Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
File: aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft (raw, json)
Hash identifier: UQbRGPypmnR685FUIahKDdWYIKT3dJimHKga/+lNzdw=
Subject key identifier: 7E:D1:6F:73:B6:F1:B2:44:B6:9B:AC:B7:AB:F3:F0:89:4A:4F:7E:CF
Authority key identifier: 68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
Certificate issuer: /CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Certificate serial: 0197C26E0E19781F6AA868FD2B4CD125F698
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
Manifest number: 14B9
Signing time: Mon 30 Jun 2025 20:01:21 +0000
Manifest this update: Mon 30 Jun 2025 20:01:21 +0000
Manifest next update: Tue 01 Jul 2025 20:01:21 +0000
Files and hashes: 1: aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl (hash: JYhx3LfUg3tQHFmNvNPZsXXbDrjOczCCZZ8kP+SwKEM=)
2: cMnqdtCxCnyUSWOfUxTVBWPspak.roa (hash: OOJ4v4cc4LujDvo5fdL7b0ZauPjg9CekPa/sj+wo+LE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 20:01:21 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:6e:0e:19:78:1f:6a:a8:68:fd:2b:4c:d1:25:f6:98
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68f063ed2e0a2674bc471010189fc77adb31c17f
Validity
Not Before: Jun 30 20:01:21 2025 GMT
Not After : Jul 1 20:01:21 2025 GMT
Subject: CN=7ed16f73b6f1b244b69bacb7abf3f0894a4f7ecf
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a2:42:ca:cc:0f:b1:d0:2e:e6:b3:99:95:35:d3:
fa:6b:cc:b3:49:68:91:34:e2:bd:b5:c4:c8:0c:36:
5b:24:50:8a:e6:c3:f0:aa:85:e8:91:cf:86:51:da:
12:14:98:e2:06:d9:62:3b:00:2d:a3:6b:80:a3:c8:
82:78:0a:6c:b8:be:c7:82:09:b9:80:55:14:36:e9:
49:81:f1:85:ed:48:65:1f:83:10:9b:78:ed:c7:e5:
09:2d:6a:2c:ee:00:7a:b7:c7:52:6e:b1:1c:fb:97:
fd:24:c5:71:ac:40:e2:6c:29:22:01:db:67:57:0e:
c7:9e:ec:98:0c:b3:bf:08:f1:2a:90:22:66:48:ea:
31:5d:d6:e5:cd:a8:4b:01:7d:f0:27:59:96:91:57:
05:45:66:c8:01:b0:34:6b:72:f3:d7:a6:96:31:f6:
83:ed:7a:46:fd:77:77:92:38:6a:da:22:73:c5:40:
36:5b:e2:16:65:71:9c:86:0c:4b:3b:5c:67:9e:b1:
42:80:c4:a4:39:37:db:60:84:77:a0:5d:51:75:30:
bc:01:6a:6c:6b:09:8a:d9:63:d3:9f:ea:27:45:ff:
19:1c:fd:57:4f:8b:06:19:26:30:e5:92:da:be:5d:
dc:7f:2b:4a:5a:af:99:23:0f:8e:36:29:2c:98:fd:
b4:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7E:D1:6F:73:B6:F1:B2:44:B6:9B:AC:B7:AB:F3:F0:89:4A:4F:7E:CF
X509v3 Authority Key Identifier:
keyid:68:F0:63:ED:2E:0A:26:74:BC:47:10:10:18:9F:C7:7A:DB:31:C1:7F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aPBj7S4KJnS8RxAQGJ_HetsxwX8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a7/61b73b-f265-43d4-b5b3-946fdafe2ec6/1/aPBj7S4KJnS8RxAQGJ_HetsxwX8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6f:d0:a3:98:73:75:83:b5:dc:01:d5:b7:6f:db:d4:86:c5:b1:
b3:45:8e:7b:63:fb:ef:4e:0d:1f:ae:1f:f6:8d:49:b3:6e:35:
0a:b8:b4:f4:f8:7b:13:f6:06:59:3f:5b:a0:d3:e3:eb:ff:d0:
11:94:a1:fa:46:f0:e1:28:a9:33:32:87:66:dd:2d:13:64:9a:
04:d4:9d:3c:93:1b:e2:c3:53:6b:d8:17:e7:a9:43:66:48:1a:
96:df:2f:e5:d1:c2:3d:b2:98:e2:e0:87:73:5e:df:e1:78:00:
e3:70:05:6d:e3:b9:e7:09:ab:10:85:c3:82:92:74:65:2f:44:
f1:cc:41:2f:cb:4e:ea:9e:4d:a8:e9:39:fc:b1:3f:3d:e2:9e:
27:10:2d:82:10:4c:4b:6b:f5:24:25:73:ca:ed:10:48:d5:08:
45:33:df:a0:7b:63:27:90:c6:83:48:c1:86:dd:fc:58:f8:d6:
cc:42:21:47:fb:58:f2:eb:a4:e2:0d:41:ce:88:fc:06:8c:bb:
9f:fd:3d:09:11:cb:43:12:11:7e:7a:f1:ec:46:8a:43:e2:68:
fb:14:04:53:f7:12:e5:e0:f0:02:eb:4f:d1:35:e4:12:83:d2:
00:bd:af:4e:40:92:ca:44:06:51:fb:1b:17:55:35:37:19:ba:
f5:c0:36:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfCbg4ZeB9qqGj9K0zRJfaYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4ZjA2M2VkMmUwYTI2NzRiYzQ3MTAxMDE4OWZjNzdhZGIz
MWMxN2YwHhcNMjUwNjMwMjAwMTIxWhcNMjUwNzAxMjAwMTIxWjAzMTEwLwYDVQQD
Eyg3ZWQxNmY3M2I2ZjFiMjQ0YjY5YmFjYjdhYmYzZjA4OTRhNGY3ZWNmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAokLKzA+x0C7ms5mVNdP6a8yzSWiR
NOK9tcTIDDZbJFCK5sPwqoXokc+GUdoSFJjiBtliOwAto2uAo8iCeApsuL7Hggm5
gFUUNulJgfGF7UhlH4MQm3jtx+UJLWos7gB6t8dSbrEc+5f9JMVxrEDibCkiAdtn
Vw7HnuyYDLO/CPEqkCJmSOoxXdblzahLAX3wJ1mWkVcFRWbIAbA0a3Lz16aWMfaD
7XpG/Xd3kjhq2iJzxUA2W+IWZXGchgxLO1xnnrFCgMSkOTfbYIR3oF1RdTC8AWps
awmK2WPTn+onRf8ZHP1XT4sGGSYw5ZLavl3cfytKWq+ZIw+ONiksmP20YQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFH7Rb3O28bJEtpust6vz8IlKT37PMB8GA1UdIwQY
MBaAFGjwY+0uCiZ0vEcQEBifx3rbMcF/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYVBCajdTNEtKblM4UnhBUUdKX0hldHN4d1g4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNy82MWI3M2ItZjI2NS00M2Q0LWI1YjMt
OTQ2ZmRhZmUyZWM2LzEvYVBCajdTNEtKblM4UnhBUUdKX0hldHN4d1g4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNy82MWI3M2ItZjI2NS00M2Q0LWI1YjMtOTQ2ZmRhZmUyZWM2
LzEvYVBCajdTNEtKblM4UnhBUUdKX0hldHN4d1g4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAb9CjmHN1
g7XcAdW3b9vUhsWxs0WOe2P7704NH64f9o1Js241Cri09Ph7E/YGWT9boNPj6//Q
EZSh+kbw4SipMzKHZt0tE2SaBNSdPJMb4sNTa9gX56lDZkgalt8v5dHCPbKY4uCH
c17f4XgA43AFbeO55wmrEIXDgpJ0ZS9E8cxBL8tO6p5NqOk5/LE/PeKeJxAtghBM
S2v1JCVzyu0QSNUIRTPfoHtjJ5DGg0jBht38WPjWzEIhR/tY8uuk4g1Bzoj8Boy7
n/09CRHLQxIRfnrx7EaKQ+Jo+xQEU/cS5eDwAutP0TXkEoPSAL2vTkCSykQGUfsb
F1U1Nxm69cA2vg==
-----END CERTIFICATE-----
Generated at Tue Jul 1 02:36:35 2025 by rpki-client