Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
File: U6i3vKixHSeFDpGMpZlmmIAWKSk.mft (raw, json)
Hash identifier: 840YuxjBYmTqRx00+ppPbGiCGfvqZoHvF2tX9r12cyA=
Subject key identifier: C7:3B:96:26:23:5B:0C:D7:CE:6B:A8:35:E5:41:FF:0A:96:7A:72:7F
Authority key identifier: 53:A8:B7:BC:A8:B1:1D:27:85:0E:91:8C:A5:99:66:98:80:16:29:29
Certificate issuer: /CN=53a8b7bca8b11d27850e918ca599669880162929
Certificate serial: 0197B6D752FDD83EB5BD956AD0BE8D9BEE96
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
Manifest number: 01C5
Signing time: Sat 28 Jun 2025 14:00:54 +0000
Manifest this update: Sat 28 Jun 2025 14:00:54 +0000
Manifest next update: Sun 29 Jun 2025 14:00:54 +0000
Files and hashes: 1: U6i3vKixHSeFDpGMpZlmmIAWKSk.crl (hash: Yax2Wa09PudhMhD7tv0+3KDJNf/nUK2Q4c7Xoe+8J90=)
2: qST1YzpfG0Aj9HfkTwxj9U8CUhI.roa (hash: wruCCghr0kJqtbuyZdJFoTZhRH+nhRjwzTxdaCBX4hs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.crl
rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:d7:52:fd:d8:3e:b5:bd:95:6a:d0:be:8d:9b:ee:96
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53a8b7bca8b11d27850e918ca599669880162929
Validity
Not Before: Jun 28 14:00:54 2025 GMT
Not After : Jun 29 14:00:54 2025 GMT
Subject: CN=c73b9626235b0cd7ce6ba835e541ff0a967a727f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:8b:46:e9:0b:af:e3:2f:2c:7c:78:b5:ab:a3:
97:50:bf:a5:a8:77:37:68:53:ae:bb:61:6c:8b:c9:
9d:1a:1f:43:a5:5c:3e:cb:f8:b9:d1:8d:a8:6b:e5:
89:7f:0e:16:1c:01:fd:45:8c:91:ce:cb:8b:f7:bd:
36:70:18:ee:56:b4:c6:d4:ae:9a:31:22:ba:0e:28:
91:53:77:8b:c2:c8:99:9a:01:96:57:00:fc:43:75:
fa:91:94:c6:8a:7c:67:d3:51:40:4b:cb:05:df:d7:
44:01:14:ef:ca:c6:29:ab:ce:28:4e:eb:61:18:b6:
a4:08:b2:a2:78:d4:5d:d7:0f:b2:d9:a2:3e:6c:f3:
e9:e0:f1:01:6e:07:ec:8f:87:d7:fe:5f:2f:fa:11:
55:7d:f5:fc:17:5d:f7:81:fb:07:34:a2:c7:60:8f:
9b:41:64:e3:8a:f6:da:0d:55:6c:20:9e:c7:d1:ca:
91:40:f3:e3:a8:8f:26:19:9c:be:c4:d2:7e:a3:fa:
fa:f6:0c:34:74:11:e6:2c:92:a5:0c:4b:97:63:c5:
fd:ea:24:96:ac:8f:03:a7:cf:83:cc:1d:cd:d6:0b:
48:49:00:34:33:67:5a:6e:b5:bf:dc:c9:1f:31:f7:
44:87:52:2f:e1:af:e4:22:3e:ea:ae:92:0d:7d:f8:
0f:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C7:3B:96:26:23:5B:0C:D7:CE:6B:A8:35:E5:41:FF:0A:96:7A:72:7F
X509v3 Authority Key Identifier:
keyid:53:A8:B7:BC:A8:B1:1D:27:85:0E:91:8C:A5:99:66:98:80:16:29:29
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U6i3vKixHSeFDpGMpZlmmIAWKSk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/25/506db9-12aa-463c-a7ea-d3cdd5c3392c/1/U6i3vKixHSeFDpGMpZlmmIAWKSk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3e:78:44:ce:07:c6:8d:cd:d1:1c:01:b5:be:94:2e:35:56:46:
25:be:1f:0c:bd:b4:b3:55:52:7f:8a:11:79:e1:e2:1e:75:74:
76:f7:30:29:24:a5:04:55:2a:70:00:5c:d1:15:93:55:9b:7b:
f7:c3:80:97:8d:3a:f8:f7:4c:8c:e4:c2:60:49:a1:fe:4a:eb:
f7:70:75:32:63:8a:f6:05:64:7f:45:98:7d:8e:63:84:4c:98:
a7:4d:1f:d0:d5:13:6f:27:2f:d2:21:b5:3a:17:2a:44:97:6f:
aa:57:9e:40:df:56:1b:0c:44:db:02:dd:ac:8d:72:68:85:45:
ac:9f:bd:9f:f4:9c:f4:ba:e8:7a:5d:4e:ab:d1:73:4f:98:60:
bf:87:c4:03:06:1e:af:94:9f:9f:5a:b6:8b:7b:99:f3:51:ec:
08:f9:bd:55:15:be:a6:3a:1b:89:00:c0:73:37:85:30:c3:5e:
33:f5:6d:89:d0:77:dc:8c:bc:36:df:f3:d9:9a:6a:32:1c:15:
29:5f:9c:4a:b3:fd:9e:ce:99:5c:c0:68:8a:73:2d:37:9c:aa:
8a:ad:b9:b0:de:5d:ab:f6:d9:aa:b3:d9:96:ab:e3:38:84:62:
b3:b3:cc:2d:7d:aa:18:84:96:70:b9:5c:59:23:9f:1d:56:4c:
11:fb:8e:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe211L92D61vZVq0L6Nm+6WMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYThiN2JjYThiMTFkMjc4NTBlOTE4Y2E1OTk2Njk4ODAx
NjI5MjkwHhcNMjUwNjI4MTQwMDU0WhcNMjUwNjI5MTQwMDU0WjAzMTEwLwYDVQQD
EyhjNzNiOTYyNjIzNWIwY2Q3Y2U2YmE4MzVlNTQxZmYwYTk2N2E3MjdmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs4tG6Quv4y8sfHi1q6OXUL+lqHc3
aFOuu2Fsi8mdGh9DpVw+y/i50Y2oa+WJfw4WHAH9RYyRzsuL9702cBjuVrTG1K6a
MSK6DiiRU3eLwsiZmgGWVwD8Q3X6kZTGinxn01FAS8sF39dEARTvysYpq84oTuth
GLakCLKieNRd1w+y2aI+bPPp4PEBbgfsj4fX/l8v+hFVffX8F133gfsHNKLHYI+b
QWTjivbaDVVsIJ7H0cqRQPPjqI8mGZy+xNJ+o/r69gw0dBHmLJKlDEuXY8X96iSW
rI8Dp8+DzB3N1gtISQA0M2dabrW/3MkfMfdEh1Iv4a/kIj7qrpINffgPhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMc7liYjWwzXzmuoNeVB/wqWenJ/MB8GA1UdIwQY
MBaAFFOot7yosR0nhQ6RjKWZZpiAFikpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTZpM3ZLaXhIU2VGRHBHTXBabG1tSUFXS1NrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yNS81MDZkYjktMTJhYS00NjNjLWE3ZWEt
ZDNjZGQ1YzMzOTJjLzEvVTZpM3ZLaXhIU2VGRHBHTXBabG1tSUFXS1NrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yNS81MDZkYjktMTJhYS00NjNjLWE3ZWEtZDNjZGQ1YzMzOTJj
LzEvVTZpM3ZLaXhIU2VGRHBHTXBabG1tSUFXS1NrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPnhEzgfG
jc3RHAG1vpQuNVZGJb4fDL20s1VSf4oReeHiHnV0dvcwKSSlBFUqcABc0RWTVZt7
98OAl406+PdMjOTCYEmh/krr93B1MmOK9gVkf0WYfY5jhEyYp00f0NUTbycv0iG1
OhcqRJdvqleeQN9WGwxE2wLdrI1yaIVFrJ+9n/Sc9Lroel1Oq9FzT5hgv4fEAwYe
r5Sfn1q2i3uZ81HsCPm9VRW+pjobiQDAczeFMMNeM/VtidB33Iy8Nt/z2ZpqMhwV
KV+cSrP9ns6ZXMBoinMtN5yqiq25sN5dq/bZqrPZlqvjOIRis7PMLX2qGISWcLlc
WSOfHVZMEfuOow==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:58:29 2025 by rpki-client