Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
File: exi86iJ6TqxhtTALME3u8UaU3JE.mft (raw, json)
Hash identifier: 32v6SJejyJPNTlJ98dg4SqQY2H7ueSts7xbfmujQprc=
Subject key identifier: 9A:CA:E6:D2:AE:83:32:12:9A:4D:14:0E:E9:34:C6:1C:C6:99:60:62
Authority key identifier: 7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
Certificate issuer: /CN=7b18bcea227a4eac61b5300b304deef14694dc91
Certificate serial: 0197470BB3DCDD4C144A879A326145C8A40F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
Manifest number: 0AC7
Signing time: Fri 06 Jun 2025 21:00:38 +0000
Manifest this update: Fri 06 Jun 2025 21:00:38 +0000
Manifest next update: Sat 07 Jun 2025 21:00:38 +0000
Files and hashes: 1: exi86iJ6TqxhtTALME3u8UaU3JE.crl (hash: ceIUS45Awvz6t0OM/qVkk7Ac018+kCeGXcz9M28uGyk=)
2: lQ20cZ9OUrcSqb6gIxN40wQjpAk.roa (hash: WgCV5F0Lo1vsx71+iRrim7ywAzohxnYAfe2pxSvyfPA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:0b:b3:dc:dd:4c:14:4a:87:9a:32:61:45:c8:a4:0f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b18bcea227a4eac61b5300b304deef14694dc91
Validity
Not Before: Jun 6 21:00:38 2025 GMT
Not After : Jun 7 21:00:38 2025 GMT
Subject: CN=9acae6d2ae8332129a4d140ee934c61cc6996062
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:e8:9a:74:1a:70:94:8c:93:31:fb:5e:fa:f2:
7d:6f:75:a3:45:0f:40:37:7c:c6:24:40:3f:f5:22:
7a:0b:22:4c:68:ac:fd:da:45:30:6d:09:18:d0:81:
da:65:54:bc:63:d1:52:45:75:b6:23:69:57:0a:3e:
e3:7c:12:33:b2:31:02:44:2a:ac:45:3c:0c:c4:7c:
81:1c:16:e0:45:7b:13:81:04:f8:66:5c:cf:01:95:
ac:bf:96:ae:fd:41:9b:9c:95:38:1e:1f:4a:1b:b5:
3f:d8:3c:f5:8a:52:bd:83:61:c4:b4:a3:ab:54:f5:
6c:4f:03:6c:6c:60:7e:f7:ec:42:d9:2c:3d:9d:50:
cd:b9:8e:6b:ba:d3:52:c1:ba:96:b9:03:44:9a:7f:
a2:5e:58:0f:c7:11:8e:f2:8b:1c:7a:c9:a1:55:c9:
69:fd:74:8c:47:e2:37:4a:50:b7:03:c1:53:30:df:
ac:e5:95:b2:09:79:06:11:74:e9:fb:ee:d7:23:1f:
cb:29:c6:0f:b3:48:9d:16:b2:ee:a3:45:3d:52:75:
16:ed:20:f5:68:dd:9b:0c:36:20:41:3c:f9:4e:c6:
c7:c0:a0:a3:f2:59:65:e8:d8:f3:cf:6b:e4:97:7f:
8d:c8:20:83:e0:2d:b0:44:c9:7e:d5:3a:5a:bf:76:
60:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9A:CA:E6:D2:AE:83:32:12:9A:4D:14:0E:E9:34:C6:1C:C6:99:60:62
X509v3 Authority Key Identifier:
keyid:7B:18:BC:EA:22:7A:4E:AC:61:B5:30:0B:30:4D:EE:F1:46:94:DC:91
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exi86iJ6TqxhtTALME3u8UaU3JE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c9/dac072-0f1d-449b-b30b-09b19d255254/1/exi86iJ6TqxhtTALME3u8UaU3JE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
33:96:a2:a1:17:7a:e1:e3:fb:7c:e2:e2:79:7f:04:c9:86:b9:
df:ee:89:ff:24:bc:71:f6:96:e6:cf:55:84:55:44:af:39:68:
77:ec:80:35:20:4b:6d:49:cd:56:db:95:bb:73:44:d6:e5:de:
59:e0:db:43:9a:08:6e:86:35:73:87:aa:0a:b7:d7:0c:a6:da:
1a:b2:82:98:05:17:06:8c:41:6c:25:30:ff:35:ed:4e:5f:b3:
51:cf:de:81:0c:cb:54:81:19:fd:b8:0f:3b:41:1f:ae:07:4a:
f1:61:ff:1c:1d:36:c3:ea:da:1e:bb:c8:ab:b7:74:a0:10:76:
f4:ff:4a:8a:47:7c:7f:0c:17:d4:b0:40:3c:86:98:25:af:8e:
a2:bc:23:86:11:4f:56:fa:a4:c9:d1:dd:3b:fd:aa:7e:fc:a6:
24:1e:46:d9:a1:98:a0:e2:f8:9b:da:72:a5:31:80:3f:bc:53:
06:84:a2:1d:bc:88:69:4d:d1:d6:54:30:6e:b4:16:d0:05:19:
33:2e:f9:d3:ea:59:d4:06:ca:ea:eb:17:56:5a:bb:4b:2a:1d:
c8:e4:b2:87:c6:e9:8a:35:80:a5:b4:4b:e1:d7:c0:c6:dd:b1:
7a:b5:d6:d4:c8:f1:83:b1:cb:96:b5:28:3e:f5:74:ec:28:a7:
cc:4d:0d:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHC7Pc3UwUSoeaMmFFyKQPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMThiY2VhMjI3YTRlYWM2MWI1MzAwYjMwNGRlZWYxNDY5
NGRjOTEwHhcNMjUwNjA2MjEwMDM4WhcNMjUwNjA3MjEwMDM4WjAzMTEwLwYDVQQD
Eyg5YWNhZTZkMmFlODMzMjEyOWE0ZDE0MGVlOTM0YzYxY2M2OTk2MDYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAneiadBpwlIyTMfte+vJ9b3WjRQ9A
N3zGJEA/9SJ6CyJMaKz92kUwbQkY0IHaZVS8Y9FSRXW2I2lXCj7jfBIzsjECRCqs
RTwMxHyBHBbgRXsTgQT4ZlzPAZWsv5au/UGbnJU4Hh9KG7U/2Dz1ilK9g2HEtKOr
VPVsTwNsbGB+9+xC2Sw9nVDNuY5rutNSwbqWuQNEmn+iXlgPxxGO8oscesmhVclp
/XSMR+I3SlC3A8FTMN+s5ZWyCXkGEXTp++7XIx/LKcYPs0idFrLuo0U9UnUW7SD1
aN2bDDYgQTz5TsbHwKCj8lll6Njzz2vkl3+NyCCD4C2wRMl+1Tpav3ZgCQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJrK5tKugzISmk0UDuk0xhzGmWBiMB8GA1UdIwQY
MBaAFHsYvOoiek6sYbUwCzBN7vFGlNyRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jOS9kYWMwNzItMGYxZC00NDliLWIzMGIt
MDliMTlkMjU1MjU0LzEvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jOS9kYWMwNzItMGYxZC00NDliLWIzMGItMDliMTlkMjU1MjU0
LzEvZXhpODZpSjZUcXhodFRBTE1FM3U4VWFVM0pFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAM5aioRd6
4eP7fOLieX8EyYa53+6J/yS8cfaW5s9VhFVErzlod+yANSBLbUnNVtuVu3NE1uXe
WeDbQ5oIboY1c4eqCrfXDKbaGrKCmAUXBoxBbCUw/zXtTl+zUc/egQzLVIEZ/bgP
O0EfrgdK8WH/HB02w+raHrvIq7d0oBB29P9Kikd8fwwX1LBAPIaYJa+OorwjhhFP
VvqkydHdO/2qfvymJB5G2aGYoOL4m9pypTGAP7xTBoSiHbyIaU3R1lQwbrQW0AUZ
My750+pZ1AbK6usXVlq7SyodyOSyh8bpijWApbRL4dfAxt2xerXW1Mjxg7HLlrUo
PvV07CinzE0NIA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:11:38 2025 by rpki-client