Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
File: 1tk74RT4LQJYkWqXjKy_sVu1hAo.mft (raw, json)
Hash identifier: PcjGEEsx6GQE4SDU1PXzp1l2/u50hgFzkE0Se/KGP3I=
Subject key identifier: 25:A9:8C:51:15:83:C5:7D:D1:3D:30:DD:9A:7D:C1:37:F4:F3:9D:64
Authority key identifier: D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
Certificate issuer: /CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Certificate serial: 0197499F59D40496FCB80FCBA15A835BC732
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
Manifest number: 0FF1
Signing time: Sat 07 Jun 2025 09:01:09 +0000
Manifest this update: Sat 07 Jun 2025 09:01:09 +0000
Manifest next update: Sun 08 Jun 2025 09:01:09 +0000
Files and hashes: 1: 1tk74RT4LQJYkWqXjKy_sVu1hAo.crl (hash: ci/Bjy9151k13UUXb92S2KtTkVPoR7YfJbA7L6PxZOs=)
2: EjxEvyFrbjIutBBjgjTn5G6eW5c.roa (hash: dmAYBtW0oaeyULNatDjSeKws5fd+ZFknimkAFUD4KMQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:9f:59:d4:04:96:fc:b8:0f:cb:a1:5a:83:5b:c7:32
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d6d93be114f82d0258916a978cacbfb15bb5840a
Validity
Not Before: Jun 7 09:01:09 2025 GMT
Not After : Jun 8 09:01:09 2025 GMT
Subject: CN=25a98c511583c57dd13d30dd9a7dc137f4f39d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:8d:86:c2:61:c2:8a:42:5b:89:a1:85:5c:13:
1a:af:f5:db:7a:76:6e:7f:3b:1c:e0:6e:75:9f:27:
53:93:8a:e4:89:0d:87:27:13:66:e8:53:80:16:fd:
11:1c:4c:ca:67:61:b3:e0:52:23:b7:24:90:91:c9:
f8:b4:be:d3:bd:46:fa:ce:74:d5:b3:38:4e:62:0e:
94:5f:19:7f:db:31:01:86:84:a4:9f:a8:fb:f0:a1:
4c:eb:73:de:1a:a1:4f:1a:10:f8:28:c6:70:21:99:
c0:fc:f1:ec:00:93:a3:52:ea:6c:b1:9d:db:3d:29:
3e:27:55:17:4c:86:ed:cf:38:fc:1b:d9:bb:9c:33:
b7:a5:e1:7e:43:88:37:f1:2e:c6:bc:9a:46:01:69:
32:3e:45:da:79:dd:ee:5f:69:12:d9:f0:39:27:6b:
74:c8:d6:d2:bd:73:69:90:2c:df:bd:a6:71:30:94:
d6:b4:cd:19:d1:f7:44:13:f2:30:d5:20:5c:68:46:
d5:40:d3:eb:87:fd:b9:6a:80:c1:7c:69:88:12:1e:
36:c4:2c:64:3e:76:1a:50:51:b2:85:70:69:7a:d5:
20:79:07:3f:af:c5:e8:33:73:19:5c:d2:c7:4f:52:
41:06:9c:e2:3e:41:8e:2f:5c:62:08:dc:21:b2:fd:
38:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
25:A9:8C:51:15:83:C5:7D:D1:3D:30:DD:9A:7D:C1:37:F4:F3:9D:64
X509v3 Authority Key Identifier:
keyid:D6:D9:3B:E1:14:F8:2D:02:58:91:6A:97:8C:AC:BF:B1:5B:B5:84:0A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1tk74RT4LQJYkWqXjKy_sVu1hAo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7d/847cf5-2253-4290-b745-a14744d18a54/1/1tk74RT4LQJYkWqXjKy_sVu1hAo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:b2:ee:01:33:2f:b4:b0:04:a7:4e:f1:45:8a:73:16:c6:c6:
36:2f:b5:47:5d:a8:91:b5:d3:5f:3b:b8:43:9d:06:de:b1:52:
e2:b6:18:00:9e:20:4f:b8:87:6a:97:ea:5a:55:9c:31:74:6e:
82:12:d8:ef:4b:4a:d0:a9:a4:07:01:cc:61:ec:12:8d:45:af:
91:0d:18:90:d4:21:75:ca:79:dd:c4:cc:ab:c6:47:74:ea:6e:
dd:5a:a7:be:93:ee:31:1e:59:7d:df:4b:49:0e:69:be:fe:51:
6a:a3:70:34:e6:97:e1:74:b1:ba:27:2e:0f:f1:a8:83:85:e9:
1a:71:0a:e9:f8:6c:9d:84:3b:91:6d:92:d0:fd:10:3b:3c:2b:
9d:06:6f:2c:32:0c:a6:dc:48:9d:ec:0a:03:20:be:df:6a:30:
46:f1:cb:09:77:b8:ee:7c:f7:d9:d3:8d:54:f3:2a:ac:50:ad:
a2:0a:b8:f5:06:c0:1c:cf:fa:8d:85:90:15:a6:44:97:de:a1:
4b:98:14:e7:cf:32:bd:7f:94:ab:9d:ce:dd:0c:0d:2b:95:ae:
77:7a:07:ee:97:19:33:79:d2:90:a7:4b:b6:0e:47:08:66:96:
26:9d:e1:d4:33:3b:5b:16:12:08:8a:02:4c:ed:d8:ec:39:41:
03:99:09:ff
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJn1nUBJb8uA/LoVqDW8cyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2ZDkzYmUxMTRmODJkMDI1ODkxNmE5NzhjYWNiZmIxNWJi
NTg0MGEwHhcNMjUwNjA3MDkwMTA5WhcNMjUwNjA4MDkwMTA5WjAzMTEwLwYDVQQD
EygyNWE5OGM1MTE1ODNjNTdkZDEzZDMwZGQ5YTdkYzEzN2Y0ZjM5ZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvI2GwmHCikJbiaGFXBMar/XbenZu
fzsc4G51nydTk4rkiQ2HJxNm6FOAFv0RHEzKZ2Gz4FIjtySQkcn4tL7TvUb6znTV
szhOYg6UXxl/2zEBhoSkn6j78KFM63PeGqFPGhD4KMZwIZnA/PHsAJOjUupssZ3b
PSk+J1UXTIbtzzj8G9m7nDO3peF+Q4g38S7GvJpGAWkyPkXaed3uX2kS2fA5J2t0
yNbSvXNpkCzfvaZxMJTWtM0Z0fdEE/Iw1SBcaEbVQNPrh/25aoDBfGmIEh42xCxk
PnYaUFGyhXBpetUgeQc/r8XoM3MZXNLHT1JBBpziPkGOL1xiCNwhsv04GwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCWpjFEVg8V90T0w3Zp9wTf0851kMB8GA1UdIwQY
MBaAFNbZO+EU+C0CWJFql4ysv7FbtYQKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMXRrNzRSVDRMUUpZa1dxWGpLeV9zVnUxaEFvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83ZC84NDdjZjUtMjI1My00MjkwLWI3NDUt
YTE0NzQ0ZDE4YTU0LzEvMXRrNzRSVDRMUUpZa1dxWGpLeV9zVnUxaEFvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83ZC84NDdjZjUtMjI1My00MjkwLWI3NDUtYTE0NzQ0ZDE4YTU0
LzEvMXRrNzRSVDRMUUpZa1dxWGpLeV9zVnUxaEFvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANrLuATMv
tLAEp07xRYpzFsbGNi+1R12okbXTXzu4Q50G3rFS4rYYAJ4gT7iHapfqWlWcMXRu
ghLY70tK0KmkBwHMYewSjUWvkQ0YkNQhdcp53cTMq8ZHdOpu3VqnvpPuMR5Zfd9L
SQ5pvv5RaqNwNOaX4XSxuicuD/Gog4XpGnEK6fhsnYQ7kW2S0P0QOzwrnQZvLDIM
ptxInewKAyC+32owRvHLCXe47nz32dONVPMqrFCtogq49QbAHM/6jYWQFaZEl96h
S5gU588yvX+Uq53O3QwNK5Wud3oH7pcZM3nSkKdLtg5HCGaWJp3h1DM7WxYSCIoC
TO3Y7DlBA5kJ/w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:28:31 2025 by rpki-client