Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
File: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft (raw, json)
Hash identifier: XZ224PW+nYsPpFP9gaCBYP1p42fPAydGyA9WmtTlhhI=
Subject key identifier: 18:6B:6E:5C:23:01:7A:5C:B9:BD:E4:30:68:2D:98:BF:FE:1F:55:DD
Authority key identifier: F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
Certificate issuer: /CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Certificate serial: 0197B5C47E3A58DFE8F0B9A567F98BBCB5AC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
Manifest number: 15B7
Signing time: Sat 28 Jun 2025 09:00:42 +0000
Manifest this update: Sat 28 Jun 2025 09:00:42 +0000
Manifest next update: Sun 29 Jun 2025 09:00:42 +0000
Files and hashes: 1: 8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl (hash: dM0WV7PSuCY6GvrnKpS3xmGec9/wgt/rRRL3pgkik74=)
2: rT4QMLbWFUH0Mel-lifTyr0ioFc.roa (hash: wpH6c9l5MVs0PUcAmPxTy3wVy1NXeRT3Lk+wmtz29PE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:7e:3a:58:df:e8:f0:b9:a5:67:f9:8b:bc:b5:ac
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f19a5d5cb7949ce1bd209dc213993520e02d1085
Validity
Not Before: Jun 28 09:00:42 2025 GMT
Not After : Jun 29 09:00:42 2025 GMT
Subject: CN=186b6e5c23017a5cb9bde430682d98bffe1f55dd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:74:6f:e1:ff:a3:9c:7f:17:2b:95:a0:50:d8:
7f:9e:ef:db:5d:2a:49:53:3e:b3:07:4e:d0:a6:a3:
c6:65:b4:60:8b:f1:4a:ee:fc:e3:8c:87:25:80:9a:
b6:4f:50:ef:9d:a8:d6:8c:05:fd:44:2b:63:ae:e5:
96:a3:9f:a2:c2:a7:d4:98:d7:01:c2:e0:6f:f0:1c:
ef:8c:da:67:9b:3e:1b:d7:6d:c5:43:e3:b0:55:17:
5e:14:be:61:96:c8:bf:13:f1:11:c8:23:63:c2:cc:
0f:f8:c4:21:54:a3:59:9b:fa:ca:41:f1:fd:ef:f2:
5a:33:ff:a0:ea:19:55:6c:67:a1:91:5b:7c:ec:7d:
64:21:ad:c7:d3:e1:ce:f9:74:c0:0a:a6:fe:2e:80:
c8:f5:c9:04:3a:d1:5e:75:fc:ce:ca:34:27:22:62:
e9:f7:c4:f8:80:1a:ca:86:44:0b:2e:aa:29:f3:3d:
f7:b6:e0:08:3b:3e:88:31:7a:77:c3:34:82:97:86:
ed:dc:e7:39:89:51:52:5c:73:06:0a:c2:8a:70:78:
42:83:bd:7b:95:bf:a6:08:02:80:3d:16:4c:e4:9e:
58:0b:20:52:2b:66:4d:22:e1:83:71:09:84:a2:ce:
8f:05:47:27:cb:85:51:3a:8f:67:8f:56:d9:39:ee:
f7:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
18:6B:6E:5C:23:01:7A:5C:B9:BD:E4:30:68:2D:98:BF:FE:1F:55:DD
X509v3 Authority Key Identifier:
keyid:F1:9A:5D:5C:B7:94:9C:E1:BD:20:9D:C2:13:99:35:20:E0:2D:10:85
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/309bfd-cbe7-4144-a630-2f80a0a0206a/1/8ZpdXLeUnOG9IJ3CE5k1IOAtEIU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:ba:6e:46:0b:ac:c8:5d:3a:af:f6:0f:a0:38:10:69:1e:21:
5d:2a:eb:b8:85:2f:1c:53:d9:08:59:f8:e3:ee:e3:d1:f7:25:
ef:dc:18:00:18:dd:3c:5d:52:c6:0f:d5:97:c2:8e:68:ce:51:
99:bc:74:59:57:7f:bf:10:44:cf:87:98:55:50:5d:d9:5a:84:
3f:39:e4:5a:13:4b:fb:37:91:5a:9c:e8:82:28:ed:f3:ad:04:
15:9e:00:e8:47:33:6b:57:a0:fd:ce:c6:8a:30:dc:66:41:98:
a6:74:05:c5:15:3d:32:bf:26:5d:98:63:4b:dd:94:3d:02:db:
70:81:a2:75:dc:21:b2:72:5f:2e:13:c0:98:4e:a4:fe:df:be:
17:9c:ab:e3:39:20:dd:1a:0a:05:a6:93:ad:0e:8d:b0:40:09:
07:7d:34:bd:81:53:a7:92:8b:a7:6f:b6:59:ac:af:0b:83:79:
a4:34:c5:b3:98:7a:bb:0d:0e:d7:a2:94:d2:7c:a5:2b:7e:d7:
e1:8e:ad:d4:a7:46:04:41:56:ae:bd:ce:1b:26:38:b4:3c:c7:
59:ad:c2:13:0d:29:a6:1c:a8:f5:87:89:13:53:f4:df:42:a0:
d1:fa:c4:05:60:08:e9:5c:09:b0:5c:3a:68:3b:db:09:71:1c:
d0:ae:2f:b8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xH46WN/o8LmlZ/mLvLWsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYxOWE1ZDVjYjc5NDljZTFiZDIwOWRjMjEzOTkzNTIwZTAy
ZDEwODUwHhcNMjUwNjI4MDkwMDQyWhcNMjUwNjI5MDkwMDQyWjAzMTEwLwYDVQQD
EygxODZiNmU1YzIzMDE3YTVjYjliZGU0MzA2ODJkOThiZmZlMWY1NWRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjnRv4f+jnH8XK5WgUNh/nu/bXSpJ
Uz6zB07QpqPGZbRgi/FK7vzjjIclgJq2T1DvnajWjAX9RCtjruWWo5+iwqfUmNcB
wuBv8BzvjNpnmz4b123FQ+OwVRdeFL5hlsi/E/ERyCNjwswP+MQhVKNZm/rKQfH9
7/JaM/+g6hlVbGehkVt87H1kIa3H0+HO+XTACqb+LoDI9ckEOtFedfzOyjQnImLp
98T4gBrKhkQLLqop8z33tuAIOz6IMXp3wzSCl4bt3Oc5iVFSXHMGCsKKcHhCg717
lb+mCAKAPRZM5J5YCyBSK2ZNIuGDcQmEos6PBUcny4VROo9nj1bZOe73hwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBhrblwjAXpcub3kMGgtmL/+H1XdMB8GA1UdIwQY
MBaAFPGaXVy3lJzhvSCdwhOZNSDgLRCFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy8zMDliZmQtY2JlNy00MTQ0LWE2MzAt
MmY4MGEwYTAyMDZhLzEvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy8zMDliZmQtY2JlNy00MTQ0LWE2MzAtMmY4MGEwYTAyMDZh
LzEvOFpwZFhMZVVuT0c5SUozQ0U1azFJT0F0RUlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFbpuRgus
yF06r/YPoDgQaR4hXSrruIUvHFPZCFn44+7j0fcl79wYABjdPF1Sxg/Vl8KOaM5R
mbx0WVd/vxBEz4eYVVBd2VqEPznkWhNL+zeRWpzogijt860EFZ4A6Ecza1eg/c7G
ijDcZkGYpnQFxRU9Mr8mXZhjS92UPQLbcIGiddwhsnJfLhPAmE6k/t++F5yr4zkg
3RoKBaaTrQ6NsEAJB300vYFTp5KLp2+2WayvC4N5pDTFs5h6uw0O16KU0nylK37X
4Y6t1KdGBEFWrr3OGyY4tDzHWa3CEw0pphyo9YeJE1P030Kg0frEBWAI6VwJsFw6
aDvbCXEc0K4vuA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:38:51 2025 by rpki-client