Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
File: 2ucO9v64E-2du5Z9BRPPIEPTo0c.mft (raw, json)
Hash identifier: s3AIPrG8q/XX+FIS3X8QUo8IahW0VEoCH08jnOPZDyM=
Subject key identifier: 9E:9B:6A:2E:16:F5:B7:1A:B3:A8:D5:8D:4B:81:2C:7F:DE:50:43:F3
Authority key identifier: DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
Certificate issuer: /CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Certificate serial: 01974A43F78F75701458CE38196C1AEA3A36
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 12:00:57 +0000
Manifest this update: Sat 07 Jun 2025 12:00:57 +0000
Manifest next update: Sun 08 Jun 2025 12:00:57 +0000
Files and hashes: 1: 1-73UFjQEbEaiw-VEpYxtRIeSwTw.roa (hash: Xec6kbupZB2RH/ACciM0eanhiUxUAjw16Uj0UlJXaPY=)
2: 2ucO9v64E-2du5Z9BRPPIEPTo0c.crl (hash: wiqgsOMHiq9qnpl9fHvf1VPSKsKg1JNffwkkGkVv13s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:43:f7:8f:75:70:14:58:ce:38:19:6c:1a:ea:3a:36
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=dae70ef6feb813ed9dbb967d0513cf2043d3a347
Validity
Not Before: Jun 7 12:00:57 2025 GMT
Not After : Jun 8 12:00:57 2025 GMT
Subject: CN=9e9b6a2e16f5b71ab3a8d58d4b812c7fde5043f3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:43:f8:d6:37:d3:4f:ec:8f:63:4a:12:0e:64:
ba:51:34:91:14:77:45:d7:b2:46:e8:0d:95:7b:dd:
6a:0c:cf:12:a4:64:7a:e3:fa:53:8e:69:83:41:9f:
a9:45:8b:97:76:59:b1:21:a0:a3:9d:1c:fa:7a:e7:
e7:9c:d7:e7:98:81:86:09:eb:d2:b2:75:38:10:ba:
42:a9:7c:bb:19:a3:e8:29:35:2f:7a:8d:e9:1c:8b:
44:af:16:78:8d:0c:b7:50:3c:cf:f4:fb:d3:e7:19:
49:63:85:cc:00:98:90:33:7c:a0:7f:ba:cf:dd:87:
4f:22:38:e3:62:a1:f8:06:eb:0e:d1:80:be:c4:00:
63:95:b6:34:2f:19:56:b1:eb:f1:15:b6:ea:29:64:
1b:54:c4:91:4a:48:20:65:09:74:be:4f:e0:f7:b0:
4b:4e:3b:38:68:94:a1:8d:91:aa:92:ec:b4:ca:7b:
0e:24:5c:b7:5a:fd:90:c2:1f:05:2f:c8:ca:a9:18:
04:59:f6:61:df:e9:dd:e9:0b:49:c7:e9:76:65:d4:
44:dd:df:70:2f:dc:99:4c:d0:61:39:a0:09:16:86:
11:d2:79:54:60:28:e3:2d:78:76:a8:0c:ba:6b:85:
cf:87:9c:5b:0a:ee:20:69:ab:4d:0b:15:df:09:e0:
c3:2f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:9B:6A:2E:16:F5:B7:1A:B3:A8:D5:8D:4B:81:2C:7F:DE:50:43:F3
X509v3 Authority Key Identifier:
keyid:DA:E7:0E:F6:FE:B8:13:ED:9D:BB:96:7D:05:13:CF:20:43:D3:A3:47
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2ucO9v64E-2du5Z9BRPPIEPTo0c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b7/b9a936-2ec7-494c-95d2-eab40be48cc1/1/2ucO9v64E-2du5Z9BRPPIEPTo0c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:e8:05:18:e7:eb:4c:41:c4:fb:37:17:78:4d:5b:a4:33:4d:
98:05:33:e2:83:f8:4f:4f:94:6f:2d:9e:63:cd:6c:58:c1:dc:
fa:5b:1b:c3:77:98:e0:bc:aa:a2:12:34:26:f7:e9:dd:79:7c:
45:63:9d:a7:42:09:e5:41:94:8c:2a:c7:4e:cc:d4:05:e2:67:
a3:fa:b5:21:6d:da:66:3f:29:b4:6a:a6:b4:4c:8f:32:6f:66:
4f:0f:19:61:63:ca:94:52:1a:9f:7d:f9:a4:b0:d7:c3:7f:8c:
03:45:6d:be:5f:07:1d:57:67:3d:23:ab:43:27:4e:f5:27:23:
5d:b9:c5:c1:73:81:a5:5f:eb:72:9c:13:ad:fb:4e:2b:b1:a4:
f4:80:b3:66:57:b6:c3:9d:4c:08:67:cb:32:9f:65:29:4b:d5:
36:cf:44:b9:5b:30:74:1f:47:fd:95:1f:f6:51:b4:9c:cd:68:
07:61:ac:0d:c4:3a:06:66:51:d1:15:81:68:09:08:8e:67:b8:
49:2d:d2:d8:db:05:3b:23:f8:92:5e:52:b9:f9:3b:b6:ff:02:
b7:f8:eb:54:ea:5f:35:6c:a5:db:1c:e8:ba:73:fb:4a:d5:78:
3e:9d:ee:a1:4b:9a:8a:9b:88:43:1e:47:b1:e6:03:a7:67:ea:
04:46:de:85
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKQ/ePdXAUWM44GWwa6jo2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhZTcwZWY2ZmViODEzZWQ5ZGJiOTY3ZDA1MTNjZjIwNDNk
M2EzNDcwHhcNMjUwNjA3MTIwMDU3WhcNMjUwNjA4MTIwMDU3WjAzMTEwLwYDVQQD
Eyg5ZTliNmEyZTE2ZjViNzFhYjNhOGQ1OGQ0YjgxMmM3ZmRlNTA0M2YzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk0P41jfTT+yPY0oSDmS6UTSRFHdF
17JG6A2Ve91qDM8SpGR64/pTjmmDQZ+pRYuXdlmxIaCjnRz6eufnnNfnmIGGCevS
snU4ELpCqXy7GaPoKTUveo3pHItErxZ4jQy3UDzP9PvT5xlJY4XMAJiQM3ygf7rP
3YdPIjjjYqH4BusO0YC+xABjlbY0LxlWsevxFbbqKWQbVMSRSkggZQl0vk/g97BL
Tjs4aJShjZGqkuy0ynsOJFy3Wv2Qwh8FL8jKqRgEWfZh3+nd6QtJx+l2ZdRE3d9w
L9yZTNBhOaAJFoYR0nlUYCjjLXh2qAy6a4XPh5xbCu4gaatNCxXfCeDDLwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJ6bai4W9bcas6jVjUuBLH/eUEPzMB8GA1UdIwQY
MBaAFNrnDvb+uBPtnbuWfQUTzyBD06NHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDIt
ZWFiNDBiZTQ4Y2MxLzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iNy9iOWE5MzYtMmVjNy00OTRjLTk1ZDItZWFiNDBiZTQ4Y2Mx
LzEvMnVjTzl2NjRFLTJkdTVaOUJSUFBJRVBUbzBjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPugFGOfr
TEHE+zcXeE1bpDNNmAUz4oP4T0+Uby2eY81sWMHc+lsbw3eY4LyqohI0Jvfp3Xl8
RWOdp0IJ5UGUjCrHTszUBeJno/q1IW3aZj8ptGqmtEyPMm9mTw8ZYWPKlFIan335
pLDXw3+MA0Vtvl8HHVdnPSOrQydO9ScjXbnFwXOBpV/rcpwTrftOK7Gk9ICzZle2
w51MCGfLMp9lKUvVNs9EuVswdB9H/ZUf9lG0nM1oB2GsDcQ6BmZR0RWBaAkIjme4
SS3S2NsFOyP4kl5Sufk7tv8Ct/jrVOpfNWyl2xzounP7StV4Pp3uoUuaipuIQx5H
seYDp2fqBEbehQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:42 2025 by rpki-client