Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
File: dX-f3qNQp2a7mMYE07nCeRZzIgk.mft (raw, json)
Hash identifier: VhD84Z5PU7b6p0bMnlVVw5reUi2G4mR5kasERWwWyeI=
Subject key identifier: 02:92:01:A8:2E:17:A3:DF:B5:01:3B:DE:E0:C2:C1:DC:C1:79:4F:CF
Authority key identifier: 75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
Certificate issuer: /CN=757f9fdea350a766bb98c604d3b9c27916732209
Certificate serial: 0197B6A1DF45DCCDE0957958C014A9053750
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
Manifest number: 15B8
Signing time: Sat 28 Jun 2025 13:02:30 +0000
Manifest this update: Sat 28 Jun 2025 13:02:30 +0000
Manifest next update: Sun 29 Jun 2025 13:02:30 +0000
Files and hashes: 1: bXLXdbvFGFR0FszgHn84rVBOGio.roa (hash: nmNBpS+PbDPDefHKYKNVtxbPVQnu+QoIycRrjJFcsBw=)
2: dX-f3qNQp2a7mMYE07nCeRZzIgk.crl (hash: R30hagQByhU4K3oSIux2bVTGA81IUEm+tKtIYnAiYcQ=)
3: hKQ8LLa9--B-K86xayaw0kpiYWg.roa (hash: d0JIaOsBs7E/BdBAQ915qmU5N9B7n1lC3k/0IYxFCFU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:df:45:dc:cd:e0:95:79:58:c0:14:a9:05:37:50
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=757f9fdea350a766bb98c604d3b9c27916732209
Validity
Not Before: Jun 28 13:02:30 2025 GMT
Not After : Jun 29 13:02:30 2025 GMT
Subject: CN=029201a82e17a3dfb5013bdee0c2c1dcc1794fcf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:62:ba:ef:13:34:89:5e:6d:71:4f:8a:25:0b:
c1:1d:53:57:60:54:cb:18:1f:44:7d:d9:15:e9:31:
5f:33:ab:f2:1b:3b:2a:23:8c:61:60:93:e8:2e:be:
dd:7f:40:a5:86:2e:8e:08:dd:84:4f:e0:9c:24:01:
eb:19:df:1b:34:89:3f:ea:79:21:b8:c8:77:6c:18:
69:3a:73:f5:25:b6:6a:b6:2d:77:7b:65:4f:f6:e9:
d2:14:fd:e6:63:36:ac:9a:86:c7:56:bc:ac:b3:96:
57:78:b8:98:b0:04:cf:c3:4d:a1:cb:1e:e7:74:2d:
39:b4:81:70:e6:f8:c9:79:0a:dc:da:f1:bb:a0:34:
f2:c3:16:3e:fb:38:51:22:cb:1c:6e:18:c3:06:67:
e9:2c:30:32:8c:28:b4:1e:db:a1:8d:e9:a5:10:85:
d1:b5:6a:2b:0e:0c:2b:04:4b:b7:a3:1e:9f:53:1c:
11:6a:5a:20:7b:7f:2f:68:41:e3:f4:11:59:7d:57:
47:fc:9f:41:1b:40:1b:b1:d1:b6:36:eb:5f:5e:b7:
a8:5a:e9:21:a7:21:59:43:ce:25:53:fa:03:89:bc:
d1:81:d6:82:d0:f7:78:70:f6:04:c3:b7:3e:8d:5c:
6c:78:b9:93:05:6c:cc:06:3f:fb:07:89:bf:4d:e0:
e4:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:92:01:A8:2E:17:A3:DF:B5:01:3B:DE:E0:C2:C1:DC:C1:79:4F:CF
X509v3 Authority Key Identifier:
keyid:75:7F:9F:DE:A3:50:A7:66:BB:98:C6:04:D3:B9:C2:79:16:73:22:09
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dX-f3qNQp2a7mMYE07nCeRZzIgk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5f/5a3b6b-9a61-4557-a3d6-c25aba6b55af/1/dX-f3qNQp2a7mMYE07nCeRZzIgk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
11:55:af:78:ed:c1:ca:c5:90:53:e3:01:c9:3d:25:58:0c:9e:
a1:8c:c6:bc:93:33:44:02:b8:ec:84:9c:96:7a:92:bc:aa:46:
56:af:5b:ad:89:ed:55:42:44:fd:6f:6f:f5:5c:94:94:27:fa:
3b:ab:18:cd:ce:d3:4a:29:23:ff:5a:7b:79:47:86:8b:ad:43:
49:61:00:69:d4:0c:51:da:ab:ba:24:4e:b0:50:e0:45:ef:3d:
4a:e5:60:b6:e0:c3:d7:45:18:80:39:3a:d2:8f:f5:88:39:c5:
49:07:7d:f3:18:14:8a:ad:9e:8a:1f:81:ec:6f:56:be:fe:3b:
f5:f2:ed:4a:3d:cf:c8:07:50:7e:db:a4:00:3c:5f:0b:d7:2d:
5a:c1:cb:bf:ac:3a:26:a9:b8:04:f1:60:62:86:dd:92:08:f2:
a3:f6:5b:2f:a7:f8:e9:e5:bf:31:4f:0d:39:06:1a:6c:8b:0a:
cc:1b:6a:e8:77:14:7d:c9:b9:50:f5:91:0d:c9:86:c3:64:db:
be:48:b5:3f:76:28:e5:92:f2:6e:0d:7c:a4:2c:4d:17:74:41:
43:d1:42:44:0e:55:b9:a9:09:10:4e:23:b0:24:82:1d:0f:85:
c8:d0:58:eb:ef:f5:3e:bf:be:39:5e:85:4b:5b:29:eb:40:0c:
e7:81:3c:1b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2od9F3M3glXlYwBSpBTdQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1N2Y5ZmRlYTM1MGE3NjZiYjk4YzYwNGQzYjljMjc5MTY3
MzIyMDkwHhcNMjUwNjI4MTMwMjMwWhcNMjUwNjI5MTMwMjMwWjAzMTEwLwYDVQQD
EygwMjkyMDFhODJlMTdhM2RmYjUwMTNiZGVlMGMyYzFkY2MxNzk0ZmNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqWK67xM0iV5tcU+KJQvBHVNXYFTL
GB9EfdkV6TFfM6vyGzsqI4xhYJPoLr7df0Clhi6OCN2ET+CcJAHrGd8bNIk/6nkh
uMh3bBhpOnP1JbZqti13e2VP9unSFP3mYzasmobHVryss5ZXeLiYsATPw02hyx7n
dC05tIFw5vjJeQrc2vG7oDTywxY++zhRIsscbhjDBmfpLDAyjCi0HtuhjemlEIXR
tWorDgwrBEu3ox6fUxwRaloge38vaEHj9BFZfVdH/J9BG0AbsdG2NutfXreoWukh
pyFZQ84lU/oDibzRgdaC0Pd4cPYEw7c+jVxseLmTBWzMBj/7B4m/TeDkVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAKSAaguF6PftQE73uDCwdzBeU/PMB8GA1UdIwQY
MBaAFHV/n96jUKdmu5jGBNO5wnkWcyIJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Zi81YTNiNmItOWE2MS00NTU3LWEzZDYt
YzI1YWJhNmI1NWFmLzEvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Zi81YTNiNmItOWE2MS00NTU3LWEzZDYtYzI1YWJhNmI1NWFm
LzEvZFgtZjNxTlFwMmE3bU1ZRTA3bkNlUlp6SWdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEVWveO3B
ysWQU+MByT0lWAyeoYzGvJMzRAK47ISclnqSvKpGVq9brYntVUJE/W9v9VyUlCf6
O6sYzc7TSikj/1p7eUeGi61DSWEAadQMUdqruiROsFDgRe89SuVgtuDD10UYgDk6
0o/1iDnFSQd98xgUiq2eih+B7G9Wvv479fLtSj3PyAdQftukADxfC9ctWsHLv6w6
Jqm4BPFgYobdkgjyo/ZbL6f46eW/MU8NOQYabIsKzBtq6HcUfcm5UPWRDcmGw2Tb
vki1P3Yo5ZLybg18pCxNF3RBQ9FCRA5VuakJEE4jsCSCHQ+FyNBY6+/1Pr++OV6F
S1sp60AM54E8Gw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:10:01 2025 by rpki-client