Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
File: cRc4aXP7-IqGfIKohnsFD8pgsBE.mft (raw, json)
Hash identifier: 8VXFD96X3RMKBmR2h6uzbjdoNoKdCW36eIeAz0tv7kA=
Subject key identifier: 66:16:F5:7D:2A:C9:7B:CC:23:10:18:4D:57:B4:26:79:34:6B:2E:7E
Authority key identifier: 71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
Certificate issuer: /CN=7117386973fbf88a867c82a8867b050fca60b011
Certificate serial: 0197488CC9DB23B402920641C38762D9A664
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
Manifest number: 157C
Signing time: Sat 07 Jun 2025 04:01:15 +0000
Manifest this update: Sat 07 Jun 2025 04:01:15 +0000
Manifest next update: Sun 08 Jun 2025 04:01:15 +0000
Files and hashes: 1: __J8knmzK0D7LeHPBcfH9mDXmDA.roa (hash: KGCws32qTez6CiaSk45QNDqYkcqePM9SEByg+MzKHwo=)
2: cRc4aXP7-IqGfIKohnsFD8pgsBE.crl (hash: xsr2VEbXJwpv75nyVaSXPNbnO0ibjNQoE40DX7ydybA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:50:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:48:8c:c9:db:23:b4:02:92:06:41:c3:87:62:d9:a6:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7117386973fbf88a867c82a8867b050fca60b011
Validity
Not Before: Jun 7 04:01:15 2025 GMT
Not After : Jun 8 04:01:15 2025 GMT
Subject: CN=6616f57d2ac97bcc2310184d57b42679346b2e7e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:06:41:d5:3c:a7:27:88:d4:4f:f8:39:bc:6d:
84:c3:50:8f:86:fa:c9:16:33:1e:54:24:1e:85:22:
7b:8f:bc:98:a8:13:f9:62:25:18:b7:0c:3c:cb:4c:
a5:23:7f:23:ce:ae:38:5d:da:b6:f7:ad:06:04:25:
99:48:e9:c6:2b:c3:99:b9:11:c8:62:12:c8:64:4b:
6d:f7:37:01:5e:4e:4a:40:ed:59:d0:2c:0b:cf:e3:
c6:d9:83:76:58:68:9d:c8:39:37:d1:dc:18:51:42:
83:6e:3a:1b:18:62:00:c9:45:a3:01:be:13:49:e2:
a2:82:4b:27:e7:7b:8b:09:54:b1:bf:66:86:15:a9:
5b:2d:6b:7c:c2:d0:ac:31:54:a4:fc:17:42:cb:6b:
3b:1c:14:62:36:d8:85:fc:d4:2a:f0:ec:f7:5c:7a:
89:33:83:d7:4a:92:6e:0d:63:c6:2c:88:bf:f5:15:
4c:3e:5f:39:15:47:80:d8:53:6d:62:69:fb:6a:b0:
ed:70:05:aa:55:18:f3:61:9f:25:b9:cb:ba:fa:bb:
89:23:93:47:63:f8:3e:87:ff:05:de:ae:00:51:86:
02:54:b2:ce:37:94:7f:84:be:02:34:d9:7b:6b:1e:
15:6d:bc:77:48:2c:10:5f:fc:b0:83:44:45:41:35:
93:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
66:16:F5:7D:2A:C9:7B:CC:23:10:18:4D:57:B4:26:79:34:6B:2E:7E
X509v3 Authority Key Identifier:
keyid:71:17:38:69:73:FB:F8:8A:86:7C:82:A8:86:7B:05:0F:CA:60:B0:11
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cRc4aXP7-IqGfIKohnsFD8pgsBE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/793805-e4e9-42e2-8386-9f303ea67e65/1/cRc4aXP7-IqGfIKohnsFD8pgsBE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0c:b9:9f:33:49:22:69:6f:05:45:27:b0:5c:d1:66:8d:91:9e:
dd:3a:f0:41:76:1e:15:06:8f:d2:49:1e:40:0d:12:b5:f9:2b:
ad:cc:55:6d:7c:6c:ea:e4:7d:49:d3:ee:39:32:20:f0:4c:df:
da:50:3f:d7:38:03:4b:6d:0c:d4:57:09:00:54:59:4a:59:ff:
aa:e4:10:f6:c9:67:84:f8:2b:aa:50:83:06:75:f8:96:f3:84:
4a:fc:55:39:99:85:fb:16:4b:fe:d6:73:04:d1:31:3a:aa:91:
25:fc:c4:69:49:24:73:8e:5f:bf:dc:1e:45:83:52:94:aa:d7:
e4:b3:cf:94:e2:2a:80:14:6a:73:4f:21:45:f6:8f:8b:40:9f:
98:09:40:76:c2:f5:83:23:e8:fa:c6:b0:eb:8f:68:ed:1d:e1:
1e:70:a1:cd:a0:c3:c9:26:ea:22:21:85:f5:c2:0a:af:c4:c0:
d7:18:e7:53:31:26:c5:79:1f:d3:b8:bd:85:7b:60:84:fe:8a:
0e:f8:d1:1b:16:67:7a:89:0b:c3:ce:2b:6c:a0:62:05:cb:37:
37:3d:26:df:b4:8f:55:ac:84:fa:85:14:dd:5e:08:e1:ac:a7:
e9:16:3f:26:7e:23:6f:e4:5f:5e:7e:82:72:45:73:48:f3:93:
9d:ac:8e:0c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdIjMnbI7QCkgZBw4di2aZkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxMTczODY5NzNmYmY4OGE4NjdjODJhODg2N2IwNTBmY2E2
MGIwMTEwHhcNMjUwNjA3MDQwMTE1WhcNMjUwNjA4MDQwMTE1WjAzMTEwLwYDVQQD
Eyg2NjE2ZjU3ZDJhYzk3YmNjMjMxMDE4NGQ1N2I0MjY3OTM0NmIyZTdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0AZB1TynJ4jUT/g5vG2Ew1CPhvrJ
FjMeVCQehSJ7j7yYqBP5YiUYtww8y0ylI38jzq44Xdq2960GBCWZSOnGK8OZuRHI
YhLIZEtt9zcBXk5KQO1Z0CwLz+PG2YN2WGidyDk30dwYUUKDbjobGGIAyUWjAb4T
SeKigksn53uLCVSxv2aGFalbLWt8wtCsMVSk/BdCy2s7HBRiNtiF/NQq8Oz3XHqJ
M4PXSpJuDWPGLIi/9RVMPl85FUeA2FNtYmn7arDtcAWqVRjzYZ8lucu6+ruJI5NH
Y/g+h/8F3q4AUYYCVLLON5R/hL4CNNl7ax4Vbbx3SCwQX/ywg0RFQTWTiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGYW9X0qyXvMIxAYTVe0Jnk0ay5+MB8GA1UdIwQY
MBaAFHEXOGlz+/iKhnyCqIZ7BQ/KYLARMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1JjNGFYUDctSXFHZklLb2huc0ZEOHBnc0JFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi83OTM4MDUtZTRlOS00MmUyLTgzODYt
OWYzMDNlYTY3ZTY1LzEvY1JjNGFYUDctSXFHZklLb2huc0ZEOHBnc0JFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi83OTM4MDUtZTRlOS00MmUyLTgzODYtOWYzMDNlYTY3ZTY1
LzEvY1JjNGFYUDctSXFHZklLb2huc0ZEOHBnc0JFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADLmfM0ki
aW8FRSewXNFmjZGe3TrwQXYeFQaP0kkeQA0StfkrrcxVbXxs6uR9SdPuOTIg8Ezf
2lA/1zgDS20M1FcJAFRZSln/quQQ9slnhPgrqlCDBnX4lvOESvxVOZmF+xZL/tZz
BNExOqqRJfzEaUkkc45fv9weRYNSlKrX5LPPlOIqgBRqc08hRfaPi0CfmAlAdsL1
gyPo+saw649o7R3hHnChzaDDySbqIiGF9cIKr8TA1xjnUzEmxXkf07i9hXtghP6K
DvjRGxZneokLw84rbKBiBcs3Nz0m37SPVayE+oUU3V4I4ayn6RY/Jn4jb+RfXn6C
ckVzSPOTnayODA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:10:04 2025 by rpki-client