Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
File: p1OwvT1iQYAynSGj7NzKGy--3m0.mft (raw, json)
Hash identifier: Ti9t2/7SC2lk70zWBXSSNex8wAmqtOWnafoewLInCfU=
Subject key identifier: 72:86:60:6C:80:E9:95:3B:BA:9A:B2:30:65:B0:22:48:A6:C2:DB:A8
Authority key identifier: A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
Certificate issuer: /CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Certificate serial: 0197C0B6140154A6B92EC76954AED7C1F2DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
Manifest number: 15B7
Signing time: Mon 30 Jun 2025 12:00:47 +0000
Manifest this update: Mon 30 Jun 2025 12:00:47 +0000
Manifest next update: Tue 01 Jul 2025 12:00:47 +0000
Files and hashes: 1: p1OwvT1iQYAynSGj7NzKGy--3m0.crl (hash: keSFo1iyMVjo9UlYNbyWgH4/+ffjL8KucaIG/kMuZyw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 12:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:b6:14:01:54:a6:b9:2e:c7:69:54:ae:d7:c1:f2:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=a753b0bd3d624180329d21a3ecdcca1b2fbede6d
Validity
Not Before: Jun 30 12:00:47 2025 GMT
Not After : Jul 1 12:00:47 2025 GMT
Subject: CN=7286606c80e9953bba9ab23065b02248a6c2dba8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:05:b0:15:37:3d:7a:59:32:24:fc:e3:53:4a:
42:53:7d:e5:fb:bd:49:f9:be:dc:62:0a:9b:98:97:
dd:54:0d:c3:db:84:16:28:fc:98:65:bf:bc:c8:c0:
a6:c4:1b:1f:81:2b:88:77:b1:ff:da:a2:13:60:89:
60:7c:fa:3f:37:06:8b:d4:6e:7c:c2:86:ab:18:2a:
77:a9:63:ac:d9:eb:15:76:6e:2d:bb:c5:b2:cf:34:
aa:bf:b3:73:36:a0:c6:f8:4e:3f:30:e6:0d:fe:28:
84:fa:36:7e:1e:75:e4:09:ca:63:68:f2:d6:59:fe:
cc:fa:2d:54:60:fd:4f:d6:35:e8:07:16:12:e9:7e:
03:69:e2:ca:3f:6c:3a:65:34:02:7a:56:e6:fe:2d:
f7:56:5d:ee:2c:84:4a:03:b3:88:3f:6d:1c:33:36:
96:a5:92:0e:97:28:f6:1b:d3:7a:1b:1b:ae:d3:b9:
8c:de:0a:10:b4:7b:c3:07:88:e8:06:d8:e3:a7:0b:
89:b3:e2:e7:0c:d8:54:d1:fd:f7:0a:bf:ba:ca:dd:
3a:1c:85:27:8e:48:e8:c1:74:79:16:87:d9:2f:9e:
32:27:e2:52:1b:c7:df:03:54:08:39:0f:0e:f8:21:
a7:74:c0:81:ed:18:92:50:1b:b0:47:37:56:c8:6f:
0a:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:86:60:6C:80:E9:95:3B:BA:9A:B2:30:65:B0:22:48:A6:C2:DB:A8
X509v3 Authority Key Identifier:
keyid:A7:53:B0:BD:3D:62:41:80:32:9D:21:A3:EC:DC:CA:1B:2F:BE:DE:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/p1OwvT1iQYAynSGj7NzKGy--3m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/adfd45-a188-466c-8383-9a262ff4626c/1/p1OwvT1iQYAynSGj7NzKGy--3m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3d:d5:b9:7f:d4:aa:b5:79:ec:e3:49:5d:e3:19:6a:c2:10:cb:
d7:6e:97:62:ff:6e:cd:40:9c:1f:06:c6:64:d2:48:5d:6c:66:
d6:45:d8:18:3b:4c:39:eb:3b:d8:28:7a:cb:43:4d:bc:f2:bb:
cc:73:a4:84:3f:86:d1:b8:38:7b:ab:8b:30:0e:ac:fc:9f:1f:
43:ff:d8:23:9b:d3:f7:72:55:b4:85:30:44:fc:2e:b2:ce:c2:
b5:70:f8:83:70:4a:b5:bf:93:ee:46:3e:43:04:66:71:ff:5f:
91:62:37:8a:0a:1a:3a:18:21:7b:82:a4:61:2e:ac:26:53:17:
8c:e6:9f:29:61:f0:1c:8c:b7:ad:f8:1d:a6:fd:33:7c:24:54:
3a:07:60:21:45:c8:53:cb:7f:f2:37:df:e5:62:ef:03:fa:ac:
f2:04:aa:7f:e5:eb:c1:0f:5b:7e:06:c3:f0:80:36:8a:23:0d:
fc:4b:f2:c8:69:a5:9f:92:e1:29:04:37:a3:17:ec:95:49:ee:
c1:78:43:28:92:5e:d7:19:e7:69:fd:c0:fe:ff:31:b7:e9:6a:
2e:8e:bb:c6:b1:8b:5b:af:40:d3:08:23:f8:b4:91:55:50:12:
03:1d:b2:fb:d5:43:b2:a6:51:e2:05:b9:5d:ae:3d:76:d7:46:
b3:a4:70:1f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfAthQBVKa5LsdpVK7XwfLfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGE3NTNiMGJkM2Q2MjQxODAzMjlkMjFhM2VjZGNjYTFiMmZi
ZWRlNmQwHhcNMjUwNjMwMTIwMDQ3WhcNMjUwNzAxMTIwMDQ3WjAzMTEwLwYDVQQD
Eyg3Mjg2NjA2YzgwZTk5NTNiYmE5YWIyMzA2NWIwMjI0OGE2YzJkYmE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhQWwFTc9elkyJPzjU0pCU33l+71J
+b7cYgqbmJfdVA3D24QWKPyYZb+8yMCmxBsfgSuId7H/2qITYIlgfPo/NwaL1G58
woarGCp3qWOs2esVdm4tu8WyzzSqv7NzNqDG+E4/MOYN/iiE+jZ+HnXkCcpjaPLW
Wf7M+i1UYP1P1jXoBxYS6X4DaeLKP2w6ZTQCelbm/i33Vl3uLIRKA7OIP20cMzaW
pZIOlyj2G9N6Gxuu07mM3goQtHvDB4joBtjjpwuJs+LnDNhU0f33Cr+6yt06HIUn
jkjowXR5FofZL54yJ+JSG8ffA1QIOQ8O+CGndMCB7RiSUBuwRzdWyG8KBwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHKGYGyA6ZU7upqyMGWwIkimwtuoMB8GA1UdIwQY
MBaAFKdTsL09YkGAMp0ho+zcyhsvvt5tMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcDFPd3ZUMWlRWUF5blNHajdOektHeS0tM20wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9hZGZkNDUtYTE4OC00NjZjLTgzODMt
OWEyNjJmZjQ2MjZjLzEvcDFPd3ZUMWlRWUF5blNHajdOektHeS0tM20wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9hZGZkNDUtYTE4OC00NjZjLTgzODMtOWEyNjJmZjQ2MjZj
LzEvcDFPd3ZUMWlRWUF5blNHajdOektHeS0tM20wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAPdW5f9Sq
tXns40ld4xlqwhDL126XYv9uzUCcHwbGZNJIXWxm1kXYGDtMOes72Ch6y0NNvPK7
zHOkhD+G0bg4e6uLMA6s/J8fQ//YI5vT93JVtIUwRPwuss7CtXD4g3BKtb+T7kY+
QwRmcf9fkWI3igoaOhghe4KkYS6sJlMXjOafKWHwHIy3rfgdpv0zfCRUOgdgIUXI
U8t/8jff5WLvA/qs8gSqf+XrwQ9bfgbD8IA2iiMN/EvyyGmln5LhKQQ3oxfslUnu
wXhDKJJe1xnnaf3A/v8xt+lqLo67xrGLW69A0wgj+LSRVVASAx2y+9VDsqZR4gW5
Xa49dtdGs6RwHw==
-----END CERTIFICATE-----
Generated at Mon Jun 30 15:40:36 2025 by rpki-client