Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
File: syu38vqMQUxnGIvau_t2IVaTuoc.mft (raw, json)
Hash identifier: oTBcqoL+5EjhTX5mGvE+7mzocTukNmbm5jpXdJSh0Z0=
Subject key identifier: BA:14:6F:66:42:32:23:E1:EA:D7:48:2C:3E:93:24:D9:5F:B1:D8:28
Authority key identifier: B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
Certificate issuer: /CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Certificate serial: 0197B820F19E57B62BD6B346A9C2094703E7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
Manifest number: 03B1
Signing time: Sat 28 Jun 2025 20:00:56 +0000
Manifest this update: Sat 28 Jun 2025 20:00:56 +0000
Manifest next update: Sun 29 Jun 2025 20:00:56 +0000
Files and hashes: 1: dlFU-VFKr3DcjZAchl6XqyqKK5c.roa (hash: neVLf32lP2kuQND5P5wXOeNSgGn0qOcZGwTsUoY1fZs=)
2: syu38vqMQUxnGIvau_t2IVaTuoc.crl (hash: b/srWv/Czbfaz/9ClAkRejPUdH3c3ZvBbvJCQPgahxY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl
rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:20:f1:9e:57:b6:2b:d6:b3:46:a9:c2:09:47:03:e7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b32bb7f2fa8c414c67188bdabbfb76215693ba87
Validity
Not Before: Jun 28 20:00:56 2025 GMT
Not After : Jun 29 20:00:56 2025 GMT
Subject: CN=ba146f66423223e1ead7482c3e9324d95fb1d828
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:ac:8a:d1:9e:9c:a0:0a:d3:15:ff:19:61:c1:
4d:e4:80:5b:98:ed:e4:73:5e:c4:3c:32:4d:18:e1:
13:41:2b:07:c7:05:04:b9:05:63:f9:23:f1:8e:83:
80:3f:93:bc:8c:ce:95:c2:6c:7f:79:06:81:dc:7e:
f6:8f:12:e4:7a:32:c0:a0:0a:32:d6:6d:05:60:73:
60:38:6b:a8:a9:12:08:a0:56:42:2b:2c:fa:fb:ab:
1f:ec:55:32:f8:19:27:be:9f:0d:0f:ac:11:37:6f:
5c:ba:38:3a:c2:c4:a7:21:60:fe:08:7f:35:a2:f1:
34:08:e0:49:a8:7b:bc:ea:1d:64:f3:96:ad:6e:f3:
cd:f9:92:c0:0c:66:80:51:38:2b:d1:76:8c:69:49:
bf:60:d5:a6:12:36:42:a0:f1:ff:54:64:76:aa:59:
f3:05:3b:a1:b2:f3:0f:e4:35:c7:4c:61:94:73:ea:
1b:f7:f3:48:a5:2f:83:50:8f:73:bf:e6:2c:aa:84:
36:77:5e:8a:79:36:47:b8:9c:bc:6b:a9:0c:20:6a:
a4:12:6b:1f:b1:eb:00:77:a2:e8:ae:7f:c6:0e:65:
91:ae:46:41:95:af:6f:77:2a:93:59:0a:84:72:1f:
af:9d:34:f7:f4:1a:ce:1e:62:6e:38:e7:c4:cf:df:
8d:4b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:14:6F:66:42:32:23:E1:EA:D7:48:2C:3E:93:24:D9:5F:B1:D8:28
X509v3 Authority Key Identifier:
keyid:B3:2B:B7:F2:FA:8C:41:4C:67:18:8B:DA:BB:FB:76:21:56:93:BA:87
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/syu38vqMQUxnGIvau_t2IVaTuoc.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/e6/af31ab-2e34-47fb-9611-223a4d94709e/1/syu38vqMQUxnGIvau_t2IVaTuoc.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:91:ac:e4:21:08:34:a6:a8:05:f2:c5:64:0f:a1:d9:e3:43:
89:47:66:0c:d2:bf:bf:37:97:94:cc:19:e0:f7:55:95:56:61:
dd:a7:c9:4f:1a:21:ab:af:f2:8e:90:a9:e2:07:4e:c6:a1:b7:
d8:85:cc:45:9d:4d:e8:82:bc:a5:18:e8:f1:dc:3d:9d:50:4a:
e1:8e:08:fd:73:27:24:ad:a8:3e:25:15:88:67:89:34:29:af:
27:43:f0:50:84:d5:f1:38:02:c4:01:78:a6:26:e8:3b:f0:2a:
50:ae:9f:91:0b:e1:c4:b5:1a:5b:f5:b3:17:9e:42:96:36:69:
38:2f:3e:a7:8d:f8:1d:15:9e:8c:86:f5:10:45:82:a8:1b:02:
da:dc:d8:ba:e5:92:21:68:fe:25:7d:f1:fb:44:40:b2:01:f6:
0c:9f:b4:1f:7b:42:56:94:73:2c:eb:d1:e2:f7:1b:4f:26:24:
91:37:1e:d5:4c:34:4d:e3:d0:b8:4e:f1:7e:fd:70:58:40:5c:
08:51:6a:ca:a0:ac:eb:0e:3f:96:8d:63:f1:fc:d1:ba:86:e2:
59:8b:08:7a:2c:6b:1b:52:f0:4f:9d:d7:13:5e:14:d6:1e:eb:
9f:e2:91:8f:16:96:72:8c:d9:f8:95:60:c2:68:4f:21:79:41:
43:f1:1e:80
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IPGeV7Yr1rNGqcIJRwPnMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIzMmJiN2YyZmE4YzQxNGM2NzE4OGJkYWJiZmI3NjIxNTY5
M2JhODcwHhcNMjUwNjI4MjAwMDU2WhcNMjUwNjI5MjAwMDU2WjAzMTEwLwYDVQQD
EyhiYTE0NmY2NjQyMzIyM2UxZWFkNzQ4MmMzZTkzMjRkOTVmYjFkODI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvKyK0Z6coArTFf8ZYcFN5IBbmO3k
c17EPDJNGOETQSsHxwUEuQVj+SPxjoOAP5O8jM6Vwmx/eQaB3H72jxLkejLAoAoy
1m0FYHNgOGuoqRIIoFZCKyz6+6sf7FUy+Bknvp8ND6wRN29cujg6wsSnIWD+CH81
ovE0COBJqHu86h1k85atbvPN+ZLADGaAUTgr0XaMaUm/YNWmEjZCoPH/VGR2qlnz
BTuhsvMP5DXHTGGUc+ob9/NIpS+DUI9zv+YsqoQ2d16KeTZHuJy8a6kMIGqkEmsf
sesAd6Lorn/GDmWRrkZBla9vdyqTWQqEch+vnTT39BrOHmJuOOfEz9+NSwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLoUb2ZCMiPh6tdILD6TJNlfsdgoMB8GA1UdIwQY
MBaAFLMrt/L6jEFMZxiL2rv7diFWk7qHMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lNi9hZjMxYWItMmUzNC00N2ZiLTk2MTEt
MjIzYTRkOTQ3MDllLzEvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lNi9hZjMxYWItMmUzNC00N2ZiLTk2MTEtMjIzYTRkOTQ3MDll
LzEvc3l1Mzh2cU1RVXhuR0l2YXVfdDJJVmFUdW9jLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASpGs5CEI
NKaoBfLFZA+h2eNDiUdmDNK/vzeXlMwZ4PdVlVZh3afJTxohq6/yjpCp4gdOxqG3
2IXMRZ1N6IK8pRjo8dw9nVBK4Y4I/XMnJK2oPiUViGeJNCmvJ0PwUITV8TgCxAF4
piboO/AqUK6fkQvhxLUaW/WzF55CljZpOC8+p434HRWejIb1EEWCqBsC2tzYuuWS
IWj+JX3x+0RAsgH2DJ+0H3tCVpRzLOvR4vcbTyYkkTce1Uw0TePQuE7xfv1wWEBc
CFFqyqCs6w4/lo1j8fzRuobiWYsIeixrG1LwT53XE14U1h7rn+KRjxaWcozZ+JVg
wmhPIXlBQ/EegA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:50:25 2025 by rpki-client