Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
File: rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft (raw, json)
Hash identifier: lv7yxZUej71fYV873nEkwbVgB4XH61/h0KhqIwy5jnw=
Subject key identifier: 11:97:35:56:4F:D6:56:7C:C1:70:3E:7D:49:A5:13:60:92:2C:1C:E0
Authority key identifier: AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
Certificate issuer: /CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Certificate serial: 0197B7456D0811306662C5399F5B62112AEA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
Manifest number: 11D3
Signing time: Sat 28 Jun 2025 16:01:09 +0000
Manifest this update: Sat 28 Jun 2025 16:01:09 +0000
Manifest next update: Sun 29 Jun 2025 16:01:09 +0000
Files and hashes: 1: rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl (hash: 1ZCLciC0sy0G0AxPJSwDOuNVelQDVebOGDoatjEgKXI=)
2: w5lUFfISkdR1rbXpw9EFPEpBgSE.roa (hash: aLxhVjIpLB1JtYTTNVzOUaAGXHTvMRlaiMUbkJdp7PY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:45:6d:08:11:30:66:62:c5:39:9f:5b:62:11:2a:ea
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac9a51bea1b570ffa72d9c52d1a518c24bc78c02
Validity
Not Before: Jun 28 16:01:09 2025 GMT
Not After : Jun 29 16:01:09 2025 GMT
Subject: CN=119735564fd6567cc1703e7d49a51360922c1ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d8:63:f1:20:e0:45:9b:f1:24:43:96:15:16:94:
ad:79:06:74:92:96:82:8f:9f:f4:c8:a3:db:c6:ef:
4f:9d:30:dc:cb:1f:9c:b6:aa:58:99:f7:c1:29:34:
b5:3e:22:69:6d:8b:8d:71:63:e2:68:d7:ef:80:26:
03:e1:d2:d7:c5:5d:64:96:39:71:22:3d:7e:a8:8b:
1c:6a:f8:3c:e4:33:0a:6e:44:02:ea:19:07:84:22:
92:b4:54:61:8c:ba:e7:4d:ad:39:94:8a:7e:97:5b:
94:78:06:fc:a4:09:6c:bc:ed:c6:d9:29:a1:6a:b9:
5f:f2:97:63:41:10:21:5c:9a:2b:e4:a0:98:62:4b:
e2:df:d3:9d:03:a1:2c:9b:0e:33:23:39:83:6d:f2:
4d:09:48:7f:c1:b6:11:14:17:9b:43:ee:53:23:f8:
ab:f9:a0:0e:55:dd:2e:49:10:10:6b:5b:39:23:05:
31:d9:9a:63:99:68:40:76:bf:0b:42:5c:14:44:b7:
6e:aa:4f:2d:5f:7b:2e:5e:c9:16:a4:e9:74:12:26:
62:16:d8:25:3b:8f:c3:80:06:90:a4:ac:ac:8b:ec:
89:f7:3f:54:15:fd:9d:9f:35:ec:fc:c6:cd:fc:d9:
4e:6e:81:b8:a2:36:8d:f5:3b:24:1a:2b:60:90:af:
df:d7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
11:97:35:56:4F:D6:56:7C:C1:70:3E:7D:49:A5:13:60:92:2C:1C:E0
X509v3 Authority Key Identifier:
keyid:AC:9A:51:BE:A1:B5:70:FF:A7:2D:9C:52:D1:A5:18:C2:4B:C7:8C:02
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rJpRvqG1cP-nLZxS0aUYwkvHjAI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d3/2de87a-0176-4f19-b0e8-ab5630211f7a/1/rJpRvqG1cP-nLZxS0aUYwkvHjAI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:20:a7:90:0d:b7:55:8b:ef:39:75:a7:c4:2b:56:c1:92:2e:
dc:8b:8e:31:06:75:ce:4d:79:b4:a2:9e:06:5c:12:26:e1:4b:
07:24:60:85:9d:65:67:f3:43:10:00:f6:ce:b0:f9:2f:df:74:
67:fa:bb:fc:3a:70:85:2b:60:24:05:4c:1e:10:3b:b8:a7:24:
d5:79:35:5a:7f:7b:ac:01:b0:83:aa:c6:f8:c6:d9:6b:a3:27:
06:86:81:83:7d:54:05:9a:30:df:5c:fd:27:24:93:d7:9e:5c:
f9:2e:ba:b2:47:6a:f6:f3:2e:b2:04:ca:af:71:8b:a5:b8:cd:
42:5a:0f:9f:89:5d:64:b1:9a:26:84:ad:7f:96:6c:a6:f2:f1:
0f:73:e3:30:1f:d0:b8:63:81:b2:69:35:1f:1d:82:5f:f9:65:
81:03:60:55:f1:b6:ec:94:b4:ec:94:e6:2a:21:da:09:26:b6:
e1:bf:f8:e0:19:4f:18:f7:ac:a3:7b:4c:ce:fd:1c:40:ac:33:
61:ec:30:21:1d:d0:5d:4b:fb:53:98:dc:78:d4:d7:8a:7d:3d:
b8:f1:ee:7a:40:53:8f:fc:dd:ee:46:9f:97:b2:7e:86:c9:e8:
fb:41:e3:e3:49:d4:78:8b:c9:7d:65:dd:ec:93:d5:f1:55:5d:
5c:8c:24:0a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3RW0IETBmYsU5n1tiESrqMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjOWE1MWJlYTFiNTcwZmZhNzJkOWM1MmQxYTUxOGMyNGJj
NzhjMDIwHhcNMjUwNjI4MTYwMTA5WhcNMjUwNjI5MTYwMTA5WjAzMTEwLwYDVQQD
EygxMTk3MzU1NjRmZDY1NjdjYzE3MDNlN2Q0OWE1MTM2MDkyMmMxY2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2GPxIOBFm/EkQ5YVFpSteQZ0kpaC
j5/0yKPbxu9PnTDcyx+ctqpYmffBKTS1PiJpbYuNcWPiaNfvgCYD4dLXxV1kljlx
Ij1+qIscavg85DMKbkQC6hkHhCKStFRhjLrnTa05lIp+l1uUeAb8pAlsvO3G2Smh
arlf8pdjQRAhXJor5KCYYkvi39OdA6Esmw4zIzmDbfJNCUh/wbYRFBebQ+5TI/ir
+aAOVd0uSRAQa1s5IwUx2ZpjmWhAdr8LQlwURLduqk8tX3suXskWpOl0EiZiFtgl
O4/DgAaQpKysi+yJ9z9UFf2dnzXs/MbN/NlOboG4ojaN9TskGitgkK/f1wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBGXNVZP1lZ8wXA+fUmlE2CSLBzgMB8GA1UdIwQY
MBaAFKyaUb6htXD/py2cUtGlGMJLx4wCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckpwUnZxRzFjUC1uTFp4UzBhVVl3a3ZIakFJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMy8yZGU4N2EtMDE3Ni00ZjE5LWIwZTgt
YWI1NjMwMjExZjdhLzEvckpwUnZxRzFjUC1uTFp4UzBhVVl3a3ZIakFJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMy8yZGU4N2EtMDE3Ni00ZjE5LWIwZTgtYWI1NjMwMjExZjdh
LzEvckpwUnZxRzFjUC1uTFp4UzBhVVl3a3ZIakFJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUSCnkA23
VYvvOXWnxCtWwZIu3IuOMQZ1zk15tKKeBlwSJuFLByRghZ1lZ/NDEAD2zrD5L990
Z/q7/DpwhStgJAVMHhA7uKck1Xk1Wn97rAGwg6rG+MbZa6MnBoaBg31UBZow31z9
JyST155c+S66skdq9vMusgTKr3GLpbjNQloPn4ldZLGaJoStf5ZspvLxD3PjMB/Q
uGOBsmk1Hx2CX/llgQNgVfG27JS07JTmKiHaCSa24b/44BlPGPeso3tMzv0cQKwz
YewwIR3QXUv7U5jceNTXin09uPHuekBTj/zd7kafl7J+hsno+0Hj40nUeIvJfWXd
7JPV8VVdXIwkCg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:18:08 2025 by rpki-client