Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
File: d8Bx2YnlMJrDyzwLCNOsslIRErY.mft (raw, json)
Hash identifier: 7XmsRehzkSjyNngdTg1rouph2gBwYSVscadH5krn/EQ=
Subject key identifier: 13:01:09:B3:DA:60:82:23:33:4F:81:C0:5D:F0:AE:9F:BD:81:7B:AE
Authority key identifier: 77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
Certificate issuer: /CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Certificate serial: 019753102FCFF283B5C5B2CDE51E8C5AB469
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
Manifest number: 11A8
Signing time: Mon 09 Jun 2025 05:00:58 +0000
Manifest this update: Mon 09 Jun 2025 05:00:58 +0000
Manifest next update: Tue 10 Jun 2025 05:00:58 +0000
Files and hashes: 1: Le5vpyY48HdbIpkDIdpXFhjYz0Q.roa (hash: Myyoy3T8AQaNeHj3CEH6lMEU7kAImPu/7Rglv2KrnL4=)
2: d8Bx2YnlMJrDyzwLCNOsslIRErY.crl (hash: 0drbnuq7JIer5rT8UsE2sDhHHNtxwl3TquIgsgkGn0U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 05:00:58 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:10:2f:cf:f2:83:b5:c5:b2:cd:e5:1e:8c:5a:b4:69
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c071d989e5309ac3cb3c0b08d3acb2521112b6
Validity
Not Before: Jun 9 05:00:58 2025 GMT
Not After : Jun 10 05:00:58 2025 GMT
Subject: CN=130109b3da608223334f81c05df0ae9fbd817bae
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:ae:e6:c4:cb:e6:7c:52:d1:da:57:01:49:1c:
59:cf:66:a7:9d:82:73:85:05:52:60:20:01:64:2a:
37:3f:83:65:d6:27:69:32:62:66:18:92:ce:da:03:
db:57:6e:b0:1f:df:7e:ea:f5:02:c0:82:be:ec:34:
7f:5e:c5:c6:e9:26:b9:0f:e1:b6:7b:65:19:61:5c:
ec:70:8b:ce:21:0c:3e:73:59:7a:2c:f8:d8:4f:ed:
64:e9:a9:0b:fe:61:5c:dc:b4:cd:7e:94:b5:66:f7:
b8:f7:40:8e:66:e8:7f:0e:3d:c4:97:2b:fd:e2:28:
f0:9a:ff:53:a9:98:09:54:de:d8:d8:38:6b:17:f8:
07:e1:72:ae:15:8c:68:89:69:36:26:ec:6a:a9:d5:
31:f4:03:74:2f:3a:cf:99:b5:c8:b6:74:5f:64:3c:
c5:28:99:ec:60:55:a3:7d:a4:d6:a7:66:a0:91:10:
d9:b9:f9:13:f4:f5:99:ba:06:c8:58:78:c5:04:0e:
ea:0d:f3:c7:97:9f:d1:d1:a0:2a:87:a2:5b:58:1e:
87:fe:4a:a7:2b:e8:84:0e:20:ac:5b:62:ac:5a:a7:
56:cd:68:1b:b8:2a:2a:11:15:62:04:56:68:e6:66:
c6:47:d7:34:52:5e:9a:04:3e:f7:f8:be:c4:16:69:
2b:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
13:01:09:B3:DA:60:82:23:33:4F:81:C0:5D:F0:AE:9F:BD:81:7B:AE
X509v3 Authority Key Identifier:
keyid:77:C0:71:D9:89:E5:30:9A:C3:CB:3C:0B:08:D3:AC:B2:52:11:12:B6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8Bx2YnlMJrDyzwLCNOsslIRErY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/844bfe-ec18-417e-8f5a-5cc4ded9a7d2/1/d8Bx2YnlMJrDyzwLCNOsslIRErY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:e3:82:8f:e9:97:70:ec:2c:b7:1b:ba:b2:bf:53:2c:53:24:
ef:2b:e6:b0:5f:94:0a:24:50:c1:da:2c:04:93:a9:e9:54:71:
ed:3c:d8:ae:32:b8:59:c8:dd:57:a5:63:80:1d:da:d8:b9:ab:
c1:11:79:c9:77:42:f5:20:93:8d:4f:23:75:ea:cb:b5:a7:04:
36:6e:1c:95:49:fc:0b:d8:e1:1f:c4:c1:a5:0e:b1:75:2a:c1:
f3:48:40:f9:a6:63:7a:29:e3:38:34:ec:94:51:75:7d:b6:ac:
dd:b1:7f:ca:b8:65:90:05:d3:0b:d0:e2:97:ff:b9:b9:eb:cf:
a2:45:91:f7:7c:45:96:35:33:1d:ef:98:c3:4d:7b:11:61:84:
3b:0d:97:33:a9:3d:08:55:5d:50:1e:17:c1:dc:83:0b:61:c7:
7f:5f:83:fa:39:40:27:6b:3b:84:ef:76:a8:2c:37:50:83:97:
a1:b7:a8:c6:0c:99:60:85:4e:5a:7d:19:11:75:51:52:35:ac:
4a:9f:75:6b:bf:4a:b9:6a:42:9a:dc:3b:f5:5a:f9:b2:23:ce:
14:6e:5f:7b:dd:2c:9b:c1:24:68:0e:e3:fa:cd:bc:75:7e:48:
0d:9a:2e:5e:68:38:2c:9f:17:55:e6:fa:d0:44:d6:fe:7d:6a:
74:dc:49:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTEC/P8oO1xbLN5R6MWrRpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzA3MWQ5ODllNTMwOWFjM2NiM2MwYjA4ZDNhY2IyNTIx
MTEyYjYwHhcNMjUwNjA5MDUwMDU4WhcNMjUwNjEwMDUwMDU4WjAzMTEwLwYDVQQD
EygxMzAxMDliM2RhNjA4MjIzMzM0ZjgxYzA1ZGYwYWU5ZmJkODE3YmFlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu67mxMvmfFLR2lcBSRxZz2annYJz
hQVSYCABZCo3P4Nl1idpMmJmGJLO2gPbV26wH99+6vUCwIK+7DR/XsXG6Sa5D+G2
e2UZYVzscIvOIQw+c1l6LPjYT+1k6akL/mFc3LTNfpS1Zve490COZuh/Dj3Elyv9
4ijwmv9TqZgJVN7Y2DhrF/gH4XKuFYxoiWk2JuxqqdUx9AN0LzrPmbXItnRfZDzF
KJnsYFWjfaTWp2agkRDZufkT9PWZugbIWHjFBA7qDfPHl5/R0aAqh6JbWB6H/kqn
K+iEDiCsW2KsWqdWzWgbuCoqERViBFZo5mbGR9c0Ul6aBD73+L7EFmkr6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBMBCbPaYIIjM0+BwF3wrp+9gXuuMB8GA1UdIwQY
MBaAFHfAcdmJ5TCaw8s8CwjTrLJSERK2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi84NDRiZmUtZWMxOC00MTdlLThmNWEt
NWNjNGRlZDlhN2QyLzEvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi84NDRiZmUtZWMxOC00MTdlLThmNWEtNWNjNGRlZDlhN2Qy
LzEvZDhCeDJZbmxNSnJEeXp3TENOT3NzbElSRXJZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACeOCj+mX
cOwstxu6sr9TLFMk7yvmsF+UCiRQwdosBJOp6VRx7TzYrjK4WcjdV6VjgB3a2Lmr
wRF5yXdC9SCTjU8jderLtacENm4clUn8C9jhH8TBpQ6xdSrB80hA+aZjeinjODTs
lFF1fbas3bF/yrhlkAXTC9Dil/+5uevPokWR93xFljUzHe+Yw017EWGEOw2XM6k9
CFVdUB4XwdyDC2HHf1+D+jlAJ2s7hO92qCw3UIOXobeoxgyZYIVOWn0ZEXVRUjWs
Sp91a79KuWpCmtw79Vr5siPOFG5fe90sm8EkaA7j+s28dX5IDZouXmg4LJ8XVeb6
0ETW/n1qdNxJAw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 14:37:49 2025 by rpki-client