Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
File: S3tzzZvRdD99P17GvVChk170gB4.mft (raw, json)
Hash identifier: LGsmE1m0m2zXnN+tA5cwee3YrRlfW+EvTdRaCYsEEns=
Subject key identifier: B2:0D:07:ED:B9:10:C4:5D:A7:56:87:19:79:65:AC:C2:F5:ED:A6:04
Authority key identifier: 4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
Certificate issuer: /CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Certificate serial: 0197B7EA85F9FF89D0E022D11743F37D9503
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
Manifest number: 1545
Signing time: Sat 28 Jun 2025 19:01:29 +0000
Manifest this update: Sat 28 Jun 2025 19:01:29 +0000
Manifest next update: Sun 29 Jun 2025 19:01:29 +0000
Files and hashes: 1: M2oh_KntEbzSd5x9NMZSq_CLZnQ.roa (hash: x3vhRRKg/BRlfpWUDclKnemjloDpJmmJOqeSSdSoUa4=)
2: S3tzzZvRdD99P17GvVChk170gB4.crl (hash: ya/bzwHh79FtH+kccEMQuRryZAtoJsf54dc+jRzhY8g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:85:f9:ff:89:d0:e0:22:d1:17:43:f3:7d:95:03
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4b7b73cd9bd1743f7d3f5ec6bd50a1935ef4801e
Validity
Not Before: Jun 28 19:01:29 2025 GMT
Not After : Jun 29 19:01:29 2025 GMT
Subject: CN=b20d07edb910c45da75687197965acc2f5eda604
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:14:a0:67:3f:20:eb:36:a1:a8:39:3a:a1:ee:
f6:76:a6:c6:c6:09:aa:c8:64:39:ae:ed:44:ef:36:
c6:31:78:6e:5d:af:2f:9e:df:4b:aa:58:52:ce:c6:
f4:81:ad:bf:b4:8b:a6:6f:69:fd:61:7e:fd:f6:09:
1c:42:0b:9e:43:ca:2b:1e:73:f5:e6:d9:f4:f4:12:
e1:1c:51:7e:7e:d4:6c:78:83:1b:67:0d:c9:b5:77:
e9:84:e0:fd:0b:13:d1:b1:ff:82:8f:1a:d1:58:c2:
93:94:a0:0a:88:0a:d7:18:61:83:f2:66:6c:ec:7d:
43:43:b1:9c:d4:a6:54:b9:25:d5:9b:c1:ff:4e:4e:
04:ba:ab:7d:8d:29:96:8d:34:e6:5f:5a:de:b4:85:
7b:e1:eb:c5:e3:91:0d:e0:87:ac:38:b9:67:a4:01:
50:e8:37:d9:e6:f3:0e:f8:57:fa:3b:27:8b:98:a8:
33:25:56:f0:6f:f5:47:45:12:a0:f2:90:dd:e6:a8:
81:ae:9a:f7:9b:fe:21:31:70:d6:f9:3e:1d:9d:3a:
90:1f:28:6e:e4:5d:9c:56:77:65:39:77:5f:2f:1c:
93:96:fe:0c:cd:16:76:8a:32:12:a4:f2:ae:b6:c6:
bb:5d:0d:77:61:05:1f:da:f5:52:88:d6:bc:83:34:
57:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B2:0D:07:ED:B9:10:C4:5D:A7:56:87:19:79:65:AC:C2:F5:ED:A6:04
X509v3 Authority Key Identifier:
keyid:4B:7B:73:CD:9B:D1:74:3F:7D:3F:5E:C6:BD:50:A1:93:5E:F4:80:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S3tzzZvRdD99P17GvVChk170gB4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c7/95f479-b507-4edb-92f3-e2b58f5e4abb/1/S3tzzZvRdD99P17GvVChk170gB4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b7:a0:20:25:6a:00:ce:f4:de:3c:67:1e:d8:43:2a:b4:30:04:
08:4d:ce:7d:bd:78:40:cc:b0:bc:04:26:47:c3:5c:35:f0:c9:
20:bc:a3:fa:02:94:cc:c6:0e:df:e0:b1:a9:bf:c7:4b:8c:ac:
fb:92:0e:fe:26:42:b5:8a:3a:35:41:18:7e:fd:97:55:95:78:
83:51:af:8c:31:92:54:48:8b:ca:02:b8:d8:dc:94:90:0d:66:
f2:c5:f7:f1:aa:b9:5c:38:3e:5e:31:e2:44:c4:cf:f3:4f:17:
09:9f:2a:96:39:31:51:6f:2e:4e:fd:a0:e5:5b:35:80:36:bd:
de:16:7b:79:bf:c0:61:42:32:85:c1:b1:b1:b7:06:c4:ad:66:
c6:38:1a:c0:13:f7:b0:05:9b:93:5d:96:6a:95:38:8b:dd:b4:
b2:a4:97:b6:7c:fc:ba:5e:da:bd:19:e0:a8:fb:f3:bb:ae:40:
eb:f7:9d:87:bd:b8:be:e5:02:62:b5:a0:e3:3a:ed:49:50:49:
2c:91:c0:19:bc:00:66:41:71:b1:25:0c:6c:f4:ae:d7:7c:f1:
5c:a8:3a:09:5a:28:2a:59:e8:c4:3b:8b:2a:93:ed:9e:f6:b0:
2a:59:96:1f:67:b1:b3:d3:33:18:df:69:5b:d9:d1:e0:87:a6:
6a:e6:6f:3a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36oX5/4nQ4CLRF0PzfZUDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiN2I3M2NkOWJkMTc0M2Y3ZDNmNWVjNmJkNTBhMTkzNWVm
NDgwMWUwHhcNMjUwNjI4MTkwMTI5WhcNMjUwNjI5MTkwMTI5WjAzMTEwLwYDVQQD
EyhiMjBkMDdlZGI5MTBjNDVkYTc1Njg3MTk3OTY1YWNjMmY1ZWRhNjA0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqxSgZz8g6zahqDk6oe72dqbGxgmq
yGQ5ru1E7zbGMXhuXa8vnt9LqlhSzsb0ga2/tIumb2n9YX799gkcQgueQ8orHnP1
5tn09BLhHFF+ftRseIMbZw3JtXfphOD9CxPRsf+CjxrRWMKTlKAKiArXGGGD8mZs
7H1DQ7Gc1KZUuSXVm8H/Tk4Euqt9jSmWjTTmX1retIV74evF45EN4IesOLlnpAFQ
6DfZ5vMO+Ff6OyeLmKgzJVbwb/VHRRKg8pDd5qiBrpr3m/4hMXDW+T4dnTqQHyhu
5F2cVndlOXdfLxyTlv4MzRZ2ijISpPKutsa7XQ13YQUf2vVSiNa8gzRXowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLINB+25EMRdp1aHGXllrML17aYEMB8GA1UdIwQY
MBaAFEt7c82b0XQ/fT9exr1QoZNe9IAeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMt
ZTJiNThmNWU0YWJiLzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNy85NWY0NzktYjUwNy00ZWRiLTkyZjMtZTJiNThmNWU0YWJi
LzEvUzN0enpadlJkRDk5UDE3R3ZWQ2hrMTcwZ0I0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAt6AgJWoA
zvTePGce2EMqtDAECE3Ofb14QMywvAQmR8NcNfDJILyj+gKUzMYO3+Cxqb/HS4ys
+5IO/iZCtYo6NUEYfv2XVZV4g1GvjDGSVEiLygK42NyUkA1m8sX38aq5XDg+XjHi
RMTP808XCZ8qljkxUW8uTv2g5Vs1gDa93hZ7eb/AYUIyhcGxsbcGxK1mxjgawBP3
sAWbk12WapU4i920sqSXtnz8ul7avRngqPvzu65A6/edh724vuUCYrWg4zrtSVBJ
LJHAGbwAZkFxsSUMbPSu13zxXKg6CVooKlnoxDuLKpPtnvawKlmWH2exs9MzGN9p
W9nR4IemauZvOg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:55:39 2025 by rpki-client