Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
File: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft (raw, json)
Hash identifier: aC5mi+ZRuo+kEYcmsBItv4acRpsb469JR9rnqXbdVqc=
Subject key identifier: 99:C2:3D:5E:73:A1:79:34:9F:0E:46:A7:40:91:9F:49:7D:D5:2B:DA
Authority key identifier: 0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
Certificate issuer: /CN=0b84ea549f88211058b34bfcab0640c3030393c3
Certificate serial: 0197B6A19A7B46ECCC931085D731E9EEC0D1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
Manifest number: 15B5
Signing time: Sat 28 Jun 2025 13:02:13 +0000
Manifest this update: Sat 28 Jun 2025 13:02:13 +0000
Manifest next update: Sun 29 Jun 2025 13:02:13 +0000
Files and hashes: 1: C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl (hash: S3b90k2sXMekfThzAH8c9cIBo55Ml9vgyHNC8XbkeXY=)
2: P-Dx0ihfKx4UBeNlSrnWTMyyfvY.roa (hash: viXxvbgM6fcm3+uNTvobtmlKGENasOgtCzi4bFmu9u0=)
3: VjB61y70CykGJrI1joYA_LZs7BQ.roa (hash: 0fdGzWqdSh6FPKMh+lErtdFv9hP3dlRfbAfCokMP6HQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:9a:7b:46:ec:cc:93:10:85:d7:31:e9:ee:c0:d1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0b84ea549f88211058b34bfcab0640c3030393c3
Validity
Not Before: Jun 28 13:02:13 2025 GMT
Not After : Jun 29 13:02:13 2025 GMT
Subject: CN=99c23d5e73a179349f0e46a740919f497dd52bda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:a4:2d:ce:fd:40:4f:78:5d:5f:d8:b0:f1:04:
d1:b3:68:ba:60:94:31:9a:3c:1e:86:a0:9b:85:60:
3c:df:d3:5c:34:e8:b8:98:26:32:3a:0d:73:a6:76:
a9:05:c2:df:e4:06:6c:08:42:1b:f0:e7:82:74:50:
ec:bb:90:39:18:56:64:06:ac:0f:02:78:8e:b2:e7:
23:e1:be:dd:1a:f4:78:21:25:80:c1:fd:50:79:98:
19:b5:e8:89:41:46:fe:92:e1:3b:36:29:92:9c:97:
5d:96:2b:8e:e6:a8:e2:3a:bc:4b:84:c2:e9:ce:d6:
bb:15:6d:6d:8e:93:42:4e:4d:58:ad:60:bc:87:32:
a6:0f:87:af:5d:76:bc:56:86:41:58:24:6f:c2:09:
2a:4d:7a:de:2d:1a:6c:d0:d8:fd:fd:bb:82:ae:06:
70:8a:7f:1d:57:2c:a6:07:85:d8:39:c3:a3:33:9c:
82:4d:ad:db:99:d4:14:20:77:d4:64:23:46:33:d7:
d5:25:0c:68:e7:21:06:2d:f8:8f:3e:0e:cd:2a:1e:
dc:cc:aa:af:18:f2:38:9c:f9:ef:03:03:71:45:e1:
6c:e5:72:fe:ca:0c:c9:cb:bb:a4:15:62:fd:ff:f5:
65:40:a6:4a:3c:fc:c5:d1:ac:bc:c8:98:f8:05:8f:
8b:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:C2:3D:5E:73:A1:79:34:9F:0E:46:A7:40:91:9F:49:7D:D5:2B:DA
X509v3 Authority Key Identifier:
keyid:0B:84:EA:54:9F:88:21:10:58:B3:4B:FC:AB:06:40:C3:03:03:93:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/2fc167-b357-4394-b4e8-c825be2813bc/1/C4TqVJ-IIRBYs0v8qwZAwwMDk8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
65:e3:51:48:bf:ee:09:b8:27:a6:fa:cd:17:b1:5c:b9:e7:34:
d2:2d:2e:37:fa:03:36:bc:52:70:10:ac:9b:1d:5f:54:af:48:
db:89:40:4c:46:7a:83:02:06:b9:0a:89:37:68:db:a5:ff:71:
53:55:4f:16:28:d8:f2:fa:c5:e7:2e:3b:6c:9e:9e:80:ed:c8:
8c:c9:64:b2:19:b1:76:c1:06:2e:a4:d5:74:30:de:44:a9:ab:
4f:88:51:c5:b8:93:2c:59:ff:d3:e1:f9:64:b8:0d:cf:8b:ff:
bb:ee:62:c5:33:d8:70:e9:3e:1c:00:ae:90:c6:81:08:52:4b:
3a:57:75:32:c3:fb:6f:5e:e8:8a:c3:ad:68:51:ad:a0:8c:47:
f1:b0:5c:ff:01:02:b7:6a:f9:6a:3a:fd:0b:f2:6b:f4:f2:0d:
f2:df:5b:75:4c:ff:4d:ec:a9:67:3c:22:40:58:4a:1b:c0:4d:
83:fb:e8:56:3e:c8:ed:fb:85:d6:d8:9c:ec:06:5d:b3:80:58:
e5:1f:42:a3:ac:4a:f1:6f:5c:50:06:64:fd:40:ee:b0:a1:83:
d1:cf:fe:b5:dc:a2:e6:50:ed:b3:f8:9a:43:ce:41:65:40:e3:
fd:b6:6d:e8:13:e8:67:69:dc:d5:0f:0a:19:08:7e:24:63:39:
fb:d9:8e:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oZp7RuzMkxCF1zHp7sDRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiODRlYTU0OWY4ODIxMTA1OGIzNGJmY2FiMDY0MGMzMDMw
MzkzYzMwHhcNMjUwNjI4MTMwMjEzWhcNMjUwNjI5MTMwMjEzWjAzMTEwLwYDVQQD
Eyg5OWMyM2Q1ZTczYTE3OTM0OWYwZTQ2YTc0MDkxOWY0OTdkZDUyYmRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsKQtzv1AT3hdX9iw8QTRs2i6YJQx
mjwehqCbhWA839NcNOi4mCYyOg1zpnapBcLf5AZsCEIb8OeCdFDsu5A5GFZkBqwP
AniOsucj4b7dGvR4ISWAwf1QeZgZteiJQUb+kuE7NimSnJddliuO5qjiOrxLhMLp
zta7FW1tjpNCTk1YrWC8hzKmD4evXXa8VoZBWCRvwgkqTXreLRps0Nj9/buCrgZw
in8dVyymB4XYOcOjM5yCTa3bmdQUIHfUZCNGM9fVJQxo5yEGLfiPPg7NKh7czKqv
GPI4nPnvAwNxReFs5XL+ygzJy7ukFWL9//VlQKZKPPzF0ay8yJj4BY+L7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJnCPV5zoXk0nw5Gp0CRn0l91SvaMB8GA1UdIwQY
MBaAFAuE6lSfiCEQWLNL/KsGQMMDA5PDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzRUcVZKLUlJUkJZczB2OHF3WkF3d01EazhNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS8yZmMxNjctYjM1Ny00Mzk0LWI0ZTgt
YzgyNWJlMjgxM2JjLzEvQzRUcVZKLUlJUkJZczB2OHF3WkF3d01EazhNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS8yZmMxNjctYjM1Ny00Mzk0LWI0ZTgtYzgyNWJlMjgxM2Jj
LzEvQzRUcVZKLUlJUkJZczB2OHF3WkF3d01EazhNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZeNRSL/u
CbgnpvrNF7Fcuec00i0uN/oDNrxScBCsmx1fVK9I24lATEZ6gwIGuQqJN2jbpf9x
U1VPFijY8vrF5y47bJ6egO3IjMlkshmxdsEGLqTVdDDeRKmrT4hRxbiTLFn/0+H5
ZLgNz4v/u+5ixTPYcOk+HACukMaBCFJLOld1MsP7b17oisOtaFGtoIxH8bBc/wEC
t2r5ajr9C/Jr9PIN8t9bdUz/TeypZzwiQFhKG8BNg/voVj7I7fuF1tic7AZds4BY
5R9Co6xK8W9cUAZk/UDusKGD0c/+tdyi5lDts/iaQ85BZUDj/bZt6BPoZ2nc1Q8K
GQh+JGM5+9mOWg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:20:16 2025 by rpki-client