Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
File: tTVrOmd4voxhFK2H2q_NB8pV2AA.mft (raw, json)
Hash identifier: +k9hAkKGARufqaHJtxLTvnGSuzw+Iw6Xo4B1Mmx83dg=
Subject key identifier: 17:B8:F2:9C:15:28:D0:12:F5:EF:93:9A:A0:55:00:85:0E:D3:03:7E
Authority key identifier: B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
Certificate issuer: /CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Certificate serial: 0197B7EA5E12F30B2E846466ACF8DFAD260E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 19:01:19 +0000
Manifest this update: Sat 28 Jun 2025 19:01:19 +0000
Manifest next update: Sun 29 Jun 2025 19:01:19 +0000
Files and hashes: 1: NQNYc6fmHLA_NSQLy1429x1Q7Rs.roa (hash: 9fkXQ4KSWlEupj10JS2rCXdqinSmRcwnxokumXbhroc=)
2: QbjMGccKG5d5ZKbesdYHgP5_B94.roa (hash: 4D93Q+Whu8oYfv+HOP7uP002kldwgOYc75DA0DhrTb4=)
3: tTVrOmd4voxhFK2H2q_NB8pV2AA.crl (hash: IRZqbZ7YvqvDIw2PrjMcqYfO3aiUtEsNK5OAzSB1mzU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:5e:12:f3:0b:2e:84:64:66:ac:f8:df:ad:26:0e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b5356b3a6778be8c6114ad87daafcd07ca55d800
Validity
Not Before: Jun 28 19:01:19 2025 GMT
Not After : Jun 29 19:01:19 2025 GMT
Subject: CN=17b8f29c1528d012f5ef939aa05500850ed3037e
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:fe:42:56:21:46:dd:8e:08:c1:df:02:ad:07:
5e:97:14:3d:e5:1d:72:bb:3e:a3:14:a6:77:86:78:
c1:81:33:bb:57:64:b0:48:88:01:e0:8d:80:7e:eb:
8e:f6:25:ba:5c:b7:14:df:5c:48:93:82:d9:b5:6d:
f2:2d:d0:c9:66:e9:08:53:8f:bc:3e:fc:c9:3d:5b:
58:c2:c9:7e:a0:aa:09:b6:94:f9:57:11:58:ea:4c:
94:0e:09:b1:bf:8d:f2:48:b7:2a:39:0a:c5:06:e7:
0c:49:03:cb:30:05:6b:3b:75:f2:67:d1:91:0d:11:
0e:6e:96:62:1b:4d:fc:f7:d5:4e:1a:84:01:2f:d8:
ea:e0:62:aa:9f:de:d2:22:8a:3a:c6:ff:d7:82:5c:
44:95:35:81:a3:7a:7b:9b:c2:5c:47:76:80:7c:7f:
dc:98:30:e6:d1:24:a3:a0:a3:7d:1c:ff:5e:4a:b5:
50:80:00:9a:05:25:82:f7:ee:d9:a5:83:e8:83:94:
cb:3f:0c:de:ed:16:4f:03:d3:94:0c:d5:4c:d5:df:
48:b3:0d:33:8f:92:9e:5b:b3:f1:11:f4:60:25:09:
db:21:13:bb:6c:cd:d7:8e:06:fb:9b:2a:75:69:98:
9c:6e:1e:2d:ed:a4:1b:6b:5d:f1:22:54:a6:ba:4a:
02:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
17:B8:F2:9C:15:28:D0:12:F5:EF:93:9A:A0:55:00:85:0E:D3:03:7E
X509v3 Authority Key Identifier:
keyid:B5:35:6B:3A:67:78:BE:8C:61:14:AD:87:DA:AF:CD:07:CA:55:D8:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tTVrOmd4voxhFK2H2q_NB8pV2AA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e1/91b31e-0711-43fa-bc29-932b4ac0aafd/1/tTVrOmd4voxhFK2H2q_NB8pV2AA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8b:bc:4d:e0:c6:8d:b7:d9:66:bb:81:cc:13:a8:05:88:76:1e:
b3:29:7d:43:e1:1e:fa:0a:af:cb:bb:ab:58:46:11:99:de:da:
23:ad:8a:e4:1c:84:9e:08:44:65:66:ad:3d:da:36:ab:cf:b4:
a6:f1:4a:1c:f7:2e:50:2a:82:36:2a:af:2a:87:0f:b7:f7:e0:
ff:5c:6b:b6:04:31:1d:3e:a4:ea:bb:44:46:ae:4a:bb:db:f7:
a0:27:46:18:ab:75:86:0f:8c:c6:57:52:48:46:61:f3:a5:9f:
11:8b:ec:b0:bd:42:59:ab:7b:00:76:39:c3:e7:05:db:28:14:
cc:2d:2c:04:49:ed:97:cc:0f:7f:13:0d:a2:65:d6:ab:9c:04:
1c:ca:ba:59:1a:37:84:c7:ae:c7:82:99:86:b4:97:a0:f1:56:
80:6f:8e:70:05:cf:bc:b5:cf:6a:70:84:85:3c:08:7c:f7:8c:
e7:d1:f4:a4:30:a9:be:83:44:b0:68:0f:ec:b1:44:00:c2:ed:
a1:5b:db:c8:3a:a8:48:ab:07:4d:ae:d4:41:ed:1d:68:95:87:
70:0a:7f:a4:90:72:5f:ea:65:a0:b0:b2:d9:d4:bd:ea:1d:81:
b2:26:50:d9:f7:cb:e9:be:c5:bc:79:0c:d8:35:21:a2:bf:d4:
bb:97:1b:33
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36l4S8wsuhGRmrPjfrSYOMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI1MzU2YjNhNjc3OGJlOGM2MTE0YWQ4N2RhYWZjZDA3Y2E1
NWQ4MDAwHhcNMjUwNjI4MTkwMTE5WhcNMjUwNjI5MTkwMTE5WjAzMTEwLwYDVQQD
EygxN2I4ZjI5YzE1MjhkMDEyZjVlZjkzOWFhMDU1MDA4NTBlZDMwMzdlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwP5CViFG3Y4Iwd8CrQdelxQ95R1y
uz6jFKZ3hnjBgTO7V2SwSIgB4I2AfuuO9iW6XLcU31xIk4LZtW3yLdDJZukIU4+8
PvzJPVtYwsl+oKoJtpT5VxFY6kyUDgmxv43ySLcqOQrFBucMSQPLMAVrO3XyZ9GR
DREObpZiG03899VOGoQBL9jq4GKqn97SIoo6xv/XglxElTWBo3p7m8JcR3aAfH/c
mDDm0SSjoKN9HP9eSrVQgACaBSWC9+7ZpYPog5TLPwze7RZPA9OUDNVM1d9Isw0z
j5KeW7PxEfRgJQnbIRO7bM3Xjgb7myp1aZicbh4t7aQba13xIlSmukoCTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBe48pwVKNAS9e+TmqBVAIUO0wN+MB8GA1UdIwQY
MBaAFLU1azpneL6MYRSth9qvzQfKVdgAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lMS85MWIzMWUtMDcxMS00M2ZhLWJjMjkt
OTMyYjRhYzBhYWZkLzEvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lMS85MWIzMWUtMDcxMS00M2ZhLWJjMjktOTMyYjRhYzBhYWZk
LzEvdFRWck9tZDR2b3hoRksySDJxX05COHBWMkFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAi7xN4MaN
t9lmu4HME6gFiHYesyl9Q+Ee+gqvy7urWEYRmd7aI62K5ByEnghEZWatPdo2q8+0
pvFKHPcuUCqCNiqvKocPt/fg/1xrtgQxHT6k6rtERq5Ku9v3oCdGGKt1hg+MxldS
SEZh86WfEYvssL1CWat7AHY5w+cF2ygUzC0sBEntl8wPfxMNomXWq5wEHMq6WRo3
hMeux4KZhrSXoPFWgG+OcAXPvLXPanCEhTwIfPeM59H0pDCpvoNEsGgP7LFEAMLt
oVvbyDqoSKsHTa7UQe0daJWHcAp/pJByX+ploLCy2dS96h2BsiZQ2ffL6b7FvHkM
2DUhor/Uu5cbMw==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:47:29 2025 by rpki-client