Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
File: 2iTDCzw_6UYGKD_phemmuouP38s.mft (raw, json)
Hash identifier: lilt+JIUcviPu+7x49RrI3EWyyzxEPa3Xfg81w0EI9g=
Subject key identifier: 4E:E3:BF:47:90:0D:9F:98:C3:A3:F5:1C:6D:C9:BB:B1:40:7E:62:1D
Authority key identifier: DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
Certificate issuer: /CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Certificate serial: 0197B7EA755F827DB71F8A6062C4FBB95614
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
Manifest number: 07C1
Signing time: Sat 28 Jun 2025 19:01:25 +0000
Manifest this update: Sat 28 Jun 2025 19:01:25 +0000
Manifest next update: Sun 29 Jun 2025 19:01:25 +0000
Files and hashes: 1: 2iTDCzw_6UYGKD_phemmuouP38s.crl (hash: wr43/K8I2V3y4zd8KQ85cEB0uJvj0dJKZ4F3Q5tthCE=)
2: 6Ln300RL4O58jHgSpUHDLRYbUKI.roa (hash: eofBUwCHK8t5JjW9bR8TUWY3oK3DcO6MrZsXbVO2VP8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:75:5f:82:7d:b7:1f:8a:60:62:c4:fb:b9:56:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=da24c30b3c3fe94606283fe985e9a6ba8b8fdfcb
Validity
Not Before: Jun 28 19:01:25 2025 GMT
Not After : Jun 29 19:01:25 2025 GMT
Subject: CN=4ee3bf47900d9f98c3a3f51c6dc9bbb1407e621d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:2c:f1:cd:6c:60:62:4b:a0:99:0c:30:b7:e3:
62:c1:07:d2:16:2a:59:02:f9:7f:92:bf:c0:b9:60:
a7:45:87:47:07:bf:bf:63:e7:7c:da:09:97:99:0e:
83:5a:4c:b8:cc:69:3e:67:43:da:10:eb:1e:4e:36:
1d:9a:84:0b:59:82:35:cf:c0:03:65:44:ff:f2:a4:
8a:71:a1:8b:e7:49:b5:59:f9:03:5f:47:1d:95:22:
53:ce:77:90:12:c9:fc:89:39:f4:e7:a5:47:cf:fa:
64:d5:65:7f:1a:23:94:79:cf:55:48:1c:27:03:87:
58:ab:5b:e8:16:47:40:8f:5d:86:bb:5f:8c:27:97:
c8:43:d4:f8:08:17:24:f7:a3:a7:a1:4c:be:ed:31:
c8:29:45:ec:e0:f8:c8:e0:ad:0b:b0:a6:44:f1:a6:
4f:17:44:d0:c7:13:1a:13:5f:1f:1c:33:dc:fe:5e:
0d:01:77:9c:1e:78:6b:2c:8e:29:10:d1:1a:84:c8:
61:13:e2:05:05:4c:4a:68:30:25:93:bf:ab:21:1c:
9a:47:36:7e:dc:68:c8:15:22:a0:92:45:8d:ab:67:
76:7f:5b:bc:18:51:c5:14:12:84:cb:60:83:78:dc:
4c:44:b2:98:c4:c5:c9:72:4e:de:ab:05:62:9b:40:
bf:97
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4E:E3:BF:47:90:0D:9F:98:C3:A3:F5:1C:6D:C9:BB:B1:40:7E:62:1D
X509v3 Authority Key Identifier:
keyid:DA:24:C3:0B:3C:3F:E9:46:06:28:3F:E9:85:E9:A6:BA:8B:8F:DF:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/2iTDCzw_6UYGKD_phemmuouP38s.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/da/5ee6f9-b025-48a3-ad85-f06bbfb8408f/1/2iTDCzw_6UYGKD_phemmuouP38s.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:e9:15:5e:c6:c2:09:64:1b:d4:d8:c8:c4:59:66:e5:a4:85:
3b:c9:ba:4c:a6:2f:9e:a6:dc:74:0e:98:4d:20:76:e5:fb:14:
b7:c2:8f:ec:48:a0:96:bf:4e:30:46:d9:bb:0b:97:aa:4a:a3:
51:90:af:a6:55:2c:6f:a5:b6:7f:58:e7:00:96:1b:cc:c7:64:
7b:e9:21:42:6e:a7:84:8b:40:11:71:e1:11:85:b7:31:9a:ad:
39:e7:58:86:54:94:df:f9:33:f7:0c:f4:59:1c:91:8b:6b:84:
ae:24:fa:1a:38:b0:b4:1f:ac:70:ed:08:4e:8f:40:99:0f:af:
68:05:63:e3:e4:ae:60:b4:01:a7:93:79:f0:4f:2a:1c:bd:c6:
cc:56:4a:0d:c9:28:d4:d9:3a:2d:c6:f0:ae:59:d4:0d:ba:13:
a5:81:df:72:d3:2e:0f:7e:a2:53:21:3b:47:c3:dd:2e:c5:f9:
c0:cb:ff:18:96:14:3c:7b:35:5e:fc:18:53:44:1d:6a:59:62:
af:35:15:b0:6e:a6:a2:96:ba:9a:c4:8a:03:3e:42:7f:f8:72:
e7:08:1c:44:3e:3b:90:56:cb:43:ad:52:b7:aa:1f:82:8f:35:
d4:80:e3:49:5d:4a:40:49:79:84:f4:ca:31:cc:d3:cc:42:f4:
ec:05:47:69
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36nVfgn23H4pgYsT7uVYUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRhMjRjMzBiM2MzZmU5NDYwNjI4M2ZlOTg1ZTlhNmJhOGI4
ZmRmY2IwHhcNMjUwNjI4MTkwMTI1WhcNMjUwNjI5MTkwMTI1WjAzMTEwLwYDVQQD
Eyg0ZWUzYmY0NzkwMGQ5Zjk4YzNhM2Y1MWM2ZGM5YmJiMTQwN2U2MjFkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlyzxzWxgYkugmQwwt+NiwQfSFipZ
Avl/kr/AuWCnRYdHB7+/Y+d82gmXmQ6DWky4zGk+Z0PaEOseTjYdmoQLWYI1z8AD
ZUT/8qSKcaGL50m1WfkDX0cdlSJTzneQEsn8iTn056VHz/pk1WV/GiOUec9VSBwn
A4dYq1voFkdAj12Gu1+MJ5fIQ9T4CBck96OnoUy+7THIKUXs4PjI4K0LsKZE8aZP
F0TQxxMaE18fHDPc/l4NAXecHnhrLI4pENEahMhhE+IFBUxKaDAlk7+rIRyaRzZ+
3GjIFSKgkkWNq2d2f1u8GFHFFBKEy2CDeNxMRLKYxMXJck7eqwVim0C/lwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE7jv0eQDZ+Yw6P1HG3Ju7FAfmIdMB8GA1UdIwQY
MBaAFNokwws8P+lGBig/6YXpprqLj9/LMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUt
ZjA2YmJmYjg0MDhmLzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYS81ZWU2ZjktYjAyNS00OGEzLWFkODUtZjA2YmJmYjg0MDhm
LzEvMmlUREN6d182VVlHS0RfcGhlbW11b3VQMzhzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcOkVXsbC
CWQb1NjIxFlm5aSFO8m6TKYvnqbcdA6YTSB25fsUt8KP7Eiglr9OMEbZuwuXqkqj
UZCvplUsb6W2f1jnAJYbzMdke+khQm6nhItAEXHhEYW3MZqtOedYhlSU3/kz9wz0
WRyRi2uEriT6GjiwtB+scO0ITo9AmQ+vaAVj4+SuYLQBp5N58E8qHL3GzFZKDcko
1Nk6LcbwrlnUDboTpYHfctMuD36iUyE7R8PdLsX5wMv/GJYUPHs1XvwYU0Qdalli
rzUVsG6mopa6msSKAz5Cf/hy5wgcRD47kFbLQ61St6ofgo811IDjSV1KQEl5hPTK
MczTzEL07AVHaQ==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:07:13 2025 by rpki-client