Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: fu3figunzVxtY1/3pPojfGHFrVcN82xXI3eloOhHB1Y=
Subject key identifier: BF:39:13:7F:E9:6D:ED:63:24:59:F0:AB:6C:48:3C:DA:54:4B:8B:85
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 01976B865038146FCC78B7D5939BD15D2E02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 158C
Signing time: Fri 13 Jun 2025 23:00:53 +0000
Manifest this update: Fri 13 Jun 2025 23:00:53 +0000
Manifest next update: Sat 14 Jun 2025 23:00:53 +0000
Files and hashes: 1: 46jADdHLKU7NIyeYvDkR9sakzHU.roa (hash: byWqvbSSzcE1Xc0qEaXyUWnOp7q2hSYPDvEBq1c3RLI=)
2: ZzBmvMdXYMiQ9bwVHMIzO7s9SmM.roa (hash: sLT+c6scYZ8+Q07xIyxSqYkUzEuyYwiK9vh89QW6tS8=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: HKvvZhnUodsXYFnoyxEBr4/xnHFkbJZafEkCnJrHnjg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 16:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:86:50:38:14:6f:cc:78:b7:d5:93:9b:d1:5d:2e:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: Jun 13 23:00:53 2025 GMT
Not After : Jun 14 23:00:53 2025 GMT
Subject: CN=bf39137fe96ded632459f0ab6c483cda544b8b85
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:91:3e:0e:d4:eb:85:06:21:6a:26:b5:f1:84:70:
c6:0d:7a:2d:34:58:70:cc:b2:4e:d5:b8:97:94:39:
1d:f5:c1:ca:6a:9d:26:ff:32:54:20:8c:36:07:9a:
90:0e:c9:ef:83:e4:49:e2:e5:d7:12:9e:1b:00:85:
9e:5b:f4:23:14:3c:20:a2:8c:b7:e0:b4:05:5a:3e:
8c:fa:90:f5:4d:14:4a:53:7a:56:74:c5:c6:3c:ac:
b5:f1:4f:9e:9c:ad:41:a2:ce:0f:ae:8d:c2:34:0d:
11:ae:11:25:42:8e:c6:d1:20:0b:11:97:2f:40:c5:
07:fc:ba:ef:bb:a9:63:64:d1:d6:67:96:d5:51:c2:
6f:5f:e9:34:0d:87:a1:d0:9d:dd:c1:f2:46:49:2d:
08:f1:69:e0:14:33:85:f3:36:9c:83:5d:0a:46:70:
0d:60:3c:2b:10:78:8f:0a:04:8e:0d:93:5f:af:c2:
2b:80:0b:cc:e0:e3:77:47:57:5e:0a:3f:5f:93:b5:
5e:3d:12:30:39:d1:34:af:d5:35:fe:78:d3:83:5c:
fb:c7:f4:78:8e:ee:c4:d7:6f:a4:9b:2a:cc:20:f0:
17:64:53:fb:ce:44:2c:f8:7c:70:e5:c2:86:14:04:
b6:a8:fe:43:5f:60:1f:41:4c:98:61:bf:20:2b:de:
77:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BF:39:13:7F:E9:6D:ED:63:24:59:F0:AB:6C:48:3C:DA:54:4B:8B:85
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b3:bb:59:d1:8a:db:fc:47:26:ef:ce:3c:1f:e7:d5:96:ae:9c:
91:8f:90:e2:6d:87:82:a7:9b:b9:19:3e:e4:97:77:6b:a3:7a:
3c:db:38:ed:27:6d:53:aa:16:d3:6e:64:2b:39:49:00:f0:ca:
92:84:46:f6:91:e3:c4:86:dc:24:39:74:22:67:ad:26:fe:29:
29:fd:44:33:c0:e0:91:84:66:34:7a:6b:6c:4d:aa:54:49:2c:
c4:12:2f:80:e3:05:37:ab:33:31:ef:80:6b:83:8f:b8:23:d1:
8c:1d:f6:94:84:97:d7:94:3a:40:12:91:4f:14:b0:cc:6d:40:
5a:ec:df:7d:90:c0:d8:0d:b3:61:34:e0:32:c3:eb:03:88:24:
20:7c:d5:96:08:7e:9d:24:ff:d4:ef:74:6c:d8:49:06:d5:ca:
9e:70:ed:a0:79:f1:bf:ce:38:02:a8:f1:6d:1e:0f:c4:4d:f1:
4e:48:9d:dc:ed:75:ae:bc:75:c2:c4:da:8a:bf:fa:4c:86:c6:
27:ea:27:d1:1e:e6:57:c0:96:96:c1:a6:89:94:56:ae:b4:04:
ed:58:83:f3:81:35:ef:81:10:af:85:21:a1:fc:a0:ee:52:9f:
af:c4:0e:45:e6:29:f8:09:9a:e1:bc:1f:73:19:29:08:28:07:
45:c9:bb:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrhlA4FG/MeLfVk5vRXS4CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1M2Q0NzZkYjk2ZGUxZTU4NjIzMTE5YTcwYjlkN2IwMGI2
NzZkYTAwHhcNMjUwNjEzMjMwMDUzWhcNMjUwNjE0MjMwMDUzWjAzMTEwLwYDVQQD
EyhiZjM5MTM3ZmU5NmRlZDYzMjQ1OWYwYWI2YzQ4M2NkYTU0NGI4Yjg1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkT4O1OuFBiFqJrXxhHDGDXotNFhw
zLJO1biXlDkd9cHKap0m/zJUIIw2B5qQDsnvg+RJ4uXXEp4bAIWeW/QjFDwgooy3
4LQFWj6M+pD1TRRKU3pWdMXGPKy18U+enK1Bos4Pro3CNA0RrhElQo7G0SALEZcv
QMUH/Lrvu6ljZNHWZ5bVUcJvX+k0DYeh0J3dwfJGSS0I8WngFDOF8zacg10KRnAN
YDwrEHiPCgSODZNfr8IrgAvM4ON3R1deCj9fk7VePRIwOdE0r9U1/njTg1z7x/R4
ju7E12+kmyrMIPAXZFP7zkQs+Hxw5cKGFAS2qP5DX2AfQUyYYb8gK953TwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL85E3/pbe1jJFnwq2xIPNpUS4uFMB8GA1UdIwQY
MBaAFHU9R225beHlhiMRmnC517ALZ22gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUt
NDY4NTc4MmFjMmMzLzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUtNDY4NTc4MmFjMmMz
LzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAs7tZ0Yrb
/Ecm7848H+fVlq6ckY+Q4m2HgqebuRk+5Jd3a6N6PNs47SdtU6oW025kKzlJAPDK
koRG9pHjxIbcJDl0ImetJv4pKf1EM8DgkYRmNHprbE2qVEksxBIvgOMFN6szMe+A
a4OPuCPRjB32lISX15Q6QBKRTxSwzG1AWuzffZDA2A2zYTTgMsPrA4gkIHzVlgh+
nST/1O90bNhJBtXKnnDtoHnxv844AqjxbR4PxE3xTkid3O11rrx1wsTair/6TIbG
J+on0R7mV8CWlsGmiZRWrrQE7ViD84E174EQr4Uhofyg7lKfr8QOReYp+Ama4bwf
cxkpCCgHRcm7qQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 00:56:06 2025 by rpki-client