Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
File: D96X7tTY6EXrn45_8ybj_lJIAPo.mft (raw, json)
Hash identifier: RcjlJrfYaiaSKJ39bvrhMd87t3NDcaT+swYb3bu1uyo=
Subject key identifier: 44:8D:2A:40:3A:CB:BD:4E:F6:2C:EA:F9:B4:BF:8A:93:C9:BE:BC:3B
Authority key identifier: 0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
Certificate issuer: /CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Certificate serial: 0197B821049D09DA5F6831A8EC9B16AE7590
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
Manifest number: 14B5
Signing time: Sat 28 Jun 2025 20:01:00 +0000
Manifest this update: Sat 28 Jun 2025 20:01:00 +0000
Manifest next update: Sun 29 Jun 2025 20:01:00 +0000
Files and hashes: 1: D96X7tTY6EXrn45_8ybj_lJIAPo.crl (hash: UDS1gpXZRXdKUmsZ3G2LfFwiBsePpXrkwqwCKOWRGpo=)
2: Eer6xNymX3hjdLEe5t0VeQLmAtQ.roa (hash: tC0bkcDHkroTK3NaBXSh9RDfJ1UlKylYr53Yt+96KUg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:04:9d:09:da:5f:68:31:a8:ec:9b:16:ae:75:90
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0fde97eed4d8e845eb9f8e7ff326e3fe524800fa
Validity
Not Before: Jun 28 20:01:00 2025 GMT
Not After : Jun 29 20:01:00 2025 GMT
Subject: CN=448d2a403acbbd4ef62ceaf9b4bf8a93c9bebc3b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:a9:7d:08:59:d4:89:75:43:e8:2e:ce:6b:88:
75:69:81:d7:cc:7a:5f:a8:38:4e:b7:a5:f1:95:89:
40:3b:99:6a:30:1e:ea:59:d0:06:58:0e:de:24:22:
ba:70:a1:ab:79:13:ea:dd:f8:cc:53:d1:eb:5c:15:
81:f8:86:52:9f:18:b2:89:f0:df:b2:09:f9:c7:22:
0d:ac:6e:ca:64:a6:0a:84:f3:1b:9c:9b:1f:70:45:
0d:6c:a3:95:d4:f9:a4:57:a7:11:23:ee:54:1e:8d:
83:f2:2f:da:b7:94:b1:ca:20:80:cd:18:3e:22:e6:
16:d9:d8:c7:3f:af:fd:fc:84:fd:86:61:01:56:f5:
38:c3:e7:5a:da:5d:17:2f:34:15:73:44:15:d7:88:
8e:f8:f7:06:be:06:7c:73:5d:37:51:08:ed:fe:c0:
ab:ce:8e:6d:97:75:eb:11:29:6a:44:d8:3e:f4:c3:
be:d0:0d:3d:04:97:9c:a9:3a:73:97:b5:0b:48:04:
bf:56:a3:98:bc:da:8d:1b:91:3f:9b:82:e6:6f:4a:
4e:55:d3:4d:a4:9f:af:58:f2:40:a4:a7:76:8c:14:
fb:9f:90:53:39:2e:93:82:6f:87:7d:05:de:38:03:
d3:3c:9d:90:6a:b4:98:7f:a1:b1:71:c0:28:59:bc:
62:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
44:8D:2A:40:3A:CB:BD:4E:F6:2C:EA:F9:B4:BF:8A:93:C9:BE:BC:3B
X509v3 Authority Key Identifier:
keyid:0F:DE:97:EE:D4:D8:E8:45:EB:9F:8E:7F:F3:26:E3:FE:52:48:00:FA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/D96X7tTY6EXrn45_8ybj_lJIAPo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d7/92e46a-4b9f-4f83-b111-ef00198b4342/1/D96X7tTY6EXrn45_8ybj_lJIAPo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:1c:45:5b:8f:ec:bb:19:0a:0b:ac:85:28:ed:53:57:cd:24:
70:71:c4:9c:7a:af:8d:ec:a3:0d:8d:c8:f3:1b:b2:b5:9c:b4:
38:dd:06:10:2d:a4:1f:f9:28:84:0a:fd:e6:fb:e5:90:29:3c:
b4:b0:62:c8:d8:ee:70:b7:f1:e0:4c:d1:29:3f:1f:ba:de:a4:
ce:27:44:0e:41:b6:8a:02:0a:2e:b1:41:04:c2:f2:e4:f3:19:
1e:43:83:45:a3:d2:4b:7f:f0:d4:a5:51:12:43:58:75:4c:c4:
04:25:9b:28:5d:c7:34:94:00:ee:8a:83:3f:fc:77:75:44:14:
3c:01:82:88:a7:a4:78:3e:38:fa:4d:ef:a4:f1:92:10:1b:06:
78:44:be:92:45:39:08:f2:68:08:91:7e:2c:9d:6d:e6:d0:d6:
f1:38:18:51:11:75:2d:72:b3:65:97:5a:45:f4:82:14:ab:6a:
78:2d:14:f6:70:27:85:1c:c1:4f:68:b7:4e:85:27:c9:48:c8:
82:67:27:82:97:96:28:20:98:7e:6a:d3:59:a2:d6:e6:7a:39:
7a:d9:aa:87:bd:33:9d:cc:25:11:21:3a:09:1a:20:68:a2:63:
74:cf:74:cc:08:5d:67:3a:99:fe:4b:1a:99:f1:b8:17:65:68:
de:6c:37:c1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IQSdCdpfaDGo7JsWrnWQMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBmZGU5N2VlZDRkOGU4NDVlYjlmOGU3ZmYzMjZlM2ZlNTI0
ODAwZmEwHhcNMjUwNjI4MjAwMTAwWhcNMjUwNjI5MjAwMTAwWjAzMTEwLwYDVQQD
Eyg0NDhkMmE0MDNhY2JiZDRlZjYyY2VhZjliNGJmOGE5M2M5YmViYzNiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwKl9CFnUiXVD6C7Oa4h1aYHXzHpf
qDhOt6XxlYlAO5lqMB7qWdAGWA7eJCK6cKGreRPq3fjMU9HrXBWB+IZSnxiyifDf
sgn5xyINrG7KZKYKhPMbnJsfcEUNbKOV1PmkV6cRI+5UHo2D8i/at5SxyiCAzRg+
IuYW2djHP6/9/IT9hmEBVvU4w+da2l0XLzQVc0QV14iO+PcGvgZ8c103UQjt/sCr
zo5tl3XrESlqRNg+9MO+0A09BJecqTpzl7ULSAS/VqOYvNqNG5E/m4Lmb0pOVdNN
pJ+vWPJApKd2jBT7n5BTOS6Tgm+HfQXeOAPTPJ2QarSYf6GxccAoWbxijwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFESNKkA6y71O9izq+bS/ipPJvrw7MB8GA1UdIwQY
MBaAFA/el+7U2OhF65+Of/Mm4/5SSAD6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEt
ZWYwMDE5OGI0MzQyLzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kNy85MmU0NmEtNGI5Zi00ZjgzLWIxMTEtZWYwMDE5OGI0MzQy
LzEvRDk2WDd0VFk2RVhybjQ1Xzh5YmpfbEpJQVBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAThxFW4/s
uxkKC6yFKO1TV80kcHHEnHqvjeyjDY3I8xuytZy0ON0GEC2kH/kohAr95vvlkCk8
tLBiyNjucLfx4EzRKT8fut6kzidEDkG2igIKLrFBBMLy5PMZHkODRaPSS3/w1KVR
EkNYdUzEBCWbKF3HNJQA7oqDP/x3dUQUPAGCiKekeD44+k3vpPGSEBsGeES+kkU5
CPJoCJF+LJ1t5tDW8TgYURF1LXKzZZdaRfSCFKtqeC0U9nAnhRzBT2i3ToUnyUjI
gmcngpeWKCCYfmrTWaLW5no5etmqh70zncwlESE6CRogaKJjdM90zAhdZzqZ/ksa
mfG4F2Vo3mw3wQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:35:03 2025 by rpki-client