Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
File: 977TP_AejgncT-3NAROcDneFSq4.mft (raw, json)
Hash identifier: 9Or7IOiXXyE21F4ZW3RDU8uMF1bpwMd50dNXABjgIoc=
Subject key identifier: 34:BD:A2:91:40:35:8B:40:39:D6:BD:FC:FC:E5:BB:44:DF:43:70:61
Authority key identifier: F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
Certificate issuer: /CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Certificate serial: 0197B88F0F3CA5C868B88F16AEE9A1258510
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 22:01:12 +0000
Manifest this update: Sat 28 Jun 2025 22:01:12 +0000
Manifest next update: Sun 29 Jun 2025 22:01:12 +0000
Files and hashes: 1: 977TP_AejgncT-3NAROcDneFSq4.crl (hash: QshRrh9m/eTX2xwqygdLcntGP29Gf9WKuNssKiSrMaI=)
2: _lgnGISO0ktGS-TS3jHHuxqlGcc.roa (hash: 2bgXxxG8FQEtolmgRr2kuRhZKybBJ/pEC6iODZDta6M=)
3: yIVyJLl1EpKKS9GoVS2g6EtcfKo.roa (hash: +BexIZ1+iniEPsBZlKynSCHhy877ZiICabmi/L0fbr0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8f:0f:3c:a5:c8:68:b8:8f:16:ae:e9:a1:25:85:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7bed33ff01e8e09dc4fedcd01139c0e77854aae
Validity
Not Before: Jun 28 22:01:12 2025 GMT
Not After : Jun 29 22:01:12 2025 GMT
Subject: CN=34bda29140358b4039d6bdfcfce5bb44df437061
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:3f:b9:cc:87:fc:a8:ef:ca:9e:8d:96:e3:fb:
15:57:33:5d:dd:c6:76:93:f7:23:97:56:e6:4b:b6:
c5:07:fe:26:54:c3:13:11:5e:cb:ba:ee:dd:12:02:
7c:7c:e2:81:c9:b4:24:67:ad:3c:e2:11:ed:45:77:
ea:a1:a7:96:96:e3:14:d9:8a:b5:01:1b:9b:36:d3:
fc:7a:0b:72:5e:e6:6d:ab:c8:2c:03:85:96:b1:ce:
22:a4:57:77:66:32:1c:be:f3:ba:0f:b3:78:c8:34:
91:c1:b8:c8:c4:31:fd:27:ec:6b:57:b9:91:5e:8a:
65:84:47:9c:ca:08:f7:f3:3a:7a:87:d6:b6:5a:90:
ff:a8:4a:cd:a3:57:59:dc:72:18:1d:e0:44:fa:c6:
fb:94:c1:35:e9:5c:23:2a:ab:9f:d6:e1:41:94:d4:
e3:d9:48:f2:c3:92:a5:d7:bf:1d:7b:fe:b1:8b:d0:
fa:70:92:3f:83:72:97:92:19:a2:68:25:91:d4:0c:
6a:93:67:57:c8:b3:f1:89:49:e5:a0:66:b5:30:49:
c0:7e:96:03:45:3a:b4:79:0d:7e:91:c7:b9:c9:0b:
a3:58:80:d5:64:e2:e1:86:18:83:35:88:f3:a8:d3:
fb:9d:54:0a:ed:82:ba:ff:1a:74:04:02:d0:5c:ff:
71:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:BD:A2:91:40:35:8B:40:39:D6:BD:FC:FC:E5:BB:44:DF:43:70:61
X509v3 Authority Key Identifier:
keyid:F7:BE:D3:3F:F0:1E:8E:09:DC:4F:ED:CD:01:13:9C:0E:77:85:4A:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/977TP_AejgncT-3NAROcDneFSq4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/15/5a6d01-a375-4e11-871e-99e6141de7f1/1/977TP_AejgncT-3NAROcDneFSq4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
21:02:3f:85:be:5a:93:bd:ff:af:ed:f1:57:85:7a:07:fa:5b:
1a:e1:66:84:c0:b5:62:3d:67:47:ab:dd:71:b7:12:a4:a4:3e:
3b:27:76:bc:39:50:d0:37:47:18:3d:e8:19:ac:9f:fc:3c:35:
57:b4:f0:5e:c7:00:d6:7e:fb:02:54:f1:a0:21:85:bb:e4:cf:
7b:a4:07:ff:1c:ca:93:d3:0b:c4:b6:e1:00:80:c2:4e:d9:82:
f9:42:6e:08:8f:8f:c2:52:64:bf:62:01:b1:f9:a7:66:06:da:
97:86:84:4e:94:84:0c:6d:fd:ee:c2:ef:86:9f:c8:42:28:a2:
a0:50:12:2e:dc:cf:b5:6e:b4:aa:70:c0:0f:e2:4d:a8:fc:24:
98:58:ef:f9:95:43:24:a2:b1:2f:f5:22:24:57:b0:75:1c:81:
aa:92:70:7d:87:5a:f0:b8:b9:66:bf:6b:bd:8d:46:a2:32:c4:
86:15:e8:f8:c3:d0:bd:e5:f6:1f:65:ac:b7:38:ec:c6:e0:ac:
f1:f8:ba:3d:46:03:69:ea:4b:b2:92:77:ef:fa:20:51:4e:39:
c8:3f:a3:ec:fe:2c:80:5b:e5:39:f6:24:b0:59:f8:bc:14:97:
5f:08:d8:00:26:55:40:a7:2e:70:62:72:16:e7:e3:a9:51:42:
40:79:89:e4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jw88pchouI8WrumhJYUQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3YmVkMzNmZjAxZThlMDlkYzRmZWRjZDAxMTM5YzBlNzc4
NTRhYWUwHhcNMjUwNjI4MjIwMTEyWhcNMjUwNjI5MjIwMTEyWjAzMTEwLwYDVQQD
EygzNGJkYTI5MTQwMzU4YjQwMzlkNmJkZmNmY2U1YmI0NGRmNDM3MDYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArz+5zIf8qO/Kno2W4/sVVzNd3cZ2
k/cjl1bmS7bFB/4mVMMTEV7Luu7dEgJ8fOKBybQkZ6084hHtRXfqoaeWluMU2Yq1
ARubNtP8egtyXuZtq8gsA4WWsc4ipFd3ZjIcvvO6D7N4yDSRwbjIxDH9J+xrV7mR
XoplhEecygj38zp6h9a2WpD/qErNo1dZ3HIYHeBE+sb7lME16VwjKquf1uFBlNTj
2Ujyw5Kl178de/6xi9D6cJI/g3KXkhmiaCWR1Axqk2dXyLPxiUnloGa1MEnAfpYD
RTq0eQ1+kce5yQujWIDVZOLhhhiDNYjzqNP7nVQK7YK6/xp0BALQXP9xQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDS9opFANYtAOda9/Pzlu0TfQ3BhMB8GA1UdIwQY
MBaAFPe+0z/wHo4J3E/tzQETnA53hUquMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTc3VFBfQWVqZ25jVC0zTkFST2NEbmVGU3E0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS81YTZkMDEtYTM3NS00ZTExLTg3MWUt
OTllNjE0MWRlN2YxLzEvOTc3VFBfQWVqZ25jVC0zTkFST2NEbmVGU3E0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNS81YTZkMDEtYTM3NS00ZTExLTg3MWUtOTllNjE0MWRlN2Yx
LzEvOTc3VFBfQWVqZ25jVC0zTkFST2NEbmVGU3E0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIQI/hb5a
k73/r+3xV4V6B/pbGuFmhMC1Yj1nR6vdcbcSpKQ+Oyd2vDlQ0DdHGD3oGayf/Dw1
V7TwXscA1n77AlTxoCGFu+TPe6QH/xzKk9MLxLbhAIDCTtmC+UJuCI+PwlJkv2IB
sfmnZgbal4aETpSEDG397sLvhp/IQiiioFASLtzPtW60qnDAD+JNqPwkmFjv+ZVD
JKKxL/UiJFewdRyBqpJwfYda8Li5Zr9rvY1GojLEhhXo+MPQveX2H2WstzjsxuCs
8fi6PUYDaepLspJ37/ogUU45yD+j7P4sgFvlOfYksFn4vBSXXwjYACZVQKcucGJy
FufjqVFCQHmJ5A==
-----END CERTIFICATE-----
Generated at Sun Jun 29 00:25:26 2025 by rpki-client