Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
File: _l1M3gmNHKh_Tgqe64VZKOg9KT4.mft (raw, json)
Hash identifier: /P4l6Os4GyKq/+M8hyyrtwuuLBbsMvMLpjip5InGiMs=
Subject key identifier: F2:0D:D9:28:C7:81:03:4C:77:A0:3B:A7:02:7F:B1:5C:80:E1:4E:4C
Authority key identifier: FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
Certificate issuer: /CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Certificate serial: 0197B6A08CFC622F90B33DEF23C9E7719204
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
Manifest number: 060E
Signing time: Sat 28 Jun 2025 13:01:04 +0000
Manifest this update: Sat 28 Jun 2025 13:01:04 +0000
Manifest next update: Sun 29 Jun 2025 13:01:04 +0000
Files and hashes: 1: _l1M3gmNHKh_Tgqe64VZKOg9KT4.crl (hash: OxHxBv3bkviMSRIL1a2bztozPEjEews3EMJnZ04wlto=)
2: utZx0LvAiHOeptZQC75VXrzHyuM.roa (hash: wu5n7/gdVFeYXS3ZTu6uD37jiOfb6f60vWQYmSZ9Xfo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:04 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:8c:fc:62:2f:90:b3:3d:ef:23:c9:e7:71:92:04
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe5d4cde098d1ca87f4e0a9eeb855928e83d293e
Validity
Not Before: Jun 28 13:01:04 2025 GMT
Not After : Jun 29 13:01:04 2025 GMT
Subject: CN=f20dd928c781034c77a03ba7027fb15c80e14e4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:ce:7e:70:45:d5:85:a7:6f:55:f3:93:f2:f3:
35:91:2c:65:f0:b0:ad:35:81:e0:1f:96:a9:2e:d3:
c2:5a:73:36:99:2a:a2:a1:46:6e:41:5f:f4:65:0a:
31:06:05:59:ce:e6:66:4f:ec:64:90:7b:a9:a1:41:
05:e0:0b:0e:07:b5:cc:67:28:e3:0a:58:77:cf:d4:
75:12:8c:79:35:41:30:e5:69:c8:0d:86:d3:2f:65:
11:b7:cf:53:76:62:8e:53:b8:66:5f:e7:c3:46:c2:
b1:a2:9b:21:86:b7:51:16:5b:33:f2:2d:74:8c:ce:
da:b4:fd:b2:8c:56:cd:29:19:c9:27:cc:32:d4:bf:
58:45:df:e6:c3:12:7f:f3:f0:a9:fc:0f:15:9c:ea:
ad:63:d7:a2:f4:48:5f:db:7c:1a:46:c1:95:e0:36:
40:73:15:46:35:d4:23:e2:a6:12:f3:1b:aa:d5:88:
42:38:78:e2:97:de:59:70:fc:b0:c4:1d:45:b3:f1:
19:ec:55:8e:bb:92:e1:85:ea:a6:88:bd:3a:13:59:
50:a9:79:42:ea:bf:bb:92:ea:29:8c:b4:ce:1e:ba:
2a:a3:62:ea:ee:3b:c1:d3:c2:ea:a7:8f:9c:75:ff:
f4:60:1e:fb:3e:2a:70:7d:59:44:c8:39:9a:ee:70:
29:a3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0D:D9:28:C7:81:03:4C:77:A0:3B:A7:02:7F:B1:5C:80:E1:4E:4C
X509v3 Authority Key Identifier:
keyid:FE:5D:4C:DE:09:8D:1C:A8:7F:4E:0A:9E:EB:85:59:28:E8:3D:29:3E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_l1M3gmNHKh_Tgqe64VZKOg9KT4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/f98014-f1c9-4a3a-af33-b03ef3f03228/1/_l1M3gmNHKh_Tgqe64VZKOg9KT4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:7b:fd:9c:a6:cd:d5:90:5f:57:57:3d:b4:8f:f5:e5:67:8f:
08:a4:a5:ac:7e:f5:ac:b5:23:d7:04:e2:e0:35:8a:03:df:c9:
d1:c6:33:73:88:17:73:50:2f:e2:e6:14:05:dd:cf:58:dc:74:
65:16:e4:85:7e:c7:63:6a:c9:53:60:8b:46:0b:44:ff:e4:0a:
31:d4:2a:08:8a:78:ee:c2:c5:57:22:41:53:34:32:21:2d:5a:
4e:38:91:b8:f8:dd:0d:31:41:75:6a:c7:d6:48:99:8d:86:0f:
fa:ec:6a:b4:1f:79:ac:31:be:d2:a9:29:32:ce:75:5b:38:6a:
57:17:52:51:37:e3:20:0e:1e:f7:57:06:08:69:bd:9d:f3:ff:
39:c9:81:b3:ef:69:ec:07:a6:5e:3e:09:5b:74:8b:7a:8c:44:
1d:34:9d:43:d6:26:98:eb:27:9a:c7:9c:32:7f:eb:4b:80:c1:
cc:7a:7c:c6:8c:b3:bb:83:90:fc:e8:a1:e9:a2:85:7e:6b:25:
0d:52:73:2a:42:66:5c:5a:c9:a1:54:07:3d:7a:be:f0:66:31:
be:fd:9a:72:09:0b:a8:3a:61:d0:5d:b7:84:7b:45:8c:72:6b:
ee:43:8f:40:13:5d:5f:ff:77:57:b1:69:da:9a:9c:fa:04:18:
a7:c5:f6:d4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oIz8Yi+Qsz3vI8nncZIEMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNWQ0Y2RlMDk4ZDFjYTg3ZjRlMGE5ZWViODU1OTI4ZTgz
ZDI5M2UwHhcNMjUwNjI4MTMwMTA0WhcNMjUwNjI5MTMwMTA0WjAzMTEwLwYDVQQD
EyhmMjBkZDkyOGM3ODEwMzRjNzdhMDNiYTcwMjdmYjE1YzgwZTE0ZTRjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAq85+cEXVhadvVfOT8vM1kSxl8LCt
NYHgH5apLtPCWnM2mSqioUZuQV/0ZQoxBgVZzuZmT+xkkHupoUEF4AsOB7XMZyjj
Clh3z9R1Eox5NUEw5WnIDYbTL2URt89TdmKOU7hmX+fDRsKxopshhrdRFlsz8i10
jM7atP2yjFbNKRnJJ8wy1L9YRd/mwxJ/8/Cp/A8VnOqtY9ei9Ehf23waRsGV4DZA
cxVGNdQj4qYS8xuq1YhCOHjil95ZcPywxB1Fs/EZ7FWOu5LhheqmiL06E1lQqXlC
6r+7kuopjLTOHroqo2Lq7jvB08Lqp4+cdf/0YB77PipwfVlEyDma7nApowIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIN2SjHgQNMd6A7pwJ/sVyA4U5MMB8GA1UdIwQY
MBaAFP5dTN4JjRyof04KnuuFWSjoPSk+MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9mOTgwMTQtZjFjOS00YTNhLWFmMzMt
YjAzZWYzZjAzMjI4LzEvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9mOTgwMTQtZjFjOS00YTNhLWFmMzMtYjAzZWYzZjAzMjI4
LzEvX2wxTTNnbU5IS2hfVGdxZTY0VlpLT2c5S1Q0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQ3v9nKbN
1ZBfV1c9tI/15WePCKSlrH71rLUj1wTi4DWKA9/J0cYzc4gXc1Av4uYUBd3PWNx0
ZRbkhX7HY2rJU2CLRgtE/+QKMdQqCIp47sLFVyJBUzQyIS1aTjiRuPjdDTFBdWrH
1kiZjYYP+uxqtB95rDG+0qkpMs51WzhqVxdSUTfjIA4e91cGCGm9nfP/OcmBs+9p
7AemXj4JW3SLeoxEHTSdQ9YmmOsnmsecMn/rS4DBzHp8xoyzu4OQ/Oih6aKFfmsl
DVJzKkJmXFrJoVQHPXq+8GYxvv2acgkLqDph0F23hHtFjHJr7kOPQBNdX/93V7Fp
2pqc+gQYp8X21A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:01 2025 by rpki-client