Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
File: l72bhlMeVEr6AwnYvip7ppFj-a0.mft (raw, json)
Hash identifier: DSLh4setUQYSotXyQEqeu0sBdXqsSCIXtbuzJMXsiB4=
Subject key identifier: FF:BD:A9:90:45:B8:54:E3:86:2A:E0:C8:F7:1E:1A:6E:6C:96:47:E6
Authority key identifier: 97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
Certificate issuer: /CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Certificate serial: 0196B96CE3E6FE9545EC06F62D4C7BE67683
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
Manifest number: 12E6
Signing time: Sat 10 May 2025 09:00:43 +0000
Manifest this update: Sat 10 May 2025 09:00:43 +0000
Manifest next update: Sun 11 May 2025 09:00:43 +0000
Files and hashes: 1: aMPRUufSIC3BSpnCaSjB3R1EWjU.roa (hash: PznJuTDoIXsWz9HXtvvwD92eU5XcI97tyAGmTVxGT4c=)
2: jkSVZWrRJ0p_sHmkLKgtRqPLq4c.roa (hash: 5AMIR+nAOYfoGTd/SNFuAJTTjyBmPlK6SsLZWPzLm6Q=)
3: l72bhlMeVEr6AwnYvip7ppFj-a0.crl (hash: Pv/emukV+Px7XZxwSZyEEDlixOCxCSDu/Ag6E04TPY8=)
4: vYaorPpQFuOhpBOvS0Y7tNPAUfw.roa (hash: yR9f2kZ/nIXVrv9dXrEzRY+6fv+TWV0eQZK0RZqpM/c=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 11 May 2025 09:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:96:b9:6c:e3:e6:fe:95:45:ec:06:f6:2d:4c:7b:e6:76:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=97bd9b86531e544afa0309d8be2a7ba69163f9ad
Validity
Not Before: May 10 09:00:43 2025 GMT
Not After : May 11 09:00:43 2025 GMT
Subject: CN=ffbda99045b854e3862ae0c8f71e1a6e6c9647e6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:92:99:67:2d:49:e5:c8:e0:9d:ac:dc:ff:3f:
58:85:55:9f:b3:84:54:40:11:2e:e4:f9:50:c4:38:
58:e2:45:f6:25:ae:fd:c5:fc:64:06:24:9f:72:ed:
98:7d:04:60:71:ae:a6:38:c7:0c:37:db:4d:af:a2:
2c:22:e6:5e:6a:db:ab:30:06:37:a9:46:de:94:81:
4c:77:ed:62:43:2c:9c:71:b6:55:96:59:a9:83:8f:
40:ac:c6:a6:0e:51:91:67:3d:ff:3b:8d:02:0a:02:
a5:ea:02:0f:41:f2:75:22:16:fa:df:40:5f:e5:80:
b3:04:8f:84:2a:81:7e:b7:40:ad:ed:db:d0:40:22:
92:77:15:70:17:80:d6:14:9b:9b:aa:31:a3:7e:4d:
8b:e7:ef:7b:9e:54:1e:a7:c2:2d:74:f1:68:03:ce:
e0:b0:4e:19:eb:41:2a:f5:49:18:52:57:ab:55:8d:
41:69:8e:cb:98:e0:ee:5c:28:17:d5:32:ce:4e:8e:
f4:27:ed:69:25:4d:d9:8c:c4:cb:2d:5f:d2:f4:2d:
a1:ba:82:56:d8:d9:8e:f9:16:10:8d:fa:08:7f:de:
c8:7e:3a:6c:e5:39:05:39:88:88:64:67:46:e7:73:
d7:0c:c2:9f:6a:21:16:5f:1e:9d:8f:a7:a1:5f:cb:
5d:41
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:BD:A9:90:45:B8:54:E3:86:2A:E0:C8:F7:1E:1A:6E:6C:96:47:E6
X509v3 Authority Key Identifier:
keyid:97:BD:9B:86:53:1E:54:4A:FA:03:09:D8:BE:2A:7B:A6:91:63:F9:AD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/l72bhlMeVEr6AwnYvip7ppFj-a0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7b/d4bd8b-55f4-4765-ad22-3460cc26480b/1/l72bhlMeVEr6AwnYvip7ppFj-a0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:b9:9a:1b:72:0a:c3:6b:82:9d:2d:2c:4f:99:01:0f:62:41:
f1:3d:4a:e9:f4:e5:98:03:59:0e:3f:37:86:05:cb:cd:6c:cb:
93:6e:49:7a:7d:5b:df:e7:cd:fe:74:90:a1:75:07:b5:ff:76:
5e:a8:dd:aa:89:24:c6:dc:3d:85:eb:ad:f5:05:23:cc:73:4a:
43:3c:b6:7e:0f:49:6d:0b:22:1c:25:a1:6c:11:6c:05:f4:80:
9c:b5:73:81:03:e2:da:65:29:a5:4a:6b:ed:50:61:6e:15:41:
7a:44:37:50:df:0b:f0:f7:56:57:28:9a:f3:d6:37:5f:4e:a7:
08:1f:9f:77:10:7b:cd:9d:71:5c:e6:ce:40:22:14:c6:1d:5f:
72:44:7f:aa:80:f3:1e:3a:62:f6:d7:63:c8:b3:8e:f5:a3:10:
79:68:ba:14:86:9f:07:79:75:fd:c5:78:25:e6:6d:6b:6a:da:
ef:0f:8a:da:7b:b5:e7:0d:ec:0a:99:54:a4:eb:4a:59:28:a4:
79:33:17:82:3f:82:63:97:35:0c:e8:c3:bf:8d:93:36:c6:8a:
d7:91:37:3d:fc:2b:63:10:6d:3f:45:52:93:c2:1f:17:11:1a:
b1:74:a7:1b:2d:87:51:5b:83:65:74:87:93:58:09:38:5f:4f:
33:fc:7e:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZa5bOPm/pVF7Ab2LUx75naDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk3YmQ5Yjg2NTMxZTU0NGFmYTAzMDlkOGJlMmE3YmE2OTE2
M2Y5YWQwHhcNMjUwNTEwMDkwMDQzWhcNMjUwNTExMDkwMDQzWjAzMTEwLwYDVQQD
EyhmZmJkYTk5MDQ1Yjg1NGUzODYyYWUwYzhmNzFlMWE2ZTZjOTY0N2U2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnpKZZy1J5cjgnazc/z9YhVWfs4RU
QBEu5PlQxDhY4kX2Ja79xfxkBiSfcu2YfQRgca6mOMcMN9tNr6IsIuZeaturMAY3
qUbelIFMd+1iQyyccbZVllmpg49ArMamDlGRZz3/O40CCgKl6gIPQfJ1Ihb630Bf
5YCzBI+EKoF+t0Ct7dvQQCKSdxVwF4DWFJubqjGjfk2L5+97nlQep8ItdPFoA87g
sE4Z60Eq9UkYUlerVY1BaY7LmODuXCgX1TLOTo70J+1pJU3ZjMTLLV/S9C2huoJW
2NmO+RYQjfoIf97Ifjps5TkFOYiIZGdG53PXDMKfaiEWXx6dj6ehX8tdQQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP+9qZBFuFTjhirgyPceGm5slkfmMB8GA1UdIwQY
MBaAFJe9m4ZTHlRK+gMJ2L4qe6aRY/mtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjIt
MzQ2MGNjMjY0ODBiLzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Yi9kNGJkOGItNTVmNC00NzY1LWFkMjItMzQ2MGNjMjY0ODBi
LzEvbDcyYmhsTWVWRXI2QXduWXZpcDdwcEZqLWEwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVrmaG3IK
w2uCnS0sT5kBD2JB8T1K6fTlmANZDj83hgXLzWzLk25Jen1b3+fN/nSQoXUHtf92
Xqjdqokkxtw9heut9QUjzHNKQzy2fg9JbQsiHCWhbBFsBfSAnLVzgQPi2mUppUpr
7VBhbhVBekQ3UN8L8PdWVyia89Y3X06nCB+fdxB7zZ1xXObOQCIUxh1fckR/qoDz
Hjpi9tdjyLOO9aMQeWi6FIafB3l1/cV4JeZta2ra7w+K2nu15w3sCplUpOtKWSik
eTMXgj+CY5c1DOjDv42TNsaK15E3PfwrYxBtP0VSk8IfFxEasXSnGy2HUVuDZXSH
k1gJOF9PM/x+qQ==
-----END CERTIFICATE-----
Generated at Sat May 10 18:10:26 2025 by rpki-client