Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
File: I7oexPA1py36OekwrY7FQ2jrevQ.mft (raw, json)
Hash identifier: aqghbRWAO57WH0HMh52SIBvlu2c//hg0nk1pC0Dfs2U=
Subject key identifier: 32:E2:A9:EA:DB:6A:9F:AF:25:94:A0:E4:3A:A8:D0:43:39:85:57:99
Authority key identifier: 23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
Certificate issuer: /CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Certificate serial: 0197B88EF92DA6AD6B51679838A10F0A9AA1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 22:01:06 +0000
Manifest this update: Sat 28 Jun 2025 22:01:06 +0000
Manifest next update: Sun 29 Jun 2025 22:01:06 +0000
Files and hashes: 1: I7oexPA1py36OekwrY7FQ2jrevQ.crl (hash: HVBU1LqJZq+gzmo5TuN46Gm2Rf4rcxVwrWu14cb7tcE=)
2: LrVwKiIfML7mAYKSwQjrFc9mp0A.roa (hash: pqGsuXC48BK/nJrmWeripHJL6964Try+bgZKQC5cMuM=)
3: bKwA7ygctFGfYxj37Ulrjy4h7wc.roa (hash: wDr01UuqGpYUgCW7TRCxOE6weB2OEkQge2nt3Tah0ms=)
4: b_MmvUZfA5ZZF4bFCypyK1p5UMI.roa (hash: 9E4PGJ6w5hYLiKvYcuEqwE8eKmB9cOnevFWIyVMZhgE=)
5: wmfmaFsDhu27cNgPElAJRkA9d2A.roa (hash: jsS53vdJzXk5aLl615moQFBVWf7IQgXR2RroQvAW/zQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:8e:f9:2d:a6:ad:6b:51:67:98:38:a1:0f:0a:9a:a1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=23ba1ec4f035a72dfa39e930ad8ec54368eb7af4
Validity
Not Before: Jun 28 22:01:06 2025 GMT
Not After : Jun 29 22:01:06 2025 GMT
Subject: CN=32e2a9eadb6a9faf2594a0e43aa8d04339855799
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dc:23:20:78:72:50:7c:cb:ad:f7:21:05:52:
32:c5:dd:a1:03:7b:28:83:64:30:ce:7a:39:e4:43:
51:70:42:d0:1a:e1:a6:52:ad:09:c6:c0:e9:a1:93:
c9:60:6e:23:a9:af:fe:a4:bc:7a:ce:cc:c9:db:8f:
62:2a:32:b3:11:bf:ce:e0:37:43:25:fe:eb:e5:69:
94:2c:a6:a8:f1:79:7e:98:5a:a9:0e:bc:4d:ac:9c:
04:13:e8:46:7b:c0:2b:a3:cf:48:2b:70:46:16:e3:
84:de:03:5a:53:65:fb:67:1d:f8:aa:88:c2:e1:3f:
91:1e:26:3d:49:80:33:72:0f:40:bb:d0:4d:a9:5f:
fb:c4:f9:1f:68:30:12:2a:8c:d9:1c:a4:e9:f9:5b:
c7:eb:8c:53:ef:02:2a:17:17:94:bc:00:27:b8:2e:
d4:0e:c5:e2:c9:2b:f8:93:ac:5a:00:00:33:7a:81:
d2:dd:f5:6c:a2:60:a9:53:df:7e:b4:ed:87:34:b9:
24:8a:23:82:0a:18:81:29:97:46:66:a9:d7:1f:0a:
92:f4:c7:23:7e:32:f0:2c:3a:3c:9e:fe:4e:22:dc:
3f:d2:21:d4:25:5a:89:e3:52:9c:b0:51:24:8e:82:
f4:f9:f1:91:5d:37:b1:7a:da:3d:b6:ad:ce:e3:7e:
8a:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
32:E2:A9:EA:DB:6A:9F:AF:25:94:A0:E4:3A:A8:D0:43:39:85:57:99
X509v3 Authority Key Identifier:
keyid:23:BA:1E:C4:F0:35:A7:2D:FA:39:E9:30:AD:8E:C5:43:68:EB:7A:F4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/I7oexPA1py36OekwrY7FQ2jrevQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/48/60ed2d-16d5-4d0c-a947-bde6448b786c/1/I7oexPA1py36OekwrY7FQ2jrevQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
39:08:95:53:60:05:1b:b8:a6:05:fe:0f:ba:c1:b1:8d:41:e0:
60:75:3e:f1:f4:1d:c1:75:49:88:44:6d:04:ab:63:ca:93:de:
43:7d:da:8b:15:ca:78:5c:ca:dc:9d:08:21:85:5e:73:12:5c:
52:47:01:83:ce:33:6d:69:bc:6f:82:02:90:de:a9:75:10:04:
d6:c3:5c:66:c7:65:14:83:11:91:f3:4c:cd:1d:11:b8:db:f1:
48:67:57:fe:2f:12:65:d1:74:6b:87:46:73:55:8b:0c:b1:a4:
8c:22:80:06:b4:f7:5d:0b:cb:28:0f:22:33:60:62:a0:0e:97:
a5:77:0d:24:24:ef:09:97:ce:fd:b5:6c:c7:5c:4e:60:50:33:
59:e7:12:0d:a6:11:69:d6:5e:4b:94:1c:6c:05:b6:3f:70:d7:
c1:aa:f6:52:65:6a:1c:9b:3f:58:a0:6d:bc:24:7a:3f:e7:63:
ab:bc:3f:28:38:28:d8:4a:d6:59:bc:42:94:9e:57:7f:29:0c:
28:e0:89:8f:9e:ba:c2:a7:e5:9b:22:be:28:4e:95:47:99:4e:
ae:14:ef:78:43:d7:23:97:b7:7b:d1:e3:d5:cb:d6:48:93:f1:
15:62:b2:49:2e:88:3e:99:6b:aa:fe:be:f4:24:58:71:34:e0:
8d:59:94:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4jvktpq1rUWeYOKEPCpqhMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIzYmExZWM0ZjAzNWE3MmRmYTM5ZTkzMGFkOGVjNTQzNjhl
YjdhZjQwHhcNMjUwNjI4MjIwMTA2WhcNMjUwNjI5MjIwMTA2WjAzMTEwLwYDVQQD
EygzMmUyYTllYWRiNmE5ZmFmMjU5NGEwZTQzYWE4ZDA0MzM5ODU1Nzk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt9wjIHhyUHzLrfchBVIyxd2hA3so
g2Qwzno55ENRcELQGuGmUq0JxsDpoZPJYG4jqa/+pLx6zszJ249iKjKzEb/O4DdD
Jf7r5WmULKao8Xl+mFqpDrxNrJwEE+hGe8Aro89IK3BGFuOE3gNaU2X7Zx34qojC
4T+RHiY9SYAzcg9Au9BNqV/7xPkfaDASKozZHKTp+VvH64xT7wIqFxeUvAAnuC7U
DsXiySv4k6xaAAAzeoHS3fVsomCpU99+tO2HNLkkiiOCChiBKZdGZqnXHwqS9Mcj
fjLwLDo8nv5OItw/0iHUJVqJ41KcsFEkjoL0+fGRXTexeto9tq3O436KKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDLiqerbap+vJZSg5Dqo0EM5hVeZMB8GA1UdIwQY
MBaAFCO6HsTwNact+jnpMK2OxUNo63r0MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSTdvZXhQQTFweTM2T2Vrd3JZN0ZRMmpyZXZRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OC82MGVkMmQtMTZkNS00ZDBjLWE5NDct
YmRlNjQ0OGI3ODZjLzEvSTdvZXhQQTFweTM2T2Vrd3JZN0ZRMmpyZXZRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80OC82MGVkMmQtMTZkNS00ZDBjLWE5NDctYmRlNjQ0OGI3ODZj
LzEvSTdvZXhQQTFweTM2T2Vrd3JZN0ZRMmpyZXZRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOQiVU2AF
G7imBf4PusGxjUHgYHU+8fQdwXVJiERtBKtjypPeQ33aixXKeFzK3J0IIYVecxJc
UkcBg84zbWm8b4ICkN6pdRAE1sNcZsdlFIMRkfNMzR0RuNvxSGdX/i8SZdF0a4dG
c1WLDLGkjCKABrT3XQvLKA8iM2BioA6XpXcNJCTvCZfO/bVsx1xOYFAzWecSDaYR
adZeS5QcbAW2P3DXwar2UmVqHJs/WKBtvCR6P+djq7w/KDgo2ErWWbxClJ5XfykM
KOCJj566wqflmyK+KE6VR5lOrhTveEPXI5e3e9Hj1cvWSJPxFWKySS6IPplrqv6+
9CRYcTTgjVmUPQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:37:17 2025 by rpki-client