Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
File: C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft (raw, json)
Hash identifier: gTljx8STPw0AjKfAYJRu6a8Ds33kCx4y/kQhJ4WpZHc=
Subject key identifier: 55:F9:A2:98:F1:F0:1E:5D:B1:9A:19:12:3B:D7:51:04:B7:19:AA:08
Authority key identifier: 0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
Certificate issuer: /CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Certificate serial: 01974E5853515002AB937419D6B4D2BE41C3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
Manifest number: 157D
Signing time: Sun 08 Jun 2025 07:01:40 +0000
Manifest this update: Sun 08 Jun 2025 07:01:40 +0000
Manifest next update: Mon 09 Jun 2025 07:01:40 +0000
Files and hashes: 1: C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl (hash: q0Vs+Lwj2i8hXHiEefX+XB8i3Hy5e61Ns8+nOY7cNT0=)
2: XITchRD6fktx1wcD-akQf-lrx7Y.roa (hash: n2NJUWPmQKH808gxYEyCrRDNlUi5MnimQGzfm9J+OVg=)
3: gZLT5wUedCmW-PX2sDiQAVKNuT4.roa (hash: Bsg9vymR2URZ/xLntFSerTzkFFeEBNsWgx7gYqyDMPI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 07:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:58:53:51:50:02:ab:93:74:19:d6:b4:d2:be:41:c3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b4cfabe47e9285f65f1f2d686baaf15b8b41773
Validity
Not Before: Jun 8 07:01:40 2025 GMT
Not After : Jun 9 07:01:40 2025 GMT
Subject: CN=55f9a298f1f01e5db19a19123bd75104b719aa08
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:04:1f:0d:a8:59:a4:3a:96:ab:29:ba:44:bf:
c1:a0:ba:d6:55:a4:90:7b:59:db:2f:34:61:07:94:
c2:df:c9:6a:5d:56:23:58:96:84:d9:a8:68:ee:01:
ff:82:d8:dc:ff:27:ba:44:cb:e9:a9:d1:ff:c2:26:
0f:5e:a2:eb:cb:6c:fa:cc:3b:53:d0:36:e1:aa:8f:
41:14:d4:77:55:ae:b0:55:bf:51:42:a3:b1:2a:8a:
3a:02:01:eb:8b:06:30:a5:59:aa:70:77:cf:41:a3:
25:ed:df:08:92:b6:31:6e:0f:63:b2:fb:66:8d:6d:
f2:59:7c:5d:ae:1c:45:81:2b:da:79:1b:e3:be:6d:
54:ca:e5:d6:a7:e3:b4:42:9a:ab:86:40:67:7e:d8:
5c:21:ff:1f:51:94:d6:a0:1b:34:c3:ad:52:10:d8:
be:e6:5a:f3:d9:4a:a7:3c:c6:e2:77:30:27:2b:c0:
11:88:56:e3:3a:bf:04:7a:0c:9e:57:62:f3:9f:7d:
3b:94:8e:9c:2f:83:fe:d9:ce:b7:83:a9:2c:01:d3:
31:c4:b2:ce:f6:09:1e:7c:64:21:a8:cd:b8:18:b6:
82:00:0a:85:b8:90:d7:3c:e7:82:ac:be:73:84:1f:
98:81:da:8b:c9:dd:3c:2f:27:25:af:61:54:e1:c5:
2d:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:F9:A2:98:F1:F0:1E:5D:B1:9A:19:12:3B:D7:51:04:B7:19:AA:08
X509v3 Authority Key Identifier:
keyid:0B:4C:FA:BE:47:E9:28:5F:65:F1:F2:D6:86:BA:AF:15:B8:B4:17:73
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C0z6vkfpKF9l8fLWhrqvFbi0F3M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/1abe8a-45a2-4156-98d7-6806e3d4ce4f/1/C0z6vkfpKF9l8fLWhrqvFbi0F3M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
46:f4:d8:1d:52:79:af:aa:50:ed:47:c5:46:0c:57:98:10:0c:
e5:b1:6e:a8:a6:0d:06:76:99:9a:66:f2:03:25:86:f3:f9:6d:
37:e0:15:b3:98:6d:a1:71:74:d8:23:e7:a7:7e:e7:8b:cb:5d:
10:97:a7:48:ac:e7:27:e6:4c:02:8e:b3:c9:fd:d1:c0:19:b5:
d6:24:71:c8:f4:06:c4:c4:ec:90:65:6d:b5:6a:34:bc:7e:fb:
2c:1f:78:0c:58:d8:11:cd:e1:f4:41:96:3b:99:ed:54:41:ef:
44:d6:e6:d5:30:87:db:eb:28:57:92:51:d2:79:70:a1:12:80:
2a:fb:16:2f:4e:5b:ac:3a:c5:c3:8c:93:d7:f5:c8:6d:a0:b9:
e3:c3:88:2b:41:65:69:e7:51:02:57:e4:43:8e:4c:8c:08:ad:
84:2c:f6:10:97:64:28:3c:c8:02:46:73:f4:68:0a:2e:a8:81:
6d:8e:38:0a:09:cf:24:59:fa:5a:fa:c4:f3:aa:02:6e:60:b1:
7e:d7:8d:b7:1e:88:ad:de:3c:90:a3:e5:4a:f1:29:b1:fb:23:
ef:39:29:87:99:fa:b4:df:48:c8:75:b2:77:47:f3:3c:18:08:
ef:f0:6e:f0:bd:cf:6f:35:93:9d:a8:99:0b:5e:8b:66:b7:37:
1c:59:cd:e8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOWFNRUAKrk3QZ1rTSvkHDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiNGNmYWJlNDdlOTI4NWY2NWYxZjJkNjg2YmFhZjE1Yjhi
NDE3NzMwHhcNMjUwNjA4MDcwMTQwWhcNMjUwNjA5MDcwMTQwWjAzMTEwLwYDVQQD
Eyg1NWY5YTI5OGYxZjAxZTVkYjE5YTE5MTIzYmQ3NTEwNGI3MTlhYTA4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuwQfDahZpDqWqym6RL/BoLrWVaSQ
e1nbLzRhB5TC38lqXVYjWJaE2aho7gH/gtjc/ye6RMvpqdH/wiYPXqLry2z6zDtT
0Dbhqo9BFNR3Va6wVb9RQqOxKoo6AgHriwYwpVmqcHfPQaMl7d8IkrYxbg9jsvtm
jW3yWXxdrhxFgSvaeRvjvm1UyuXWp+O0QpqrhkBnfthcIf8fUZTWoBs0w61SENi+
5lrz2UqnPMbidzAnK8ARiFbjOr8EegyeV2Lzn307lI6cL4P+2c63g6ksAdMxxLLO
9gkefGQhqM24GLaCAAqFuJDXPOeCrL5zhB+YgdqLyd08Lyclr2FU4cUtFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFX5opjx8B5dsZoZEjvXUQS3GaoIMB8GA1UdIwQY
MBaAFAtM+r5H6ShfZfHy1oa6rxW4tBdzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzB6NnZrZnBLRjlsOGZMV2hycXZGYmkwRjNNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS8xYWJlOGEtNDVhMi00MTU2LTk4ZDct
NjgwNmUzZDRjZTRmLzEvQzB6NnZrZnBLRjlsOGZMV2hycXZGYmkwRjNNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS8xYWJlOGEtNDVhMi00MTU2LTk4ZDctNjgwNmUzZDRjZTRm
LzEvQzB6NnZrZnBLRjlsOGZMV2hycXZGYmkwRjNNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARvTYHVJ5
r6pQ7UfFRgxXmBAM5bFuqKYNBnaZmmbyAyWG8/ltN+AVs5htoXF02CPnp37ni8td
EJenSKznJ+ZMAo6zyf3RwBm11iRxyPQGxMTskGVttWo0vH77LB94DFjYEc3h9EGW
O5ntVEHvRNbm1TCH2+soV5JR0nlwoRKAKvsWL05brDrFw4yT1/XIbaC548OIK0Fl
aedRAlfkQ45MjAithCz2EJdkKDzIAkZz9GgKLqiBbY44CgnPJFn6WvrE86oCbmCx
fteNtx6Ird48kKPlSvEpsfsj7zkph5n6tN9IyHWyd0fzPBgI7/Bu8L3PbzWTnaiZ
C16LZrc3HFnN6A==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:49:28 2025 by rpki-client