Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
File: dT1Hbblt4eWGIxGacLnXsAtnbaA.mft (raw, json)
Hash identifier: oNb369TQDDqan9Sdv7SfK4okbn+TXtl7wafGmGptIx8=
Subject key identifier: E6:D9:B1:8C:90:9D:AA:DB:78:3E:88:F7:28:15:F7:AA:07:B1:3A:C6
Authority key identifier: 75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
Certificate issuer: /CN=753d476db96de1e58623119a70b9d7b00b676da0
Certificate serial: 0197CE042C3A068A80AC4C842087D25E2410
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
Manifest number: 15BF
Signing time: Thu 03 Jul 2025 02:01:09 +0000
Manifest this update: Thu 03 Jul 2025 02:01:09 +0000
Manifest next update: Fri 04 Jul 2025 02:01:09 +0000
Files and hashes: 1: 46jADdHLKU7NIyeYvDkR9sakzHU.roa (hash: byWqvbSSzcE1Xc0qEaXyUWnOp7q2hSYPDvEBq1c3RLI=)
2: ZzBmvMdXYMiQ9bwVHMIzO7s9SmM.roa (hash: sLT+c6scYZ8+Q07xIyxSqYkUzEuyYwiK9vh89QW6tS8=)
3: dT1Hbblt4eWGIxGacLnXsAtnbaA.crl (hash: GcztgRlIrQpYyxIbjUGNy/bFbwVyo5HfPr99aGrE4LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 04 Jul 2025 02:01:09 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ce:04:2c:3a:06:8a:80:ac:4c:84:20:87:d2:5e:24:10
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=753d476db96de1e58623119a70b9d7b00b676da0
Validity
Not Before: Jul 3 02:01:09 2025 GMT
Not After : Jul 4 02:01:09 2025 GMT
Subject: CN=e6d9b18c909daadb783e88f72815f7aa07b13ac6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:17:8c:59:1f:0a:9f:16:36:a9:39:e5:94:03:
ea:7e:e0:32:c2:42:03:40:60:bc:83:e5:85:9c:33:
5c:15:e8:71:fd:7b:ec:f1:4b:b8:8c:3f:ac:5d:d3:
f1:03:f3:ff:ee:3a:ab:00:0c:ad:40:91:01:19:38:
62:3c:14:05:50:4e:ed:d8:f2:97:2b:f4:d3:21:eb:
78:d9:ff:cf:3c:ac:3b:b3:b4:73:58:58:12:24:4d:
53:b2:83:f2:79:d8:c5:44:8f:66:00:77:d1:27:b2:
44:09:bf:6e:07:9b:d0:17:25:89:01:86:66:e7:4c:
b4:d7:02:be:15:be:1e:4e:67:89:78:d2:96:1e:92:
4f:f5:8e:bf:67:eb:bb:47:c7:b1:d1:b6:f2:4c:53:
c8:cb:74:d4:eb:9c:96:bd:ce:d6:41:68:d8:dd:55:
81:06:4b:7d:27:8e:3d:88:f6:2c:37:10:ad:89:93:
f4:01:a2:eb:85:e2:02:c8:03:bf:2d:f3:e1:27:ab:
68:61:66:d4:2f:c0:13:28:52:61:20:e0:32:34:d9:
fc:58:c9:26:68:5e:9f:13:28:af:4c:a2:78:6e:6e:
0e:ca:a5:12:f4:8d:59:ac:59:19:cd:6b:69:19:94:
73:29:f8:04:b3:a4:ec:b1:f5:13:be:17:e4:02:a8:
7b:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E6:D9:B1:8C:90:9D:AA:DB:78:3E:88:F7:28:15:F7:AA:07:B1:3A:C6
X509v3 Authority Key Identifier:
keyid:75:3D:47:6D:B9:6D:E1:E5:86:23:11:9A:70:B9:D7:B0:0B:67:6D:A0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dT1Hbblt4eWGIxGacLnXsAtnbaA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/6a9cf9-c0cc-4011-860e-4685782ac2c3/1/dT1Hbblt4eWGIxGacLnXsAtnbaA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:80:0c:c1:42:22:c1:c5:49:f7:a0:c7:49:7d:3a:8c:eb:2b:
93:9f:d6:f0:00:85:dc:7f:b5:85:6e:91:af:d9:e7:e5:c3:a2:
10:83:52:60:47:fb:79:d2:98:0a:94:13:bc:ee:25:46:7c:8a:
d1:13:ca:6e:60:16:23:cb:ea:bb:4f:36:42:22:84:55:02:55:
99:7e:62:62:69:77:f9:78:ff:f8:01:e9:4d:2b:f7:70:47:5c:
f4:96:7a:4d:68:59:8c:db:0c:5f:dd:41:80:ce:d5:b0:8e:18:
4a:3f:06:ee:46:ba:f8:fb:32:ff:eb:fe:d1:cf:15:ec:99:26:
8b:71:ae:e0:51:01:dd:ca:e0:26:26:d4:f0:58:3e:6e:11:02:
96:9f:1d:a1:7d:1b:21:8e:76:ff:35:45:78:24:e4:f3:ce:5a:
3e:82:7b:eb:fb:95:d9:13:58:1a:d9:e2:b6:60:0b:33:04:f3:
b9:8d:26:1f:80:ba:c9:e4:75:7b:18:e3:8d:e8:c7:d5:1d:f7:
45:25:2b:06:a4:64:a6:23:5b:4d:a8:e2:6f:df:7e:01:19:eb:
85:87:19:e8:e9:e6:cc:83:71:0f:95:73:97:cf:92:4a:44:0f:
f3:0b:ec:cd:80:08:fe:df:cf:9a:9e:5d:4b:0d:f3:aa:d0:54:
cc:78:4a:2f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfOBCw6BoqArEyEIIfSXiQQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc1M2Q0NzZkYjk2ZGUxZTU4NjIzMTE5YTcwYjlkN2IwMGI2
NzZkYTAwHhcNMjUwNzAzMDIwMTA5WhcNMjUwNzA0MDIwMTA5WjAzMTEwLwYDVQQD
EyhlNmQ5YjE4YzkwOWRhYWRiNzgzZTg4ZjcyODE1ZjdhYTA3YjEzYWM2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2heMWR8KnxY2qTnllAPqfuAywkID
QGC8g+WFnDNcFehx/Xvs8Uu4jD+sXdPxA/P/7jqrAAytQJEBGThiPBQFUE7t2PKX
K/TTIet42f/PPKw7s7RzWFgSJE1TsoPyedjFRI9mAHfRJ7JECb9uB5vQFyWJAYZm
50y01wK+Fb4eTmeJeNKWHpJP9Y6/Z+u7R8ex0bbyTFPIy3TU65yWvc7WQWjY3VWB
Bkt9J449iPYsNxCtiZP0AaLrheICyAO/LfPhJ6toYWbUL8ATKFJhIOAyNNn8WMkm
aF6fEyivTKJ4bm4OyqUS9I1ZrFkZzWtpGZRzKfgEs6TssfUTvhfkAqh74QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFObZsYyQnarbeD6I9ygV96oHsTrGMB8GA1UdIwQY
MBaAFHU9R225beHlhiMRmnC517ALZ22gMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUt
NDY4NTc4MmFjMmMzLzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi82YTljZjktYzBjYy00MDExLTg2MGUtNDY4NTc4MmFjMmMz
LzEvZFQxSGJibHQ0ZVdHSXhHYWNMblhzQXRuYmFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAd4AMwUIi
wcVJ96DHSX06jOsrk5/W8ACF3H+1hW6Rr9nn5cOiEINSYEf7edKYCpQTvO4lRnyK
0RPKbmAWI8vqu082QiKEVQJVmX5iYml3+Xj/+AHpTSv3cEdc9JZ6TWhZjNsMX91B
gM7VsI4YSj8G7ka6+Psy/+v+0c8V7Jkmi3Gu4FEB3crgJibU8Fg+bhEClp8doX0b
IY52/zVFeCTk885aPoJ76/uV2RNYGtnitmALMwTzuY0mH4C6yeR1exjjjejH1R33
RSUrBqRkpiNbTajib99+ARnrhYcZ6OnmzINxD5Vzl8+SSkQP8wvszYAI/t/Pmp5d
Sw3zqtBUzHhKLw==
-----END CERTIFICATE-----
Generated at Thu Jul 3 07:10:10 2025 by rpki-client