Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
File: CuGlto7Kdo8hGkjoVtf1g_kOdec.mft (raw, json)
Hash identifier: QI6DHc0eIULNtyYpgoLOGQwOyl78l8DJM2t3euyugZw=
Subject key identifier: B5:DE:64:8D:5A:B3:DC:3B:28:74:96:3B:FB:6C:C2:9E:9F:0D:7C:62
Authority key identifier: 0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
Certificate issuer: /CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Certificate serial: 0197B5FC0EDDDDCB303CB0D480983E626CFE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
Manifest number: 135F
Signing time: Sat 28 Jun 2025 10:01:24 +0000
Manifest this update: Sat 28 Jun 2025 10:01:24 +0000
Manifest next update: Sun 29 Jun 2025 10:01:24 +0000
Files and hashes: 1: CuGlto7Kdo8hGkjoVtf1g_kOdec.crl (hash: 6l0HWrwG5WI7vY1VP9FFazMwELlA99GlSzmv5lyo9Ys=)
2: fxLB2UJLDSaxPyWV2-cdEb8R5e8.roa (hash: qTbDhlkyoNs8mOWo2CnjkxjvNByWkkbKi24V6XgdMB8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fc:0e:dd:dd:cb:30:3c:b0:d4:80:98:3e:62:6c:fe
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0ae1a5b68eca768f211a48e856d7f583f90e75e7
Validity
Not Before: Jun 28 10:01:24 2025 GMT
Not After : Jun 29 10:01:24 2025 GMT
Subject: CN=b5de648d5ab3dc3b2874963bfb6cc29e9f0d7c62
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:93:87:d5:70:ce:13:62:e3:cb:fe:db:2c:54:f2:
eb:b4:96:12:8e:7b:51:d3:ca:98:89:9f:8d:37:ea:
1d:73:ca:2b:65:f3:a1:a5:8c:fe:10:47:3a:ec:1e:
74:18:a5:7c:e9:19:3c:19:d2:c7:ac:44:0d:4d:77:
de:cc:b1:fe:67:a4:e3:96:a2:23:61:0c:1d:86:f3:
15:30:85:65:bf:a1:02:85:0b:fb:21:58:62:eb:97:
0c:d8:ae:54:6a:9a:17:69:72:d6:44:8f:ef:43:2a:
3a:85:41:a2:fc:af:93:58:d9:e6:78:8f:9d:0f:9b:
e1:e4:df:91:c4:9f:56:9c:b7:73:93:11:95:23:a4:
bb:0b:d8:df:05:e1:16:a2:cb:7c:34:90:f1:4c:b4:
d5:ff:3e:ac:36:b9:e6:b6:f6:65:09:b9:87:24:bc:
3c:02:d4:52:e9:6d:b6:8d:e2:91:7b:c3:8f:68:56:
81:b9:09:5b:fd:87:49:6a:af:19:90:00:9c:d3:69:
e8:e5:a5:46:f6:60:c7:08:cc:5b:98:59:1c:50:d4:
b4:07:38:15:a9:f5:80:b5:4f:82:ce:45:a1:aa:aa:
57:10:03:ee:76:95:a0:4e:16:88:78:fd:12:1b:ea:
03:f2:34:88:4c:71:1d:66:28:a3:61:b8:4a:14:80:
59:81
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B5:DE:64:8D:5A:B3:DC:3B:28:74:96:3B:FB:6C:C2:9E:9F:0D:7C:62
X509v3 Authority Key Identifier:
keyid:0A:E1:A5:B6:8E:CA:76:8F:21:1A:48:E8:56:D7:F5:83:F9:0E:75:E7
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CuGlto7Kdo8hGkjoVtf1g_kOdec.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/88/e18c2d-64ff-44e8-8eef-b9c89b9b1f65/1/CuGlto7Kdo8hGkjoVtf1g_kOdec.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:2a:1f:9b:bf:df:6d:94:28:20:a1:fa:28:be:cc:a9:9e:6e:
0d:fa:19:cf:f7:af:c7:a5:a8:f2:43:c4:a8:42:9c:67:ae:60:
f6:63:d3:0d:44:4e:ed:f8:5a:ad:c0:bd:06:6a:48:ff:2a:67:
ee:d9:76:f6:2d:3b:24:5f:5e:b9:36:e7:6d:63:bf:7b:a9:84:
44:bd:82:08:aa:9b:2b:23:75:6d:ca:e4:6e:e7:0f:ef:4c:96:
a7:54:15:96:e3:97:29:87:cd:40:0e:b4:bb:28:5c:ec:d4:27:
19:84:46:ef:2e:ab:72:57:68:a6:a2:12:b6:d9:c3:3e:f2:5d:
74:53:a2:b5:4f:87:c6:02:1c:89:9e:1f:53:0d:7d:44:94:c9:
da:0b:5b:a3:bb:77:94:90:54:23:13:35:a2:4d:43:3a:f8:ee:
82:1e:03:38:9b:e3:77:13:3f:63:49:c2:74:53:c3:74:c3:87:
70:49:e7:a5:35:cd:f3:66:c8:27:91:4e:e0:cc:19:fd:4e:05:
15:41:41:f0:27:7e:63:11:5d:3e:26:ee:10:f3:b6:51:f1:39:
cb:d3:19:00:be:4c:f1:21:c4:33:3f:46:e6:d6:46:c2:f9:e4:
e0:e8:18:3e:4b:59:83:8f:2b:2c:bc:6f:78:aa:68:ec:9d:ad:
9f:8b:2e:91
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1/A7d3cswPLDUgJg+Ymz+MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBhZTFhNWI2OGVjYTc2OGYyMTFhNDhlODU2ZDdmNTgzZjkw
ZTc1ZTcwHhcNMjUwNjI4MTAwMTI0WhcNMjUwNjI5MTAwMTI0WjAzMTEwLwYDVQQD
EyhiNWRlNjQ4ZDVhYjNkYzNiMjg3NDk2M2JmYjZjYzI5ZTlmMGQ3YzYyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAk4fVcM4TYuPL/tssVPLrtJYSjntR
08qYiZ+NN+odc8orZfOhpYz+EEc67B50GKV86Rk8GdLHrEQNTXfezLH+Z6TjlqIj
YQwdhvMVMIVlv6EChQv7IVhi65cM2K5UapoXaXLWRI/vQyo6hUGi/K+TWNnmeI+d
D5vh5N+RxJ9WnLdzkxGVI6S7C9jfBeEWost8NJDxTLTV/z6sNrnmtvZlCbmHJLw8
AtRS6W22jeKRe8OPaFaBuQlb/YdJaq8ZkACc02no5aVG9mDHCMxbmFkcUNS0BzgV
qfWAtU+CzkWhqqpXEAPudpWgThaIeP0SG+oD8jSITHEdZiijYbhKFIBZgQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLXeZI1as9w7KHSWO/tswp6fDXxiMB8GA1UdIwQY
MBaAFArhpbaOynaPIRpI6FbX9YP5DnXnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OC9lMThjMmQtNjRmZi00NGU4LThlZWYt
YjljODliOWIxZjY1LzEvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OC9lMThjMmQtNjRmZi00NGU4LThlZWYtYjljODliOWIxZjY1
LzEvQ3VHbHRvN0tkbzhoR2tqb1Z0ZjFnX2tPZGVjLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyCofm7/f
bZQoIKH6KL7MqZ5uDfoZz/evx6Wo8kPEqEKcZ65g9mPTDURO7fharcC9BmpI/ypn
7tl29i07JF9euTbnbWO/e6mERL2CCKqbKyN1bcrkbucP70yWp1QVluOXKYfNQA60
uyhc7NQnGYRG7y6rcldopqISttnDPvJddFOitU+HxgIciZ4fUw19RJTJ2gtbo7t3
lJBUIxM1ok1DOvjugh4DOJvjdxM/Y0nCdFPDdMOHcEnnpTXN82bIJ5FO4MwZ/U4F
FUFB8Cd+YxFdPibuEPO2UfE5y9MZAL5M8SHEMz9G5tZGwvnk4OgYPktZg48rLLxv
eKpo7J2tn4sukQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:35:42 2025 by rpki-client