Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
File: ILDaIC0sNKRzptdq8JPo3gMRuVs.mft (raw, json)
Hash identifier: 46N8VwYiSHTGoQry3Ngf2RNTRXUHDliFxpbV74R+kT8=
Subject key identifier: 3C:9B:AB:09:48:D9:9F:1F:6D:E9:2B:B8:04:8B:FC:2A:E3:52:A7:BE
Authority key identifier: 20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B
Certificate issuer: /CN=20b0da202d2c34a473a6d76af093e8de0311b95b
Certificate serial: 0197BAEB407E7A453E62222F8E1FD0DD05FC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
Manifest number: 15B6
Signing time: Sun 29 Jun 2025 09:01:08 +0000
Manifest this update: Sun 29 Jun 2025 09:01:08 +0000
Manifest next update: Mon 30 Jun 2025 09:01:08 +0000
Files and hashes: 1: ILDaIC0sNKRzptdq8JPo3gMRuVs.crl (hash: s9IRoGQ/121289775L68A1UTImt+MeeetKE8D/DQrdU=)
2: cznyJUVo486opCfwPRwYW5a-bCI.roa (hash: yeo9giLM4O/29X7azlP3H7yqqKlzXfDMEa/1/AZBMhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:eb:40:7e:7a:45:3e:62:22:2f:8e:1f:d0:dd:05:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=20b0da202d2c34a473a6d76af093e8de0311b95b
Validity
Not Before: Jun 29 09:01:08 2025 GMT
Not After : Jun 30 09:01:08 2025 GMT
Subject: CN=3c9bab0948d99f1f6de92bb8048bfc2ae352a7be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ca:c2:1f:d7:c0:c0:07:fc:d1:77:92:cb:16:91:
7a:03:df:5c:63:5e:47:b7:72:bc:20:7c:57:dd:7f:
c4:ce:9a:43:55:fe:11:8b:b5:90:a1:03:24:0b:d0:
bd:a4:dc:1b:5c:2c:e7:95:32:fa:42:49:3e:fa:72:
46:02:0e:47:76:49:1a:26:54:b2:b6:15:b1:6e:a7:
22:fc:bb:a6:54:c5:ff:7b:6a:78:00:78:33:20:b4:
89:1b:a3:fb:04:8c:f3:4d:1b:fa:f2:20:e1:33:9b:
12:b4:c9:50:55:5f:ba:ae:3a:d1:07:cc:a1:0b:7c:
8e:1c:51:9f:39:f9:8d:4f:bc:42:bd:9d:9d:e2:e5:
26:98:bf:67:b9:62:b1:da:5a:63:e5:26:bc:9c:f7:
54:7b:3b:e5:72:e9:b4:dd:11:b0:7e:9b:17:aa:37:
bc:3e:b6:c5:4d:18:aa:b3:f6:54:9f:da:d3:f7:49:
20:f4:ca:e2:36:46:6a:b9:c3:2a:d0:c7:07:06:f5:
36:1c:ed:f7:ae:bf:e5:68:b1:90:97:71:e1:c8:c4:
f4:3a:94:58:c7:c9:fb:d3:51:e4:d9:cd:ed:82:bd:
52:8d:15:99:23:17:db:4e:c1:f5:62:45:f4:0d:67:
83:31:04:5a:8f:4f:50:8a:17:0f:24:8a:b4:a2:52:
cd:a1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3C:9B:AB:09:48:D9:9F:1F:6D:E9:2B:B8:04:8B:FC:2A:E3:52:A7:BE
X509v3 Authority Key Identifier:
keyid:20:B0:DA:20:2D:2C:34:A4:73:A6:D7:6A:F0:93:E8:DE:03:11:B9:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/ILDaIC0sNKRzptdq8JPo3gMRuVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/dea978-5dae-4c8d-9b2c-d8eff5d6a63b/1/ILDaIC0sNKRzptdq8JPo3gMRuVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
90:a4:d7:99:87:f8:f7:1d:7c:6f:0d:ba:54:d2:40:34:2d:6b:
19:82:91:47:fc:8a:c3:3f:ec:1b:5c:24:9a:c9:b6:51:db:ca:
a7:25:94:0d:be:4c:ab:2e:b9:3f:bf:04:c4:b3:37:75:79:f1:
24:9f:1d:25:9a:8b:44:b1:f9:d1:ef:6b:47:7a:90:62:87:c9:
8e:4c:b1:f2:a8:33:97:0b:1a:4a:55:96:07:e9:16:a5:1a:28:
c2:06:d8:4f:19:da:73:84:8e:9d:2d:ad:31:43:45:3c:4c:9e:
0a:5b:8f:b6:37:aa:d0:8b:08:55:f9:77:38:ca:62:ca:fc:1e:
ec:9c:aa:22:53:d2:8f:a8:cb:52:65:fe:10:9f:d8:16:ae:24:
17:e1:b1:b6:04:51:df:44:d7:de:de:e7:33:ad:22:d5:c1:94:
79:3c:8f:e3:a3:c5:cd:50:38:f6:f5:84:5b:43:1d:5f:33:c1:
77:d0:10:10:b0:66:6d:e6:19:40:e9:f4:d7:5e:61:64:5b:37:
83:33:6b:38:02:44:38:90:f2:16:91:8a:07:23:55:6b:87:9e:
77:f0:2e:bb:78:77:c7:f0:1d:d3:9c:55:55:03:74:de:e2:ed:
22:fb:d7:2c:6d:8e:e3:6d:4b:53:a0:13:4b:f1:59:2c:5a:06:
9d:a1:74:39
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe660B+ekU+YiIvjh/Q3QX8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDIwYjBkYTIwMmQyYzM0YTQ3M2E2ZDc2YWYwOTNlOGRlMDMx
MWI5NWIwHhcNMjUwNjI5MDkwMTA4WhcNMjUwNjMwMDkwMTA4WjAzMTEwLwYDVQQD
EygzYzliYWIwOTQ4ZDk5ZjFmNmRlOTJiYjgwNDhiZmMyYWUzNTJhN2JlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAysIf18DAB/zRd5LLFpF6A99cY15H
t3K8IHxX3X/EzppDVf4Ri7WQoQMkC9C9pNwbXCznlTL6Qkk++nJGAg5HdkkaJlSy
thWxbqci/LumVMX/e2p4AHgzILSJG6P7BIzzTRv68iDhM5sStMlQVV+6rjrRB8yh
C3yOHFGfOfmNT7xCvZ2d4uUmmL9nuWKx2lpj5Sa8nPdUezvlcum03RGwfpsXqje8
PrbFTRiqs/ZUn9rT90kg9MriNkZqucMq0McHBvU2HO33rr/laLGQl3HhyMT0OpRY
x8n701Hk2c3tgr1SjRWZIxfbTsH1YkX0DWeDMQRaj09QihcPJIq0olLNoQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDybqwlI2Z8fbekruASL/CrjUqe+MB8GA1UdIwQY
MBaAFCCw2iAtLDSkc6bXavCT6N4DEblbMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSUxEYUlDMHNOS1J6cHRkcThKUG8zZ01SdVZzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9kZWE5NzgtNWRhZS00YzhkLTliMmMt
ZDhlZmY1ZDZhNjNiLzEvSUxEYUlDMHNOS1J6cHRkcThKUG8zZ01SdVZzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9kZWE5NzgtNWRhZS00YzhkLTliMmMtZDhlZmY1ZDZhNjNi
LzEvSUxEYUlDMHNOS1J6cHRkcThKUG8zZ01SdVZzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkKTXmYf4
9x18bw26VNJANC1rGYKRR/yKwz/sG1wkmsm2UdvKpyWUDb5Mqy65P78ExLM3dXnx
JJ8dJZqLRLH50e9rR3qQYofJjkyx8qgzlwsaSlWWB+kWpRoowgbYTxnac4SOnS2t
MUNFPEyeCluPtjeq0IsIVfl3OMpiyvwe7JyqIlPSj6jLUmX+EJ/YFq4kF+GxtgRR
30TX3t7nM60i1cGUeTyP46PFzVA49vWEW0MdXzPBd9AQELBmbeYZQOn0115hZFs3
gzNrOAJEOJDyFpGKByNVa4eed/Auu3h3x/Ad05xVVQN03uLtIvvXLG2O421LU6AT
S/FZLFoGnaF0OQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:08:52 2025 by rpki-client