Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
File: DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft (raw, json)
Hash identifier: Aqb0uBF21XC8FTsx09wosRUEhrM0MG08KCCrgc3etiA=
Subject key identifier: 1E:41:9C:C4:B0:83:9D:85:E2:C8:3B:5D:AD:AB:BF:FE:8B:44:BA:8F
Authority key identifier: 0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
Certificate issuer: /CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Certificate serial: 0197B632729C4C1B499231273C95E6BA0FE6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
Manifest number: 15B4
Signing time: Sat 28 Jun 2025 11:00:48 +0000
Manifest this update: Sat 28 Jun 2025 11:00:48 +0000
Manifest next update: Sun 29 Jun 2025 11:00:48 +0000
Files and hashes: 1: DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl (hash: kbgZJCpyxTEW739kMPoyGn1HkoICwnf3ERTmGjLqZCg=)
2: Z6E4tQnRvUpfPcdYuFNVxcJ0ync.roa (hash: xKAWINx5skT5zUOU5FUOicB7VLSOKSuOkc+JGT8/lwg=)
3: icdzN3903U-G6DI4zKp6RZE4flA.roa (hash: kshaHbPYaGNmmaMCwtIlRpH9RaK824cfmas4wivc8R4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:32:72:9c:4c:1b:49:92:31:27:3c:95:e6:ba:0f:e6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0d702c53cb803b14644e67587e5d6fd612b64bcc
Validity
Not Before: Jun 28 11:00:48 2025 GMT
Not After : Jun 29 11:00:48 2025 GMT
Subject: CN=1e419cc4b0839d85e2c83b5dadabbffe8b44ba8f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f3:b8:98:bf:59:f6:ff:f4:b8:58:0b:be:99:ce:
ae:34:24:63:c7:09:55:3f:ea:a3:f5:65:a4:0b:29:
cf:10:41:71:42:bf:98:34:8b:2d:e4:65:b4:8f:b0:
1b:51:f2:c7:b4:01:c9:5a:58:33:59:b8:d4:4f:16:
6b:7d:b8:88:85:53:22:35:82:47:73:63:c7:cd:61:
9c:4f:c2:98:73:7e:6a:38:9e:eb:ef:7b:87:93:a4:
57:c6:86:14:a2:10:bd:03:f0:59:6e:90:8d:fc:d5:
e6:6d:ec:6b:4c:06:b0:65:9e:22:19:89:65:f0:cc:
34:81:22:cb:f6:51:d6:54:aa:64:8b:a0:59:26:58:
bf:3e:33:09:4f:23:95:22:6c:9d:2a:55:2d:38:4a:
3c:62:f0:87:a4:dd:75:41:64:50:6f:c8:ab:30:f4:
b3:d8:ae:9b:72:3a:b8:2c:51:2c:c8:45:7c:67:49:
2b:3a:ce:26:ab:ba:00:df:e5:21:92:b0:f8:eb:c7:
18:65:bf:d5:47:a2:8c:6c:28:d4:bb:dd:a8:6c:e9:
21:54:f8:c9:13:c0:73:4f:83:c0:af:c0:67:95:73:
6e:0a:b2:2f:25:7c:66:1f:74:4f:d9:28:1d:0c:49:
df:16:41:44:f5:ec:8d:84:10:5f:98:bf:59:c8:1e:
23:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:41:9C:C4:B0:83:9D:85:E2:C8:3B:5D:AD:AB:BF:FE:8B:44:BA:8F
X509v3 Authority Key Identifier:
keyid:0D:70:2C:53:CB:80:3B:14:64:4E:67:58:7E:5D:6F:D6:12:B6:4B:CC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/DXAsU8uAOxRkTmdYfl1v1hK2S8w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/d3d105-f972-4c7c-bfea-3f25392de7f9/1/DXAsU8uAOxRkTmdYfl1v1hK2S8w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:5b:f5:e0:b3:53:31:cf:6a:d8:58:48:d0:56:72:61:42:e1:
39:a1:a5:d8:12:7c:ed:92:dc:3d:7a:df:97:39:70:01:72:ca:
6e:9c:5f:fc:05:66:79:db:06:02:f1:23:92:b0:43:21:b5:9a:
21:ad:c1:19:8b:54:56:d2:df:c2:0b:4f:09:16:66:ad:c6:93:
11:3d:b7:e6:10:4e:51:6f:21:57:d3:8f:2c:08:ea:8c:ff:4d:
fd:9a:f1:5f:da:1e:83:61:c6:be:1d:d3:f1:83:43:52:07:5d:
59:58:1e:e0:4e:ab:1d:50:1b:e1:69:8d:a9:a8:60:af:d8:96:
17:ec:dd:d8:2b:64:63:d8:6d:ab:93:9a:58:96:18:2d:f3:b5:
b4:8a:62:ef:96:e3:70:ba:43:05:b6:e3:36:83:da:6e:bd:b3:
14:22:54:ed:c6:ac:04:75:87:65:b0:21:72:9e:dd:a7:03:48:
3a:a6:38:1c:7e:4e:75:74:68:a5:e0:c9:8f:53:0d:c3:16:33:
a5:3e:ce:8a:d1:a9:a7:63:6a:af:84:a1:8f:1b:bf:d5:33:37:
7e:b9:d7:ae:d8:ba:21:32:6a:e6:70:7a:87:45:34:60:45:4b:
b9:a6:da:0c:87:ce:7f:b3:b7:18:ab:02:1e:ca:c4:91:50:af:
7c:c4:f3:4d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2MnKcTBtJkjEnPJXmug/mMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBkNzAyYzUzY2I4MDNiMTQ2NDRlNjc1ODdlNWQ2ZmQ2MTJi
NjRiY2MwHhcNMjUwNjI4MTEwMDQ4WhcNMjUwNjI5MTEwMDQ4WjAzMTEwLwYDVQQD
EygxZTQxOWNjNGIwODM5ZDg1ZTJjODNiNWRhZGFiYmZmZThiNDRiYThmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA87iYv1n2//S4WAu+mc6uNCRjxwlV
P+qj9WWkCynPEEFxQr+YNIst5GW0j7AbUfLHtAHJWlgzWbjUTxZrfbiIhVMiNYJH
c2PHzWGcT8KYc35qOJ7r73uHk6RXxoYUohC9A/BZbpCN/NXmbexrTAawZZ4iGYll
8Mw0gSLL9lHWVKpki6BZJli/PjMJTyOVImydKlUtOEo8YvCHpN11QWRQb8irMPSz
2K6bcjq4LFEsyEV8Z0krOs4mq7oA3+UhkrD468cYZb/VR6KMbCjUu92obOkhVPjJ
E8BzT4PAr8BnlXNuCrIvJXxmH3RP2SgdDEnfFkFE9eyNhBBfmL9ZyB4jKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB5BnMSwg52F4sg7Xa2rv/6LRLqPMB8GA1UdIwQY
MBaAFA1wLFPLgDsUZE5nWH5db9YStkvMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9kM2QxMDUtZjk3Mi00YzdjLWJmZWEt
M2YyNTM5MmRlN2Y5LzEvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9kM2QxMDUtZjk3Mi00YzdjLWJmZWEtM2YyNTM5MmRlN2Y5
LzEvRFhBc1U4dUFPeFJrVG1kWWZsMXYxaEsyUzh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWlv14LNT
Mc9q2FhI0FZyYULhOaGl2BJ87ZLcPXrflzlwAXLKbpxf/AVmedsGAvEjkrBDIbWa
Ia3BGYtUVtLfwgtPCRZmrcaTET235hBOUW8hV9OPLAjqjP9N/ZrxX9oeg2HGvh3T
8YNDUgddWVge4E6rHVAb4WmNqahgr9iWF+zd2CtkY9htq5OaWJYYLfO1tIpi75bj
cLpDBbbjNoPabr2zFCJU7casBHWHZbAhcp7dpwNIOqY4HH5OdXRopeDJj1MNwxYz
pT7OitGpp2Nqr4Shjxu/1TM3frnXrti6ITJq5nB6h0U0YEVLuabaDIfOf7O3GKsC
HsrEkVCvfMTzTQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:24:57 2025 by rpki-client