Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
File: d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft (raw, json)
Hash identifier: nWK5jDkYdyO/rHVGaigQqkDhwVZt0Y0m4VoTgEgTHUI=
Subject key identifier: 77:5E:82:1B:6C:65:65:E1:DD:D2:19:75:AA:CC:43:62:74:02:B0:7E
Authority key identifier: 77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
Certificate issuer: /CN=777c49d3f627335190e3c2ec3654e154cfd45398
Certificate serial: 0197BA7E7FDBD3073D1DAB813F68676296D4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
Manifest number: 0CA0
Signing time: Sun 29 Jun 2025 07:02:21 +0000
Manifest this update: Sun 29 Jun 2025 07:02:21 +0000
Manifest next update: Mon 30 Jun 2025 07:02:21 +0000
Files and hashes: 1: JS20272zzOd7lsvAhAy2fEVjeyI.roa (hash: cOcrvgmIxE66W+f+FGaVHK7zq1S4gdeOGb2xk9gX0lg=)
2: d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl (hash: eFk4LNgPaRzrfcO2DFsz6P+efNSbNMIhB8dYUAWlIiA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:7f:db:d3:07:3d:1d:ab:81:3f:68:67:62:96:d4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=777c49d3f627335190e3c2ec3654e154cfd45398
Validity
Not Before: Jun 29 07:02:21 2025 GMT
Not After : Jun 30 07:02:21 2025 GMT
Subject: CN=775e821b6c6565e1ddd21975aacc43627402b07e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:b8:70:ab:8f:31:49:eb:7f:7b:94:8d:b4:b2:
c1:f6:41:d3:99:12:20:1b:00:8b:88:b6:01:41:34:
03:97:96:9b:9f:48:b1:ca:8f:06:80:2a:41:9b:6a:
3e:4d:42:27:38:d9:b7:75:89:37:83:a3:32:f7:88:
ef:c5:e1:3c:e1:e4:30:4a:8c:59:f9:e1:59:90:d2:
5c:f8:84:48:2b:7c:bf:d9:8a:8a:dc:76:39:f5:c7:
a5:6a:05:8a:10:fd:06:0b:2e:cd:c3:11:01:db:cd:
1d:df:b3:a6:e9:8f:92:11:2d:70:e5:2b:ae:1b:85:
69:bb:26:dc:d9:d1:ea:cc:99:d7:67:53:92:f5:b4:
28:c6:3d:2d:54:06:0d:e1:fc:28:16:7a:a2:b5:19:
0e:6a:83:60:6e:33:ad:61:36:96:ed:89:61:40:33:
fe:ec:c2:08:45:b6:0d:22:42:9b:4a:47:c5:fd:c4:
c4:5f:e9:5c:8f:b7:f6:4c:f4:88:24:c8:ee:35:01:
1f:60:31:22:59:3c:88:b1:07:2d:5d:ae:9c:5d:80:
68:9d:c4:b9:98:41:f6:27:60:47:ce:ad:ac:67:7a:
14:b0:a2:bc:31:3d:1f:29:79:da:fe:76:70:01:23:
6e:24:c2:b2:2a:e9:c4:41:2e:1f:89:c2:0f:d7:97:
37:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:5E:82:1B:6C:65:65:E1:DD:D2:19:75:AA:CC:43:62:74:02:B0:7E
X509v3 Authority Key Identifier:
keyid:77:7C:49:D3:F6:27:33:51:90:E3:C2:EC:36:54:E1:54:CF:D4:53:98
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3xJ0_YnM1GQ48LsNlThVM_UU5g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/5e7a31-ee63-4120-952c-cd2f8c94f974/1/d3xJ0_YnM1GQ48LsNlThVM_UU5g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
37:6c:d9:fa:ac:20:ce:15:b5:28:c0:01:56:2a:8d:4d:67:9c:
6c:0f:90:99:ce:41:62:e7:42:d7:a0:e3:e0:59:34:b0:64:cd:
3e:25:5b:05:f0:f8:d9:f8:02:e1:19:b5:ea:71:82:bf:9b:03:
15:71:2c:f7:3e:3f:68:82:f5:14:e8:b1:8d:f2:47:69:2b:22:
21:c8:7a:b4:cd:3b:c9:d7:0d:34:8d:a2:b0:f7:1f:70:13:e2:
53:5a:0a:51:4f:0d:44:61:27:b1:aa:33:16:31:68:56:d3:3b:
d7:c9:72:8b:f9:ae:e6:bd:62:8a:35:98:fb:52:e5:f5:4b:61:
7e:9f:6e:a4:68:63:e6:81:f6:40:99:f5:4b:f4:e0:29:d3:99:
0f:59:90:c1:90:81:90:52:29:af:f8:f1:95:0e:cd:14:6f:30:
dd:84:17:e8:7b:1b:a4:d3:2d:e4:ad:d2:f5:ea:aa:b3:6b:bc:
6b:e0:b0:b2:0b:fd:1b:d7:8c:d3:3e:1d:11:06:fb:55:b8:d7:
53:42:ec:1f:e5:74:d2:b2:41:b2:df:54:4d:09:93:6f:8f:bb:
3f:a7:9a:e9:c1:99:7c:a6:85:41:6b:8e:87:b3:79:a4:41:db:
c6:01:dd:44:0e:8d:93:7b:e1:59:76:fd:ef:41:4e:36:85:c2:
d9:a4:c2:c9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fn/b0wc9HauBP2hnYpbUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3N2M0OWQzZjYyNzMzNTE5MGUzYzJlYzM2NTRlMTU0Y2Zk
NDUzOTgwHhcNMjUwNjI5MDcwMjIxWhcNMjUwNjMwMDcwMjIxWjAzMTEwLwYDVQQD
Eyg3NzVlODIxYjZjNjU2NWUxZGRkMjE5NzVhYWNjNDM2Mjc0MDJiMDdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1rhwq48xSet/e5SNtLLB9kHTmRIg
GwCLiLYBQTQDl5abn0ixyo8GgCpBm2o+TUInONm3dYk3g6My94jvxeE84eQwSoxZ
+eFZkNJc+IRIK3y/2YqK3HY59celagWKEP0GCy7NwxEB280d37Om6Y+SES1w5Suu
G4Vpuybc2dHqzJnXZ1OS9bQoxj0tVAYN4fwoFnqitRkOaoNgbjOtYTaW7YlhQDP+
7MIIRbYNIkKbSkfF/cTEX+lcj7f2TPSIJMjuNQEfYDEiWTyIsQctXa6cXYBoncS5
mEH2J2BHzq2sZ3oUsKK8MT0fKXna/nZwASNuJMKyKunEQS4ficIP15c35QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHdeghtsZWXh3dIZdarMQ2J0ArB+MB8GA1UdIwQY
MBaAFHd8SdP2JzNRkOPC7DZU4VTP1FOYMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny81ZTdhMzEtZWU2My00MTIwLTk1MmMt
Y2QyZjhjOTRmOTc0LzEvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny81ZTdhMzEtZWU2My00MTIwLTk1MmMtY2QyZjhjOTRmOTc0
LzEvZDN4SjBfWW5NMUdRNDhMc05sVGhWTV9VVTVnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAN2zZ+qwg
zhW1KMABViqNTWecbA+Qmc5BYudC16Dj4Fk0sGTNPiVbBfD42fgC4Rm16nGCv5sD
FXEs9z4/aIL1FOixjfJHaSsiIch6tM07ydcNNI2isPcfcBPiU1oKUU8NRGEnsaoz
FjFoVtM718lyi/mu5r1iijWY+1Ll9Uthfp9upGhj5oH2QJn1S/TgKdOZD1mQwZCB
kFIpr/jxlQ7NFG8w3YQX6HsbpNMt5K3S9eqqs2u8a+Cwsgv9G9eM0z4dEQb7VbjX
U0LsH+V00rJBst9UTQmTb4+7P6ea6cGZfKaFQWuOh7N5pEHbxgHdRA6Nk3vhWXb9
70FONoXC2aTCyQ==
-----END CERTIFICATE-----
Generated at Sun Jun 29 14:41:10 2025 by rpki-client