Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
File: dYeQLOemozSk4Ntz5yGYkBXWSJs.mft (raw, json)
Hash identifier: HgWqjCxs027A9sV1riBI2/h1CY1O1yZ9Gfc0kTFQqDs=
Subject key identifier: E6:B5:8B:0D:BA:4D:67:94:78:2C:3B:67:F9:EA:D2:85:47:A9:8D:28
Authority key identifier: 75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
Certificate issuer: /CN=7587902ce7a6a334a4e0db73e721989015d6489b
Certificate serial: 01974A43834A5EA937BB43A5D7A0513F15F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
Manifest number: 13F2
Signing time: Sat 07 Jun 2025 12:00:27 +0000
Manifest this update: Sat 07 Jun 2025 12:00:27 +0000
Manifest next update: Sun 08 Jun 2025 12:00:27 +0000
Files and hashes: 1: 1-p_3utwZJLFIY_hjsgzsQwTLbiI.roa (hash: zpk9gNBEbgG53UDNDLXhMv6FzOCjxm3OmxU6M/IVco8=)
2: dYeQLOemozSk4Ntz5yGYkBXWSJs.crl (hash: 4OM9GU3X5j9gMVdnm4CVNgYXT7qPPnWzVCTOJVmykgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:83:4a:5e:a9:37:bb:43:a5:d7:a0:51:3f:15:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7587902ce7a6a334a4e0db73e721989015d6489b
Validity
Not Before: Jun 7 12:00:27 2025 GMT
Not After : Jun 8 12:00:27 2025 GMT
Subject: CN=e6b58b0dba4d6794782c3b67f9ead28547a98d28
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:c1:f0:82:96:26:06:5d:85:47:f7:54:93:67:
80:31:20:19:70:7d:93:8c:32:b8:9e:5c:c7:34:dd:
04:2f:ae:29:2a:de:94:e0:1b:66:b9:49:1b:22:e9:
d4:f1:08:31:bf:ce:dc:d9:5c:2d:02:b4:95:31:42:
4a:0d:00:43:42:0c:c3:4b:f4:c2:73:aa:6b:91:02:
f2:54:84:2b:a5:62:db:e3:b8:44:c0:79:5e:28:b6:
5a:c3:f1:fe:67:fb:a5:1d:49:c2:47:26:11:9a:ec:
87:85:25:81:29:40:fc:87:ca:4d:26:03:6f:33:e5:
e7:dd:43:6c:77:43:1d:65:92:55:6c:6a:f9:12:a7:
38:e5:a1:7e:19:33:19:2a:d7:e7:86:bc:ce:75:b5:
8f:83:ce:2f:67:95:d1:26:8f:34:76:f5:56:bc:01:
5f:a2:23:08:72:e2:96:f1:08:c6:76:df:77:c7:fb:
30:9e:82:75:bd:b5:a6:93:b5:93:86:e8:e4:51:c9:
52:4b:61:bc:57:44:be:19:07:39:67:ad:c2:38:72:
3c:3f:3c:ff:85:d1:86:48:62:2b:5b:eb:ae:d4:ea:
65:76:f9:eb:7c:5b:90:be:09:db:19:79:64:e7:0b:
ad:66:cd:8e:c5:ab:a8:6d:d6:a3:2e:5d:35:a9:47:
fd:af
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:B5:8B:0D:BA:4D:67:94:78:2C:3B:67:F9:EA:D2:85:47:A9:8D:28
X509v3 Authority Key Identifier:
keyid:75:87:90:2C:E7:A6:A3:34:A4:E0:DB:73:E7:21:98:90:15:D6:48:9B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dYeQLOemozSk4Ntz5yGYkBXWSJs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9c/4de9ba-0a6b-47f8-9770-f92019375bc8/1/dYeQLOemozSk4Ntz5yGYkBXWSJs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a3:34:66:30:a4:4a:d3:bf:6e:07:fe:9b:c0:2f:96:41:9e:28:
da:d8:3a:24:97:76:bb:df:c0:19:c8:c6:91:f6:55:f1:81:36:
87:47:b2:7e:4c:e3:ab:cf:17:a9:d0:48:85:31:41:2e:1a:47:
25:a2:ff:df:ca:c1:70:49:7d:84:71:6c:3b:a6:25:f3:5e:84:
54:30:71:86:68:c0:39:46:55:4a:6c:1a:47:55:b1:f4:a2:b9:
6d:6a:72:85:e4:ea:dd:1f:1a:df:f7:8a:94:43:49:ab:f8:8c:
ae:d7:fe:69:17:fd:3a:51:e1:d2:06:4c:bf:0f:bd:7a:1a:06:
12:ca:50:72:23:69:d8:46:4e:a9:56:66:fb:46:49:71:8c:ac:
31:91:04:3b:37:04:d0:24:4f:ec:7e:4b:bc:5e:04:90:c3:75:
92:af:15:b0:9a:27:3a:8b:ef:69:6a:21:6a:ba:c3:f0:b7:9e:
9f:64:97:ba:c3:26:f7:e9:9e:cd:c5:d4:e4:88:8b:dc:00:a8:
1b:15:5f:db:f1:b0:63:c5:fc:3b:a5:12:5a:b9:6b:cf:da:4a:
8a:21:9c:54:c8:26:61:47:52:74:c9:c1:d0:27:f6:96:a4:3b:
62:6a:fc:92:e8:6a:b1:0e:d9:e0:0b:cf:85:53:53:db:c6:2e:
3f:ce:af:5d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ4NKXqk3u0Ol16BRPxXxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1ODc5MDJjZTdhNmEzMzRhNGUwZGI3M2U3MjE5ODkwMTVk
NjQ4OWIwHhcNMjUwNjA3MTIwMDI3WhcNMjUwNjA4MTIwMDI3WjAzMTEwLwYDVQQD
EyhlNmI1OGIwZGJhNGQ2Nzk0NzgyYzNiNjdmOWVhZDI4NTQ3YTk4ZDI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA5MHwgpYmBl2FR/dUk2eAMSAZcH2T
jDK4nlzHNN0EL64pKt6U4BtmuUkbIunU8Qgxv87c2VwtArSVMUJKDQBDQgzDS/TC
c6prkQLyVIQrpWLb47hEwHleKLZaw/H+Z/ulHUnCRyYRmuyHhSWBKUD8h8pNJgNv
M+Xn3UNsd0MdZZJVbGr5Eqc45aF+GTMZKtfnhrzOdbWPg84vZ5XRJo80dvVWvAFf
oiMIcuKW8QjGdt93x/swnoJ1vbWmk7WThujkUclSS2G8V0S+GQc5Z63COHI8Pzz/
hdGGSGIrW+uu1OpldvnrfFuQvgnbGXlk5wutZs2OxauobdajLl01qUf9rwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOa1iw26TWeUeCw7Z/nq0oVHqY0oMB8GA1UdIwQY
MBaAFHWHkCznpqM0pODbc+chmJAV1kibMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Yy80ZGU5YmEtMGE2Yi00N2Y4LTk3NzAt
ZjkyMDE5Mzc1YmM4LzEvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Yy80ZGU5YmEtMGE2Yi00N2Y4LTk3NzAtZjkyMDE5Mzc1YmM4
LzEvZFllUUxPZW1velNrNE50ejV5R1lrQlhXU0pzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAozRmMKRK
079uB/6bwC+WQZ4o2tg6JJd2u9/AGcjGkfZV8YE2h0eyfkzjq88XqdBIhTFBLhpH
JaL/38rBcEl9hHFsO6Yl816EVDBxhmjAOUZVSmwaR1Wx9KK5bWpyheTq3R8a3/eK
lENJq/iMrtf+aRf9OlHh0gZMvw+9ehoGEspQciNp2EZOqVZm+0ZJcYysMZEEOzcE
0CRP7H5LvF4EkMN1kq8VsJonOovvaWoharrD8Leen2SXusMm9+mezcXU5IiL3ACo
GxVf2/GwY8X8O6USWrlrz9pKiiGcVMgmYUdSdMnB0Cf2lqQ7Ymr8kuhqsQ7Z4AvP
hVNT28YuP86vXQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 20:26:32 2025 by rpki-client