Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
File: 18pTroRCI2dXp4Bm5OIXM_dYQHo.mft (raw, json)
Hash identifier: L+CmOFAC3bBac7waaHRHfIBQspTnpkyImMD6fwyoRoM=
Subject key identifier: FF:4E:7E:02:2E:80:79:D9:3A:03:08:B8:50:D1:B6:12:19:E7:62:BB
Authority key identifier: D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
Certificate issuer: /CN=d7ca53ae8442236757a78066e4e21733f758407a
Certificate serial: 0197B6A0E29859722443325AFA5C807A286B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
Manifest number: 113D
Signing time: Sat 28 Jun 2025 13:01:26 +0000
Manifest this update: Sat 28 Jun 2025 13:01:26 +0000
Manifest next update: Sun 29 Jun 2025 13:01:26 +0000
Files and hashes: 1: 18pTroRCI2dXp4Bm5OIXM_dYQHo.crl (hash: 0pMKQq6tbCZqO3Uv43Mh72gEBF26da7J3MjB4UGNeOk=)
2: 38s2EfLKTKzwDnKrug63iitVwN4.roa (hash: e5mS3BLPFSR7Y2uJcSkAUNlVQiD5b7eKpGpMN+urBn0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:e2:98:59:72:24:43:32:5a:fa:5c:80:7a:28:6b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d7ca53ae8442236757a78066e4e21733f758407a
Validity
Not Before: Jun 28 13:01:26 2025 GMT
Not After : Jun 29 13:01:26 2025 GMT
Subject: CN=ff4e7e022e8079d93a0308b850d1b61219e762bb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:85:6c:dd:b3:a5:b2:a0:ad:f8:9f:b7:66:6c:
27:9c:4b:77:af:f8:c7:c6:bf:0b:0d:c6:ab:7d:0e:
e0:8b:d8:74:4a:fd:91:54:73:c2:d4:4c:7b:cf:7e:
a1:52:75:3d:8a:f4:b5:7b:57:84:42:42:fc:4d:a0:
a1:52:8d:0d:dc:e5:68:5d:ac:81:62:94:d2:11:4a:
2a:d7:05:01:01:2b:f3:35:b3:c7:98:e5:1d:37:de:
1a:41:c0:3c:2a:5e:17:61:9c:5e:b1:dd:1d:64:2d:
8e:c9:be:88:84:08:d8:ab:31:dc:fc:cd:33:bc:ec:
cb:98:83:ef:cf:6b:28:d3:1b:71:83:f5:e2:19:2f:
57:03:d3:29:c7:48:cd:c6:be:57:02:ce:5e:95:a9:
01:f6:43:4f:aa:3d:27:e1:51:0f:78:53:75:ee:6a:
97:c6:88:e2:2f:17:ae:af:3d:2d:ad:ba:d8:fa:2c:
e2:ae:07:25:74:0a:b2:11:5b:7d:4a:8a:61:99:78:
e5:ce:a7:35:41:a7:c9:9c:ef:2e:cc:4a:8d:f4:7d:
d6:e3:1b:f4:d5:13:c3:f6:ff:ce:29:55:d3:23:9e:
31:19:25:18:c9:a6:d5:30:e1:4a:88:f9:23:02:8a:
64:ad:49:29:83:c1:02:b2:c1:53:82:ee:33:6e:64:
a7:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:4E:7E:02:2E:80:79:D9:3A:03:08:B8:50:D1:B6:12:19:E7:62:BB
X509v3 Authority Key Identifier:
keyid:D7:CA:53:AE:84:42:23:67:57:A7:80:66:E4:E2:17:33:F7:58:40:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/18pTroRCI2dXp4Bm5OIXM_dYQHo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/51/6b169d-7f1f-4214-a25b-8c498077578f/1/18pTroRCI2dXp4Bm5OIXM_dYQHo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4c:ca:4a:66:1a:aa:47:3a:27:18:5e:c2:72:07:5b:bc:b5:51:
da:df:41:b6:78:b4:23:b1:4c:ea:cd:a5:bf:0f:e4:ea:c7:1a:
4e:b8:b9:c0:2b:a0:3e:22:b7:de:3d:16:73:b7:fe:f9:f4:f6:
3d:fc:76:d6:4d:cd:ea:70:7a:eb:df:31:7b:87:39:0b:dd:f7:
39:47:81:aa:ef:b6:af:06:da:35:55:c1:be:de:54:68:50:9a:
5b:30:fe:8c:7f:d3:81:4f:05:e9:0c:f6:4e:29:ef:12:dd:9b:
d0:8f:e3:8d:af:56:12:d6:cc:4f:0e:55:9f:09:eb:2a:57:05:
2e:65:3e:85:89:54:f6:fc:9a:dc:2b:f6:d4:49:56:a2:36:dc:
d4:79:fd:8f:dd:5f:c3:29:6c:fb:bc:da:2c:f8:19:76:0b:53:
65:00:5b:3a:1f:1f:b5:73:00:34:6c:1e:16:50:16:ab:8f:35:
6f:e5:3a:ba:4d:6f:42:90:19:fb:88:bb:4a:3a:61:cb:1c:90:
6a:b9:13:9c:fd:ed:9a:5c:07:ee:e6:99:fc:66:d2:0d:e0:8b:
70:f3:f6:31:1e:ae:e5:c4:40:d9:a1:41:a2:7d:b8:e2:6c:aa:
4f:57:fe:d5:90:04:28:00:08:c2:83:61:ea:74:65:b0:a0:1e:
ce:81:db:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oOKYWXIkQzJa+lyAeihrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3Y2E1M2FlODQ0MjIzNjc1N2E3ODA2NmU0ZTIxNzMzZjc1
ODQwN2EwHhcNMjUwNjI4MTMwMTI2WhcNMjUwNjI5MTMwMTI2WjAzMTEwLwYDVQQD
EyhmZjRlN2UwMjJlODA3OWQ5M2EwMzA4Yjg1MGQxYjYxMjE5ZTc2MmJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqYVs3bOlsqCt+J+3ZmwnnEt3r/jH
xr8LDcarfQ7gi9h0Sv2RVHPC1Ex7z36hUnU9ivS1e1eEQkL8TaChUo0N3OVoXayB
YpTSEUoq1wUBASvzNbPHmOUdN94aQcA8Kl4XYZxesd0dZC2Oyb6IhAjYqzHc/M0z
vOzLmIPvz2so0xtxg/XiGS9XA9Mpx0jNxr5XAs5elakB9kNPqj0n4VEPeFN17mqX
xojiLxeurz0trbrY+izirgcldAqyEVt9SophmXjlzqc1QafJnO8uzEqN9H3W4xv0
1RPD9v/OKVXTI54xGSUYyabVMOFKiPkjAopkrUkpg8ECssFTgu4zbmSn4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP9OfgIugHnZOgMIuFDRthIZ52K7MB8GA1UdIwQY
MBaAFNfKU66EQiNnV6eAZuTiFzP3WEB6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81MS82YjE2OWQtN2YxZi00MjE0LWEyNWIt
OGM0OTgwNzc1NzhmLzEvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81MS82YjE2OWQtN2YxZi00MjE0LWEyNWItOGM0OTgwNzc1Nzhm
LzEvMThwVHJvUkNJMmRYcDRCbTVPSVhNX2RZUUhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATMpKZhqq
RzonGF7CcgdbvLVR2t9Btni0I7FM6s2lvw/k6scaTri5wCugPiK33j0Wc7f++fT2
Pfx21k3N6nB6698xe4c5C933OUeBqu+2rwbaNVXBvt5UaFCaWzD+jH/TgU8F6Qz2
TinvEt2b0I/jja9WEtbMTw5VnwnrKlcFLmU+hYlU9vya3Cv21ElWojbc1Hn9j91f
wyls+7zaLPgZdgtTZQBbOh8ftXMANGweFlAWq481b+U6uk1vQpAZ+4i7SjphyxyQ
arkTnP3tmlwH7uaZ/GbSDeCLcPP2MR6u5cRA2aFBon244myqT1f+1ZAEKAAIwoNh
6nRlsKAezoHb9A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:37:14 2025 by rpki-client