Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
File: d92irQmMangU-yWLRpsNhM4kxKc.mft (raw, json)
Hash identifier: Xzw0gZq+noO4i71wXt140jbds4nuCdLCGERkjUcj+Fg=
Subject key identifier: D5:2D:13:69:65:7B:14:A9:4A:F7:BC:03:66:9D:0A:DB:DB:4B:EC:5D
Authority key identifier: 77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
Certificate issuer: /CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Certificate serial: 0197B7EA58DC623BB153D28B3FB533314DA6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 19:01:18 +0000
Manifest this update: Sat 28 Jun 2025 19:01:18 +0000
Manifest next update: Sun 29 Jun 2025 19:01:18 +0000
Files and hashes: 1: auoQhH7aBJnI1g3L4GojEkAsQQY.roa (hash: gWIiP5OtZwTCpaoFewi8x05lW349LkZSfT6+AFOcha0=)
2: d92irQmMangU-yWLRpsNhM4kxKc.crl (hash: EuIcyxinWpKPd+EFh3UNpglie4rI0VfcuoKj+1Pjo1s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:58:dc:62:3b:b1:53:d2:8b:3f:b5:33:31:4d:a6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77dda2ad098c6a7814fb258b469b0d84ce24c4a7
Validity
Not Before: Jun 28 19:01:18 2025 GMT
Not After : Jun 29 19:01:18 2025 GMT
Subject: CN=d52d1369657b14a94af7bc03669d0adbdb4bec5d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bd:63:58:81:ed:a0:d5:2a:51:6c:0b:58:ae:7c:
9e:66:4f:bd:e3:b2:28:99:30:66:5d:af:cd:34:bf:
0c:43:b1:1a:27:d4:7d:e9:2c:0d:98:ec:ac:4d:c8:
eb:b5:ee:b6:c6:b3:00:e4:35:bb:27:08:42:c7:d3:
9b:c7:b8:88:fe:a0:10:8f:01:ff:5c:e8:78:a9:34:
27:84:80:38:48:01:41:96:3f:6d:0f:ac:48:b8:76:
f0:d3:c6:7e:78:ce:6b:13:25:c6:50:0e:94:3b:78:
00:51:d9:5f:f3:75:4e:cd:be:31:fd:94:e8:c7:82:
df:34:95:66:e4:35:b3:59:4c:cd:8f:ee:a1:c9:f9:
14:00:3e:de:cc:e1:f6:f7:0f:79:54:9a:03:54:6e:
80:2d:f5:97:83:28:8a:a8:5f:3c:7a:fb:01:7f:9c:
ee:fd:6e:11:65:ad:f0:8c:c6:5c:f7:22:fd:75:52:
8d:71:fc:47:75:df:a2:b7:14:e9:9d:0b:ef:ba:e0:
32:58:a7:18:95:2d:60:b1:87:a2:48:77:06:ec:13:
9b:83:16:1a:8c:5f:57:80:46:e6:62:8d:2d:86:fa:
de:2e:ae:e5:1c:45:6d:03:1b:c4:a7:76:53:6c:0f:
3a:dd:75:39:1e:3f:7a:7e:d5:23:37:2a:1c:25:97:
12:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D5:2D:13:69:65:7B:14:A9:4A:F7:BC:03:66:9D:0A:DB:DB:4B:EC:5D
X509v3 Authority Key Identifier:
keyid:77:DD:A2:AD:09:8C:6A:78:14:FB:25:8B:46:9B:0D:84:CE:24:C4:A7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d92irQmMangU-yWLRpsNhM4kxKc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/18/885457-70f2-4410-be7c-81476dbab144/1/d92irQmMangU-yWLRpsNhM4kxKc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:7d:d7:78:9c:dd:e8:b2:4f:dc:1b:d4:86:f8:bd:d5:54:9f:
9a:f7:37:1d:9e:de:16:8c:4a:8d:d3:e4:b0:8e:22:4e:78:3f:
86:c6:e8:87:c5:43:d4:55:1e:c7:45:83:44:9f:2a:53:d6:70:
d9:8f:0b:9f:bf:62:f6:86:ab:9b:0a:ef:8b:06:4c:9a:7e:47:
39:75:84:ff:1f:d6:8e:7d:a3:d8:6e:9d:0a:f6:35:30:23:5d:
9c:b8:b5:de:f5:06:b2:08:21:cb:0c:9c:52:49:62:d2:dd:23:
91:be:3a:d7:58:74:d2:eb:fb:3e:3b:4b:fb:9d:35:09:35:79:
67:6e:1c:e8:0b:8f:32:73:d9:7e:fc:9d:4a:69:d7:1c:e1:90:
6a:3d:83:d1:4f:33:99:a3:6c:f9:d1:32:91:30:d3:2d:9a:91:
6f:b0:00:3e:f1:81:5f:59:8b:6d:2a:e2:f4:9d:c2:62:ea:59:
53:55:f5:92:ec:ed:2d:5e:f4:34:cb:ef:74:a5:2d:3d:13:89:
64:db:fa:f4:93:dc:48:da:40:b4:fc:2f:97:0a:f2:78:ca:f6:
6b:f7:06:ee:53:93:33:77:e3:10:db:93:33:01:06:98:0a:9d:
ff:cd:82:c0:ca:4b:fa:bd:cb:50:4a:9e:d5:8d:5f:75:3a:f8:
7d:0e:ed:89
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36ljcYjuxU9KLP7UzMU2mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3ZGRhMmFkMDk4YzZhNzgxNGZiMjU4YjQ2OWIwZDg0Y2Uy
NGM0YTcwHhcNMjUwNjI4MTkwMTE4WhcNMjUwNjI5MTkwMTE4WjAzMTEwLwYDVQQD
EyhkNTJkMTM2OTY1N2IxNGE5NGFmN2JjMDM2NjlkMGFkYmRiNGJlYzVkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvWNYge2g1SpRbAtYrnyeZk+947Io
mTBmXa/NNL8MQ7EaJ9R96SwNmOysTcjrte62xrMA5DW7JwhCx9Obx7iI/qAQjwH/
XOh4qTQnhIA4SAFBlj9tD6xIuHbw08Z+eM5rEyXGUA6UO3gAUdlf83VOzb4x/ZTo
x4LfNJVm5DWzWUzNj+6hyfkUAD7ezOH29w95VJoDVG6ALfWXgyiKqF88evsBf5zu
/W4RZa3wjMZc9yL9dVKNcfxHdd+itxTpnQvvuuAyWKcYlS1gsYeiSHcG7BObgxYa
jF9XgEbmYo0thvreLq7lHEVtAxvEp3ZTbA863XU5Hj96ftUjNyocJZcSDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNUtE2llexSpSve8A2adCtvbS+xdMB8GA1UdIwQY
MBaAFHfdoq0JjGp4FPsli0abDYTOJMSnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xOC84ODU0NTctNzBmMi00NDEwLWJlN2Mt
ODE0NzZkYmFiMTQ0LzEvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xOC84ODU0NTctNzBmMi00NDEwLWJlN2MtODE0NzZkYmFiMTQ0
LzEvZDkyaXJRbU1hbmdVLXlXTFJwc05oTTRreEtjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbX3XeJzd
6LJP3BvUhvi91VSfmvc3HZ7eFoxKjdPksI4iTng/hsboh8VD1FUex0WDRJ8qU9Zw
2Y8Ln79i9oarmwrviwZMmn5HOXWE/x/Wjn2j2G6dCvY1MCNdnLi13vUGsgghywyc
Ukli0t0jkb4611h00uv7PjtL+501CTV5Z24c6AuPMnPZfvydSmnXHOGQaj2D0U8z
maNs+dEykTDTLZqRb7AAPvGBX1mLbSri9J3CYupZU1X1kuztLV70NMvvdKUtPROJ
ZNv69JPcSNpAtPwvlwryeMr2a/cG7lOTM3fjENuTMwEGmAqd/82CwMpL+r3LUEqe
1Y1fdTr4fQ7tiQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:03:52 2025 by rpki-client