Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
File: U8DiB45PPrpfh5UD_dgJw4O7dig.mft (raw, json)
Hash identifier: qG9zhZgl7zlSu1aNba9gqbfCyOP2kvthH+WIb2Zx9To=
Subject key identifier: 75:55:E8:56:63:6A:4A:D5:5C:48:FC:92:D4:C0:25:B6:F4:DC:69:C1
Authority key identifier: 53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
Certificate issuer: /CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Certificate serial: 0197B70EF669B60191E7D38FB3647EE5954C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
Manifest number: 0FB2
Signing time: Sat 28 Jun 2025 15:01:40 +0000
Manifest this update: Sat 28 Jun 2025 15:01:40 +0000
Manifest next update: Sun 29 Jun 2025 15:01:40 +0000
Files and hashes: 1: U8DiB45PPrpfh5UD_dgJw4O7dig.crl (hash: ZvrpYlufgfdHhPlJPof+e/OauV248zYlCeoaFSu+hoQ=)
2: XOqVL4Qlgd2qj_R2o35sDNSHJkw.roa (hash: Vhjo7o5u3C511AphXSnY5EBALpIpM0HGnrEGYenlVkk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0e:f6:69:b6:01:91:e7:d3:8f:b3:64:7e:e5:95:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53c0e2078e4f3eba5f879503fdd809c383bb7628
Validity
Not Before: Jun 28 15:01:40 2025 GMT
Not After : Jun 29 15:01:40 2025 GMT
Subject: CN=7555e856636a4ad55c48fc92d4c025b6f4dc69c1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c1:3c:fa:2c:3b:b6:72:18:2f:93:a6:33:59:09:
a9:1f:6f:31:6f:30:4d:f8:6d:05:57:9f:2b:51:7b:
39:27:4f:7b:3e:57:24:8d:1f:1b:81:ad:17:31:d1:
04:bb:40:95:8b:dd:81:82:33:08:14:c7:35:2b:e2:
a1:38:eb:ee:64:14:d4:06:b0:1a:78:54:2e:4a:5b:
97:cb:36:7e:63:61:3a:a3:93:ad:1b:1a:e8:39:f0:
bb:04:2b:f1:e4:cc:29:74:7e:83:f5:6f:59:87:08:
2d:ab:71:79:41:a2:58:41:3f:26:e3:ea:2e:9c:35:
5f:c4:7b:46:3c:d4:06:11:44:53:b6:22:bf:df:d9:
78:96:61:41:68:57:94:1f:54:c1:94:db:dc:e2:69:
b1:af:e4:ba:cf:20:2f:3f:53:85:f2:13:e5:c7:f7:
07:36:bc:bf:22:c8:ae:1e:40:74:31:67:9c:05:91:
96:a5:28:73:2b:f8:85:11:90:bf:9a:28:ab:37:30:
ec:6f:53:fc:01:21:8b:b0:ab:ac:5d:8a:d0:24:c4:
4a:a6:b9:12:e1:f2:2c:a9:77:f2:15:18:03:0c:eb:
e5:75:31:f1:f6:04:89:a0:36:d4:7d:d0:88:6b:79:
30:cc:a9:6e:df:a5:03:50:9a:c7:04:79:e1:59:f8:
c5:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
75:55:E8:56:63:6A:4A:D5:5C:48:FC:92:D4:C0:25:B6:F4:DC:69:C1
X509v3 Authority Key Identifier:
keyid:53:C0:E2:07:8E:4F:3E:BA:5F:87:95:03:FD:D8:09:C3:83:BB:76:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U8DiB45PPrpfh5UD_dgJw4O7dig.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/b36636-3306-448f-8ecf-56482b390678/1/U8DiB45PPrpfh5UD_dgJw4O7dig.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:6d:91:40:c1:58:d0:21:60:e9:b8:7c:c2:85:5c:19:c2:6c:
26:cc:4d:f6:27:4e:54:e7:f3:f2:24:c9:c4:83:08:d4:11:4f:
18:70:d6:ab:2b:ad:17:0b:ed:0f:34:a2:51:99:6f:db:62:f7:
2e:5e:3b:d9:cd:d6:b6:e3:f7:df:75:31:07:c0:9a:44:60:50:
0c:ef:50:a7:34:b1:ec:8d:f3:fc:d2:47:c5:51:85:63:65:48:
56:8e:db:4c:80:5a:51:c8:69:b4:7b:62:22:c4:e1:82:59:4e:
eb:92:91:c4:da:30:3e:3f:0d:d0:5d:cb:ed:c8:e3:c1:dd:43:
a9:be:c2:a2:67:ef:f3:35:dc:33:f8:a7:58:f2:3a:8d:75:fd:
b9:c1:e2:d7:d2:ce:00:07:f8:6d:16:70:f8:b2:12:c0:20:2c:
a8:ef:80:a9:9b:10:22:a7:f5:b3:27:9d:44:fa:f1:e2:96:70:
56:a9:31:82:89:e9:fb:b6:48:6b:0e:50:68:88:20:a7:e9:80:
f8:f3:0b:4f:31:de:e2:6e:f0:71:f9:b5:48:66:c0:75:9b:4c:
ae:c2:48:73:7d:de:6f:11:9b:18:13:88:0d:f1:49:1c:14:95:
5e:7c:9f:e8:af:da:42:a9:49:95:7c:f8:09:8a:b8:7e:c3:f2:
47:9d:17:b9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3DvZptgGR59OPs2R+5ZVMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYzBlMjA3OGU0ZjNlYmE1Zjg3OTUwM2ZkZDgwOWMzODNi
Yjc2MjgwHhcNMjUwNjI4MTUwMTQwWhcNMjUwNjI5MTUwMTQwWjAzMTEwLwYDVQQD
Eyg3NTU1ZTg1NjYzNmE0YWQ1NWM0OGZjOTJkNGMwMjViNmY0ZGM2OWMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwTz6LDu2chgvk6YzWQmpH28xbzBN
+G0FV58rUXs5J097PlckjR8bga0XMdEEu0CVi92BgjMIFMc1K+KhOOvuZBTUBrAa
eFQuSluXyzZ+Y2E6o5OtGxroOfC7BCvx5MwpdH6D9W9Zhwgtq3F5QaJYQT8m4+ou
nDVfxHtGPNQGEURTtiK/39l4lmFBaFeUH1TBlNvc4mmxr+S6zyAvP1OF8hPlx/cH
Nry/IsiuHkB0MWecBZGWpShzK/iFEZC/miirNzDsb1P8ASGLsKusXYrQJMRKprkS
4fIsqXfyFRgDDOvldTHx9gSJoDbUfdCIa3kwzKlu36UDUJrHBHnhWfjFIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHVV6FZjakrVXEj8ktTAJbb03GnBMB8GA1UdIwQY
MBaAFFPA4geOTz66X4eVA/3YCcODu3YoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi9iMzY2MzYtMzMwNi00NDhmLThlY2Yt
NTY0ODJiMzkwNjc4LzEvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi9iMzY2MzYtMzMwNi00NDhmLThlY2YtNTY0ODJiMzkwNjc4
LzEvVThEaUI0NVBQcnBmaDVVRF9kZ0p3NE83ZGlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh22RQMFY
0CFg6bh8woVcGcJsJsxN9idOVOfz8iTJxIMI1BFPGHDWqyutFwvtDzSiUZlv22L3
Ll472c3WtuP333UxB8CaRGBQDO9QpzSx7I3z/NJHxVGFY2VIVo7bTIBaUchptHti
IsThgllO65KRxNowPj8N0F3L7cjjwd1Dqb7Comfv8zXcM/inWPI6jXX9ucHi19LO
AAf4bRZw+LISwCAsqO+AqZsQIqf1syedRPrx4pZwVqkxgonp+7ZIaw5QaIggp+mA
+PMLTzHe4m7wcfm1SGbAdZtMrsJIc33ebxGbGBOIDfFJHBSVXnyf6K/aQqlJlXz4
CYq4fsPyR50XuQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:28:38 2025 by rpki-client