Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
File: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft (raw, json)
Hash identifier: dKo98B0a1cicawrJeyKmCb4JowUaYwpgYRDq4l1TIyE=
Subject key identifier: 29:B8:24:30:51:7C:58:E9:1F:9C:18:5D:FE:0B:2E:1E:0C:83:66:18
Authority key identifier: F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
Certificate issuer: /CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Certificate serial: 019761DE578B8C2E6DF68A26940767775A47
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
Manifest number: 158B
Signing time: Thu 12 Jun 2025 02:00:50 +0000
Manifest this update: Thu 12 Jun 2025 02:00:50 +0000
Manifest next update: Fri 13 Jun 2025 02:00:50 +0000
Files and hashes: 1: 1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl (hash: 431sIXYBMnYz+DXQaKGY2qiae1vh0P/GggfI3vPVLVg=)
2: pnLsiL6edNAl7saH4pXx8QzVPbg.roa (hash: 8OC0V00+GEMst/Tun4ncEnTTBHaJJRqRf9fvQjD99nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 13 Jun 2025 00:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:de:57:8b:8c:2e:6d:f6:8a:26:94:07:67:77:5a:47
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f95b27c1d543ae1efe83a141be12444e92418ff3
Validity
Not Before: Jun 12 02:00:50 2025 GMT
Not After : Jun 13 02:00:50 2025 GMT
Subject: CN=29b82430517c58e91f9c185dfe0b2e1e0c836618
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d5:ee:30:ba:ab:e4:63:f8:90:3c:d0:83:f5:fb:
f0:3c:f8:bc:e4:90:a1:70:40:2d:79:cf:96:97:b0:
12:63:b7:32:6a:37:fc:0a:de:fc:6e:ac:77:75:62:
24:1e:f3:31:e9:23:3f:b0:0e:6c:29:c0:b0:b4:47:
f6:64:84:69:05:c1:15:e6:ab:d6:06:40:1c:e9:0a:
7b:30:70:47:3e:fb:99:bc:0e:d3:5f:8f:db:ad:6a:
7a:fa:b6:e8:c6:5c:cc:3d:8e:b2:14:4a:d1:4c:e4:
62:8e:38:ee:f6:8e:5d:35:cb:c2:18:7e:0f:be:bf:
22:20:82:cb:70:91:00:a0:f7:55:4c:91:a9:7f:ba:
f4:eb:52:9c:0f:e8:a1:71:7f:ae:a8:ec:29:d1:63:
43:a2:dd:8a:fb:4a:20:69:8d:55:ed:4c:be:2c:82:
9e:c4:0d:06:8e:a5:01:fb:e8:65:3f:84:15:eb:2c:
27:e1:d4:6e:f7:13:df:4b:42:55:94:c9:7e:3b:0e:
6d:14:bf:dd:a0:bd:ed:b1:a7:57:50:2c:11:e8:cc:
c7:b9:26:33:ff:ee:33:c0:9f:12:65:3b:c1:09:31:
36:93:ba:28:e1:7f:cc:fa:c5:24:70:8e:9c:b2:78:
53:07:01:d4:bd:de:c9:3e:21:1a:d3:68:c8:1c:fe:
6a:05
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
29:B8:24:30:51:7C:58:E9:1F:9C:18:5D:FE:0B:2E:1E:0C:83:66:18
X509v3 Authority Key Identifier:
keyid:F9:5B:27:C1:D5:43:AE:1E:FE:83:A1:41:BE:12:44:4E:92:41:8F:F3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1-VsnwdVDrh7-g6FBvhJETpJBj_M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cb/ae8554-744a-42d9-b518-abad1ffb811c/1/1-VsnwdVDrh7-g6FBvhJETpJBj_M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1a:ab:1c:ca:c2:2a:20:00:7d:b1:8e:43:ca:fc:39:b3:46:a6:
99:f0:ff:82:f9:65:9a:99:a2:86:b7:ba:78:cb:c1:7b:09:0e:
fe:51:27:46:a9:86:50:8d:85:63:15:b6:0c:75:24:5c:d5:81:
dd:34:70:bc:3d:c5:7d:e7:04:53:75:01:b3:df:8b:b9:6c:9b:
77:5a:32:7c:ac:3b:09:48:ef:6d:b6:67:52:f4:ce:f6:05:02:
54:3e:f9:3d:0d:05:41:2d:f0:ae:ca:c2:14:5d:ad:93:4e:01:
ce:de:fa:c9:79:38:5b:53:e4:d5:2e:f7:4d:b7:f3:7e:a0:9d:
07:e7:65:a2:ee:c6:a4:fb:75:7a:6c:f7:c4:74:be:71:d6:d0:
2f:ab:5c:f6:0e:cd:ba:00:6b:86:9e:be:05:75:e2:6f:c9:f9:
48:ed:a1:09:1c:b0:4c:50:70:56:d2:a3:0b:f0:27:27:4f:92:
e4:98:c6:1f:94:80:fb:ea:7f:26:e0:78:5a:f6:24:c8:96:a2:
95:09:db:e8:e2:62:59:a8:5c:5b:4c:11:fe:60:0b:cb:9b:11:
aa:f1:22:01:d9:ee:49:0e:f1:6c:4f:1b:2d:9b:2d:e9:f1:be:
39:52:7c:9a:7f:a7:f8:da:0f:60:1e:64:36:57:e5:5a:2b:67:
ca:f2:e9:8b
-----BEGIN CERTIFICATE-----
MIIFGTCCBAGgAwIBAgISAZdh3leLjC5t9oomlAdnd1pHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY5NWIyN2MxZDU0M2FlMWVmZTgzYTE0MWJlMTI0NDRlOTI0
MThmZjMwHhcNMjUwNjEyMDIwMDUwWhcNMjUwNjEzMDIwMDUwWjAzMTEwLwYDVQQD
EygyOWI4MjQzMDUxN2M1OGU5MWY5YzE4NWRmZTBiMmUxZTBjODM2NjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1e4wuqvkY/iQPNCD9fvwPPi85JCh
cEAtec+Wl7ASY7cyajf8Ct78bqx3dWIkHvMx6SM/sA5sKcCwtEf2ZIRpBcEV5qvW
BkAc6Qp7MHBHPvuZvA7TX4/brWp6+rboxlzMPY6yFErRTORijjju9o5dNcvCGH4P
vr8iIILLcJEAoPdVTJGpf7r061KcD+ihcX+uqOwp0WNDot2K+0ogaY1V7Uy+LIKe
xA0GjqUB++hlP4QV6ywn4dRu9xPfS0JVlMl+Ow5tFL/doL3tsadXUCwR6MzHuSYz
/+4zwJ8SZTvBCTE2k7oo4X/M+sUkcI6csnhTBwHUvd7JPiEa02jIHP5qBQIDAQAB
o4ICJTCCAiEwHQYDVR0OBBYEFCm4JDBRfFjpH5wYXf4LLh4Mg2YYMB8GA1UdIwQY
MBaAFPlbJ8HVQ64e/oOhQb4SRE6SQY/zMA4GA1UdDwEB/wQEAwIHgDBlBggrBgEF
BQcBAQRZMFcwVQYIKwYBBQUHMAKGSXJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMS1Wc253ZFZEcmg3LWc2RkJ2aEpFVHBKQmpfTS5jZXIw
gY4GCCsGAQUFBwELBIGBMH8wfQYIKwYBBQUHMAuGcXJzeW5jOi8vcnBraS5yaXBl
Lm5ldC9yZXBvc2l0b3J5L0RFRkFVTFQvY2IvYWU4NTU0LTc0NGEtNDJkOS1iNTE4
LWFiYWQxZmZiODExYy8xLzEtVnNud2RWRHJoNy1nNkZCdmhKRVRwSkJqX00ubWZ0
MIGCBgNVHR8EezB5MHegdaBzhnFyc3luYzovL3Jwa2kucmlwZS5uZXQvcmVwb3Np
dG9yeS9ERUZBVUxUL2NiL2FlODU1NC03NDRhLTQyZDktYjUxOC1hYmFkMWZmYjgx
MWMvMS8xLVZzbndkVkRyaDctZzZGQnZoSkVUcEpCal9NLmNybDAYBgNVHSABAf8E
DjAMMAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgAC
BQAwFQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGqsc
ysIqIAB9sY5Dyvw5s0ammfD/gvllmpmihre6eMvBewkO/lEnRqmGUI2FYxW2DHUk
XNWB3TRwvD3FfecEU3UBs9+LuWybd1oyfKw7CUjvbbZnUvTO9gUCVD75PQ0FQS3w
rsrCFF2tk04Bzt76yXk4W1Pk1S73TbfzfqCdB+dlou7GpPt1emz3xHS+cdbQL6tc
9g7NugBrhp6+BXXib8n5SO2hCRywTFBwVtKjC/AnJ0+S5JjGH5SA++p/JuB4WvYk
yJailQnb6OJiWahcW0wR/mALy5sRqvEiAdnuSQ7xbE8bLZst6fG+OVJ8mn+n+NoP
YB5kNlflWitnyvLpiw==
-----END CERTIFICATE-----
Generated at Thu Jun 12 08:35:09 2025 by rpki-client