Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
File: drTT6JcTIsZNegRYurdFqJreTeU.mft (raw, json)
Hash identifier: KotHkkKswK0PrPCOstMnlGpJAQONvNaFt3lApYiheq8=
Subject key identifier: F1:87:C7:F8:F6:05:41:B4:8B:D1:FE:B3:46:9C:40:99:C6:E7:0A:74
Authority key identifier: 76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
Certificate issuer: /CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Certificate serial: 01974A7AAD5045B139C15A1D8EBCD34D6AB8
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
Manifest number: 0200
Signing time: Sat 07 Jun 2025 13:00:43 +0000
Manifest this update: Sat 07 Jun 2025 13:00:43 +0000
Manifest next update: Sun 08 Jun 2025 13:00:43 +0000
Files and hashes: 1: ZYX1Qhws2vdCl-u2QXbSsdG6zUs.roa (hash: 1Yas72g5IvT1A6G5CoyKopOr6adZNC8arOgG6BPNF2I=)
2: drTT6JcTIsZNegRYurdFqJreTeU.crl (hash: 6JiHq8Mwen9xD8j9ley/xIFLbt5roy6gc6g4fhRIxoQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:7a:ad:50:45:b1:39:c1:5a:1d:8e:bc:d3:4d:6a:b8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=76b4d3e8971322c64d7a0458bab745a89ade4de5
Validity
Not Before: Jun 7 13:00:43 2025 GMT
Not After : Jun 8 13:00:43 2025 GMT
Subject: CN=f187c7f8f60541b48bd1feb3469c4099c6e70a74
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:8d:c7:94:81:af:d7:70:d0:eb:b9:60:55:cb:
e2:04:00:ac:02:83:d3:12:93:22:d4:03:93:77:10:
46:5d:4d:44:5b:57:9e:f9:3d:3d:94:56:8d:f6:32:
5b:f7:d1:27:0e:02:58:f6:15:02:18:a4:4b:85:a5:
de:1c:c1:f5:7e:b3:ce:58:42:79:15:f5:4a:1b:49:
36:ed:28:ab:1b:17:b1:af:22:9f:4b:8a:82:55:32:
e3:4c:2e:23:b5:03:28:d0:2e:3d:91:db:4a:a5:55:
b8:06:c1:05:31:0d:7b:d0:68:64:0a:f1:b5:00:fa:
e6:c0:86:34:28:f3:ec:5f:fd:30:86:32:7b:16:49:
ab:36:57:ec:0f:68:af:6c:e9:a2:b7:12:f0:d1:76:
76:b6:82:6f:8b:5e:42:e6:fe:5d:9c:88:97:d4:1b:
bf:cf:5e:e2:7a:a9:df:77:23:56:4e:1a:67:2d:e7:
56:26:44:af:99:bc:f6:62:68:4e:ef:a7:5f:cf:86:
2e:ea:a7:66:e9:92:fa:de:a6:14:a8:f3:43:05:1a:
46:d8:c6:6e:38:76:35:bc:60:0a:fe:2f:dc:28:a3:
19:c6:8d:d4:d3:17:30:34:0e:5f:eb:b8:c7:b8:6f:
ef:1b:f7:ef:e8:d7:6e:9e:4e:e8:84:b1:5d:4a:c7:
9d:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:87:C7:F8:F6:05:41:B4:8B:D1:FE:B3:46:9C:40:99:C6:E7:0A:74
X509v3 Authority Key Identifier:
keyid:76:B4:D3:E8:97:13:22:C6:4D:7A:04:58:BA:B7:45:A8:9A:DE:4D:E5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/drTT6JcTIsZNegRYurdFqJreTeU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9b/8957eb-f492-43cb-a603-b626f331492f/1/drTT6JcTIsZNegRYurdFqJreTeU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:b2:c3:7e:21:a9:96:f5:fa:32:bf:a6:cb:ba:95:0c:43:05:
13:25:eb:53:c3:95:3c:97:cf:87:d6:f3:9f:3c:fa:9c:d2:bc:
04:b9:29:74:b5:95:7c:05:f7:f1:a8:e8:78:66:47:55:50:33:
42:39:94:20:fd:6c:72:19:c4:96:f0:f4:92:8a:05:af:5c:24:
15:8a:4b:1a:36:44:3d:e3:76:d4:ee:ad:5f:2c:7f:98:7d:59:
14:5b:7f:b3:fd:a4:dd:d3:a5:74:f3:e1:b7:87:6e:85:df:93:
9c:4b:0b:d6:d5:6f:55:1e:6b:da:e0:e4:f2:81:e8:44:1a:c8:
15:85:1a:21:90:38:3c:96:a4:51:f3:bf:78:83:8a:df:7f:15:
da:e1:9f:cc:d4:c6:1c:f8:b3:6f:cf:c1:43:06:a4:8e:b4:05:
e8:4c:6e:77:21:cf:6e:63:d6:97:0f:f5:43:69:16:d5:81:02:
2f:fd:9e:11:52:78:b8:e0:3d:a0:51:b5:8f:2e:9a:e4:d6:eb:
a1:44:f3:22:f6:1b:0c:a6:49:0b:1a:a1:57:ec:14:62:7f:b4:
b7:55:ea:5f:bd:58:4b:08:5d:05:d6:49:6e:a2:6a:7a:91:8a:
26:eb:1a:d6:17:40:82:35:2e:32:02:e8:d7:79:0d:78:bb:ae:
46:26:7e:b1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKeq1QRbE5wVodjrzTTWq4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2YjRkM2U4OTcxMzIyYzY0ZDdhMDQ1OGJhYjc0NWE4OWFk
ZTRkZTUwHhcNMjUwNjA3MTMwMDQzWhcNMjUwNjA4MTMwMDQzWjAzMTEwLwYDVQQD
EyhmMTg3YzdmOGY2MDU0MWI0OGJkMWZlYjM0NjljNDA5OWM2ZTcwYTc0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmY3HlIGv13DQ67lgVcviBACsAoPT
EpMi1AOTdxBGXU1EW1ee+T09lFaN9jJb99EnDgJY9hUCGKRLhaXeHMH1frPOWEJ5
FfVKG0k27SirGxexryKfS4qCVTLjTC4jtQMo0C49kdtKpVW4BsEFMQ170GhkCvG1
APrmwIY0KPPsX/0whjJ7FkmrNlfsD2ivbOmitxLw0XZ2toJvi15C5v5dnIiX1Bu/
z17ieqnfdyNWThpnLedWJkSvmbz2YmhO76dfz4Yu6qdm6ZL63qYUqPNDBRpG2MZu
OHY1vGAK/i/cKKMZxo3U0xcwNA5f67jHuG/vG/fv6Ndunk7ohLFdSsedWQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPGHx/j2BUG0i9H+s0acQJnG5wp0MB8GA1UdIwQY
MBaAFHa00+iXEyLGTXoEWLq3Raia3k3lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZHJUVDZKY1RJc1pOZWdSWXVyZEZxSnJlVGVVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yi84OTU3ZWItZjQ5Mi00M2NiLWE2MDMt
YjYyNmYzMzE0OTJmLzEvZHJUVDZKY1RJc1pOZWdSWXVyZEZxSnJlVGVVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yi84OTU3ZWItZjQ5Mi00M2NiLWE2MDMtYjYyNmYzMzE0OTJm
LzEvZHJUVDZKY1RJc1pOZWdSWXVyZEZxSnJlVGVVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAD7LDfiGp
lvX6Mr+my7qVDEMFEyXrU8OVPJfPh9bznzz6nNK8BLkpdLWVfAX38ajoeGZHVVAz
QjmUIP1schnElvD0kooFr1wkFYpLGjZEPeN21O6tXyx/mH1ZFFt/s/2k3dOldPPh
t4duhd+TnEsL1tVvVR5r2uDk8oHoRBrIFYUaIZA4PJakUfO/eIOK338V2uGfzNTG
HPizb8/BQwakjrQF6ExudyHPbmPWlw/1Q2kW1YECL/2eEVJ4uOA9oFG1jy6a5Nbr
oUTzIvYbDKZJCxqhV+wUYn+0t1XqX71YSwhdBdZJbqJqepGKJusa1hdAgjUuMgLo
13kNeLuuRiZ+sQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 16:47:23 2025 by rpki-client