Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
File: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft (raw, json)
Hash identifier: IgfgrWYx/d6kIYDFplhTkq4qf5cFhIUj3IMIyBSpt8s=
Subject key identifier: 16:71:36:39:0C:72:9C:3A:B0:B7:7F:D6:CE:97:BC:6F:08:3C:D9:96
Authority key identifier: 93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
Certificate issuer: /CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Certificate serial: 0197B6A23FE689749764BB6B3B906438C723
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
Manifest number: 057A
Signing time: Sat 28 Jun 2025 13:02:55 +0000
Manifest this update: Sat 28 Jun 2025 13:02:55 +0000
Manifest next update: Sun 29 Jun 2025 13:02:55 +0000
Files and hashes: 1: k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl (hash: /EC7ACM0bsGz5wCIi/XkcPS1LfnlevTsfm+twE7A/xk=)
2: kN-GBCc12Ggp4V30uGC2WdsZGBg.roa (hash: jMACQRtQaq5bgDi3odEVzwvhAu6LZ6fYSZGcu6sjPTQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:55 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a2:3f:e6:89:74:97:64:bb:6b:3b:90:64:38:c7:23
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9374b853dfd9973f2cd994b2e3b75461d9a3fc44
Validity
Not Before: Jun 28 13:02:55 2025 GMT
Not After : Jun 29 13:02:55 2025 GMT
Subject: CN=167136390c729c3ab0b77fd6ce97bc6f083cd996
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:1e:13:f9:75:15:8f:b9:41:1a:0b:ff:28:e0:
f5:18:42:aa:d5:76:38:3a:62:01:3b:fa:bb:f6:c5:
44:9a:c8:61:73:f4:86:cf:aa:0d:22:50:4e:a5:8a:
98:4a:61:7d:b4:23:d8:62:11:29:04:8e:2a:10:4e:
9d:7d:af:59:0e:58:54:a1:b7:0e:86:27:e9:43:fb:
6a:26:8e:2d:0e:6d:1c:67:82:0d:66:46:de:f0:8e:
6b:ed:35:42:69:81:4e:f0:8d:4a:5b:f1:29:a7:f3:
2b:65:4b:35:55:17:2f:5a:b8:36:db:d1:5c:d4:72:
c0:72:e4:2c:16:81:89:02:a8:91:5c:ec:b9:3f:a2:
39:8d:3b:a8:71:7a:4b:05:3a:8c:d3:3e:2c:40:ef:
eb:d9:08:45:34:84:b1:fe:05:cd:e8:b3:7b:c3:03:
e4:98:f9:32:04:cf:bc:6a:0d:4a:4e:4b:db:41:e9:
02:c8:de:2d:7d:fa:ad:82:52:4d:eb:2e:54:72:95:
0e:ad:f2:0e:29:62:34:10:c0:19:47:7b:0c:7d:0c:
bd:3c:07:a0:55:3f:c9:44:38:e1:84:02:8f:73:57:
77:e3:21:67:2d:f9:ff:31:b5:d9:63:3d:fa:53:ed:
de:fb:b3:6f:cb:31:f3:3e:8c:77:e8:97:f9:b1:af:
b6:6d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:71:36:39:0C:72:9C:3A:B0:B7:7F:D6:CE:97:BC:6F:08:3C:D9:96
X509v3 Authority Key Identifier:
keyid:93:74:B8:53:DF:D9:97:3F:2C:D9:94:B2:E3:B7:54:61:D9:A3:FC:44
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/ba7b33-5cd8-404f-bffd-65bcc8cefdd2/1/k3S4U9_Zlz8s2ZSy47dUYdmj_EQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5c:26:48:6e:a1:13:23:27:e4:c7:46:f0:13:ae:61:99:ab:a7:
8e:a4:81:48:e8:a2:bb:d9:88:2b:e0:62:c5:93:62:2a:49:75:
96:9b:a6:ea:fc:f3:01:69:60:e3:47:53:12:02:e7:86:8e:0f:
2a:14:dd:13:bc:f6:60:2b:fb:be:2c:3f:58:a5:5e:1f:ec:90:
e3:ba:cc:00:55:6d:67:5c:53:84:d2:56:5a:e2:78:f2:2e:cd:
a9:d4:f3:ff:1d:02:b9:b1:40:5a:08:fb:98:41:1e:5d:44:1c:
e8:74:0b:27:1c:1c:67:52:df:96:b0:2c:02:52:84:a9:30:bd:
dc:60:b8:b2:13:bb:b3:97:80:41:a6:be:77:7c:24:d4:f2:26:
b5:4d:dc:87:48:e6:14:86:32:6f:dc:e9:90:8d:6e:b9:f5:3c:
f3:6a:4d:02:68:c4:aa:df:fc:f4:7b:ef:36:66:39:8d:f8:97:
27:22:df:fe:d8:63:ae:45:a7:b7:07:3f:a9:eb:c8:98:e7:e3:
f8:a8:8e:12:ec:75:1f:90:14:01:31:a7:40:aa:a6:7d:fc:1a:
2d:20:b0:5e:e4:ed:db:3a:e4:66:a9:08:68:ab:43:4f:0f:65:
35:0c:96:db:89:85:9b:94:fa:44:74:9d:d3:50:60:aa:92:58:
11:2d:5d:1e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oj/miXSXZLtrO5BkOMcjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDkzNzRiODUzZGZkOTk3M2YyY2Q5OTRiMmUzYjc1NDYxZDlh
M2ZjNDQwHhcNMjUwNjI4MTMwMjU1WhcNMjUwNjI5MTMwMjU1WjAzMTEwLwYDVQQD
EygxNjcxMzYzOTBjNzI5YzNhYjBiNzdmZDZjZTk3YmM2ZjA4M2NkOTk2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAth4T+XUVj7lBGgv/KOD1GEKq1XY4
OmIBO/q79sVEmshhc/SGz6oNIlBOpYqYSmF9tCPYYhEpBI4qEE6dfa9ZDlhUobcO
hifpQ/tqJo4tDm0cZ4INZkbe8I5r7TVCaYFO8I1KW/Epp/MrZUs1VRcvWrg229Fc
1HLAcuQsFoGJAqiRXOy5P6I5jTuocXpLBTqM0z4sQO/r2QhFNISx/gXN6LN7wwPk
mPkyBM+8ag1KTkvbQekCyN4tffqtglJN6y5UcpUOrfIOKWI0EMAZR3sMfQy9PAeg
VT/JRDjhhAKPc1d34yFnLfn/MbXZYz36U+3e+7NvyzHzPox36Jf5sa+2bQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBZxNjkMcpw6sLd/1s6XvG8IPNmWMB8GA1UdIwQY
MBaAFJN0uFPf2Zc/LNmUsuO3VGHZo/xEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQt
NjViY2M4Y2VmZGQyLzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC9iYTdiMzMtNWNkOC00MDRmLWJmZmQtNjViY2M4Y2VmZGQy
LzEvazNTNFU5X1psejhzMlpTeTQ3ZFVZZG1qX0VRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXCZIbqET
Iyfkx0bwE65hmaunjqSBSOiiu9mIK+BixZNiKkl1lpum6vzzAWlg40dTEgLnho4P
KhTdE7z2YCv7viw/WKVeH+yQ47rMAFVtZ1xThNJWWuJ48i7NqdTz/x0CubFAWgj7
mEEeXUQc6HQLJxwcZ1LflrAsAlKEqTC93GC4shO7s5eAQaa+d3wk1PImtU3ch0jm
FIYyb9zpkI1uufU882pNAmjEqt/89HvvNmY5jfiXJyLf/thjrkWntwc/qevImOfj
+KiOEux1H5AUATGnQKqmffwaLSCwXuTt2zrkZqkIaKtDTw9lNQyW24mFm5T6RHSd
01BgqpJYES1dHg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:34:12 2025 by rpki-client