Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
File: I67pTQ__bGx1KmlC_6lirjfH5rY.mft (raw, json)
Hash identifier: 2bJCMOFGwR/3jUPCRhN8tr1+nJnpj3Thw6doy8OMXn4=
Subject key identifier: 7C:37:9A:21:49:49:FB:41:A4:65:D1:52:71:82:73:E9:BF:80:1A:A0
Authority key identifier: 23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
Certificate issuer: /CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Certificate serial: 01974A7B17495D3DAFAC19B39D6E5589F046
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
Manifest number: 157D
Signing time: Sat 07 Jun 2025 13:01:10 +0000
Manifest this update: Sat 07 Jun 2025 13:01:10 +0000
Manifest next update: Sun 08 Jun 2025 13:01:10 +0000
Files and hashes: 1: I67pTQ__bGx1KmlC_6lirjfH5rY.crl (hash: DsCbwjcmWKC+vK+QWIBRgRrm/2xJkfMGvqGMwYoxBWI=)
2: gR0LYM6QGI-qsid_nSKtkxsGl7k.roa (hash: ZNyhf/gNov+ZA8ZlWmnXcmM+r4ht/hEtiegrCZhA7GA=)
3: s_AzbY_4r2Y_-4vfgCGonUFbZoY.roa (hash: HgaSiRleH54HgG93gpFtFR8yZx0H4YCH5wCdvkPpECU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7b:17:49:5d:3d:af:ac:19:b3:9d:6e:55:89:f0:46
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23aee94d0fff6c6c752a6942ffa962ae37c7e6b6
Validity
Not Before: Jun 7 13:01:10 2025 GMT
Not After : Jun 8 13:01:10 2025 GMT
Subject: CN=7c379a214949fb41a465d152718273e9bf801aa0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:b5:81:11:b5:e2:2d:d8:7e:4c:de:7b:4a:f3:
7f:32:4a:97:b0:89:79:f2:dc:94:52:c0:21:7a:5d:
f1:33:d6:98:cb:5f:29:64:88:db:9b:6d:86:b2:ee:
55:1a:7d:62:ad:a6:e0:54:38:3e:d5:e4:9d:74:f8:
2c:c8:b9:06:03:59:be:62:05:c9:27:5d:06:ee:bc:
17:5b:fa:4b:48:43:33:f2:a7:8d:cc:b0:ee:8e:b5:
93:76:ba:7c:a6:be:8a:49:f7:5e:6d:be:9f:8e:7d:
e6:23:c1:97:14:e2:d6:3d:e6:a3:90:95:03:0a:0c:
b1:68:52:0b:bd:3e:90:c9:bc:42:aa:09:7c:5a:08:
9c:db:33:d2:b9:1c:74:0e:a4:d8:b9:c8:05:76:86:
23:d2:cd:2a:aa:0c:f4:a7:ee:e8:bb:05:f1:fe:f6:
bd:f2:13:18:86:fa:05:3c:2e:46:94:0b:dd:d3:b1:
cf:55:08:46:cb:4c:0f:4f:9b:a0:22:e2:34:e7:6f:
ac:fb:cd:e8:1a:e1:c5:1d:5e:7a:11:58:cb:63:6f:
17:69:10:c0:75:af:91:60:8e:54:5e:34:7f:83:10:
72:f5:5b:2e:d3:8c:7a:d7:a4:1b:f8:c8:11:39:27:
c0:b6:43:77:9a:cf:66:ca:95:b2:ca:63:20:b2:84:
08:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7C:37:9A:21:49:49:FB:41:A4:65:D1:52:71:82:73:E9:BF:80:1A:A0
X509v3 Authority Key Identifier:
keyid:23:AE:E9:4D:0F:FF:6C:6C:75:2A:69:42:FF:A9:62:AE:37:C7:E6:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I67pTQ__bGx1KmlC_6lirjfH5rY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d70262-f87c-4126-af85-a31853e6997a/1/I67pTQ__bGx1KmlC_6lirjfH5rY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:56:16:de:35:1a:26:1a:92:b0:d1:d4:fc:1c:64:56:0e:ba:
48:91:90:50:a6:05:9b:ec:b9:36:c0:c1:5e:2c:d1:40:8c:8d:
aa:49:72:da:e3:d2:00:5d:9b:03:de:23:01:ec:1e:21:9d:eb:
8d:b8:3a:1e:c0:16:24:05:be:94:bb:ba:e3:28:39:13:e9:b8:
ac:b9:b1:69:0a:42:30:27:9c:08:eb:81:42:af:c5:07:86:c2:
45:c3:e6:5e:31:3b:5c:f6:cd:e9:78:17:35:b0:5f:b0:87:2e:
99:65:5c:71:c8:97:32:ad:70:92:7d:d6:e2:9e:53:03:c7:73:
7f:fb:3b:e6:e5:29:25:db:97:c0:58:15:66:b0:ae:e9:8b:cc:
50:2c:2f:76:17:75:6a:02:f5:fe:d7:e5:44:0b:cd:c8:4f:e0:
c5:94:f6:e2:72:98:46:f7:0b:4f:b3:c4:83:07:43:50:60:5d:
53:fa:35:d0:a5:ad:29:93:e2:f1:14:5f:c8:0d:c2:a4:48:68:
4f:da:05:ff:cd:27:b2:72:83:bb:ce:c0:38:df:0a:a8:d2:a5:
d6:e1:5d:da:39:a7:2a:cc:00:9f:d3:54:1f:b6:4e:7b:64:76:
d4:a9:79:72:fd:f0:df:e1:70:34:10:74:31:62:78:ce:5d:1f:
3f:0a:b4:cc
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKexdJXT2vrBmznW5VifBGMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYWVlOTRkMGZmZjZjNmM3NTJhNjk0MmZmYTk2MmFlMzdj
N2U2YjYwHhcNMjUwNjA3MTMwMTEwWhcNMjUwNjA4MTMwMTEwWjAzMTEwLwYDVQQD
Eyg3YzM3OWEyMTQ5NDlmYjQxYTQ2NWQxNTI3MTgyNzNlOWJmODAxYWEwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwbWBEbXiLdh+TN57SvN/MkqXsIl5
8tyUUsAhel3xM9aYy18pZIjbm22Gsu5VGn1irabgVDg+1eSddPgsyLkGA1m+YgXJ
J10G7rwXW/pLSEMz8qeNzLDujrWTdrp8pr6KSfdebb6fjn3mI8GXFOLWPeajkJUD
CgyxaFILvT6QybxCqgl8Wgic2zPSuRx0DqTYucgFdoYj0s0qqgz0p+7ouwXx/va9
8hMYhvoFPC5GlAvd07HPVQhGy0wPT5ugIuI052+s+83oGuHFHV56EVjLY28XaRDA
da+RYI5UXjR/gxBy9Vsu04x616Qb+MgROSfAtkN3ms9mypWyymMgsoQIEwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHw3miFJSftBpGXRUnGCc+m/gBqgMB8GA1UdIwQY
MBaAFCOu6U0P/2xsdSppQv+pYq43x+a2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNzAyNjItZjg3Yy00MTI2LWFmODUt
YTMxODUzZTY5OTdhLzEvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kNzAyNjItZjg3Yy00MTI2LWFmODUtYTMxODUzZTY5OTdh
LzEvSTY3cFRRX19iR3gxS21sQ182bGlyamZINXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArlYW3jUa
JhqSsNHU/BxkVg66SJGQUKYFm+y5NsDBXizRQIyNqkly2uPSAF2bA94jAeweIZ3r
jbg6HsAWJAW+lLu64yg5E+m4rLmxaQpCMCecCOuBQq/FB4bCRcPmXjE7XPbN6XgX
NbBfsIcumWVccciXMq1wkn3W4p5TA8dzf/s75uUpJduXwFgVZrCu6YvMUCwvdhd1
agL1/tflRAvNyE/gxZT24nKYRvcLT7PEgwdDUGBdU/o10KWtKZPi8RRfyA3CpEho
T9oF/80nsnKDu87AON8KqNKl1uFd2jmnKswAn9NUH7ZOe2R21Kl5cv3w3+FwNBB0
MWJ4zl0fPwq0zA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:12:12 2025 by rpki-client