Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
File: 8kP46q2E7AkehwanyYZsGt5WXts.mft (raw, json)
Hash identifier: EwYpTP+WVfQ7i6MjPpzfCJX1VIs4frISlzryu+XBGW0=
Subject key identifier: 53:56:F0:75:AF:AA:4A:5E:18:9A:42:DF:1C:37:C4:47:54:8A:AC:AF
Authority key identifier: F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
Certificate issuer: /CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Certificate serial: 0197B6D7A1F879B3104FB6B05722E2922F3D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 14:01:14 +0000
Manifest this update: Sat 28 Jun 2025 14:01:14 +0000
Manifest next update: Sun 29 Jun 2025 14:01:14 +0000
Files and hashes: 1: 8kP46q2E7AkehwanyYZsGt5WXts.crl (hash: zL8G7YWtzB3+tcAJxRd0xvfwQ3039dyCJDnqZEm/Eg4=)
2: tZdMpKDB98hJ9pZj681_6AcpB6s.roa (hash: i6o9Pghma18l7gMu2eMNZU5hQVcsb4HmVOsk/64sqkU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 14:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:a1:f8:79:b3:10:4f:b6:b0:57:22:e2:92:2f:3d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f243f8eaad84ec091e8706a7c9866c1ade565edb
Validity
Not Before: Jun 28 14:01:14 2025 GMT
Not After : Jun 29 14:01:14 2025 GMT
Subject: CN=5356f075afaa4a5e189a42df1c37c447548aacaf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:9f:c8:99:a5:6c:31:7f:1e:d2:70:e8:c4:f4:
7b:7f:5a:dd:83:f9:33:cd:3c:8f:e3:4c:55:34:00:
ae:bc:95:26:de:38:ee:3c:68:32:a4:2c:77:f4:c1:
fd:f4:78:02:f5:a4:93:18:99:fc:35:4c:d3:6f:9e:
6e:12:ba:e3:f6:4a:ab:5d:04:3c:e2:90:90:ab:a6:
1f:5e:9e:7e:f5:aa:47:29:00:e2:f7:62:46:ba:18:
df:d7:54:83:df:4b:3d:81:eb:da:23:52:ec:3c:49:
aa:99:92:9d:16:10:82:79:e9:8a:62:b2:ce:d8:85:
01:3e:5d:4f:dc:28:79:59:5e:f7:b3:a3:c0:0b:27:
d1:9b:60:c0:d4:7a:b5:4c:38:fb:d7:78:19:3e:8f:
01:6a:6d:1c:ef:31:da:57:df:7a:b3:0e:63:f2:2b:
a8:36:e1:ff:36:63:58:03:22:fc:db:5c:d7:c5:9d:
24:cf:43:0c:c7:01:4e:ad:6e:e5:6f:3e:d5:45:1c:
df:4e:10:91:95:6e:f0:60:47:f7:86:d3:70:99:d2:
ac:77:0d:d6:b0:38:fd:6e:69:ac:01:bc:8f:c8:b7:
6d:8b:ba:eb:da:3b:58:7d:a9:f1:8f:e3:80:5c:4d:
ff:87:f2:6c:ea:2e:af:8f:fb:7c:a3:fa:2b:1e:ae:
af:b3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
53:56:F0:75:AF:AA:4A:5E:18:9A:42:DF:1C:37:C4:47:54:8A:AC:AF
X509v3 Authority Key Identifier:
keyid:F2:43:F8:EA:AD:84:EC:09:1E:87:06:A7:C9:86:6C:1A:DE:56:5E:DB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8kP46q2E7AkehwanyYZsGt5WXts.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/14/3f9b7d-ab5b-4e99-af47-ef61a614142d/1/8kP46q2E7AkehwanyYZsGt5WXts.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
85:1e:d4:09:14:99:00:4d:da:91:27:55:62:a7:ef:b2:7e:86:
9f:3e:cc:ab:02:48:c7:4f:d1:2a:71:d7:e1:96:81:47:b0:5d:
7e:14:d9:d8:64:65:2b:58:0d:b4:72:91:d2:cb:57:b5:e4:92:
29:b9:b6:81:eb:db:c1:40:7d:68:40:d6:03:dc:22:fb:36:43:
78:4e:2c:f9:17:be:93:70:5a:73:6e:a7:df:f4:2c:9f:dd:d0:
9c:0e:22:59:cb:11:a5:47:1d:41:cf:3a:ee:85:ae:13:b0:e4:
25:1b:48:b0:54:a4:85:bc:30:6c:4d:bb:43:25:ba:00:bf:99:
3c:75:ce:25:c4:88:db:72:aa:c2:9b:90:58:fa:70:4a:4f:29:
97:44:15:65:c6:e4:74:2c:ef:de:c2:98:ba:7a:f1:f7:cb:62:
fd:7f:48:a3:5c:2f:ed:f3:ba:61:c4:31:21:bd:97:e3:18:5b:
c3:87:83:cd:7c:83:a5:b4:4f:21:39:2e:64:88:17:c8:51:f0:
a2:00:23:8a:c1:51:29:b5:b4:a6:e6:fa:0a:a6:31:21:43:9b:
e0:b2:13:e0:6d:fe:b0:d4:43:46:18:5f:a1:62:72:73:7a:22:
1d:80:1f:a8:f7:3f:2b:cf:8d:d2:31:87:ef:5d:26:46:75:a7:
81:30:09:35
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe216H4ebMQT7awVyLiki89MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNDNmOGVhYWQ4NGVjMDkxZTg3MDZhN2M5ODY2YzFhZGU1
NjVlZGIwHhcNMjUwNjI4MTQwMTE0WhcNMjUwNjI5MTQwMTE0WjAzMTEwLwYDVQQD
Eyg1MzU2ZjA3NWFmYWE0YTVlMTg5YTQyZGYxYzM3YzQ0NzU0OGFhY2FmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjp/ImaVsMX8e0nDoxPR7f1rdg/kz
zTyP40xVNACuvJUm3jjuPGgypCx39MH99HgC9aSTGJn8NUzTb55uErrj9kqrXQQ8
4pCQq6YfXp5+9apHKQDi92JGuhjf11SD30s9gevaI1LsPEmqmZKdFhCCeemKYrLO
2IUBPl1P3Ch5WV73s6PACyfRm2DA1Hq1TDj713gZPo8Bam0c7zHaV996sw5j8iuo
NuH/NmNYAyL821zXxZ0kz0MMxwFOrW7lbz7VRRzfThCRlW7wYEf3htNwmdKsdw3W
sDj9bmmsAbyPyLdti7rr2jtYfanxj+OAXE3/h/Js6i6vj/t8o/orHq6vswIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFNW8HWvqkpeGJpC3xw3xEdUiqyvMB8GA1UdIwQY
MBaAFPJD+OqthOwJHocGp8mGbBreVl7bMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNC8zZjliN2QtYWI1Yi00ZTk5LWFmNDct
ZWY2MWE2MTQxNDJkLzEvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNC8zZjliN2QtYWI1Yi00ZTk5LWFmNDctZWY2MWE2MTQxNDJk
LzEvOGtQNDZxMkU3QWtlaHdhbnlZWnNHdDVXWHRzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhR7UCRSZ
AE3akSdVYqfvsn6Gnz7MqwJIx0/RKnHX4ZaBR7BdfhTZ2GRlK1gNtHKR0stXteSS
Kbm2gevbwUB9aEDWA9wi+zZDeE4s+Re+k3Bac26n3/Qsn93QnA4iWcsRpUcdQc86
7oWuE7DkJRtIsFSkhbwwbE27QyW6AL+ZPHXOJcSI23KqwpuQWPpwSk8pl0QVZcbk
dCzv3sKYunrx98ti/X9Io1wv7fO6YcQxIb2X4xhbw4eDzXyDpbRPITkuZIgXyFHw
ogAjisFRKbW0pub6CqYxIUOb4LIT4G3+sNRDRhhfoWJyc3oiHYAfqPc/K8+N0jGH
710mRnWngTAJNQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:26 2025 by rpki-client