Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
File: 336sT6MToueS5UJjzGBf8xnzXBk.mft (raw, json)
Hash identifier: eDHXf4s+BQiItNCwtk4Z3ew+M6RrtuwZZdFo/0QhDyA=
Subject key identifier: D4:A3:2D:1F:45:9C:1A:8C:89:E6:FC:D3:40:F4:13:8B:5E:07:D5:17
Authority key identifier: DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
Certificate issuer: /CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Certificate serial: 0198D54DFB0F01D337376EBC682CCADBE79A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
Manifest number: 130B
Signing time: Sat 23 Aug 2025 05:01:54 +0000
Manifest this update: Sat 23 Aug 2025 05:01:54 +0000
Manifest next update: Sun 24 Aug 2025 05:01:54 +0000
Files and hashes: 1: 336sT6MToueS5UJjzGBf8xnzXBk.crl (hash: M9rePG9Zss9YRM5I43Ay/pO2q/IL7PAgNEwz/X4s3mM=)
2: Xi7lkR0c05Etap_dSBWpiwrEM4M.roa (hash: AVQnmWgZkK9yLrT3rnvMnMOzEJkOrW4pUBp2ldNlySk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 05:01:29 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d5:4d:fb:0f:01:d3:37:37:6e:bc:68:2c:ca:db:e7:9a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=df7eac4fa313a2e792e54263cc605ff319f35c19
Validity
Not Before: Aug 23 05:01:54 2025 GMT
Not After : Aug 24 05:01:54 2025 GMT
Subject: CN=d4a32d1f459c1a8c89e6fcd340f4138b5e07d517
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:b6:dd:a9:17:33:97:56:b3:35:22:92:15:73:
45:5e:5f:ee:d6:64:41:62:a6:ab:0e:fd:a9:0a:9e:
58:71:9f:55:cd:ac:ef:65:36:60:c1:24:3a:74:d9:
ad:ab:ce:6d:b8:00:70:12:80:c9:68:cd:8e:4e:c8:
c1:10:48:c3:dd:f4:fe:02:9b:82:1c:c5:85:01:c5:
89:2a:c3:f7:ca:eb:c0:dd:70:18:7a:db:f7:8b:36:
f3:05:d5:0b:6e:79:8e:ba:5b:4f:70:cb:94:58:72:
29:1e:c4:0c:e3:13:b3:fa:e4:8a:82:1d:f2:bf:a4:
e7:80:89:0f:bb:6b:45:04:2c:aa:cb:c8:3b:53:55:
be:42:e0:83:a3:5d:b5:1b:5d:81:02:b7:ac:33:bc:
74:aa:29:44:b2:a8:97:20:e7:6d:53:6f:7c:eb:cb:
76:90:59:10:8c:dd:b0:5b:37:8d:8a:5f:d2:d3:d9:
b7:a7:2a:f7:74:dd:92:a5:25:16:b9:1e:d7:fa:28:
e1:d5:42:2b:d0:6d:a4:c5:b9:ae:37:7a:ae:6a:43:
0e:a3:67:5e:26:61:46:8e:4f:48:9e:d8:25:8c:ce:
00:4a:a1:b0:5c:62:8f:f0:76:50:d8:5a:1d:be:34:
e1:11:4d:37:fe:57:60:26:dd:a7:6b:f8:19:7c:41:
af:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:A3:2D:1F:45:9C:1A:8C:89:E6:FC:D3:40:F4:13:8B:5E:07:D5:17
X509v3 Authority Key Identifier:
keyid:DF:7E:AC:4F:A3:13:A2:E7:92:E5:42:63:CC:60:5F:F3:19:F3:5C:19
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/336sT6MToueS5UJjzGBf8xnzXBk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/17/da57c9-e135-4367-8be6-2c0cf23b423e/1/336sT6MToueS5UJjzGBf8xnzXBk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0f:0b:e1:04:dc:0c:6c:3a:e1:7e:6c:a5:2f:d6:fd:bc:c1:e4:
68:4d:ac:4f:bf:e7:ad:84:05:97:82:66:ad:ca:e4:c4:b8:93:
08:d8:62:5b:47:60:22:05:14:c8:67:23:44:fe:d6:45:9a:45:
c4:e1:57:10:01:6f:cd:07:e2:24:c8:ec:5a:8d:d6:35:8d:c3:
7a:4f:d9:e1:6e:63:96:60:be:bb:0d:dc:50:07:56:78:ac:cc:
0a:39:90:63:b3:78:55:82:3d:fa:b4:9e:e9:fb:4f:e2:6b:f6:
7a:d7:f2:5e:91:ce:66:3c:03:1b:bd:b9:f9:6f:da:7d:e2:6a:
d7:3c:e9:50:10:47:08:aa:f0:97:d4:21:de:50:22:1d:3e:e7:
14:10:43:a5:2c:aa:7b:45:6a:37:5a:3d:b1:1b:06:45:f4:05:
3b:ff:37:cf:62:94:e2:7c:2d:e1:19:06:be:44:09:38:6c:89:
c6:07:43:2f:6e:6a:54:62:3a:f8:f2:2b:a1:7b:35:54:93:3c:
73:11:e9:9f:ad:05:db:3e:56:6a:d1:d4:7b:cd:e2:9e:41:49:
db:5d:f6:86:68:de:83:e6:0b:10:f5:65:09:43:cc:da:ff:68:
57:f4:95:ed:18:d1:8d:3d:f5:3d:64:48:83:0d:8e:4d:1f:1e:
60:b0:89:48
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjVTfsPAdM3N268aCzK2+eaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRmN2VhYzRmYTMxM2EyZTc5MmU1NDI2M2NjNjA1ZmYzMTlm
MzVjMTkwHhcNMjUwODIzMDUwMTU0WhcNMjUwODI0MDUwMTU0WjAzMTEwLwYDVQQD
EyhkNGEzMmQxZjQ1OWMxYThjODllNmZjZDM0MGY0MTM4YjVlMDdkNTE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr7bdqRczl1azNSKSFXNFXl/u1mRB
YqarDv2pCp5YcZ9VzazvZTZgwSQ6dNmtq85tuABwEoDJaM2OTsjBEEjD3fT+ApuC
HMWFAcWJKsP3yuvA3XAYetv3izbzBdULbnmOultPcMuUWHIpHsQM4xOz+uSKgh3y
v6TngIkPu2tFBCyqy8g7U1W+QuCDo121G12BAresM7x0qilEsqiXIOdtU29868t2
kFkQjN2wWzeNil/S09m3pyr3dN2SpSUWuR7X+ijh1UIr0G2kxbmuN3quakMOo2de
JmFGjk9IntgljM4ASqGwXGKP8HZQ2FodvjThEU03/ldgJt2na/gZfEGvGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNSjLR9FnBqMieb800D0E4teB9UXMB8GA1UdIwQY
MBaAFN9+rE+jE6LnkuVCY8xgX/MZ81wZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNy9kYTU3YzktZTEzNS00MzY3LThiZTYt
MmMwY2YyM2I0MjNlLzEvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xNy9kYTU3YzktZTEzNS00MzY3LThiZTYtMmMwY2YyM2I0MjNl
LzEvMzM2c1Q2TVRvdWVTNVVKanpHQmY4eG56WEJrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADwvhBNwM
bDrhfmylL9b9vMHkaE2sT7/nrYQFl4JmrcrkxLiTCNhiW0dgIgUUyGcjRP7WRZpF
xOFXEAFvzQfiJMjsWo3WNY3Dek/Z4W5jlmC+uw3cUAdWeKzMCjmQY7N4VYI9+rSe
6ftP4mv2etfyXpHOZjwDG725+W/afeJq1zzpUBBHCKrwl9Qh3lAiHT7nFBBDpSyq
e0VqN1o9sRsGRfQFO/83z2KU4nwt4RkGvkQJOGyJxgdDL25qVGI6+PIroXs1VJM8
cxHpn60F2z5WatHUe83inkFJ2132hmjeg+YLEPVlCUPM2v9oV/SV7RjRjT31PWRI
gw2OTR8eYLCJSA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 12:31:05 2025 by rpki-client