Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
File: RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft (raw, json)
Hash identifier: Bn04g1Yr/Y4cOUGvdk/UqAzjYziZxSVj8lQOSNuINk8=
Subject key identifier: EF:79:86:C6:9B:FE:34:6A:B4:6E:1D:A6:F1:6F:BB:16:34:35:A3:06
Authority key identifier: 47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
Certificate issuer: /CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Certificate serial: 0197B77CC36A729FF7442B921599F4F44629
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
Manifest number: E8
Signing time: Sat 28 Jun 2025 17:01:36 +0000
Manifest this update: Sat 28 Jun 2025 17:01:36 +0000
Manifest next update: Sun 29 Jun 2025 17:01:36 +0000
Files and hashes: 1: 6XJE8rlYoWtrh2ad3Kvm7Q_y5CQ.roa (hash: 7BUcSs/WeuS6GOcIo66oyt8ibf2WB0YlmBoooxU7KVI=)
2: RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl (hash: JFQM8PzeaouCiaLex2uuMlT7NfhPQp/a4WyYi4vhYk8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:c3:6a:72:9f:f7:44:2b:92:15:99:f4:f4:46:29
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=47143dd66769db183b8bd79b90fc83d95d6e48fb
Validity
Not Before: Jun 28 17:01:36 2025 GMT
Not After : Jun 29 17:01:36 2025 GMT
Subject: CN=ef7986c69bfe346ab46e1da6f16fbb163435a306
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:86:0e:46:d4:92:fd:4b:b8:67:8b:f7:42:d9:
98:60:9f:27:a9:67:0d:d9:2f:ec:8b:82:58:41:b5:
62:a8:d3:26:06:41:8d:7a:4a:fe:b2:09:1f:d4:07:
15:c1:dc:63:a7:36:be:02:b1:b0:b2:d0:18:b8:27:
69:a5:91:6c:1c:ed:d1:a8:b0:21:74:5a:d6:e8:54:
1d:1c:1a:fd:5a:94:4d:b6:e9:59:4e:81:56:a6:97:
79:a9:a1:dd:9e:ce:40:ba:65:b2:30:b2:31:7e:80:
f0:f1:46:24:88:74:04:bd:4e:d0:94:3d:a9:aa:7f:
0b:e2:8d:9d:c6:75:89:dd:22:f5:67:70:f3:26:d7:
58:21:40:28:a0:ed:e3:11:07:fa:2f:56:7a:fc:99:
a0:29:c9:30:0d:33:a7:97:fd:a5:24:1c:07:b5:83:
16:f1:90:ba:47:f4:7d:86:7e:91:af:7b:81:5b:08:
2b:cd:e2:50:f2:78:2f:f9:ef:d9:de:aa:a0:76:41:
5c:83:06:e4:6e:31:94:9c:91:50:2d:9b:79:b2:04:
fd:93:98:4f:8b:72:0e:b2:bb:8b:82:9e:63:6c:df:
f7:4c:e9:76:82:5e:1f:ff:ca:ce:8f:bf:d3:fb:7d:
58:f2:21:64:5a:0c:1c:e3:04:6d:ca:4c:6f:56:7e:
a4:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EF:79:86:C6:9B:FE:34:6A:B4:6E:1D:A6:F1:6F:BB:16:34:35:A3:06
X509v3 Authority Key Identifier:
keyid:47:14:3D:D6:67:69:DB:18:3B:8B:D7:9B:90:FC:83:D9:5D:6E:48:FB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RxQ91mdp2xg7i9ebkPyD2V1uSPs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/3f4395-1871-4cb1-807b-3460262455b2/1/RxQ91mdp2xg7i9ebkPyD2V1uSPs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
36:9b:74:0f:39:c3:c6:6c:73:54:44:d8:f3:2d:08:64:c6:f9:
31:cc:06:3f:86:02:06:5c:38:b5:32:82:19:e9:c9:0a:54:90:
92:46:58:98:93:aa:07:c1:b6:ab:4f:e6:b4:03:5e:0f:23:31:
e6:0f:1c:49:25:63:b8:1b:12:7e:5b:98:2b:6b:9c:67:9d:0b:
a0:9b:51:96:5e:8d:f9:cb:e3:ee:d0:f9:28:f6:74:ac:a6:83:
59:62:52:37:19:5b:25:ad:b4:b9:9a:4f:d3:3b:3b:72:d6:84:
2f:e1:70:56:d6:c6:20:b5:54:7a:01:ae:40:dd:c4:41:ba:48:
5c:f0:8f:00:b8:de:f3:c3:38:87:ca:00:b0:8d:d7:10:ea:f6:
40:2c:d4:00:31:cb:5c:5b:af:81:46:93:9e:e0:69:8d:6e:dd:
80:e7:c6:b4:a7:9d:69:7d:cc:65:42:5c:ef:6c:0c:1d:0c:09:
6a:82:11:24:22:96:84:85:5b:c0:55:64:bc:99:4d:46:fe:0f:
fa:41:3b:ad:4b:d4:f5:a2:58:0f:c6:ac:64:74:f8:de:83:40:
92:bd:03:73:f0:8f:07:b9:d5:18:96:65:94:84:b6:f2:a2:4b:
61:d9:ed:af:5a:ad:89:fe:ac:ab:5a:01:4b:22:be:e0:9d:d0:
5c:6c:07:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fMNqcp/3RCuSFZn09EYpMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MTQzZGQ2Njc2OWRiMTgzYjhiZDc5YjkwZmM4M2Q5NWQ2
ZTQ4ZmIwHhcNMjUwNjI4MTcwMTM2WhcNMjUwNjI5MTcwMTM2WjAzMTEwLwYDVQQD
EyhlZjc5ODZjNjliZmUzNDZhYjQ2ZTFkYTZmMTZmYmIxNjM0MzVhMzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApIYORtSS/Uu4Z4v3QtmYYJ8nqWcN
2S/si4JYQbViqNMmBkGNekr+sgkf1AcVwdxjpza+ArGwstAYuCdppZFsHO3RqLAh
dFrW6FQdHBr9WpRNtulZToFWppd5qaHdns5AumWyMLIxfoDw8UYkiHQEvU7QlD2p
qn8L4o2dxnWJ3SL1Z3DzJtdYIUAooO3jEQf6L1Z6/JmgKckwDTOnl/2lJBwHtYMW
8ZC6R/R9hn6Rr3uBWwgrzeJQ8ngv+e/Z3qqgdkFcgwbkbjGUnJFQLZt5sgT9k5hP
i3IOsruLgp5jbN/3TOl2gl4f/8rOj7/T+31Y8iFkWgwc4wRtykxvVn6kGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO95hsab/jRqtG4dpvFvuxY0NaMGMB8GA1UdIwQY
MBaAFEcUPdZnadsYO4vXm5D8g9ldbkj7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2It
MzQ2MDI2MjQ1NWIyLzEvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy8zZjQzOTUtMTg3MS00Y2IxLTgwN2ItMzQ2MDI2MjQ1NWIy
LzEvUnhROTFtZHAyeGc3aTllYmtQeUQyVjF1U1BzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEANpt0DznD
xmxzVETY8y0IZMb5McwGP4YCBlw4tTKCGenJClSQkkZYmJOqB8G2q0/mtANeDyMx
5g8cSSVjuBsSfluYK2ucZ50LoJtRll6N+cvj7tD5KPZ0rKaDWWJSNxlbJa20uZpP
0zs7ctaEL+FwVtbGILVUegGuQN3EQbpIXPCPALje88M4h8oAsI3XEOr2QCzUADHL
XFuvgUaTnuBpjW7dgOfGtKedaX3MZUJc72wMHQwJaoIRJCKWhIVbwFVkvJlNRv4P
+kE7rUvU9aJYD8asZHT43oNAkr0Dc/CPB7nVGJZllIS28qJLYdntr1qtif6sq1oB
SyK+4J3QXGwHJg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:37:21 2025 by rpki-client