Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
File: S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft (raw, json)
Hash identifier: PuB713eloG+k4QAKn9fOMKdnZA44bNVUkQsSUpapeSM=
Subject key identifier: 16:AD:AB:67:5D:96:8C:2B:05:7A:FB:76:D2:F3:BE:25:BA:A4:AB:C8
Authority key identifier: 4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
Certificate issuer: /CN=4b98127943e7175734964010c89ef821416a31b3
Certificate serial: 019747429369CBA5ED46C442FC8402BD3DDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
Manifest number: 157F
Signing time: Fri 06 Jun 2025 22:00:34 +0000
Manifest this update: Fri 06 Jun 2025 22:00:34 +0000
Manifest next update: Sat 07 Jun 2025 22:00:34 +0000
Files and hashes: 1: CXkACV-63YQsGoLAT_fjFmpIWrY.roa (hash: VrWjblsIWiGRBo5IbexwcD3xb4sOkqQVyxbnH8/frQ4=)
2: S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl (hash: VNMxRCCkmfOWJlQufx3F+4hcozjOnwhsBntZjZXXmNk=)
3: pPYYG56VOORuxgT5M_ZuhSvmRfg.roa (hash: UBXy6znS5i9dvxzfkJnX+PZpKfrnJ0My4xHbPC9KdaQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:93:69:cb:a5:ed:46:c4:42:fc:84:02:bd:3d:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b98127943e7175734964010c89ef821416a31b3
Validity
Not Before: Jun 6 22:00:34 2025 GMT
Not After : Jun 7 22:00:34 2025 GMT
Subject: CN=16adab675d968c2b057afb76d2f3be25baa4abc8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:95:a3:1c:87:0c:28:db:45:11:86:66:9d:99:3a:
8f:7c:0d:4b:78:a4:89:a8:1d:32:33:c2:fc:4a:5e:
a8:00:73:bd:c6:d1:8c:1c:c6:e2:54:5b:b7:bf:93:
f4:8e:a9:5e:6e:4b:27:f8:8c:17:e8:6c:36:1d:a2:
39:47:bc:3f:f0:a4:40:c3:ef:11:52:0b:ce:86:52:
4b:e4:da:e4:48:8c:e3:06:5d:96:f1:d1:20:18:b4:
e8:b3:ff:1b:29:81:ec:7c:83:7b:0e:cf:aa:d3:bc:
f7:4b:c3:5e:51:31:d7:df:2c:65:c4:a9:fa:3d:77:
48:bc:75:d1:49:20:4b:4a:f7:60:2b:1c:48:f1:7b:
f8:0a:d7:bf:c1:51:03:d1:15:af:b4:23:c7:d6:b8:
33:07:87:f3:88:77:fd:69:ba:4f:bc:c8:58:7c:83:
99:a6:68:a5:f8:3e:ab:b6:ce:13:c7:03:59:24:8d:
dc:79:c6:55:1f:46:63:05:d9:ee:43:27:1f:ee:98:
0c:0f:14:70:a5:e9:24:6f:85:77:7d:fc:cb:59:88:
24:26:69:19:5c:60:45:15:ad:fc:ae:51:3a:5c:eb:
60:a6:40:5a:47:1d:23:82:c9:74:35:79:d0:05:3c:
41:8e:d4:d4:11:79:96:70:57:43:de:f5:f1:44:b0:
c4:ff
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:AD:AB:67:5D:96:8C:2B:05:7A:FB:76:D2:F3:BE:25:BA:A4:AB:C8
X509v3 Authority Key Identifier:
keyid:4B:98:12:79:43:E7:17:57:34:96:40:10:C8:9E:F8:21:41:6A:31:B3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S5gSeUPnF1c0lkAQyJ74IUFqMbM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f8/f20df3-2753-4353-a668-621792f7e56a/1/S5gSeUPnF1c0lkAQyJ74IUFqMbM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0a:59:64:b2:9b:da:b0:eb:24:05:7f:b2:40:7e:0c:0e:68:f1:
0b:91:0f:82:86:64:ab:d3:e6:7b:b1:59:be:83:f4:87:7f:87:
3d:48:92:95:1e:b1:3b:0d:c3:82:fc:2b:84:f5:46:88:5b:7a:
b7:67:a9:74:5f:60:0d:6f:af:b8:98:4f:07:b6:0c:e8:86:69:
91:a1:0e:f9:2b:c1:33:76:8b:0e:35:c7:b3:bf:d1:84:6a:42:
0f:8b:68:b1:6e:a3:a1:32:24:96:c9:4a:38:37:03:00:78:49:
92:dc:a1:5a:b1:f9:1d:ea:0f:f5:cc:f7:4d:65:d5:4d:82:42:
de:3e:78:c1:a8:76:66:5c:9a:4d:34:72:2f:21:cf:4e:91:3e:
c4:eb:c6:be:9c:1c:38:93:1b:fa:72:3c:7f:5e:0e:ba:e6:13:
2a:5c:12:91:c5:0f:4c:f6:03:fc:67:c9:b8:23:09:6d:43:8c:
e5:70:f7:f5:20:14:fd:4b:97:63:e7:99:b0:28:7f:9a:57:7a:
9a:a6:f3:47:b7:de:30:db:06:8e:86:72:e1:30:2d:97:95:f5:
61:16:0b:bc:bc:83:fc:d0:58:90:91:17:35:b1:f8:19:38:90:
77:0e:ab:25:cb:c0:b0:4c:e2:33:c3:f4:2e:39:62:5a:21:9d:
d2:1e:60:52
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQpNpy6XtRsRC/IQCvT3bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiOTgxMjc5NDNlNzE3NTczNDk2NDAxMGM4OWVmODIxNDE2
YTMxYjMwHhcNMjUwNjA2MjIwMDM0WhcNMjUwNjA3MjIwMDM0WjAzMTEwLwYDVQQD
EygxNmFkYWI2NzVkOTY4YzJiMDU3YWZiNzZkMmYzYmUyNWJhYTRhYmM4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlaMchwwo20URhmadmTqPfA1LeKSJ
qB0yM8L8Sl6oAHO9xtGMHMbiVFu3v5P0jqlebksn+IwX6Gw2HaI5R7w/8KRAw+8R
UgvOhlJL5NrkSIzjBl2W8dEgGLTos/8bKYHsfIN7Ds+q07z3S8NeUTHX3yxlxKn6
PXdIvHXRSSBLSvdgKxxI8Xv4Cte/wVED0RWvtCPH1rgzB4fziHf9abpPvMhYfIOZ
pmil+D6rts4TxwNZJI3cecZVH0ZjBdnuQycf7pgMDxRwpekkb4V3ffzLWYgkJmkZ
XGBFFa38rlE6XOtgpkBaRx0jgsl0NXnQBTxBjtTUEXmWcFdD3vXxRLDE/wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBatq2ddlowrBXr7dtLzviW6pKvIMB8GA1UdIwQY
MBaAFEuYEnlD5xdXNJZAEMie+CFBajGzMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2Njgt
NjIxNzkyZjdlNTZhLzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mOC9mMjBkZjMtMjc1My00MzUzLWE2NjgtNjIxNzkyZjdlNTZh
LzEvUzVnU2VVUG5GMWMwbGtBUXlKNzRJVUZxTWJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACllkspva
sOskBX+yQH4MDmjxC5EPgoZkq9Pme7FZvoP0h3+HPUiSlR6xOw3DgvwrhPVGiFt6
t2epdF9gDW+vuJhPB7YM6IZpkaEO+SvBM3aLDjXHs7/RhGpCD4tosW6joTIklslK
ODcDAHhJktyhWrH5HeoP9cz3TWXVTYJC3j54wah2ZlyaTTRyLyHPTpE+xOvGvpwc
OJMb+nI8f14OuuYTKlwSkcUPTPYD/GfJuCMJbUOM5XD39SAU/UuXY+eZsCh/mld6
mqbzR7feMNsGjoZy4TAtl5X1YRYLvLyD/NBYkJEXNbH4GTiQdw6rJcvAsEziM8P0
LjliWiGd0h5gUg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 03:40:17 2025 by rpki-client