Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
File: u41koNwhmWscmeaMyVFpTik-3v4.mft (raw, json)
Hash identifier: /0qyH5NZf9uPMKygEaNM0qkzLJPLRuW496K6bl6GFGI=
Subject key identifier: 5E:AB:CE:22:CC:86:F6:D7:42:A0:47:A7:2A:D7:C7:02:78:DA:32:7D
Authority key identifier: BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
Certificate issuer: /CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Certificate serial: 019749D610BF21ECD0A3CCD6353DCB4A0D34
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
Manifest number: 1586
Signing time: Sat 07 Jun 2025 10:00:55 +0000
Manifest this update: Sat 07 Jun 2025 10:00:55 +0000
Manifest next update: Sun 08 Jun 2025 10:00:55 +0000
Files and hashes: 1: C_0ORiP6GTff8xYOZ4mMicSAww8.roa (hash: HUAyzCwf6jl6lX3eg8riTN4+Y+lTTc8+dOFl1EBg7WI=)
2: YWaaNJeo7smBlwI_T0SxJ5KX4-g.roa (hash: QZs858olOtlmGTBOleulDcnrJGCjiCkhUKDy6SCkdvE=)
3: u41koNwhmWscmeaMyVFpTik-3v4.crl (hash: LM92xUz+PhuFJ8wWJqoaA1F/e6Q5IcPOB8wu8DBj9Ro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:10:bf:21:ec:d0:a3:cc:d6:35:3d:cb:4a:0d:34
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb8d64a0dc21996b1c99e68cc951694e293edefe
Validity
Not Before: Jun 7 10:00:55 2025 GMT
Not After : Jun 8 10:00:55 2025 GMT
Subject: CN=5eabce22cc86f6d742a047a72ad7c70278da327d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ad:43:10:94:4a:02:cd:2b:a5:b5:1a:f0:6d:
53:14:b9:c9:17:b5:95:70:f3:45:31:b3:fb:df:c8:
b9:c0:76:ef:04:8f:47:33:f6:9b:aa:97:5b:10:7a:
be:dd:23:08:3f:6a:43:17:cd:7e:ce:8c:0e:2c:ac:
0a:5e:55:2c:ab:27:cf:98:0f:d2:e1:1f:a0:ad:c5:
ea:7d:0b:1d:11:44:40:89:54:6b:b1:83:06:00:31:
01:61:c9:ce:65:7d:25:6f:11:e6:9e:ab:71:70:59:
fa:b0:7c:ff:2b:a9:19:a1:1e:d7:29:c3:3c:21:bb:
59:0d:2b:64:2f:73:9b:3b:0c:a3:68:8e:30:a3:44:
0e:70:ce:90:f2:4c:ff:19:6a:d6:6c:3b:94:8f:a0:
b6:32:b9:72:bb:ef:70:27:26:df:d7:a3:a3:8a:4d:
4c:60:ce:ca:d7:c9:b3:36:c3:ec:85:7a:52:c7:b3:
5f:39:c4:cf:cf:b5:08:c6:ee:65:66:a4:3a:8f:1a:
cc:64:3a:87:82:f4:a8:e9:a2:9e:fc:3f:87:ea:80:
33:8a:50:80:4f:de:39:5c:41:dc:c4:ea:86:a7:36:
a3:e6:3e:51:86:a5:d6:da:52:2c:48:ab:b4:c0:7f:
f9:7f:51:96:06:96:5a:b4:02:35:76:6e:f7:c1:ec:
13:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:AB:CE:22:CC:86:F6:D7:42:A0:47:A7:2A:D7:C7:02:78:DA:32:7D
X509v3 Authority Key Identifier:
keyid:BB:8D:64:A0:DC:21:99:6B:1C:99:E6:8C:C9:51:69:4E:29:3E:DE:FE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u41koNwhmWscmeaMyVFpTik-3v4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e8/220318-46f1-4ebf-a795-dd4a217d606b/1/u41koNwhmWscmeaMyVFpTik-3v4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:0f:db:f5:12:66:c6:02:cf:b4:97:f8:2a:72:5c:4f:e5:68:
05:89:5c:b4:ae:26:d5:36:31:76:cd:59:df:9a:d9:cc:db:20:
3a:2e:09:d1:ae:c3:55:bd:5a:4b:d1:b0:e8:c3:b4:c3:03:7c:
6e:07:30:e5:f2:23:a3:8b:7b:1d:0f:9a:06:3b:05:51:04:60:
e3:52:36:e7:82:db:cd:54:e5:7b:b5:8b:8e:00:e3:cb:25:16:
b4:2c:ee:92:d7:40:e2:06:f9:6e:b4:b4:c6:5f:81:01:33:f4:
7a:39:18:6d:96:bd:8c:4f:b6:ad:be:66:87:b2:0e:4c:b0:9b:
4c:42:9b:cd:9f:ac:30:5e:3c:de:a2:95:8e:d5:a2:ea:0d:44:
0f:da:98:9d:6a:68:0a:44:6a:c7:ae:bb:58:12:2c:9d:2c:a3:
16:46:4b:fe:85:84:df:23:2b:6a:07:39:b4:30:b5:05:51:29:
2f:ee:16:e0:dc:03:1f:a1:e5:13:85:89:02:b1:28:80:4b:58:
60:53:1f:e6:93:17:d3:0c:64:c2:41:ae:e3:79:bf:31:16:89:
fc:b6:f6:6d:6e:1b:40:24:ea:1b:f5:f2:c7:a3:a9:3f:06:aa:
f3:ca:2d:e2:d9:a1:d7:d9:a0:73:61:42:c1:36:ce:d6:23:1c:
97:51:86:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1hC/IezQo8zWNT3LSg00MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiOGQ2NGEwZGMyMTk5NmIxYzk5ZTY4Y2M5NTE2OTRlMjkz
ZWRlZmUwHhcNMjUwNjA3MTAwMDU1WhcNMjUwNjA4MTAwMDU1WjAzMTEwLwYDVQQD
Eyg1ZWFiY2UyMmNjODZmNmQ3NDJhMDQ3YTcyYWQ3YzcwMjc4ZGEzMjdkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp61DEJRKAs0rpbUa8G1TFLnJF7WV
cPNFMbP738i5wHbvBI9HM/abqpdbEHq+3SMIP2pDF81+zowOLKwKXlUsqyfPmA/S
4R+grcXqfQsdEURAiVRrsYMGADEBYcnOZX0lbxHmnqtxcFn6sHz/K6kZoR7XKcM8
IbtZDStkL3ObOwyjaI4wo0QOcM6Q8kz/GWrWbDuUj6C2Mrlyu+9wJybf16Ojik1M
YM7K18mzNsPshXpSx7NfOcTPz7UIxu5lZqQ6jxrMZDqHgvSo6aKe/D+H6oAzilCA
T945XEHcxOqGpzaj5j5RhqXW2lIsSKu0wH/5f1GWBpZatAI1dm73wewT5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFF6rziLMhvbXQqBHpyrXxwJ42jJ9MB8GA1UdIwQY
MBaAFLuNZKDcIZlrHJnmjMlRaU4pPt7+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUt
ZGQ0YTIxN2Q2MDZiLzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lOC8yMjAzMTgtNDZmMS00ZWJmLWE3OTUtZGQ0YTIxN2Q2MDZi
LzEvdTQxa29Od2htV3NjbWVhTXlWRnBUaWstM3Y0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlg/b9RJm
xgLPtJf4KnJcT+VoBYlctK4m1TYxds1Z35rZzNsgOi4J0a7DVb1aS9Gw6MO0wwN8
bgcw5fIjo4t7HQ+aBjsFUQRg41I254LbzVTle7WLjgDjyyUWtCzuktdA4gb5brS0
xl+BATP0ejkYbZa9jE+2rb5mh7IOTLCbTEKbzZ+sMF483qKVjtWi6g1ED9qYnWpo
CkRqx667WBIsnSyjFkZL/oWE3yMragc5tDC1BVEpL+4W4NwDH6HlE4WJArEogEtY
YFMf5pMX0wxkwkGu43m/MRaJ/Lb2bW4bQCTqG/Xyx6OpPwaq88ot4tmh19mgc2FC
wTbO1iMcl1GGGA==
-----END CERTIFICATE-----
Generated at Sat Jun 7 15:36:18 2025 by rpki-client