQQD
EygzOTgxNjM2YzQ2MTM2ZDhiZDI5Nzk2YjI5YjkwMTdiNTVjZjZlMWVjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAow/SiphGSoFEJlPmO9BRXOIvlDOu
pLnaTh9WMkU00g6WsXh4PA7Jfhy+Wo4p2u3vj4ISYxzVIAnHTA8ytJt5xXN3b8jv
KpuxW6f4FeciPW4yalJOzBw+mvCoAf5+isVGIZT1G2k2li+yFRInEn2LQIiRqlMl
mylgcfTd24K6XIpSKj7e0lb237B5brht3lzJHwhhpZ7KD/YzxxqnqPZx75hY+Cgz
hwElkkROpLK1OG7GccPPn5T4OgXbR7ihr+sfvRUYVFeerqThdiTR1Ym/ZcH/RV4P
45PLJSdHUJbyufQnA6mU4bzrZje2fAMYVr74rifqzUEMSK5Y/jgCZ3CoswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDmBY2xGE22L0peWspuQF7Vc9uHsMB8GA1UdIwQY
MBaAFE3dD53NiJSbjzo3cQY1YqBXZ5KQMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVGQwUG5jMklsSnVQT2pkeEJqVmlvRmRua3BBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NC8zYTdlNDktOWQyNy00ZTRlLWFhMzYt
NmY2Y2NiNmUyY2RhLzEvVGQwUG5jMklsSnVQT2pkeEJqVmlvRmRua3BBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NC8zYTdlNDktOWQyNy00ZTRlLWFhMzYtNmY2Y2NiNmUyY2Rh
LzEvVGQwUG5jMklsSnVQT2pkeEJqVmlvRmRua3BBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiRMG8yAu
QeNqEc+Tw4qw0zguTIYVyMrci3aOr//K8K/mIm2HomtXWQ6jY24QMtoUQ10sUKoA
j4Z3kHWgNKtH+/zyOKYSk7SZX5V5bgBm67sLaqL+HmhsmBq/Cy52ainLm9AIyQfU
Yky5dRo9UFYE+ezxD2ltVPP3lOtSnYw/aLd99+LZYfBj7xnbBuqIQJQKCbSREd4/
wRlNB25WBVkulegs03luAKMWOQq37hyzUM22FBj53cw1FBnCZ5rkdEMNZVz5Vs4h
LguII8oe2IK4xXeJxLHbHg4kJaEphsNDZOVCAHRIlBF+V+ctx4AJcI6rMYiE2lbb
kpI91aJrD2uBiQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:07:17 2025 by rpki-client