Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
File: sQeA3za1uUL2YOQDov5ginXk5X0.mft (raw, json)
Hash identifier: VMTVs51lOvEazasZ3UcN1N9RiLFHbE6fj6YmuILATdM=
Subject key identifier: 83:5E:82:57:EB:E3:AD:55:89:8E:BB:92:73:C8:CB:B6:22:07:09:C0
Authority key identifier: B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
Certificate issuer: /CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Certificate serial: 019749682FD083D75F756468B2DADE3CB8A7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
Manifest number: 150E
Signing time: Sat 07 Jun 2025 08:00:54 +0000
Manifest this update: Sat 07 Jun 2025 08:00:54 +0000
Manifest next update: Sun 08 Jun 2025 08:00:54 +0000
Files and hashes: 1: dc2u-8bkbufd4cw_d9F3xDaopuc.roa (hash: Umyl5IxYyTMcYEGSrVHWEMRSVhNtzrLiUEYgvIObXig=)
2: sQeA3za1uUL2YOQDov5ginXk5X0.crl (hash: 6LCHryI9aRse/MOEm+nFOTQ9iFjU4xYFR/M+9xCsL6Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:54 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:68:2f:d0:83:d7:5f:75:64:68:b2:da:de:3c:b8:a7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b10780df36b5b942f660e403a2fe608a75e4e57d
Validity
Not Before: Jun 7 08:00:54 2025 GMT
Not After : Jun 8 08:00:54 2025 GMT
Subject: CN=835e8257ebe3ad55898ebb9273c8cbb6220709c0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:3b:dd:61:4e:fb:1e:ec:45:d2:2e:c9:a0:66:
e5:26:b4:df:38:4e:b8:d9:97:2a:76:c1:b8:1f:8a:
bc:e4:84:5c:80:97:72:a5:f6:53:ad:d0:99:6e:88:
70:d9:27:20:b2:df:e6:f5:d1:c2:4a:29:ed:0f:2f:
d9:d1:d5:1f:13:bc:d5:61:02:10:42:d8:e6:7b:9e:
4d:7e:d2:b3:dc:ad:ae:29:60:67:59:da:6a:40:19:
3c:59:5e:72:08:d8:d7:ae:1e:2a:e2:fe:cd:1c:be:
3d:98:22:12:c6:4a:38:39:66:e3:d3:34:21:b0:96:
ba:f0:05:d9:66:4d:99:5e:38:84:dd:ef:ad:ce:87:
df:a4:32:92:72:bf:39:d7:26:c5:d6:5a:7a:9e:91:
24:7f:f3:99:e2:e4:7b:18:79:36:35:0c:61:29:28:
cf:6c:bd:df:f4:19:ef:45:08:6e:1a:9a:1e:76:f6:
80:51:f6:1d:32:1b:11:82:52:a5:47:6d:36:b9:0c:
94:f7:4e:15:fc:b3:ec:37:6b:ee:d9:f2:ae:77:01:
12:da:f4:9a:73:4d:54:0e:58:d9:76:13:4c:41:67:
8b:e9:54:df:d6:88:84:17:b6:fa:cb:df:1a:4c:69:
c0:ab:76:9a:5c:2f:4f:77:11:ea:77:de:74:38:0b:
86:c1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
83:5E:82:57:EB:E3:AD:55:89:8E:BB:92:73:C8:CB:B6:22:07:09:C0
X509v3 Authority Key Identifier:
keyid:B1:07:80:DF:36:B5:B9:42:F6:60:E4:03:A2:FE:60:8A:75:E4:E5:7D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sQeA3za1uUL2YOQDov5ginXk5X0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b5/b56504-ed17-4197-bba0-a0adecfd5fa9/1/sQeA3za1uUL2YOQDov5ginXk5X0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ac:c4:6e:f4:7a:a6:48:ba:c9:e6:ca:e1:1b:10:ad:ab:c6:cc:
88:93:ac:70:8e:e5:b8:a9:ca:3c:a1:93:90:74:35:eb:f1:56:
12:2f:23:4b:2b:d7:25:4a:6a:55:66:9a:01:46:46:ae:60:ec:
5e:83:fc:cc:1b:8b:fd:b8:20:64:35:5d:67:81:b0:7f:5f:45:
e8:bb:b7:92:33:93:63:8e:9f:5b:62:2f:09:ce:c7:17:36:8e:
90:1f:d4:77:69:c1:c0:cb:f7:55:6f:c9:b2:96:e0:4c:02:ed:
a2:c7:a3:00:59:e3:9b:e8:1f:de:68:94:e3:a0:b0:96:38:94:
47:58:6d:60:c4:a9:86:57:ad:7a:10:05:76:a5:c7:8f:a6:a5:
54:fd:c9:c9:35:5b:6b:78:83:1f:18:76:94:e6:a0:ea:79:c2:
fc:99:19:ff:b9:74:95:11:7c:51:ff:20:c6:4d:77:14:14:b6:
67:b2:d8:38:e0:7f:63:89:b4:a9:66:7c:ef:93:4b:ec:b4:b7:
b6:65:ab:67:fc:ff:19:bf:10:2f:af:e1:7a:6d:76:0c:14:9d:
4b:8b:3c:65:03:3a:c4:cb:9f:dc:87:22:fe:e0:a7:16:5b:26:
05:e1:d1:28:b3:d3:b8:b6:76:cc:71:2b:04:df:ee:05:fe:3e:
a2:52:8d:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJaC/Qg9dfdWRostrePLinMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxMDc4MGRmMzZiNWI5NDJmNjYwZTQwM2EyZmU2MDhhNzVl
NGU1N2QwHhcNMjUwNjA3MDgwMDU0WhcNMjUwNjA4MDgwMDU0WjAzMTEwLwYDVQQD
Eyg4MzVlODI1N2ViZTNhZDU1ODk4ZWJiOTI3M2M4Y2JiNjIyMDcwOWMwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuzvdYU77HuxF0i7JoGblJrTfOE64
2ZcqdsG4H4q85IRcgJdypfZTrdCZbohw2Scgst/m9dHCSintDy/Z0dUfE7zVYQIQ
Qtjme55NftKz3K2uKWBnWdpqQBk8WV5yCNjXrh4q4v7NHL49mCISxko4OWbj0zQh
sJa68AXZZk2ZXjiE3e+tzoffpDKScr851ybF1lp6npEkf/OZ4uR7GHk2NQxhKSjP
bL3f9BnvRQhuGpoedvaAUfYdMhsRglKlR202uQyU904V/LPsN2vu2fKudwES2vSa
c01UDljZdhNMQWeL6VTf1oiEF7b6y98aTGnAq3aaXC9PdxHqd950OAuGwQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFINeglfr461ViY67knPIy7YiBwnAMB8GA1UdIwQY
MBaAFLEHgN82tblC9mDkA6L+YIp15OV9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNS9iNTY1MDQtZWQxNy00MTk3LWJiYTAt
YTBhZGVjZmQ1ZmE5LzEvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNS9iNTY1MDQtZWQxNy00MTk3LWJiYTAtYTBhZGVjZmQ1ZmE5
LzEvc1FlQTN6YTF1VUwyWU9RRG92NWdpblhrNVgwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArMRu9Hqm
SLrJ5srhGxCtq8bMiJOscI7luKnKPKGTkHQ16/FWEi8jSyvXJUpqVWaaAUZGrmDs
XoP8zBuL/bggZDVdZ4Gwf19F6Lu3kjOTY46fW2IvCc7HFzaOkB/Ud2nBwMv3VW/J
spbgTALtosejAFnjm+gf3miU46CwljiUR1htYMSphletehAFdqXHj6alVP3JyTVb
a3iDHxh2lOag6nnC/JkZ/7l0lRF8Uf8gxk13FBS2Z7LYOOB/Y4m0qWZ875NL7LS3
tmWrZ/z/Gb8QL6/hem12DBSdS4s8ZQM6xMuf3Ici/uCnFlsmBeHRKLPTuLZ2zHEr
BN/uBf4+olKNWw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:58:37 2025 by rpki-client