Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
File: 0PbNMLTPoZPiJrupKC42aiKjEQ8.mft (raw, json)
Hash identifier: OmiUp+/QEETiwhODJO3/xSBUDEq9gSChbfvP8zxakTo=
Subject key identifier: C8:A9:40:CA:32:2C:A7:F1:5F:CC:D1:2F:24:5F:C3:98:44:F0:B6:AA
Authority key identifier: D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
Certificate issuer: /CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Certificate serial: 01974B1F1E8031E50D69AFD32883FC7A8F13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
Manifest number: 157F
Signing time: Sat 07 Jun 2025 16:00:19 +0000
Manifest this update: Sat 07 Jun 2025 16:00:19 +0000
Manifest next update: Sun 08 Jun 2025 16:00:19 +0000
Files and hashes: 1: 0PbNMLTPoZPiJrupKC42aiKjEQ8.crl (hash: r8i/OB5jK3tX0k6Ovii5HIfrtACRY80pFQk1iW5uGnQ=)
2: rcxI4e2J8wRM11pjAJVw2X1CP4Q.roa (hash: dOutEmsom2VI++bJk5JwwVxqjGBRuIpfu9it/0+MYW8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 11:24:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:1f:1e:80:31:e5:0d:69:af:d3:28:83:fc:7a:8f:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d0f6cd30b4cfa193e226bba9282e366a22a3110f
Validity
Not Before: Jun 7 16:00:19 2025 GMT
Not After : Jun 8 16:00:19 2025 GMT
Subject: CN=c8a940ca322ca7f15fccd12f245fc39844f0b6aa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d0:7c:cb:b9:e8:98:9b:5a:72:76:d6:7e:4f:24:
62:0d:13:5c:fd:1c:4f:e9:c3:5a:c1:6e:1c:9e:dc:
97:22:0a:fc:7c:84:4c:28:1f:7f:f9:a4:89:8d:18:
c9:b3:ce:9b:80:60:ed:1f:8d:4a:b9:98:33:2c:7f:
ca:0a:aa:8f:a9:62:b8:96:3a:99:aa:87:ef:3b:45:
03:53:40:25:36:bd:84:2a:e5:f1:4d:93:ef:04:85:
58:af:63:8e:3d:48:63:21:b8:59:95:bf:24:30:b7:
ac:16:52:62:f8:1d:d5:c5:db:4f:bc:f4:11:5d:c3:
73:3c:ef:c6:ae:b7:88:c5:97:79:42:02:17:4b:be:
2c:43:27:a3:b9:0a:08:f5:01:60:a3:68:25:80:a5:
49:2a:1a:12:4f:ee:c0:18:fe:5e:b1:86:b2:a7:ef:
4e:a1:3a:2e:4c:a7:46:86:ec:b5:8d:11:ae:b2:32:
90:16:78:e9:56:13:b4:da:42:9f:dc:39:a8:1f:8d:
56:8b:61:eb:c3:13:b2:bd:23:a4:d8:74:22:7e:fd:
0a:2b:16:58:e7:98:22:39:d1:f8:8d:db:50:8f:62:
09:2f:1c:a5:ce:c1:b3:ad:8a:aa:a5:9c:0f:0e:32:
4c:fb:14:ff:f9:25:f2:a5:1f:96:9a:0f:0e:bc:fa:
55:63
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C8:A9:40:CA:32:2C:A7:F1:5F:CC:D1:2F:24:5F:C3:98:44:F0:B6:AA
X509v3 Authority Key Identifier:
keyid:D0:F6:CD:30:B4:CF:A1:93:E2:26:BB:A9:28:2E:36:6A:22:A3:11:0F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0PbNMLTPoZPiJrupKC42aiKjEQ8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/2f69df-6f23-4aa7-88f4-e299e910039e/1/0PbNMLTPoZPiJrupKC42aiKjEQ8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
42:54:2b:36:e5:a6:6d:aa:9b:0b:df:99:71:32:7a:db:71:e4:
f8:f4:f3:e9:7f:3b:fd:af:e1:e6:d1:e7:b7:b1:7c:24:a2:aa:
f3:94:ea:99:94:ee:05:72:a5:d9:46:ac:47:ff:c5:9f:04:ac:
9f:cf:c0:a1:0d:61:e0:39:c5:37:dc:06:8b:a2:a1:9e:23:55:
1e:1a:16:ce:cb:b8:44:77:b9:7d:24:6a:de:e4:fe:c6:95:ad:
bf:d3:b5:8c:71:f5:98:4e:84:3b:d3:bf:3f:eb:98:a8:f6:a4:
ec:c3:8b:00:29:d5:e5:2d:10:b2:da:89:89:26:44:ee:08:40:
6a:80:e5:ab:30:1a:3b:d5:99:cf:cd:51:9d:93:8d:30:79:f2:
d4:55:e9:cf:ea:a9:61:eb:4a:bc:4c:89:84:80:98:ed:66:5e:
77:b8:5d:4c:90:e7:11:ec:55:eb:87:10:f6:16:92:8d:b5:ae:
dd:75:76:fd:c6:68:67:83:bd:9e:67:fc:9d:e4:aa:95:9e:ee:
e3:e3:7c:0b:e4:16:c8:4c:c8:ed:a7:71:e1:c1:c6:26:c4:03:
df:ae:e3:0b:ab:eb:90:c7:98:83:de:b3:aa:0c:ec:f6:ba:bf:
38:77:03:88:bc:4d:01:59:95:d5:e7:07:cd:7a:74:9e:42:8f:
03:ee:9a:10
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLHx6AMeUNaa/TKIP8eo8TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwZjZjZDMwYjRjZmExOTNlMjI2YmJhOTI4MmUzNjZhMjJh
MzExMGYwHhcNMjUwNjA3MTYwMDE5WhcNMjUwNjA4MTYwMDE5WjAzMTEwLwYDVQQD
EyhjOGE5NDBjYTMyMmNhN2YxNWZjY2QxMmYyNDVmYzM5ODQ0ZjBiNmFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA0HzLueiYm1pydtZ+TyRiDRNc/RxP
6cNawW4cntyXIgr8fIRMKB9/+aSJjRjJs86bgGDtH41KuZgzLH/KCqqPqWK4ljqZ
qofvO0UDU0AlNr2EKuXxTZPvBIVYr2OOPUhjIbhZlb8kMLesFlJi+B3VxdtPvPQR
XcNzPO/GrreIxZd5QgIXS74sQyejuQoI9QFgo2glgKVJKhoST+7AGP5esYayp+9O
oTouTKdGhuy1jRGusjKQFnjpVhO02kKf3DmoH41Wi2HrwxOyvSOk2HQifv0KKxZY
55giOdH4jdtQj2IJLxylzsGzrYqqpZwPDjJM+xT/+SXypR+Wmg8OvPpVYwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMipQMoyLKfxX8zRLyRfw5hE8LaqMB8GA1UdIwQY
MBaAFND2zTC0z6GT4ia7qSguNmoioxEPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQt
ZTI5OWU5MTAwMzllLzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy8yZjY5ZGYtNmYyMy00YWE3LTg4ZjQtZTI5OWU5MTAwMzll
LzEvMFBiTk1MVFBvWlBpSnJ1cEtDNDJhaUtqRVE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQlQrNuWm
baqbC9+ZcTJ623Hk+PTz6X87/a/h5tHnt7F8JKKq85TqmZTuBXKl2UasR//FnwSs
n8/AoQ1h4DnFN9wGi6KhniNVHhoWzsu4RHe5fSRq3uT+xpWtv9O1jHH1mE6EO9O/
P+uYqPak7MOLACnV5S0QstqJiSZE7ghAaoDlqzAaO9WZz81RnZONMHny1FXpz+qp
YetKvEyJhICY7WZed7hdTJDnEexV64cQ9haSjbWu3XV2/cZoZ4O9nmf8neSqlZ7u
4+N8C+QWyEzI7adx4cHGJsQD367jC6vrkMeYg96zqgzs9rq/OHcDiLxNAVmV1ecH
zXp0nkKPA+6aEA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 21:01:30 2025 by rpki-client