Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
File: f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft (raw, json)
Hash identifier: DlZ/VWUSQ5zNMW1DDAzMlcYAdSw39uJ9ai4g5PXjN1U=
Subject key identifier: 42:E8:AB:F3:20:99:CD:32:E4:F0:D4:21:EC:C8:CE:7E:DB:4F:17:15
Authority key identifier: 7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
Certificate issuer: /CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Certificate serial: 0197B7B31AEB42213CFA4A46806BAAD90BA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 18:00:57 +0000
Manifest this update: Sat 28 Jun 2025 18:00:57 +0000
Manifest next update: Sun 29 Jun 2025 18:00:57 +0000
Files and hashes: 1: AfxHVZhw7S6ij1s6ZJ4SMYoOQJc.roa (hash: LJW5Y4vZe3G/aI05TP+NUCTrdwpagASD2p69Aj70Dcw=)
2: f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl (hash: XLZpMP4+3p0JE0tXb+BpvwLdE6W4+3jNpw4cxtPXuJc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:1a:eb:42:21:3c:fa:4a:46:80:6b:aa:d9:0b:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7f5689de4a7ce768bf3ab5d9f8546e856ccb1936
Validity
Not Before: Jun 28 18:00:57 2025 GMT
Not After : Jun 29 18:00:57 2025 GMT
Subject: CN=42e8abf32099cd32e4f0d421ecc8ce7edb4f1715
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:04:2c:7d:42:d0:3b:c9:2c:7a:69:50:a8:9d:
d5:ba:a6:4f:4c:11:75:0e:73:d8:d3:4a:23:d8:01:
c2:c7:75:d6:d3:ba:53:07:dd:41:f7:11:8d:fb:1b:
68:ae:c1:50:cd:df:99:43:76:36:3c:23:cd:b0:01:
3a:0f:68:76:ca:71:7c:a1:0a:42:89:44:a5:55:f1:
6d:d6:51:2b:d1:5a:dd:19:d1:f8:25:a6:a2:11:88:
6b:6a:bd:cc:64:8d:6b:22:24:4e:ea:30:6e:60:c6:
fa:5e:5b:9f:49:4a:57:c4:ff:37:1d:3a:23:9b:7e:
75:fd:a5:44:ae:65:9e:14:56:31:a5:ab:a3:b9:dc:
98:2e:ad:c4:da:80:1a:86:b7:93:9b:77:92:d5:40:
09:61:8d:b5:70:9e:44:2f:c3:33:63:45:fd:27:e1:
83:e8:05:61:33:5c:a9:b6:27:be:5e:9a:1d:63:c6:
87:27:d1:b4:3f:45:d4:53:03:40:ad:d5:12:43:3b:
21:4b:ea:62:2f:0e:3b:a8:50:ff:51:89:52:fc:06:
79:e1:66:fb:50:16:79:8c:10:37:71:bc:e8:6d:03:
56:28:77:29:b9:40:82:1d:ce:6a:39:4b:1a:cd:c5:
d2:19:82:1e:4a:29:2e:db:0f:18:f4:fd:2f:8c:3b:
c7:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:E8:AB:F3:20:99:CD:32:E4:F0:D4:21:EC:C8:CE:7E:DB:4F:17:15
X509v3 Authority Key Identifier:
keyid:7F:56:89:DE:4A:7C:E7:68:BF:3A:B5:D9:F8:54:6E:85:6C:CB:19:36
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/f1aJ3kp852i_OrXZ-FRuhWzLGTY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/77/64d505-2204-4dca-a95e-8b5372584acd/1/f1aJ3kp852i_OrXZ-FRuhWzLGTY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
84:78:f0:77:88:24:8f:b4:15:19:be:2c:7d:03:46:06:fb:fc:
dd:e9:97:06:62:91:d7:4b:14:e6:47:f2:62:ce:ee:ac:4a:aa:
61:1d:ee:95:a1:15:01:ca:f5:f1:ab:79:52:6f:a1:03:ed:0c:
fc:63:c7:30:2b:33:9e:84:c5:57:e2:a0:a9:20:ca:ef:a0:7f:
ae:c1:2b:aa:60:b9:db:3a:05:a8:24:42:9f:ad:b0:ff:38:29:
a1:03:e6:2f:85:3b:1f:37:d1:20:17:08:8b:a4:cb:dc:46:f2:
b9:75:fc:66:35:3f:1d:ad:88:8f:c1:77:a4:f1:c1:94:98:39:
eb:dc:62:a4:ba:e5:7a:7c:2d:62:67:3d:2e:90:3e:8a:c8:75:
63:fb:77:cc:68:68:39:85:2a:35:8f:d2:33:1f:22:16:c0:42:
c9:cf:19:ba:f2:b7:ba:81:3b:45:14:a1:8d:1c:ca:12:8f:7e:
01:76:48:59:e4:75:5c:a5:da:29:cd:cc:4f:50:7e:9f:ce:24:
1f:cb:49:75:89:e4:82:eb:1d:46:8e:05:c2:b5:b1:17:af:8e:
2c:f3:e2:8b:14:27:06:b7:65:8c:89:00:ee:23:e2:8b:66:4d:
0f:bd:70:f2:5f:5e:e2:1a:c1:ce:11:66:3a:32:6c:8c:08:06:
88:0d:57:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3sxrrQiE8+kpGgGuq2QugMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdmNTY4OWRlNGE3Y2U3NjhiZjNhYjVkOWY4NTQ2ZTg1NmNj
YjE5MzYwHhcNMjUwNjI4MTgwMDU3WhcNMjUwNjI5MTgwMDU3WjAzMTEwLwYDVQQD
Eyg0MmU4YWJmMzIwOTljZDMyZTRmMGQ0MjFlY2M4Y2U3ZWRiNGYxNzE1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmgQsfULQO8ksemlQqJ3VuqZPTBF1
DnPY00oj2AHCx3XW07pTB91B9xGN+xtorsFQzd+ZQ3Y2PCPNsAE6D2h2ynF8oQpC
iUSlVfFt1lEr0VrdGdH4JaaiEYhrar3MZI1rIiRO6jBuYMb6XlufSUpXxP83HToj
m351/aVErmWeFFYxpaujudyYLq3E2oAahreTm3eS1UAJYY21cJ5EL8MzY0X9J+GD
6AVhM1yptie+XpodY8aHJ9G0P0XUUwNArdUSQzshS+piLw47qFD/UYlS/AZ54Wb7
UBZ5jBA3cbzobQNWKHcpuUCCHc5qOUsazcXSGYIeSiku2w8Y9P0vjDvH2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFELoq/Mgmc0y5PDUIezIzn7bTxcVMB8GA1UdIwQY
MBaAFH9Wid5KfOdovzq12fhUboVsyxk2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Ny82NGQ1MDUtMjIwNC00ZGNhLWE5NWUt
OGI1MzcyNTg0YWNkLzEvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Ny82NGQ1MDUtMjIwNC00ZGNhLWE5NWUtOGI1MzcyNTg0YWNk
LzEvZjFhSjNrcDg1MmlfT3JYWi1GUnVoV3pMR1RZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAhHjwd4gk
j7QVGb4sfQNGBvv83emXBmKR10sU5kfyYs7urEqqYR3ulaEVAcr18at5Um+hA+0M
/GPHMCsznoTFV+KgqSDK76B/rsErqmC52zoFqCRCn62w/zgpoQPmL4U7HzfRIBcI
i6TL3EbyuXX8ZjU/Ha2Ij8F3pPHBlJg569xipLrlenwtYmc9LpA+ish1Y/t3zGho
OYUqNY/SMx8iFsBCyc8ZuvK3uoE7RRShjRzKEo9+AXZIWeR1XKXaKc3MT1B+n84k
H8tJdYnkgusdRo4FwrWxF6+OLPPiixQnBrdljIkA7iPii2ZND71w8l9e4hrBzhFm
OjJsjAgGiA1XZg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:45:20 2025 by rpki-client