Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
File: 0YHQxAlRpPkA5NndnCDkhWNQkg4.mft (raw, json)
Hash identifier: P8GJTVLL+rBseJuTa31zzkvjgKnctPJ2eURgHIEbxSg=
Subject key identifier: B3:E5:83:9D:80:03:BF:5D:D5:7A:FA:C0:59:DE:0A:0E:A6:A8:30:CC
Authority key identifier: D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
Certificate issuer: /CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Certificate serial: 0197B7454B2B6AE4DA34B45E9F99BC32E71B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
Manifest number: 15BA
Signing time: Sat 28 Jun 2025 16:01:01 +0000
Manifest this update: Sat 28 Jun 2025 16:01:01 +0000
Manifest next update: Sun 29 Jun 2025 16:01:01 +0000
Files and hashes: 1: 0YHQxAlRpPkA5NndnCDkhWNQkg4.crl (hash: EcKEDzDOjFYn848VjAO+p+I5XfJlXVtwumgSFnLEWUg=)
2: 2VAk9AH_jCxBcmS3UFNJkQWmjmM.roa (hash: OTJmVbnhsENHWSTSM66puZiLKu+kw6NtZbXCQeGN/YQ=)
3: 5kzmDTi0KIXTn8Ss2d36rIX1bZA.roa (hash: VgZeJy91lZpXmzMfyFbTui1JSN8xoQwBbcwBQ01/D0A=)
4: SA8oSTczcAjgQR1zXNlc0Vgrtd0.roa (hash: fw6Ud0wGZN9ltnlpcBVHmq+wSri7RZaFK71pfthgGyU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:4b:2b:6a:e4:da:34:b4:5e:9f:99:bc:32:e7:1b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d181d0c40951a4f900e4d9dd9c20e4856350920e
Validity
Not Before: Jun 28 16:01:01 2025 GMT
Not After : Jun 29 16:01:01 2025 GMT
Subject: CN=b3e5839d8003bf5dd57afac059de0a0ea6a830cc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c3:27:46:45:97:33:48:ca:df:6e:fd:58:ae:f4:
a9:c1:6b:69:1a:1c:47:d1:28:e8:54:f1:61:3e:fa:
8d:12:03:63:18:26:00:f5:7a:fd:21:5b:a8:da:fd:
57:ca:73:40:50:26:cb:f6:88:8c:c9:2c:a5:36:fd:
4a:de:d9:a6:bb:b9:e5:1a:0c:69:ad:89:29:1d:ed:
06:ca:c8:2a:4f:0a:a7:15:60:cd:6a:a5:15:91:ef:
7f:f7:3c:80:58:84:a8:07:ef:bc:38:fd:9c:28:c1:
5e:25:59:05:13:f3:87:de:5d:3d:68:05:49:8f:a8:
c4:3f:57:6a:20:cb:ae:33:fa:9c:07:bb:19:f2:1c:
81:31:83:00:76:6f:04:f8:61:5a:be:85:cd:63:08:
75:6c:8f:a5:62:7f:ee:66:0e:e1:19:5d:19:11:81:
11:6f:8c:8b:da:e7:87:ef:ee:9e:32:36:63:a1:53:
a7:85:45:a5:09:a3:a3:0e:4f:8c:2d:36:7b:97:ae:
40:ed:5b:7f:0b:60:09:10:c2:fe:69:08:cd:d9:0e:
6a:91:b3:b2:19:a3:3e:22:ce:df:13:76:6b:a9:c3:
f4:a5:f9:bc:9b:17:e5:56:a9:a1:bf:1e:39:12:71:
14:3f:c0:6b:3e:01:4b:79:a7:f4:ca:20:47:78:00:
da:85
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B3:E5:83:9D:80:03:BF:5D:D5:7A:FA:C0:59:DE:0A:0E:A6:A8:30:CC
X509v3 Authority Key Identifier:
keyid:D1:81:D0:C4:09:51:A4:F9:00:E4:D9:DD:9C:20:E4:85:63:50:92:0E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0YHQxAlRpPkA5NndnCDkhWNQkg4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ab/a9d79e-b282-43c1-8b8a-388b81c0c90c/1/0YHQxAlRpPkA5NndnCDkhWNQkg4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
56:e4:fd:0c:d7:f9:98:0b:1c:21:2a:34:98:91:3c:b0:4c:b7:
ca:45:ff:e4:ef:3a:20:cf:9c:3b:7f:ef:22:ed:02:db:c6:b3:
8e:77:26:cb:b7:d2:a2:72:0d:40:e3:90:a1:76:ee:e7:e4:92:
4d:23:24:30:8a:2d:32:de:95:ec:5c:37:2f:2b:16:1f:35:bc:
a3:a7:c1:7a:32:56:80:b1:7d:68:02:ef:c7:cb:03:91:f1:de:
ac:e0:01:67:53:e0:75:bb:99:84:7d:79:77:82:16:88:66:cb:
27:a3:08:34:e2:91:7a:ac:82:d7:17:90:d6:82:27:39:b7:f8:
ed:b8:10:66:d3:a6:8b:17:8c:d2:bc:e0:18:01:fb:3b:c7:c9:
2a:7e:e6:86:78:49:9b:49:c5:d7:2d:bf:e6:dd:08:75:99:16:
41:5b:fc:bb:0c:4b:23:e5:91:e1:b9:a4:1b:4d:8e:ca:36:84:
5a:32:7c:2c:8d:c6:b7:07:20:e6:9f:e6:89:5f:99:9f:a5:46:
b1:36:1d:be:ed:cb:05:77:7f:75:cb:93:ac:ed:9d:1b:f9:4e:
4c:c9:d4:ea:9d:29:28:fb:8c:93:ab:82:d4:15:fa:50:b3:1a:
ed:58:db:62:c1:4c:ef:a4:82:75:c1:80:fe:8f:1c:76:29:da:
46:bc:31:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RUsrauTaNLRen5m8MucbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQxODFkMGM0MDk1MWE0ZjkwMGU0ZDlkZDljMjBlNDg1NjM1
MDkyMGUwHhcNMjUwNjI4MTYwMTAxWhcNMjUwNjI5MTYwMTAxWjAzMTEwLwYDVQQD
EyhiM2U1ODM5ZDgwMDNiZjVkZDU3YWZhYzA1OWRlMGEwZWE2YTgzMGNjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwydGRZczSMrfbv1YrvSpwWtpGhxH
0SjoVPFhPvqNEgNjGCYA9Xr9IVuo2v1XynNAUCbL9oiMySylNv1K3tmmu7nlGgxp
rYkpHe0GysgqTwqnFWDNaqUVke9/9zyAWISoB++8OP2cKMFeJVkFE/OH3l09aAVJ
j6jEP1dqIMuuM/qcB7sZ8hyBMYMAdm8E+GFavoXNYwh1bI+lYn/uZg7hGV0ZEYER
b4yL2ueH7+6eMjZjoVOnhUWlCaOjDk+MLTZ7l65A7Vt/C2AJEML+aQjN2Q5qkbOy
GaM+Is7fE3ZrqcP0pfm8mxflVqmhvx45EnEUP8BrPgFLeaf0yiBHeADahQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLPlg52AA79d1Xr6wFneCg6mqDDMMB8GA1UdIwQY
MBaAFNGB0MQJUaT5AOTZ3Zwg5IVjUJIOMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEt
Mzg4YjgxYzBjOTBjLzEvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hYi9hOWQ3OWUtYjI4Mi00M2MxLThiOGEtMzg4YjgxYzBjOTBj
LzEvMFlIUXhBbFJwUGtBNU5uZG5DRGtoV05Ra2c0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVuT9DNf5
mAscISo0mJE8sEy3ykX/5O86IM+cO3/vIu0C28azjncmy7fSonINQOOQoXbu5+SS
TSMkMIotMt6V7Fw3LysWHzW8o6fBejJWgLF9aALvx8sDkfHerOABZ1PgdbuZhH15
d4IWiGbLJ6MINOKReqyC1xeQ1oInObf47bgQZtOmixeM0rzgGAH7O8fJKn7mhnhJ
m0nF1y2/5t0IdZkWQVv8uwxLI+WR4bmkG02OyjaEWjJ8LI3Gtwcg5p/miV+Zn6VG
sTYdvu3LBXd/dcuTrO2dG/lOTMnU6p0pKPuMk6uC1BX6ULMa7VjbYsFM76SCdcGA
/o8cdinaRrwxWg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:13:03 2025 by rpki-client