Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
File: fexyg377vE6m3dS-lDYZFrTDYto.mft (raw, json)
Hash identifier: YgCDFHJqK686UryZIK7LDEVFreJHzWV1e9vHtPuSYIw=
Subject key identifier: CA:CE:37:7B:20:08:C1:CA:5D:26:A4:54:3D:E8:58:8D:FA:8E:5D:81
Authority key identifier: 7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
Certificate issuer: /CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Certificate serial: 01974F33422B540BAF52CB2D0EB786B4FF6F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
Manifest number: 0C67
Signing time: Sun 08 Jun 2025 11:00:48 +0000
Manifest this update: Sun 08 Jun 2025 11:00:48 +0000
Manifest next update: Mon 09 Jun 2025 11:00:48 +0000
Files and hashes: 1: U2BvE4zbzFJTHLJzSmZ1W9x-kCM.roa (hash: CneTmiRYnA+2gIbWw8P2gftXT9GSMXZurQf8UEQYJtM=)
2: fexyg377vE6m3dS-lDYZFrTDYto.crl (hash: QBBihjX9BD7xIPQ1fhmeSO57iHMEBysq9BDtPZlJ0AM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:33:42:2b:54:0b:af:52:cb:2d:0e:b7:86:b4:ff:6f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7dec72837efbbc4ea6ddd4be94361916b4c362da
Validity
Not Before: Jun 8 11:00:48 2025 GMT
Not After : Jun 9 11:00:48 2025 GMT
Subject: CN=cace377b2008c1ca5d26a4543de8588dfa8e5d81
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:40:49:60:01:b1:9d:a6:07:29:3d:19:08:
83:b1:de:9d:f4:82:c4:50:7a:21:84:e0:35:e4:39:
b1:17:e7:20:d3:62:10:89:4e:3e:81:a4:c5:60:97:
a1:78:89:17:6d:91:e2:bf:41:4f:c9:4c:90:1a:b9:
94:eb:a5:a9:22:86:54:55:5e:de:de:e9:1c:62:8c:
bf:8e:f1:52:bb:2a:2f:a3:48:6f:c6:fc:03:06:ab:
7b:a8:23:39:4a:2b:fc:fa:c2:82:2d:4e:53:96:b2:
fa:c1:e0:94:a6:3b:65:77:c7:e3:20:05:2d:b7:76:
88:b5:cf:90:f2:74:c2:f8:7a:4b:49:62:26:9b:f5:
93:ba:f7:66:f3:5a:c6:70:b6:40:70:78:de:97:c4:
e4:9f:4a:3f:55:30:ca:1f:0d:1a:17:33:f0:0b:18:
c9:02:45:4b:b7:a3:70:8f:3b:75:0f:92:6b:3f:b0:
ca:b9:fe:ff:96:ae:6f:ed:ba:1c:13:d5:87:75:05:
9e:85:a1:84:34:39:57:d1:ba:25:26:a7:c7:ce:61:
c9:92:8b:b9:ba:f1:3f:9e:ee:62:9c:4b:d9:48:da:
55:7e:78:22:27:43:05:a1:38:13:2c:19:f3:29:cf:
ab:dc:5e:5f:d7:a3:f9:2f:04:92:09:5c:8e:78:d9:
e3:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CA:CE:37:7B:20:08:C1:CA:5D:26:A4:54:3D:E8:58:8D:FA:8E:5D:81
X509v3 Authority Key Identifier:
keyid:7D:EC:72:83:7E:FB:BC:4E:A6:DD:D4:BE:94:36:19:16:B4:C3:62:DA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/fexyg377vE6m3dS-lDYZFrTDYto.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/44478f-e980-4e60-9d6e-386617a664fe/1/fexyg377vE6m3dS-lDYZFrTDYto.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:81:36:b0:fd:c2:09:89:09:65:ad:42:5c:20:ac:d1:6f:99:
66:90:10:cd:99:ca:c4:8f:5b:aa:1e:42:eb:35:8c:2d:b2:82:
c8:77:f1:10:d7:94:b9:f7:b1:aa:dc:27:7d:c0:51:2e:51:aa:
a1:5b:4c:b9:28:bd:89:f0:ce:98:5f:b0:d7:f2:da:c6:32:d8:
52:da:01:3b:6f:54:65:64:dd:b0:02:32:07:8c:e9:69:24:75:
16:26:94:92:2d:5c:23:fa:d1:d9:85:2c:57:2a:f9:2d:9f:06:
a5:dd:33:77:b3:ce:91:71:33:85:00:ba:53:40:74:c1:c4:e0:
50:d1:30:05:09:6d:3c:07:38:e5:32:e2:5a:9d:fc:84:f2:03:
b5:e1:9b:ff:5e:8c:e3:be:5d:f4:a4:76:e8:a8:18:87:f0:6a:
ad:f7:bf:64:66:4f:2d:8c:7a:c1:a7:82:49:76:14:4a:89:78:
5d:35:f9:78:60:77:65:2b:a9:d4:33:24:1d:17:89:16:63:66:
d4:03:0c:15:b1:bd:4f:88:47:f1:5e:b2:e0:9d:a6:30:15:fc:
af:ec:a0:81:80:e7:59:cd:1e:f8:19:13:62:48:13:d6:48:8d:
19:9a:20:c9:23:55:66:ea:d4:ff:b1:99:7d:2b:ae:5f:fc:3b:
a4:4f:bd:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPM0IrVAuvUsstDreGtP9vMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdkZWM3MjgzN2VmYmJjNGVhNmRkZDRiZTk0MzYxOTE2YjRj
MzYyZGEwHhcNMjUwNjA4MTEwMDQ4WhcNMjUwNjA5MTEwMDQ4WjAzMTEwLwYDVQQD
EyhjYWNlMzc3YjIwMDhjMWNhNWQyNmE0NTQzZGU4NTg4ZGZhOGU1ZDgxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hZASWABsZ2mByk9GQiDsd6d9ILE
UHohhOA15DmxF+cg02IQiU4+gaTFYJeheIkXbZHiv0FPyUyQGrmU66WpIoZUVV7e
3ukcYoy/jvFSuyovo0hvxvwDBqt7qCM5Siv8+sKCLU5TlrL6weCUpjtld8fjIAUt
t3aItc+Q8nTC+HpLSWImm/WTuvdm81rGcLZAcHjel8Tkn0o/VTDKHw0aFzPwCxjJ
AkVLt6Nwjzt1D5JrP7DKuf7/lq5v7bocE9WHdQWehaGENDlX0bolJqfHzmHJkou5
uvE/nu5inEvZSNpVfngiJ0MFoTgTLBnzKc+r3F5f16P5LwSSCVyOeNnjKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMrON3sgCMHKXSakVD3oWI36jl2BMB8GA1UdIwQY
MBaAFH3scoN++7xOpt3UvpQ2GRa0w2LaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUt
Mzg2NjE3YTY2NGZlLzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy80NDQ3OGYtZTk4MC00ZTYwLTlkNmUtMzg2NjE3YTY2NGZl
LzEvZmV4eWczNzd2RTZtM2RTLWxEWVpGclREWXRvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADYE2sP3C
CYkJZa1CXCCs0W+ZZpAQzZnKxI9bqh5C6zWMLbKCyHfxENeUufexqtwnfcBRLlGq
oVtMuSi9ifDOmF+w1/LaxjLYUtoBO29UZWTdsAIyB4zpaSR1FiaUki1cI/rR2YUs
Vyr5LZ8Gpd0zd7POkXEzhQC6U0B0wcTgUNEwBQltPAc45TLiWp38hPIDteGb/16M
475d9KR26KgYh/Bqrfe/ZGZPLYx6waeCSXYUSol4XTX5eGB3ZSup1DMkHReJFmNm
1AMMFbG9T4hH8V6y4J2mMBX8r+yggYDnWc0e+BkTYkgT1kiNGZogySNVZurU/7GZ
fSuuX/w7pE+9OQ==
-----END CERTIFICATE-----
Generated at Sun Jun 8 13:51:05 2025 by rpki-client