Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
File: cEq5aIQnBz_34XneWvAC4J8jYBM.mft (raw, json)
Hash identifier: wheTLP6L2ibCn+xeQR23uaNS9nCaeUD+h5QZH89Qxkg=
Subject key identifier: F2:D7:7A:68:D4:F9:A5:A6:77:63:B2:67:7B:EB:DF:36:DA:1A:4F:18
Authority key identifier: 70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
Certificate issuer: /CN=704ab9688427073ff7e179de5af002e09f236013
Certificate serial: 0197B820CA1C111ABFD523D025C5762FAF2C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
Manifest number: 15BC
Signing time: Sat 28 Jun 2025 20:00:45 +0000
Manifest this update: Sat 28 Jun 2025 20:00:45 +0000
Manifest next update: Sun 29 Jun 2025 20:00:45 +0000
Files and hashes: 1: 6BOfeQqy9IUZ36DNxodiGS7wBoQ.roa (hash: 5gf++9dIYBR0GFOuInOOJProaUQbrotLcp46aQPmrD8=)
2: cEq5aIQnBz_34XneWvAC4J8jYBM.crl (hash: cRVUbvyfmZjj18jOSgsb5cE4KjZfHsphhtmmIQS0SOU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:ca:1c:11:1a:bf:d5:23:d0:25:c5:76:2f:af:2c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=704ab9688427073ff7e179de5af002e09f236013
Validity
Not Before: Jun 28 20:00:45 2025 GMT
Not After : Jun 29 20:00:45 2025 GMT
Subject: CN=f2d77a68d4f9a5a67763b2677bebdf36da1a4f18
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:92:a0:b9:d9:5e:4e:b1:34:44:d0:52:0b:b7:8f:
2a:74:b9:99:50:6c:34:46:08:67:f6:2d:8a:72:73:
cb:ac:e4:86:0f:91:cc:6a:c9:cd:53:6e:6b:c2:de:
8f:a8:ea:6f:07:95:f9:f8:96:9f:9b:15:f9:96:16:
41:c0:8c:c2:33:12:21:07:db:77:c8:45:a3:30:26:
7e:f9:17:a4:90:aa:1a:57:94:43:78:6f:5d:1e:a1:
64:b1:39:9d:e5:7f:14:64:ed:03:b3:65:c0:12:d7:
e1:90:59:ac:50:54:94:aa:a4:75:cb:60:d1:4e:65:
1e:ef:50:7f:04:4f:40:73:a2:30:26:66:e7:63:04:
a6:21:1f:48:dd:45:e1:07:55:11:55:d3:56:21:d1:
b1:36:c4:c1:28:59:37:d9:98:44:b5:22:66:54:5a:
d1:3c:7e:c4:32:ea:b5:8f:b7:fd:0d:72:23:37:a4:
e1:fc:ef:35:1e:5b:66:ad:b0:dc:a7:71:fb:97:bc:
7b:df:b4:99:51:32:f9:f2:b7:b4:43:51:8f:c1:76:
39:e3:bd:72:38:37:e2:7f:a1:c7:15:5a:8e:57:55:
64:fb:ef:74:42:39:2d:c2:8f:42:3a:e6:1f:d8:55:
48:98:c9:c1:1f:0c:ec:cf:2a:63:bd:b7:dd:6f:fe:
4e:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:D7:7A:68:D4:F9:A5:A6:77:63:B2:67:7B:EB:DF:36:DA:1A:4F:18
X509v3 Authority Key Identifier:
keyid:70:4A:B9:68:84:27:07:3F:F7:E1:79:DE:5A:F0:02:E0:9F:23:60:13
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cEq5aIQnBz_34XneWvAC4J8jYBM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/59/c244b3-8fc1-4685-8fb2-46a8b191a374/1/cEq5aIQnBz_34XneWvAC4J8jYBM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
81:62:90:f0:a1:c4:e4:d9:a7:2b:6b:25:63:f4:7b:e6:d7:58:
4f:71:e1:4b:eb:51:45:2d:cf:88:b8:a6:21:c3:0e:40:eb:b3:
f1:e9:a8:d3:c4:44:eb:d6:27:d1:da:d5:61:0e:cb:09:73:77:
47:2f:be:c0:3e:27:7d:17:29:a5:4f:91:9e:d6:d6:0e:dd:8a:
d2:87:6a:b3:ab:35:95:29:78:78:c0:09:93:68:21:d9:a8:05:
bd:8c:d2:8a:5d:07:24:1c:28:e6:8f:bd:23:45:05:50:39:e2:
50:23:a5:54:8a:6a:5d:ee:e5:5e:4b:ef:f7:8d:ab:fe:d4:48:
55:67:cc:5a:5e:db:cd:29:9c:4f:99:a9:ad:37:6f:5c:f6:9e:
3f:21:89:16:b4:44:2c:a6:c8:39:db:e3:c6:c8:32:1e:2c:04:
68:24:40:7a:53:c6:55:b2:ff:e6:ca:ec:84:d7:b8:76:8b:d3:
1c:65:9d:cb:46:14:be:fd:3c:fb:cc:63:92:ab:4d:d7:98:97:
67:89:10:19:c5:78:88:52:dd:c1:35:ce:40:5a:2a:a8:b3:7d:
f7:25:d5:d9:74:0e:07:7c:37:fd:5a:b4:fb:1e:4b:3d:5c:dc:
0a:d6:24:01:f1:86:28:3a:4f:68:11:9e:02:e2:1e:f9:08:74:
47:b1:05:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IMocERq/1SPQJcV2L68sMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwNGFiOTY4ODQyNzA3M2ZmN2UxNzlkZTVhZjAwMmUwOWYy
MzYwMTMwHhcNMjUwNjI4MjAwMDQ1WhcNMjUwNjI5MjAwMDQ1WjAzMTEwLwYDVQQD
EyhmMmQ3N2E2OGQ0ZjlhNWE2Nzc2M2IyNjc3YmViZGYzNmRhMWE0ZjE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAkqC52V5OsTRE0FILt48qdLmZUGw0
Rghn9i2KcnPLrOSGD5HMasnNU25rwt6PqOpvB5X5+JafmxX5lhZBwIzCMxIhB9t3
yEWjMCZ++RekkKoaV5RDeG9dHqFksTmd5X8UZO0Ds2XAEtfhkFmsUFSUqqR1y2DR
TmUe71B/BE9Ac6IwJmbnYwSmIR9I3UXhB1URVdNWIdGxNsTBKFk32ZhEtSJmVFrR
PH7EMuq1j7f9DXIjN6Th/O81HltmrbDcp3H7l7x737SZUTL58re0Q1GPwXY5471y
ODfif6HHFVqOV1Vk++90Qjktwo9COuYf2FVImMnBHwzszypjvbfdb/5OyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPLXemjU+aWmd2OyZ3vr3zbaGk8YMB8GA1UdIwQY
MBaAFHBKuWiEJwc/9+F53lrwAuCfI2ATMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OS9jMjQ0YjMtOGZjMS00Njg1LThmYjIt
NDZhOGIxOTFhMzc0LzEvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OS9jMjQ0YjMtOGZjMS00Njg1LThmYjItNDZhOGIxOTFhMzc0
LzEvY0VxNWFJUW5Cel8zNFhuZVd2QUM0SjhqWUJNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAgWKQ8KHE
5NmnK2slY/R75tdYT3HhS+tRRS3PiLimIcMOQOuz8emo08RE69Yn0drVYQ7LCXN3
Ry++wD4nfRcppU+RntbWDt2K0odqs6s1lSl4eMAJk2gh2agFvYzSil0HJBwo5o+9
I0UFUDniUCOlVIpqXe7lXkvv942r/tRIVWfMWl7bzSmcT5mprTdvXPaePyGJFrRE
LKbIOdvjxsgyHiwEaCRAelPGVbL/5srshNe4dovTHGWdy0YUvv08+8xjkqtN15iX
Z4kQGcV4iFLdwTXOQFoqqLN99yXV2XQOB3w3/Vq0+x5LPVzcCtYkAfGGKDpPaBGe
AuIe+Qh0R7EFQw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:00:20 2025 by rpki-client