Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
File: 4oqGzL9We9migv3fdfC39VQiItI.mft (raw, json)
Hash identifier: oAQQ6MtMFZuKdeu1yM+ZTphJ+B1jiE/nQnjtlEiiHUc=
Subject key identifier: BB:DE:5E:85:D5:FE:9D:3C:61:9C:BA:AA:F9:D2:DC:DB:E0:FE:2C:A1
Authority key identifier: E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
Certificate issuer: /CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Certificate serial: 019747795779FE8C756A3CB8BFC90425F0B2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
Manifest number: 0531
Signing time: Fri 06 Jun 2025 23:00:23 +0000
Manifest this update: Fri 06 Jun 2025 23:00:23 +0000
Manifest next update: Sat 07 Jun 2025 23:00:23 +0000
Files and hashes: 1: 4oqGzL9We9migv3fdfC39VQiItI.crl (hash: UinCQ/KYT0iCm844Qmq7jJbEtqZMJo/sG4pH6fvvaGc=)
2: YqAFoc5kTd7Z4_KKDQIoEbzTXXs.roa (hash: 5bYNmgtpiY7zEyVHWvNikpnw6RjJjGyTau2g1VZIDwA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:57:79:fe:8c:75:6a:3c:b8:bf:c9:04:25:f0:b2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=e28a86ccbf567bd9a282fddf75f0b7f5542222d2
Validity
Not Before: Jun 6 23:00:23 2025 GMT
Not After : Jun 7 23:00:23 2025 GMT
Subject: CN=bbde5e85d5fe9d3c619cbaaaf9d2dcdbe0fe2ca1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:71:23:33:98:d1:c3:45:91:68:4b:bd:ac:33:
86:da:c6:37:02:7a:ca:4a:60:1b:1b:d9:81:ce:1e:
cc:8a:d9:d7:a9:83:38:0b:c4:fe:ff:72:b4:f8:43:
de:1c:b4:90:03:42:fc:7c:77:78:69:47:3a:c3:a8:
66:6f:67:bb:47:03:0d:93:3c:c6:71:cf:f3:6c:6c:
92:f8:b4:ac:36:42:5c:46:a1:49:92:47:97:61:21:
1a:f0:05:96:6e:f3:c0:cb:61:93:a9:ba:3f:cd:c0:
94:1e:35:6d:a6:e4:be:b3:72:96:89:5b:c5:2c:d2:
40:11:4b:9a:9c:80:ff:da:c6:93:bf:a7:be:76:91:
1c:c0:4d:80:90:5b:2f:64:f5:f6:54:b3:6e:1e:52:
5e:3c:41:e7:f7:ea:b5:67:4d:d4:44:d0:ca:ce:9a:
03:cf:5a:e3:53:09:cc:e9:ef:68:9c:2b:b8:33:67:
c6:30:26:35:62:ba:95:af:64:30:10:97:9e:4b:70:
24:46:fa:df:5a:b7:0b:a2:34:9a:7f:26:06:73:a3:
ba:ca:e6:38:aa:52:22:20:69:92:5a:1d:95:88:35:
2e:5c:ab:5a:06:76:1d:ee:5f:fe:a8:5e:2e:98:0c:
10:0a:cc:57:23:29:9b:f5:b2:a6:60:19:c4:eb:e5:
c4:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:DE:5E:85:D5:FE:9D:3C:61:9C:BA:AA:F9:D2:DC:DB:E0:FE:2C:A1
X509v3 Authority Key Identifier:
keyid:E2:8A:86:CC:BF:56:7B:D9:A2:82:FD:DF:75:F0:B7:F5:54:22:22:D2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/4oqGzL9We9migv3fdfC39VQiItI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/c8900c-f3d2-457c-b38b-6d7650ca3d04/1/4oqGzL9We9migv3fdfC39VQiItI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
32:fa:a1:54:89:b0:03:a4:80:c9:a9:16:63:20:ef:d2:e9:58:
ab:ca:6d:64:07:e6:bb:17:36:fd:3e:fe:cc:66:88:b6:1d:0a:
b8:3e:6d:3a:b8:42:ac:d2:f8:58:47:e7:19:08:27:b7:41:66:
e8:22:48:3a:b4:13:7f:b5:97:63:8c:44:54:73:9e:e2:ec:1a:
f2:bd:ff:bd:7d:3b:1c:6e:f5:79:7c:d7:dd:45:b1:44:40:85:
8c:dc:a6:b3:74:1f:3c:30:1b:f5:2b:6c:d6:e9:8b:6b:c9:30:
65:53:e8:95:4a:e2:2a:19:d3:6c:08:28:bc:85:1c:c6:f5:2d:
e7:58:ad:81:2f:32:96:2c:d5:92:6e:5c:72:2e:48:68:00:8b:
b0:fb:f4:b1:ce:1c:b3:2f:f2:b5:bb:38:06:8f:df:77:bc:6d:
5c:09:b5:8b:87:5d:f3:78:45:12:dc:b4:46:9c:90:de:8f:ad:
7a:08:b4:34:8c:09:fa:e9:ed:88:8f:99:96:28:3f:22:38:9d:
49:de:1e:3f:3d:91:f5:f8:78:1c:81:5a:5b:eb:9a:03:fb:5c:
90:38:0d:4f:34:e4:a5:31:76:6f:13:77:ca:8c:df:3e:97:c6:
88:3a:3f:81:1b:da:7c:2a:ec:88:39:18:da:30:72:94:8d:e1:
73:e9:5e:9c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeVd5/ox1ajy4v8kEJfCyMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGUyOGE4NmNjYmY1NjdiZDlhMjgyZmRkZjc1ZjBiN2Y1NTQy
MjIyZDIwHhcNMjUwNjA2MjMwMDIzWhcNMjUwNjA3MjMwMDIzWjAzMTEwLwYDVQQD
EyhiYmRlNWU4NWQ1ZmU5ZDNjNjE5Y2JhYWFmOWQyZGNkYmUwZmUyY2ExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn3EjM5jRw0WRaEu9rDOG2sY3AnrK
SmAbG9mBzh7MitnXqYM4C8T+/3K0+EPeHLSQA0L8fHd4aUc6w6hmb2e7RwMNkzzG
cc/zbGyS+LSsNkJcRqFJkkeXYSEa8AWWbvPAy2GTqbo/zcCUHjVtpuS+s3KWiVvF
LNJAEUuanID/2saTv6e+dpEcwE2AkFsvZPX2VLNuHlJePEHn9+q1Z03URNDKzpoD
z1rjUwnM6e9onCu4M2fGMCY1YrqVr2QwEJeeS3AkRvrfWrcLojSafyYGc6O6yuY4
qlIiIGmSWh2ViDUuXKtaBnYd7l/+qF4umAwQCsxXIymb9bKmYBnE6+XEBQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLveXoXV/p08YZy6qvnS3Nvg/iyhMB8GA1UdIwQY
MBaAFOKKhsy/VnvZooL933Xwt/VUIiLSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9jODkwMGMtZjNkMi00NTdjLWIzOGIt
NmQ3NjUwY2EzZDA0LzEvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9jODkwMGMtZjNkMi00NTdjLWIzOGItNmQ3NjUwY2EzZDA0
LzEvNG9xR3pMOVdlOW1pZ3YzZmRmQzM5VlFpSXRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAMvqhVImw
A6SAyakWYyDv0ulYq8ptZAfmuxc2/T7+zGaIth0KuD5tOrhCrNL4WEfnGQgnt0Fm
6CJIOrQTf7WXY4xEVHOe4uwa8r3/vX07HG71eXzX3UWxRECFjNyms3QfPDAb9Sts
1umLa8kwZVPolUriKhnTbAgovIUcxvUt51itgS8ylizVkm5cci5IaACLsPv0sc4c
sy/ytbs4Bo/fd7xtXAm1i4dd83hFEty0RpyQ3o+tegi0NIwJ+untiI+Zlig/Ijid
Sd4ePz2R9fh4HIFaW+uaA/tckDgNTzTkpTF2bxN3yozfPpfGiDo/gRvafCrsiDkY
2jBylI3hc+lenA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 08:55:50 2025 by rpki-client