Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
File: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft (raw, json)
Hash identifier: 9J4UVU7/2cCdwlSGhNd15I8c0y8P2zKW0nvQDq9MP2o=
Subject key identifier: 47:B0:3A:3D:EC:9A:1B:56:A6:62:E0:FC:78:19:EC:F4:BD:BA:57:EE
Authority key identifier: 0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
Certificate issuer: /CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Certificate serial: 01974AB181B5B422DC3DE4638E4E56F8B3A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
Manifest number: 145B
Signing time: Sat 07 Jun 2025 14:00:36 +0000
Manifest this update: Sat 07 Jun 2025 14:00:36 +0000
Manifest next update: Sun 08 Jun 2025 14:00:36 +0000
Files and hashes: 1: 1tRI1NAS620irGWcDu4y9Qfw5Oc.roa (hash: cB16kbTr6A/atusEQcb+v3J61xx/lkSsq3ehr1/v5HA=)
2: D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl (hash: fq9pIhChd9WZRtT4TO6KO6Z/66tWQuYPATykspd/IXM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 14:00:36 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:b1:81:b5:b4:22:dc:3d:e4:63:8e:4e:56:f8:b3:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0f90b80b3d4893c9c1ec7d01c29bf3b450bb851d
Validity
Not Before: Jun 7 14:00:36 2025 GMT
Not After : Jun 8 14:00:36 2025 GMT
Subject: CN=47b03a3dec9a1b56a662e0fc7819ecf4bdba57ee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:86:0f:ec:ef:e0:ed:80:c9:3b:d8:3e:a9:3a:
a0:e8:54:b1:1a:29:fc:31:6a:04:87:47:f8:53:bb:
a1:a8:16:c5:9f:a0:9c:2b:fd:18:50:92:07:69:7b:
ff:61:58:e6:99:ec:a3:6e:07:78:14:b1:32:65:c6:
e8:46:6f:11:12:52:3e:5f:ad:9f:bf:16:0a:9c:e6:
cf:83:5f:75:3b:16:8a:c6:9a:c0:46:9a:f5:ac:ca:
19:7a:09:1d:f9:ac:69:55:9a:cc:58:26:f5:0d:19:
bc:30:bc:71:8d:5f:44:75:cb:e9:23:ab:30:c7:53:
4f:ab:18:05:c6:84:2f:c2:aa:a4:05:4c:c2:fb:3b:
26:c5:fe:72:0c:95:ca:52:f1:ae:d8:10:1c:c6:ba:
bf:55:a5:06:39:74:15:69:cc:8d:e6:3f:fb:b0:19:
8a:1c:9a:61:1c:7b:1f:47:4f:51:59:33:0e:63:9f:
3a:f3:13:15:35:8e:fe:96:28:28:b6:51:36:4d:99:
bb:df:c7:c6:7b:5f:af:8e:ba:31:3a:0a:9f:33:7b:
eb:d3:26:7a:4b:1a:43:d8:e5:33:cb:12:12:62:19:
0d:01:95:1f:04:28:e4:21:a3:5f:65:5e:93:1f:e4:
d3:27:d7:8e:79:11:17:25:75:c5:1a:fc:35:06:c3:
1a:5b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
47:B0:3A:3D:EC:9A:1B:56:A6:62:E0:FC:78:19:EC:F4:BD:BA:57:EE
X509v3 Authority Key Identifier:
keyid:0F:90:B8:0B:3D:48:93:C9:C1:EC:7D:01:C2:9B:F3:B4:50:BB:85:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f7/99a2b1-1144-4f9c-8fdf-43e4d56d4043/1/D5C4Cz1Ik8nB7H0BwpvztFC7hR0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:06:cc:c3:80:cb:1e:ef:22:9c:71:c4:70:ed:e5:e1:97:8d:
99:5e:53:4d:76:ac:f9:e5:d9:7a:51:e4:af:e7:87:80:31:03:
28:d9:7b:7b:b9:5a:25:0e:e3:66:82:d7:91:ac:02:cc:bd:1a:
69:e4:02:27:bc:d7:8a:7f:78:16:75:31:58:e4:13:ad:46:78:
58:41:8d:65:a1:88:61:73:ea:95:1b:f0:0d:99:ca:30:89:f5:
a6:65:82:a0:c0:0d:a2:6a:a2:a2:1c:ca:5f:81:12:d7:b1:1f:
46:aa:1f:03:28:20:13:ba:b4:6b:4e:8e:c2:0d:4a:08:43:c6:
e2:9e:15:f7:32:4b:af:59:d9:94:41:8d:f6:a9:f6:2b:40:49:
2d:7d:54:a0:2e:dd:c0:8c:94:20:36:d6:90:41:e5:69:21:d5:
60:9c:f5:8c:4d:76:09:ae:b2:73:9e:ba:51:f2:01:8c:b2:22:
67:56:6f:d7:b0:37:1a:ac:d8:96:ec:79:e2:2c:4c:ff:4e:ef:
d0:3a:3c:41:b5:ab:55:81:73:1d:e4:ac:77:85:dd:7a:63:c9:
fb:99:08:c4:b2:6f:9a:35:35:f5:5d:b4:1a:e4:f5:20:0c:0a:
d9:a1:33:0c:c2:a1:46:0b:66:a2:d6:9d:7c:f8:3f:60:e0:76:
9f:4e:27:dd
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKsYG1tCLcPeRjjk5W+LOkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmOTBiODBiM2Q0ODkzYzljMWVjN2QwMWMyOWJmM2I0NTBi
Yjg1MWQwHhcNMjUwNjA3MTQwMDM2WhcNMjUwNjA4MTQwMDM2WjAzMTEwLwYDVQQD
Eyg0N2IwM2EzZGVjOWExYjU2YTY2MmUwZmM3ODE5ZWNmNGJkYmE1N2VlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq4YP7O/g7YDJO9g+qTqg6FSxGin8
MWoEh0f4U7uhqBbFn6CcK/0YUJIHaXv/YVjmmeyjbgd4FLEyZcboRm8RElI+X62f
vxYKnObPg191OxaKxprARpr1rMoZegkd+axpVZrMWCb1DRm8MLxxjV9EdcvpI6sw
x1NPqxgFxoQvwqqkBUzC+zsmxf5yDJXKUvGu2BAcxrq/VaUGOXQVacyN5j/7sBmK
HJphHHsfR09RWTMOY5868xMVNY7+ligotlE2TZm738fGe1+vjroxOgqfM3vr0yZ6
SxpD2OUzyxISYhkNAZUfBCjkIaNfZV6TH+TTJ9eOeREXJXXFGvw1BsMaWwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEewOj3smhtWpmLg/HgZ7PS9ulfuMB8GA1UdIwQY
MBaAFA+QuAs9SJPJwex9AcKb87RQu4UdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNy85OWEyYjEtMTE0NC00ZjljLThmZGYt
NDNlNGQ1NmQ0MDQzLzEvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNy85OWEyYjEtMTE0NC00ZjljLThmZGYtNDNlNGQ1NmQ0MDQz
LzEvRDVDNEN6MUlrOG5CN0gwQndwdnp0RkM3aFIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAdwbMw4DL
Hu8inHHEcO3l4ZeNmV5TTXas+eXZelHkr+eHgDEDKNl7e7laJQ7jZoLXkawCzL0a
aeQCJ7zXin94FnUxWOQTrUZ4WEGNZaGIYXPqlRvwDZnKMIn1pmWCoMANomqiohzK
X4ES17EfRqofAyggE7q0a06Owg1KCEPG4p4V9zJLr1nZlEGN9qn2K0BJLX1UoC7d
wIyUIDbWkEHlaSHVYJz1jE12Ca6yc566UfIBjLIiZ1Zv17A3GqzYlux54ixM/07v
0Do8QbWrVYFzHeSsd4XdemPJ+5kIxLJvmjU19V20GuT1IAwK2aEzDMKhRgtmotad
fPg/YOB2n04n3Q==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:18:27 2025 by rpki-client