Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
File: sA4l9V67rLBp8QOssIZnA4Nc_M0.mft (raw, json)
Hash identifier: P/OHhEzqZwmHBkFMRagOnXP41YpzELWjS8yWA69QuwU=
Subject key identifier: BE:79:44:29:82:BF:4A:77:D4:0C:65:09:A1:0B:D6:0C:2A:8A:55:22
Authority key identifier: B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
Certificate issuer: /CN=b00e25f55ebbacb069f103acb0866703835cfccd
Certificate serial: 01976B85EF52D6E267CCA0ADE7ABC89D4A35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
Manifest number: 119A
Signing time: Fri 13 Jun 2025 23:00:28 +0000
Manifest this update: Fri 13 Jun 2025 23:00:28 +0000
Manifest next update: Sat 14 Jun 2025 23:00:28 +0000
Files and hashes: 1: IQVuYRD39w1eDGvQI5n6qd53zJ0.roa (hash: YMuLKblQhuUFH21p6Ke9CEB5Y7GrJ0BpmU+txXFqoC4=)
2: sA4l9V67rLBp8QOssIZnA4Nc_M0.crl (hash: Yx/FaM3xv6YEFMIjcUbEBYKJHdDBbbBn007QavJvVi8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 23:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:85:ef:52:d6:e2:67:cc:a0:ad:e7:ab:c8:9d:4a:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b00e25f55ebbacb069f103acb0866703835cfccd
Validity
Not Before: Jun 13 23:00:28 2025 GMT
Not After : Jun 14 23:00:28 2025 GMT
Subject: CN=be79442982bf4a77d40c6509a10bd60c2a8a5522
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e9:de:59:6a:23:97:f9:5d:b4:26:53:3d:7d:57:
05:70:d0:b7:74:5b:45:4b:ee:38:3b:fb:4c:7c:5c:
e1:26:22:5c:be:7e:e0:f1:dd:94:ba:67:49:b8:56:
f0:e1:8b:b2:f9:c5:06:0f:af:93:8e:35:1c:1b:a4:
c2:2f:80:62:20:1a:58:f6:20:60:d5:9d:2a:fe:0f:
18:3f:1f:d9:f0:50:65:43:7e:32:43:6b:4f:cd:c9:
0b:74:3a:55:65:fc:3c:f6:76:8f:1f:f3:ea:12:b9:
d7:e6:9a:39:7c:5b:88:79:22:a9:21:33:2b:15:06:
41:04:13:f2:42:dc:e0:13:29:52:4d:29:86:77:e1:
0d:9d:a5:46:e1:d6:b8:b4:6f:38:5a:56:bb:e9:ef:
d1:2a:41:4c:0b:9e:22:5f:af:9c:09:95:07:ec:b3:
84:78:b4:0c:1a:15:d1:88:97:05:0e:2d:0d:32:ab:
56:35:0c:50:39:2a:1a:06:c4:37:d4:da:39:4c:b7:
04:fe:7c:7a:ac:a5:1e:10:13:ca:05:e7:40:e2:2f:
73:cf:6c:98:70:8f:05:44:97:bb:20:51:17:60:9b:
b0:b7:e4:b9:8c:44:45:d0:63:52:eb:fe:7a:33:c6:
71:30:e1:a3:a5:70:4c:0a:69:06:52:0d:e2:4a:66:
ce:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:79:44:29:82:BF:4A:77:D4:0C:65:09:A1:0B:D6:0C:2A:8A:55:22
X509v3 Authority Key Identifier:
keyid:B0:0E:25:F5:5E:BB:AC:B0:69:F1:03:AC:B0:86:67:03:83:5C:FC:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sA4l9V67rLBp8QOssIZnA4Nc_M0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/31a0ec-d9b8-49e4-b436-8b4215e58028/1/sA4l9V67rLBp8QOssIZnA4Nc_M0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:07:b7:d9:a2:33:70:ce:d8:6a:36:e1:e2:c4:11:49:8b:80:
98:ea:45:76:7e:e6:76:9e:21:5b:7b:03:8e:46:22:d7:5d:19:
15:99:5e:d0:f7:73:72:fa:cb:c1:63:90:12:dd:3b:31:4a:bb:
4f:14:5f:62:68:40:a8:59:63:d3:41:79:7d:b4:65:17:e7:7b:
34:de:d9:5b:2c:d8:fa:b1:f3:1e:87:af:3c:40:7d:aa:ac:7d:
52:86:46:cd:a7:b2:7a:52:51:fc:6b:00:19:ab:11:ce:4f:c9:
70:8d:ac:57:f7:e8:66:9e:9e:2d:9d:05:51:30:1e:2a:54:6a:
dd:87:72:da:98:9f:04:8e:65:e1:c7:8c:3d:0c:b3:d0:7d:fa:
eb:e2:88:0c:c5:ab:ff:c5:27:9d:b7:ac:cc:00:f8:81:8b:87:
70:bc:eb:6a:a6:ff:d9:20:96:81:ce:ef:c5:83:c6:17:cb:79:
79:fa:48:bb:71:0c:72:6d:e7:ff:05:24:fb:bb:c3:ed:6a:5b:
94:ea:e9:2c:d7:e2:37:e3:39:e5:35:f6:69:f0:dc:bd:64:52:
3e:5f:c9:72:e8:11:ec:6f:bd:3b:9d:4f:9e:7d:2e:e9:82:6a:
56:ef:f0:15:91:ef:ac:40:58:71:59:2b:4b:63:78:76:bc:e1:
48:2d:36:d3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrhe9S1uJnzKCt56vInUo1MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwMGUyNWY1NWViYmFjYjA2OWYxMDNhY2IwODY2NzAzODM1
Y2ZjY2QwHhcNMjUwNjEzMjMwMDI4WhcNMjUwNjE0MjMwMDI4WjAzMTEwLwYDVQQD
EyhiZTc5NDQyOTgyYmY0YTc3ZDQwYzY1MDlhMTBiZDYwYzJhOGE1NTIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA6d5ZaiOX+V20JlM9fVcFcNC3dFtF
S+44O/tMfFzhJiJcvn7g8d2UumdJuFbw4Yuy+cUGD6+TjjUcG6TCL4BiIBpY9iBg
1Z0q/g8YPx/Z8FBlQ34yQ2tPzckLdDpVZfw89naPH/PqErnX5po5fFuIeSKpITMr
FQZBBBPyQtzgEylSTSmGd+ENnaVG4da4tG84Wla76e/RKkFMC54iX6+cCZUH7LOE
eLQMGhXRiJcFDi0NMqtWNQxQOSoaBsQ31No5TLcE/nx6rKUeEBPKBedA4i9zz2yY
cI8FRJe7IFEXYJuwt+S5jERF0GNS6/56M8ZxMOGjpXBMCmkGUg3iSmbOIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL55RCmCv0p31AxlCaEL1gwqilUiMB8GA1UdIwQY
MBaAFLAOJfVeu6ywafEDrLCGZwODXPzNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS8zMWEwZWMtZDliOC00OWU0LWI0MzYt
OGI0MjE1ZTU4MDI4LzEvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS8zMWEwZWMtZDliOC00OWU0LWI0MzYtOGI0MjE1ZTU4MDI4
LzEvc0E0bDlWNjdyTEJwOFFPc3NJWm5BNE5jX00wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfwe32aIz
cM7Yajbh4sQRSYuAmOpFdn7mdp4hW3sDjkYi110ZFZle0PdzcvrLwWOQEt07MUq7
TxRfYmhAqFlj00F5fbRlF+d7NN7ZWyzY+rHzHoevPEB9qqx9UoZGzaeyelJR/GsA
GasRzk/JcI2sV/foZp6eLZ0FUTAeKlRq3Ydy2pifBI5l4ceMPQyz0H366+KIDMWr
/8UnnbeszAD4gYuHcLzraqb/2SCWgc7vxYPGF8t5efpIu3EMcm3n/wUk+7vD7Wpb
lOrpLNfiN+M55TX2afDcvWRSPl/JcugR7G+9O51Pnn0u6YJqVu/wFZHvrEBYcVkr
S2N4drzhSC020w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 05:06:44 2025 by rpki-client