Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
File: 1i15SeaYRB2-mrxWCcSerKc8l5Y.mft (raw, json)
Hash identifier: U0lH8LLNLKm5SOhewSVnzpe4o9OGTzKY7LHIrEseAv4=
Subject key identifier: DA:3A:F1:7D:2F:F5:FB:41:66:E9:61:FD:60:2C:CD:ED:43:E6:83:8B
Authority key identifier: D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
Certificate issuer: /CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Certificate serial: 0197B6A2223C4F4B755C7DA8903FC44E4339
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
Manifest number: 0F21
Signing time: Sat 28 Jun 2025 13:02:48 +0000
Manifest this update: Sat 28 Jun 2025 13:02:48 +0000
Manifest next update: Sun 29 Jun 2025 13:02:48 +0000
Files and hashes: 1: 1i15SeaYRB2-mrxWCcSerKc8l5Y.crl (hash: T9YEjvnrWsgrtzTo+A8MAbHUcFL1+h+2l8wBBKukP9U=)
2: d6njcJAvU5XAKbAJO-1stP-sI3c.roa (hash: Qb51F1ZjPbC9UkzfA0CmXmJOGj7X7JIQuEBdAlbn5BM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:48 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:22:3c:4f:4b:75:5c:7d:a8:90:3f:c4:4e:43:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d62d7949e698441dbe9abc5609c49eaca73c9796
Validity
Not Before: Jun 28 13:02:48 2025 GMT
Not After : Jun 29 13:02:48 2025 GMT
Subject: CN=da3af17d2ff5fb4166e961fd602ccded43e6838b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:aa:ea:5f:64:95:46:c1:07:d8:56:43:1b:7b:
54:96:9f:64:d0:2a:6b:bf:90:00:a6:41:84:7f:85:
ab:4e:9e:91:6a:b7:f9:52:6f:8f:5d:df:ec:e0:14:
9f:6c:03:53:74:d1:76:7d:74:bd:2b:20:14:59:6f:
de:b9:a4:2d:08:32:bd:00:22:0b:e3:c7:11:e1:9b:
fb:2d:9a:46:67:1b:80:78:77:46:ee:d0:79:9f:1b:
73:13:00:18:b8:78:df:c2:94:e3:b3:36:78:33:9e:
b9:3d:64:d9:51:36:f8:bc:88:1d:52:f3:76:1c:01:
6d:94:63:6e:5f:a9:b8:95:fb:c2:5f:d1:50:0d:38:
6b:58:6e:32:e9:04:5c:14:79:36:fb:4b:9d:74:a8:
c3:99:54:f6:60:05:40:2b:39:49:69:7f:bb:e0:bd:
cb:09:8a:a0:60:e3:ad:a2:dd:8b:b0:ca:0a:f2:ac:
cd:68:d5:c0:fe:cf:b3:88:08:3e:7b:e1:9e:64:ca:
10:66:39:fe:4e:48:57:53:0e:53:9e:7e:a5:1e:1e:
50:cb:88:b9:87:6c:b1:e3:9e:0e:8b:20:95:ab:5e:
c5:8c:1a:f1:de:a0:f2:60:20:d6:ec:39:23:c8:6b:
cf:7a:d3:63:db:6d:98:c0:ac:ad:04:2c:b2:6e:5b:
20:a7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DA:3A:F1:7D:2F:F5:FB:41:66:E9:61:FD:60:2C:CD:ED:43:E6:83:8B
X509v3 Authority Key Identifier:
keyid:D6:2D:79:49:E6:98:44:1D:BE:9A:BC:56:09:C4:9E:AC:A7:3C:97:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/1i15SeaYRB2-mrxWCcSerKc8l5Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cf/ac0923-7eb1-4a5f-9105-15b21a9b4325/1/1i15SeaYRB2-mrxWCcSerKc8l5Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2e:43:45:5c:43:07:c2:77:e3:aa:63:b0:7b:12:2f:fa:44:9e:
3c:e5:19:9d:42:e2:05:55:d2:52:31:f2:27:ac:3b:63:79:4c:
ff:6b:8b:75:8c:73:ad:61:8d:b9:e8:57:5d:10:93:0c:33:57:
cf:40:30:53:d6:95:39:72:9e:b5:d8:2d:0d:cf:88:a2:80:43:
a3:e8:7c:de:90:3e:e4:2f:d8:46:50:b6:1a:e9:82:e0:65:af:
3e:09:22:53:93:e4:bb:41:99:bb:26:f8:0d:74:37:1e:4c:b3:
75:ff:e2:5c:93:2c:b9:7b:3a:26:c0:fc:72:5f:a0:16:6d:f1:
fc:f0:e2:b6:c0:9c:1b:0b:ad:4b:f2:ce:a3:3e:24:70:63:03:
6c:72:d9:2d:ce:99:b2:a8:3b:10:fe:a2:8f:00:08:64:a5:1a:
f1:5c:86:e4:a3:80:19:37:cd:e4:c2:fe:b8:2d:34:fe:bc:60:
e7:e9:cf:1e:7a:34:b6:60:1e:46:7c:c1:a3:d9:20:6f:83:f1:
aa:d0:5d:89:ce:58:47:66:93:1e:82:98:6c:04:a4:da:7f:0f:
94:db:57:d7:08:b6:c7:32:31:32:b0:ae:6e:9f:1b:51:61:9d:
07:71:52:4f:39:7f:3b:6f:ea:48:18:c4:08:01:a0:d1:d7:08:
2f:2a:60:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oiI8T0t1XH2okD/ETkM5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ2MmQ3OTQ5ZTY5ODQ0MWRiZTlhYmM1NjA5YzQ5ZWFjYTcz
Yzk3OTYwHhcNMjUwNjI4MTMwMjQ4WhcNMjUwNjI5MTMwMjQ4WjAzMTEwLwYDVQQD
EyhkYTNhZjE3ZDJmZjVmYjQxNjZlOTYxZmQ2MDJjY2RlZDQzZTY4MzhiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4arqX2SVRsEH2FZDG3tUlp9k0Cpr
v5AApkGEf4WrTp6Rarf5Um+PXd/s4BSfbANTdNF2fXS9KyAUWW/euaQtCDK9ACIL
48cR4Zv7LZpGZxuAeHdG7tB5nxtzEwAYuHjfwpTjszZ4M565PWTZUTb4vIgdUvN2
HAFtlGNuX6m4lfvCX9FQDThrWG4y6QRcFHk2+0uddKjDmVT2YAVAKzlJaX+74L3L
CYqgYOOtot2LsMoK8qzNaNXA/s+ziAg+e+GeZMoQZjn+TkhXUw5Tnn6lHh5Qy4i5
h2yx454OiyCVq17FjBrx3qDyYCDW7DkjyGvPetNj222YwKytBCyyblsgpwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNo68X0v9ftBZulh/WAsze1D5oOLMB8GA1UdIwQY
MBaAFNYteUnmmEQdvpq8VgnEnqynPJeWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUt
MTViMjFhOWI0MzI1LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jZi9hYzA5MjMtN2ViMS00YTVmLTkxMDUtMTViMjFhOWI0MzI1
LzEvMWkxNVNlYVlSQjItbXJ4V0NjU2VyS2M4bDVZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALkNFXEMH
wnfjqmOwexIv+kSePOUZnULiBVXSUjHyJ6w7Y3lM/2uLdYxzrWGNuehXXRCTDDNX
z0AwU9aVOXKetdgtDc+IooBDo+h83pA+5C/YRlC2GumC4GWvPgkiU5Pku0GZuyb4
DXQ3Hkyzdf/iXJMsuXs6JsD8cl+gFm3x/PDitsCcGwutS/LOoz4kcGMDbHLZLc6Z
sqg7EP6ijwAIZKUa8VyG5KOAGTfN5ML+uC00/rxg5+nPHno0tmAeRnzBo9kgb4Px
qtBdic5YR2aTHoKYbASk2n8PlNtX1wi2xzIxMrCubp8bUWGdB3FSTzl/O2/qSBjE
CAGg0dcILypgpA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:33:03 2025 by rpki-client