Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
File: 0o_L31cryvk-FUTeEKF2yzARBrs.mft (raw, json)
Hash identifier: fa2aUpKFAQwdgWGLYh0vmYrQ6ShsNarleqHE/cKIfFA=
Subject key identifier: 43:53:81:93:AB:0A:BC:C7:68:4D:F9:B6:B8:BF:8E:1A:2D:D4:B4:9A
Authority key identifier: D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
Certificate issuer: /CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Certificate serial: 0197BA7E86CA0D11DD344A0B5D34FC678914
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
Manifest number: 14B6
Signing time: Sun 29 Jun 2025 07:02:23 +0000
Manifest this update: Sun 29 Jun 2025 07:02:23 +0000
Manifest next update: Mon 30 Jun 2025 07:02:23 +0000
Files and hashes: 1: 0o_L31cryvk-FUTeEKF2yzARBrs.crl (hash: SrAvDqTJWuSe7QTLRtZYhhKotc8WIHfnFUnIyCUlQIg=)
2: RoAvwASbb4l0ZFtVXgsI3PT0AVo.roa (hash: mZqoFIWYuSZ97LTT9lIF7CSJPGIZ96DKu7+NicnF+sU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:7e:86:ca:0d:11:dd:34:4a:0b:5d:34:fc:67:89:14
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d28fcbdf572bcaf93e1544de10a176cb301106bb
Validity
Not Before: Jun 29 07:02:23 2025 GMT
Not After : Jun 30 07:02:23 2025 GMT
Subject: CN=43538193ab0abcc7684df9b6b8bf8e1a2dd4b49a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:6d:21:af:14:9b:c2:38:ed:e3:06:1e:2b:9e:
48:40:eb:41:58:5b:ed:04:d9:f4:8b:32:df:6f:47:
93:f9:ba:92:c5:c0:29:a6:f8:a9:e8:69:fb:10:6b:
43:5c:b4:d7:65:0a:50:ed:42:e0:f1:ca:a8:7a:2b:
b6:55:64:37:af:04:e7:8b:4e:84:f4:63:e2:55:2d:
6e:a8:52:8b:da:89:ae:cd:40:ee:cd:5e:a9:8f:c4:
19:78:a3:a1:12:82:1b:81:30:4a:67:64:52:cf:ae:
60:87:67:cf:93:83:22:8c:3b:c5:7a:83:8a:ab:75:
75:92:d2:d0:7c:6e:71:b7:23:b3:1f:48:5d:2c:52:
15:41:fe:cb:8b:78:3c:fc:2d:30:5d:32:c9:2e:2d:
df:b4:ca:b3:d7:18:04:ac:12:21:20:71:a9:f3:87:
da:65:1a:2d:27:a4:b0:5d:1b:bc:96:bf:65:26:73:
96:e7:1f:92:23:24:e0:27:b6:ac:be:8d:25:8d:4e:
35:4f:d9:72:b4:07:2c:f5:a3:70:3b:c7:56:19:49:
45:05:d8:b7:f3:0c:05:19:ee:1b:4c:0c:8d:35:45:
33:94:d1:27:93:3c:7c:59:58:92:cc:bf:72:0f:f2:
d1:85:78:33:ab:45:88:9b:00:c2:6f:70:9c:01:46:
2d:7d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:53:81:93:AB:0A:BC:C7:68:4D:F9:B6:B8:BF:8E:1A:2D:D4:B4:9A
X509v3 Authority Key Identifier:
keyid:D2:8F:CB:DF:57:2B:CA:F9:3E:15:44:DE:10:A1:76:CB:30:11:06:BB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0o_L31cryvk-FUTeEKF2yzARBrs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/01a103-5b25-4442-a892-0fe8399de727/1/0o_L31cryvk-FUTeEKF2yzARBrs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a6:9a:01:d8:45:2f:8b:36:27:8b:d4:75:05:76:fb:f8:61:e8:
05:c7:9a:01:e7:bb:d5:dc:00:2e:61:63:62:be:09:ae:89:dd:
72:e8:ee:71:86:b9:31:40:cf:0f:65:29:ed:e0:89:ce:5d:a0:
aa:a5:2c:dc:4a:8c:d1:15:cd:b5:da:d6:20:f9:03:7c:7f:38:
5a:1d:1e:8f:65:dd:47:63:b0:14:96:ce:cc:e1:40:b5:db:c5:
f2:0a:eb:c3:e3:fb:76:72:fe:04:df:69:b4:c4:dc:ae:86:1f:
d3:ff:f1:f4:18:5e:82:98:d9:a6:af:05:6c:2c:ec:e4:e7:e1:
f9:1b:1c:62:48:ed:ac:c9:1e:07:e0:e8:c9:29:ff:31:de:69:
77:db:89:46:8b:34:16:8c:75:c1:29:c6:8e:e9:f4:8b:c4:0a:
0e:d2:c6:77:2e:6e:40:0a:00:a4:74:b7:49:41:ee:b4:b5:05:
30:81:d7:b6:78:64:12:3b:9a:f3:14:8b:39:6b:6d:96:bd:90:
90:73:0b:3a:60:86:48:01:75:5e:49:92:a4:5c:3b:03:ee:f6:
ee:d9:27:b0:52:91:e2:37:5e:51:e6:fe:8b:12:00:e5:c5:da:
f7:69:12:0e:e8:9f:3d:f3:03:99:f8:53:09:b8:c4:7d:e8:6c:
1b:94:a8:8f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6fobKDRHdNEoLXTT8Z4kUMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyOGZjYmRmNTcyYmNhZjkzZTE1NDRkZTEwYTE3NmNiMzAx
MTA2YmIwHhcNMjUwNjI5MDcwMjIzWhcNMjUwNjMwMDcwMjIzWjAzMTEwLwYDVQQD
Eyg0MzUzODE5M2FiMGFiY2M3Njg0ZGY5YjZiOGJmOGUxYTJkZDRiNDlhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmW0hrxSbwjjt4wYeK55IQOtBWFvt
BNn0izLfb0eT+bqSxcAppvip6Gn7EGtDXLTXZQpQ7ULg8cqoeiu2VWQ3rwTni06E
9GPiVS1uqFKL2omuzUDuzV6pj8QZeKOhEoIbgTBKZ2RSz65gh2fPk4MijDvFeoOK
q3V1ktLQfG5xtyOzH0hdLFIVQf7Li3g8/C0wXTLJLi3ftMqz1xgErBIhIHGp84fa
ZRotJ6SwXRu8lr9lJnOW5x+SIyTgJ7asvo0ljU41T9lytAcs9aNwO8dWGUlFBdi3
8wwFGe4bTAyNNUUzlNEnkzx8WViSzL9yD/LRhXgzq0WImwDCb3CcAUYtfQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFENTgZOrCrzHaE35tri/jhot1LSaMB8GA1UdIwQY
MBaAFNKPy99XK8r5PhVE3hChdsswEQa7MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTIt
MGZlODM5OWRlNzI3LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC8wMWExMDMtNWIyNS00NDQyLWE4OTItMGZlODM5OWRlNzI3
LzEvMG9fTDMxY3J5dmstRlVUZUVLRjJ5ekFSQnJzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAppoB2EUv
izYni9R1BXb7+GHoBceaAee71dwALmFjYr4JrondcujucYa5MUDPD2Up7eCJzl2g
qqUs3EqM0RXNtdrWIPkDfH84Wh0ej2XdR2OwFJbOzOFAtdvF8grrw+P7dnL+BN9p
tMTcroYf0//x9BhegpjZpq8FbCzs5Ofh+RscYkjtrMkeB+DoySn/Md5pd9uJRos0
Fox1wSnGjun0i8QKDtLGdy5uQAoApHS3SUHutLUFMIHXtnhkEjua8xSLOWttlr2Q
kHMLOmCGSAF1XkmSpFw7A+727tknsFKR4jdeUeb+ixIA5cXa92kSDuifPfMDmfhT
CbjEfehsG5Sojw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:48:32 2025 by rpki-client