Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
File: p72yx7M0uUvNQziPIfggktts_Uw.mft (raw, json)
Hash identifier: 3ihoLrJvKuyl6Y5itasQ6DqBgPVqQgCBUrs/lRVFBgU=
Subject key identifier: FA:89:D5:EB:04:6E:84:0A:E2:F4:75:37:59:7C:39:D0:A6:06:BF:80
Authority key identifier: A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
Certificate issuer: /CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Certificate serial: 0197B821353DC19C4ACAC83A9812FEABA43B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 20:01:13 +0000
Manifest this update: Sat 28 Jun 2025 20:01:13 +0000
Manifest next update: Sun 29 Jun 2025 20:01:13 +0000
Files and hashes: 1: Wh_K5Ot0PdOltJAZbDMBxaT8CJw.roa (hash: VIjWDHn3J2RwnBzOCzHWLW6nGxWdyzjrSq+KdnZiOMU=)
2: p72yx7M0uUvNQziPIfggktts_Uw.crl (hash: Rgtqu3SBMc2kOzoRTRsa3nb2JQ3Gs81Nb34qJK1lUCc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:35:3d:c1:9c:4a:ca:c8:3a:98:12:fe:ab:a4:3b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a7bdb2c7b334b94bcd43388f21f82092db6cfd4c
Validity
Not Before: Jun 28 20:01:13 2025 GMT
Not After : Jun 29 20:01:13 2025 GMT
Subject: CN=fa89d5eb046e840ae2f47537597c39d0a606bf80
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e0:20:fc:1b:96:b0:e7:0e:74:d0:5f:80:40:52:
6a:80:5a:6a:26:e2:8d:f0:47:1b:f0:7f:36:30:8b:
54:99:ff:cd:af:6b:d0:4b:f9:f6:d8:65:87:f6:91:
fb:80:cb:b0:c4:ea:ce:1d:4a:88:eb:0b:7a:54:5b:
9e:7b:31:8e:12:0e:80:b5:41:50:a1:35:29:12:99:
74:ac:b9:25:86:a6:ef:03:33:f9:13:9c:a4:97:3f:
53:b8:b9:82:87:43:82:20:a2:9f:6b:e8:73:d3:6a:
c8:2f:b0:77:dd:05:78:e5:0b:59:bc:46:3d:7a:8a:
f5:07:dc:9d:74:3d:13:e3:46:c6:57:97:15:3b:be:
7e:20:53:85:85:d5:1d:fa:ca:4a:77:45:fe:22:a8:
ec:d5:2f:9c:5f:fd:da:00:b1:76:6f:ee:49:6f:a0:
2c:38:2c:3b:92:87:ef:4d:81:72:19:e6:bb:0d:d4:
a6:f9:f6:79:d0:e6:b1:12:48:6f:08:88:d0:18:3c:
0c:3b:b9:ee:4b:04:39:c6:24:5d:48:1a:ce:4c:b6:
f6:94:f4:ed:db:47:96:63:d9:96:ea:b1:a9:74:03:
62:62:ea:07:4e:37:47:d2:24:9e:4d:89:73:56:44:
c6:77:03:59:0f:56:c2:d7:27:38:57:52:97:fe:f8:
6f:fd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FA:89:D5:EB:04:6E:84:0A:E2:F4:75:37:59:7C:39:D0:A6:06:BF:80
X509v3 Authority Key Identifier:
keyid:A7:BD:B2:C7:B3:34:B9:4B:CD:43:38:8F:21:F8:20:92:DB:6C:FD:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p72yx7M0uUvNQziPIfggktts_Uw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/38/a1ee96-2eed-4533-8afd-a958bf5acbea/1/p72yx7M0uUvNQziPIfggktts_Uw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:36:bb:52:8d:94:57:53:f5:37:4f:dd:96:36:aa:a8:4e:71:
bd:5e:9a:05:95:13:d6:31:f4:69:d4:53:ab:80:a1:7a:09:4b:
4b:ab:65:63:4a:6e:a0:36:21:5b:5f:5c:98:39:62:8c:f9:95:
1b:0a:9d:9d:f5:ab:32:66:49:e3:81:e6:11:6e:7f:e3:b2:04:
62:63:65:b0:0b:b5:aa:bd:b9:2b:c5:67:12:cc:43:03:a7:ea:
a2:d9:2b:31:11:55:4f:77:a3:f6:17:1a:61:d6:bb:5d:17:53:
49:12:cc:1f:78:12:dd:d0:0e:ed:e5:3e:c9:98:40:c2:23:a2:
c2:e7:f4:62:2f:04:e2:cd:06:b8:be:9f:c9:5b:8c:44:42:fd:
9b:f4:49:0e:8b:0f:c4:3a:5a:de:2e:48:8d:09:d4:1c:8c:ce:
7f:4b:dc:59:0f:3c:a1:97:b0:cd:c1:ec:a5:75:0d:66:0e:a6:
de:1d:4f:0c:ed:4b:60:a0:bb:47:c9:1f:56:52:f1:d8:1a:51:
56:e9:21:ba:a9:21:a5:de:ce:7d:c2:b6:8a:1c:7a:9d:e8:64:
49:5a:f9:dc:21:c4:65:d1:5f:31:1d:52:a1:49:7f:8e:08:a6:
7e:05:84:7e:cc:9c:19:04:8a:bc:39:fd:dd:14:30:14:e1:3d:
10:75:95:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4ITU9wZxKysg6mBL+q6Q7MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3YmRiMmM3YjMzNGI5NGJjZDQzMzg4ZjIxZjgyMDkyZGI2
Y2ZkNGMwHhcNMjUwNjI4MjAwMTEzWhcNMjUwNjI5MjAwMTEzWjAzMTEwLwYDVQQD
EyhmYTg5ZDVlYjA0NmU4NDBhZTJmNDc1Mzc1OTdjMzlkMGE2MDZiZjgwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4CD8G5aw5w500F+AQFJqgFpqJuKN
8Ecb8H82MItUmf/Nr2vQS/n22GWH9pH7gMuwxOrOHUqI6wt6VFueezGOEg6AtUFQ
oTUpEpl0rLklhqbvAzP5E5yklz9TuLmCh0OCIKKfa+hz02rIL7B33QV45QtZvEY9
eor1B9yddD0T40bGV5cVO75+IFOFhdUd+spKd0X+Iqjs1S+cX/3aALF2b+5Jb6As
OCw7kofvTYFyGea7DdSm+fZ50OaxEkhvCIjQGDwMO7nuSwQ5xiRdSBrOTLb2lPTt
20eWY9mW6rGpdANiYuoHTjdH0iSeTYlzVkTGdwNZD1bC1yc4V1KX/vhv/QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPqJ1esEboQK4vR1N1l8OdCmBr+AMB8GA1UdIwQY
MBaAFKe9ssezNLlLzUM4jyH4IJLbbP1MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQt
YTk1OGJmNWFjYmVhLzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zOC9hMWVlOTYtMmVlZC00NTMzLThhZmQtYTk1OGJmNWFjYmVh
LzEvcDcyeXg3TTB1VXZOUXppUElmZ2drdHRzX1V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkDa7Uo2U
V1P1N0/dljaqqE5xvV6aBZUT1jH0adRTq4CheglLS6tlY0puoDYhW19cmDlijPmV
GwqdnfWrMmZJ44HmEW5/47IEYmNlsAu1qr25K8VnEsxDA6fqotkrMRFVT3ej9hca
Yda7XRdTSRLMH3gS3dAO7eU+yZhAwiOiwuf0Yi8E4s0GuL6fyVuMREL9m/RJDosP
xDpa3i5IjQnUHIzOf0vcWQ88oZewzcHspXUNZg6m3h1PDO1LYKC7R8kfVlLx2BpR
Vukhuqkhpd7OfcK2ihx6nehkSVr53CHEZdFfMR1SoUl/jgimfgWEfsycGQSKvDn9
3RQwFOE9EHWVag==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:02:49 2025 by rpki-client