
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
File: RRi4nH3OK17cBVgVFs_BnXoxdOg.mft (raw, json)
Hash identifier: bDzFy8LSdaxYA/zPo06Rp8ZwEaNaopp35PBmLOmYlh4=
Subject key identifier: 2E:C4:89:63:9C:8E:A5:1D:2A:C4:B5:E8:B5:61:F4:FC:DD:2A:CD:3F
Authority key identifier: 45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
Certificate issuer: /CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Certificate serial: 01974B8D76428ED8ED97151F6A795A97D949
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
Manifest number: 13A2
Signing time: Sat 07 Jun 2025 18:00:51 +0000
Manifest this update: Sat 07 Jun 2025 18:00:51 +0000
Manifest next update: Sun 08 Jun 2025 18:00:51 +0000
Files and hashes: 1: RRi4nH3OK17cBVgVFs_BnXoxdOg.crl (hash: e2iiH8ABaM2k5gxjJR5+1QqBJCMGU9aALnSla1+gkN0=)
2: qkuP3INuoQUlkGzQXsg6hNdv2PE.roa (hash: nbTS8K6lNcxMgwiUyLADYWPREZ9Nv1ZzLCUppLN19Wk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 18:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4b:8d:76:42:8e:d8:ed:97:15:1f:6a:79:5a:97:d9:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4518b89c7dce2b5edc05581516cfc19d7a3174e8
Validity
Not Before: Jun 7 18:00:51 2025 GMT
Not After : Jun 8 18:00:51 2025 GMT
Subject: CN=2ec489639c8ea51d2ac4b5e8b561f4fcdd2acd3f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:99:a5:57:90:93:27:ac:3f:fd:cf:a7:e7:24:
1a:dd:6e:90:d7:2e:70:c9:40:59:aa:4b:b2:f9:01:
c6:cc:c7:f7:3d:8e:32:4d:b6:f6:dd:55:c4:4b:e3:
82:2f:7a:6c:cd:70:10:9e:0f:37:76:78:3e:a9:74:
cb:b7:72:4b:29:c2:32:04:91:5e:48:9b:8e:b5:f5:
d9:16:3e:1c:04:c4:93:fc:0c:4a:34:92:ea:48:67:
4c:ec:39:f3:e7:a1:1f:b2:61:05:7f:f1:22:c5:f2:
a0:e7:48:c9:ee:7a:01:75:f3:58:44:b1:06:db:cd:
9a:1d:ce:29:39:11:27:6c:52:57:3f:1d:58:8f:07:
85:cd:e4:e9:22:07:7c:4d:fd:40:a0:3c:e1:e2:54:
90:e6:a4:dc:05:84:a7:df:89:d7:5a:8c:89:d7:30:
56:ca:b1:5c:9e:51:0e:a3:1e:6d:0c:7d:5e:7e:7b:
a9:18:3f:b2:9e:b1:c0:9a:2a:5d:65:72:e4:eb:51:
46:13:b2:fc:65:31:23:11:b3:e9:ed:a1:b0:16:15:
75:ce:3e:e5:56:74:ee:54:ab:be:3a:76:d9:2d:a4:
b4:ba:2a:a7:76:28:37:c1:2a:e7:93:03:52:c1:d7:
94:0f:27:0c:02:8c:d7:3f:9c:83:b5:18:1f:bc:b0:
9b:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2E:C4:89:63:9C:8E:A5:1D:2A:C4:B5:E8:B5:61:F4:FC:DD:2A:CD:3F
X509v3 Authority Key Identifier:
keyid:45:18:B8:9C:7D:CE:2B:5E:DC:05:58:15:16:CF:C1:9D:7A:31:74:E8
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RRi4nH3OK17cBVgVFs_BnXoxdOg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/df/ccf444-a22c-4fcd-bf1a-0f937ccf02e0/1/RRi4nH3OK17cBVgVFs_BnXoxdOg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
aa:fc:85:e4:59:90:ad:ad:dd:c3:77:88:21:63:a5:5e:e1:97:
fc:00:8f:37:01:dc:f0:2b:31:a1:bc:2e:3f:fb:58:c8:f9:16:
41:7e:ce:a7:51:8c:ab:5c:40:7c:91:85:f4:cf:4c:fb:cc:6e:
8f:a0:62:15:ce:5b:de:2c:b6:8c:19:05:15:f3:54:2f:0e:0c:
9f:af:cd:c5:a1:9b:33:c0:e6:14:d1:42:b8:78:ed:78:96:fa:
9e:a7:3e:59:82:f3:ad:02:22:02:63:4c:bd:e3:e9:dc:79:07:
de:53:ef:7a:cd:3e:fe:8a:be:95:57:bb:77:9d:6f:54:e8:ac:
4d:01:2c:ce:22:a1:b1:9c:cc:51:03:66:5e:12:4e:46:59:62:
3d:fd:a2:2d:68:35:40:b7:50:7b:16:5e:ef:1e:00:d1:e1:69:
e4:70:5e:26:29:a2:13:9a:e0:3e:b2:0a:cb:9c:91:b1:da:a2:
9e:61:46:99:43:eb:7d:a4:0d:aa:16:5a:b7:57:84:a8:ba:5a:
8e:88:41:a4:87:a2:c4:ce:83:52:54:94:ce:e8:62:0d:a2:d3:
93:e6:79:8b:b2:91:03:a9:ad:2b:35:42:12:a6:4a:ca:f8:8d:
8d:47:36:85:2c:06:51:a6:f7:9f:50:c1:11:6a:8a:2b:bd:0e:
39:0d:05:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdLjXZCjtjtlxUfanlal9lJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1MThiODljN2RjZTJiNWVkYzA1NTgxNTE2Y2ZjMTlkN2Ez
MTc0ZTgwHhcNMjUwNjA3MTgwMDUxWhcNMjUwNjA4MTgwMDUxWjAzMTEwLwYDVQQD
EygyZWM0ODk2MzljOGVhNTFkMmFjNGI1ZThiNTYxZjRmY2RkMmFjZDNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+ZmlV5CTJ6w//c+n5yQa3W6Q1y5w
yUBZqkuy+QHGzMf3PY4yTbb23VXES+OCL3pszXAQng83dng+qXTLt3JLKcIyBJFe
SJuOtfXZFj4cBMST/AxKNJLqSGdM7Dnz56EfsmEFf/EixfKg50jJ7noBdfNYRLEG
282aHc4pOREnbFJXPx1YjweFzeTpIgd8Tf1AoDzh4lSQ5qTcBYSn34nXWoyJ1zBW
yrFcnlEOox5tDH1efnupGD+ynrHAmipdZXLk61FGE7L8ZTEjEbPp7aGwFhV1zj7l
VnTuVKu+OnbZLaS0uiqndig3wSrnkwNSwdeUDycMAozXP5yDtRgfvLCbkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFC7EiWOcjqUdKsS16LVh9PzdKs0/MB8GA1UdIwQY
MBaAFEUYuJx9zite3AVYFRbPwZ16MXToMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kZi9jY2Y0NDQtYTIyYy00ZmNkLWJmMWEt
MGY5MzdjY2YwMmUwLzEvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kZi9jY2Y0NDQtYTIyYy00ZmNkLWJmMWEtMGY5MzdjY2YwMmUw
LzEvUlJpNG5IM09LMTdjQlZnVkZzX0JuWG94ZE9nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAqvyF5FmQ
ra3dw3eIIWOlXuGX/ACPNwHc8CsxobwuP/tYyPkWQX7Op1GMq1xAfJGF9M9M+8xu
j6BiFc5b3iy2jBkFFfNULw4Mn6/NxaGbM8DmFNFCuHjteJb6nqc+WYLzrQIiAmNM
vePp3HkH3lPves0+/oq+lVe7d51vVOisTQEsziKhsZzMUQNmXhJORlliPf2iLWg1
QLdQexZe7x4A0eFp5HBeJimiE5rgPrIKy5yRsdqinmFGmUPrfaQNqhZat1eEqLpa
johBpIeixM6DUlSUzuhiDaLTk+Z5i7KRA6mtKzVCEqZKyviNjUc2hSwGUab3n1DB
EWqKK70OOQ0FLw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 03:51:54 2025 by rpki-client