Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
File: sFf1RPU_NdjS5zyylltPTX0CKVk.mft (raw, json)
Hash identifier: q2pTJCxECc66slz5AXYK+gXcIOiLE6ji6AIpQbCyFy8=
Subject key identifier: B8:EF:4C:7E:EE:F7:19:E6:D2:D9:84:D6:62:68:AC:90:20:C0:14:16
Authority key identifier: B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
Certificate issuer: /CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Certificate serial: 0197B77CF2ED64FC5F848BF6F4BBBA6242A2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
Manifest number: 154A
Signing time: Sat 28 Jun 2025 17:01:48 +0000
Manifest this update: Sat 28 Jun 2025 17:01:48 +0000
Manifest next update: Sun 29 Jun 2025 17:01:48 +0000
Files and hashes: 1: aXSOEWx3tVF7ynpp-Q3fBbDZg50.roa (hash: RSnTxORBukbARx6FRTZpYXAyjlGDaMBXkz61tBk9AhY=)
2: sFf1RPU_NdjS5zyylltPTX0CKVk.crl (hash: n/VeRBdnhqKLgqGXa3xKsSBXLgDlq0EfK3Us/eUs9Lk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:f2:ed:64:fc:5f:84:8b:f6:f4:bb:ba:62:42:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b057f544f53f35d8d2e73cb2965b4f4d7d022959
Validity
Not Before: Jun 28 17:01:48 2025 GMT
Not After : Jun 29 17:01:48 2025 GMT
Subject: CN=b8ef4c7eeef719e6d2d984d66268ac9020c01416
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9d:05:26:4f:ea:23:9e:8c:23:01:73:46:1b:e3:
93:9b:10:66:58:ee:7e:f2:9b:8f:36:08:67:95:17:
1e:92:e5:b6:aa:82:99:98:9a:6c:d9:81:c4:40:5f:
bb:12:24:35:ea:6b:27:03:d6:e6:c1:f9:ea:cb:4a:
1c:ee:c6:25:f9:0e:db:c6:07:a1:4e:8f:8c:9c:9d:
59:e2:06:94:ce:57:16:c7:5e:eb:f9:dc:92:a6:59:
40:df:25:9c:af:41:e2:ca:c1:c4:1d:07:02:ac:f3:
0a:df:32:a3:47:14:96:d5:33:45:f0:05:6a:5c:e0:
f2:03:5c:dd:da:f6:a9:f1:16:fd:f8:60:ba:49:28:
fb:e9:f7:38:69:ce:bc:5b:e3:ad:b4:46:42:3d:84:
b8:17:3a:5c:e0:74:c9:f1:75:f4:0c:76:af:66:e5:
69:41:e1:0c:31:56:35:7a:9d:8a:8c:c7:cd:e9:a4:
80:68:d9:ca:d1:ec:fd:0e:d4:f6:d2:53:d8:d0:53:
b3:f7:80:31:4a:fa:4e:80:1d:78:78:51:9c:81:04:
d0:8b:b7:cc:f6:86:5b:23:a9:5c:89:1f:0a:9c:7c:
d2:72:5d:0d:31:ff:af:bb:c2:d1:f7:3b:9f:60:7a:
bc:19:f1:5f:35:16:c9:6d:78:93:95:0c:a5:80:fd:
aa:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B8:EF:4C:7E:EE:F7:19:E6:D2:D9:84:D6:62:68:AC:90:20:C0:14:16
X509v3 Authority Key Identifier:
keyid:B0:57:F5:44:F5:3F:35:D8:D2:E7:3C:B2:96:5B:4F:4D:7D:02:29:59
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sFf1RPU_NdjS5zyylltPTX0CKVk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/db/efe0e0-34f7-429e-9f38-4ea7a1ae98de/1/sFf1RPU_NdjS5zyylltPTX0CKVk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
87:49:a6:79:7d:ea:67:9d:15:5f:56:ab:41:b4:1b:73:a0:2b:
fb:51:ec:69:76:64:e5:d3:d4:fe:c0:9f:55:7c:b7:af:17:e2:
1e:32:e7:f6:1e:de:13:bf:d6:27:82:92:3c:91:b2:96:0e:aa:
de:66:3e:29:b8:70:98:58:96:84:5c:13:08:55:dc:c6:5b:65:
61:cb:c6:2b:1b:d5:96:ea:bc:21:d5:ec:2e:d1:3b:2d:10:56:
9b:7c:28:52:dd:e6:e5:b8:8a:a5:88:60:73:ae:54:a3:c7:8d:
09:4d:84:7f:74:f6:95:91:9e:89:aa:d3:82:9e:f3:3f:a4:4f:
6c:03:ad:f0:fb:58:5d:28:88:2e:54:e4:77:6c:ae:ea:d1:ef:
51:87:fc:33:96:ae:62:33:a1:3d:34:cd:78:ad:db:e4:b4:45:
0f:19:71:e0:22:e3:f8:d3:8c:af:3e:b7:40:d4:35:ca:f8:83:
a0:1c:71:07:fb:38:8e:39:ce:55:4e:76:4b:b4:68:19:fa:13:
9b:97:75:b9:32:b1:cb:66:b8:d9:5c:ca:1e:90:f1:f3:9a:a0:
57:1c:ef:d7:ad:28:20:35:ae:6d:17:28:ef:11:07:0c:62:a9:
20:ee:df:81:57:c2:cc:17:ca:e4:9b:31:05:e3:9f:69:9f:3b:
d1:ba:29:88
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fPLtZPxfhIv29Lu6YkKiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwNTdmNTQ0ZjUzZjM1ZDhkMmU3M2NiMjk2NWI0ZjRkN2Qw
MjI5NTkwHhcNMjUwNjI4MTcwMTQ4WhcNMjUwNjI5MTcwMTQ4WjAzMTEwLwYDVQQD
EyhiOGVmNGM3ZWVlZjcxOWU2ZDJkOTg0ZDY2MjY4YWM5MDIwYzAxNDE2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAnQUmT+ojnowjAXNGG+OTmxBmWO5+
8puPNghnlRcekuW2qoKZmJps2YHEQF+7EiQ16msnA9bmwfnqy0oc7sYl+Q7bxgeh
To+MnJ1Z4gaUzlcWx17r+dySpllA3yWcr0HiysHEHQcCrPMK3zKjRxSW1TNF8AVq
XODyA1zd2vap8Rb9+GC6SSj76fc4ac68W+OttEZCPYS4Fzpc4HTJ8XX0DHavZuVp
QeEMMVY1ep2KjMfN6aSAaNnK0ez9DtT20lPY0FOz94AxSvpOgB14eFGcgQTQi7fM
9oZbI6lciR8KnHzScl0NMf+vu8LR9zufYHq8GfFfNRbJbXiTlQylgP2qSQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLjvTH7u9xnm0tmE1mJorJAgwBQWMB8GA1UdIwQY
MBaAFLBX9UT1PzXY0uc8spZbT019AilZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kYi9lZmUwZTAtMzRmNy00MjllLTlmMzgt
NGVhN2ExYWU5OGRlLzEvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kYi9lZmUwZTAtMzRmNy00MjllLTlmMzgtNGVhN2ExYWU5OGRl
LzEvc0ZmMVJQVV9OZGpTNXp5eWxsdFBUWDBDS1ZrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAh0mmeX3q
Z50VX1arQbQbc6Ar+1HsaXZk5dPU/sCfVXy3rxfiHjLn9h7eE7/WJ4KSPJGylg6q
3mY+KbhwmFiWhFwTCFXcxltlYcvGKxvVluq8IdXsLtE7LRBWm3woUt3m5biKpYhg
c65Uo8eNCU2Ef3T2lZGeiarTgp7zP6RPbAOt8PtYXSiILlTkd2yu6tHvUYf8M5au
YjOhPTTNeK3b5LRFDxlx4CLj+NOMrz63QNQ1yviDoBxxB/s4jjnOVU52S7RoGfoT
m5d1uTKxy2a42VzKHpDx85qgVxzv160oIDWubRco7xEHDGKpIO7fgVfCzBfK5Jsx
BeOfaZ870bopiA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:35:44 2025 by rpki-client