Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
File: c2Na428t9PaNPlcqMT4aGKogt1c.mft (raw, json)
Hash identifier: ESUrvrMjd+wF+5UbWHQV4VHoa1UVXLki8k8objf+PDg=
Subject key identifier: 68:5B:2C:EA:29:AA:53:33:DC:66:E0:A6:C0:86:93:81:11:36:BB:0E
Authority key identifier: 73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
Certificate issuer: /CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Certificate serial: 01975F81A467D7B87FDB8F04F350C88EC663
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
Manifest number: 158A
Signing time: Wed 11 Jun 2025 15:00:21 +0000
Manifest this update: Wed 11 Jun 2025 15:00:21 +0000
Manifest next update: Thu 12 Jun 2025 15:00:21 +0000
Files and hashes: 1: c2Na428t9PaNPlcqMT4aGKogt1c.crl (hash: ufiU/Tf28hs0mAR4VoKUJrjRk0TYftnUebYyh79SAYA=)
2: itE9wE1JCUjzPQMC17zph5bag1o.roa (hash: 6Zu8xe2ZQ7G9CqeB+rTfVIr8D7nrhuN4O3af8BzjF8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 15:00:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5f:81:a4:67:d7:b8:7f:db:8f:04:f3:50:c8:8e:c6:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=73635ae36f2df4f68d3e572a313e1a18aa20b757
Validity
Not Before: Jun 11 15:00:21 2025 GMT
Not After : Jun 12 15:00:21 2025 GMT
Subject: CN=685b2cea29aa5333dc66e0a6c08693811136bb0e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:21:91:1a:74:e3:e4:24:fd:bb:30:e6:e0:9d:
f2:d5:03:d4:be:04:d3:ff:94:ed:f5:41:41:fc:2e:
62:e2:35:e1:9f:e0:df:7c:69:d1:37:e7:e3:bc:13:
78:f8:7f:f9:f8:ad:1c:9d:cb:cb:d3:54:39:a8:70:
68:e8:0a:91:b4:6d:e5:0b:5c:73:8d:ba:a7:e7:ab:
e3:8c:ab:e2:5c:b4:bc:e1:6e:f6:26:44:89:ab:88:
36:cf:c2:b1:28:c2:49:e5:85:45:5b:77:cb:30:d1:
d3:f2:fb:1c:80:5f:2a:72:38:7b:43:bd:29:5a:ab:
75:90:f8:e2:0b:96:0c:e5:a9:15:47:1a:33:29:78:
ae:b4:bc:f1:a8:13:e7:76:c6:67:21:87:4b:59:22:
28:24:bd:b1:11:d3:3c:04:02:7e:54:bb:ff:76:05:
bc:a1:67:e9:19:76:a7:6e:f6:72:07:12:49:87:b8:
65:f0:ef:3a:66:75:78:72:fb:0b:84:a6:b3:08:05:
aa:27:c8:c6:45:d2:9e:1c:e0:20:34:e9:89:e3:bd:
99:1b:5d:48:1d:38:6c:ac:3f:0b:6d:a7:73:55:2f:
68:cc:c8:5c:64:9b:fb:7f:8c:d9:78:7f:1f:68:36:
76:7b:10:74:30:80:c6:81:da:c0:87:55:ee:6a:09:
81:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
68:5B:2C:EA:29:AA:53:33:DC:66:E0:A6:C0:86:93:81:11:36:BB:0E
X509v3 Authority Key Identifier:
keyid:73:63:5A:E3:6F:2D:F4:F6:8D:3E:57:2A:31:3E:1A:18:AA:20:B7:57
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c2Na428t9PaNPlcqMT4aGKogt1c.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ff/c0d281-d40d-40e0-93ea-5bae375cf85a/1/c2Na428t9PaNPlcqMT4aGKogt1c.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:30:7d:c7:1b:88:c8:4a:a1:b9:3b:31:11:23:2d:82:8a:1a:
28:6c:39:24:1c:84:0b:78:88:90:69:26:2d:ae:4a:94:69:67:
d4:42:cc:45:96:19:f4:72:26:7f:78:5f:16:cf:53:48:fe:d0:
ff:49:85:37:ef:a9:18:86:65:6c:08:27:5d:b9:f0:19:0f:2b:
ef:d3:e5:4b:5f:61:a2:8f:04:c6:8a:43:3c:b9:71:bf:d6:85:
90:68:ad:8a:04:2f:e8:88:37:3c:d9:da:b9:db:b4:35:5d:21:
3e:be:6a:c3:0c:a5:bb:15:2e:5f:ff:d3:15:3b:ed:c9:4d:d0:
11:64:9f:68:38:bb:de:49:9e:3f:8d:53:d1:3a:66:14:3f:65:
5c:87:2a:02:5b:92:d0:33:e5:1f:19:8d:79:d4:82:38:a8:b5:
fd:7e:88:b3:46:bc:0d:c5:5b:5b:06:72:09:4c:35:16:ad:6d:
9e:5b:95:ca:85:f2:9f:21:bc:71:c6:dd:f2:69:99:88:89:b8:
65:39:50:35:46:1e:5a:e3:a1:67:8e:bb:ff:67:cd:e3:b5:11:
c6:c2:3e:49:9d:a7:e1:52:7b:1a:82:81:f3:fe:99:af:80:c0:
d5:ac:2d:ca:0f:62:43:66:f7:24:c0:05:93:d7:bd:b9:4e:69:
0a:7f:cc:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdfgaRn17h/248E81DIjsZjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNjM1YWUzNmYyZGY0ZjY4ZDNlNTcyYTMxM2UxYTE4YWEy
MGI3NTcwHhcNMjUwNjExMTUwMDIxWhcNMjUwNjEyMTUwMDIxWjAzMTEwLwYDVQQD
Eyg2ODViMmNlYTI5YWE1MzMzZGM2NmUwYTZjMDg2OTM4MTExMzZiYjBlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyiGRGnTj5CT9uzDm4J3y1QPUvgTT
/5Tt9UFB/C5i4jXhn+DffGnRN+fjvBN4+H/5+K0cncvL01Q5qHBo6AqRtG3lC1xz
jbqn56vjjKviXLS84W72JkSJq4g2z8KxKMJJ5YVFW3fLMNHT8vscgF8qcjh7Q70p
Wqt1kPjiC5YM5akVRxozKXiutLzxqBPndsZnIYdLWSIoJL2xEdM8BAJ+VLv/dgW8
oWfpGXanbvZyBxJJh7hl8O86ZnV4cvsLhKazCAWqJ8jGRdKeHOAgNOmJ472ZG11I
HThsrD8LbadzVS9ozMhcZJv7f4zZeH8faDZ2exB0MIDGgdrAh1XuagmBUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGhbLOopqlMz3GbgpsCGk4ERNrsOMB8GA1UdIwQY
MBaAFHNjWuNvLfT2jT5XKjE+GhiqILdXMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZi9jMGQyODEtZDQwZC00MGUwLTkzZWEt
NWJhZTM3NWNmODVhLzEvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZi9jMGQyODEtZDQwZC00MGUwLTkzZWEtNWJhZTM3NWNmODVh
LzEvYzJOYTQyOHQ5UGFOUGxjcU1UNGFHS29ndDFjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZzB9xxuI
yEqhuTsxESMtgooaKGw5JByEC3iIkGkmLa5KlGln1ELMRZYZ9HImf3hfFs9TSP7Q
/0mFN++pGIZlbAgnXbnwGQ8r79PlS19hoo8ExopDPLlxv9aFkGitigQv6Ig3PNna
udu0NV0hPr5qwwyluxUuX//TFTvtyU3QEWSfaDi73kmeP41T0TpmFD9lXIcqAluS
0DPlHxmNedSCOKi1/X6Is0a8DcVbWwZyCUw1Fq1tnluVyoXynyG8ccbd8mmZiIm4
ZTlQNUYeWuOhZ467/2fN47URxsI+SZ2n4VJ7GoKB8/6Zr4DA1awtyg9iQ2b3JMAF
k9e9uU5pCn/MAQ==
-----END CERTIFICATE-----
Generated at Wed Jun 11 23:48:25 2025 by rpki-client