Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
File: 234XcKOATHS58Sy5tvpwOW3pMp8.mft (raw, json)
Hash identifier: Q6NLyjh2YCeXg7XMMrkwBSqdTabhgFxT+nIhLQLyScI=
Subject key identifier: 02:D8:87:F3:37:87:A6:FA:A1:24:A7:FF:C8:F1:FE:2A:63:E0:D9:21
Authority key identifier: DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
Certificate issuer: /CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Certificate serial: 0197B6A1FCBBEB0EDC5FE6F5B1941DAB2C4A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
Manifest number: 0316
Signing time: Sat 28 Jun 2025 13:02:38 +0000
Manifest this update: Sat 28 Jun 2025 13:02:38 +0000
Manifest next update: Sun 29 Jun 2025 13:02:38 +0000
Files and hashes: 1: 234XcKOATHS58Sy5tvpwOW3pMp8.crl (hash: XrkdpehOFfk3E03awYfFMnDfUaLnAnEE+kIB8ToX7+Q=)
2: TfZHjmYknRwU6ErUe_wYUlK2dPk.roa (hash: c7WP6wJfnnCXs2t+4y61hzS0o/WHpIcUL2rUoYBlMZ4=)
3: UQg1PMXj1_xA8cNWapDDicWf9QE.roa (hash: SNk8uKYXIWMnimS9vpTvdTlC1q8gr9Fg7CLCU0N94ls=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:fc:bb:eb:0e:dc:5f:e6:f5:b1:94:1d:ab:2c:4a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db7e1770a3804c74b9f12cb9b6fa70396de9329f
Validity
Not Before: Jun 28 13:02:38 2025 GMT
Not After : Jun 29 13:02:38 2025 GMT
Subject: CN=02d887f33787a6faa124a7ffc8f1fe2a63e0d921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:b5:da:2c:ab:a4:2f:1f:a6:50:84:5f:46:f4:
b7:07:06:39:45:bf:49:19:8f:f4:5e:7e:91:c4:3e:
65:55:f2:ec:d7:68:f8:f6:07:9f:55:a5:5b:16:5c:
9e:d3:fe:fd:e0:3d:9f:f0:47:39:2c:c8:14:f7:be:
36:b6:ec:69:cf:a3:4d:01:39:a5:5c:fc:04:86:bb:
04:34:a6:01:37:4f:1a:ab:84:0e:c7:25:6f:c8:6e:
fe:cc:03:37:b4:cb:95:9c:89:0f:a8:bc:52:34:38:
67:ef:5c:36:3b:3f:fc:f1:5e:df:0e:62:cf:14:ef:
9f:46:1b:c3:ff:e8:fd:55:ca:da:c7:55:c8:f6:10:
d5:15:90:27:0d:f7:ca:e2:6d:30:81:40:db:9b:75:
45:ad:9a:a3:71:c6:77:b3:47:9e:c5:63:eb:34:1d:
8b:94:89:28:6c:2b:5a:c1:fd:44:10:8f:51:05:18:
7c:36:e2:98:25:0e:77:fc:3e:cf:50:18:ca:84:90:
de:39:41:67:99:92:e4:ed:27:1f:93:e0:14:9a:ed:
fa:35:c9:21:89:af:a4:da:4f:a8:9d:be:cd:ef:87:
2d:bb:95:68:53:a4:3f:6d:6a:6f:9b:d8:00:fb:cc:
ca:4d:24:54:82:b8:90:be:19:57:74:19:55:d8:9f:
bf:3f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:D8:87:F3:37:87:A6:FA:A1:24:A7:FF:C8:F1:FE:2A:63:E0:D9:21
X509v3 Authority Key Identifier:
keyid:DB:7E:17:70:A3:80:4C:74:B9:F1:2C:B9:B6:FA:70:39:6D:E9:32:9F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/234XcKOATHS58Sy5tvpwOW3pMp8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/d1130e-e07f-49ba-bef4-6c767b92c9a5/1/234XcKOATHS58Sy5tvpwOW3pMp8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:97:e4:92:5c:1d:85:0a:66:b8:3d:95:11:c3:e5:74:da:06:
2b:c4:cc:ff:c1:a6:07:36:c8:f8:24:8a:38:09:db:8b:1a:05:
32:90:59:65:b1:de:2e:dd:c7:98:d8:e1:30:5b:53:28:06:ce:
9e:a8:f5:a1:67:b0:0d:92:6c:5b:87:e6:ef:57:7d:18:30:0f:
c8:a2:3a:44:ed:c4:ae:8e:21:72:41:ce:76:fd:84:11:06:44:
4e:25:57:cf:23:2f:7f:f1:b8:e7:77:ec:fc:60:0f:56:d2:55:
d8:f0:95:3b:ba:6d:c0:94:26:fb:5f:26:96:15:5e:53:48:f8:
2d:fd:43:38:a1:98:b2:60:a7:79:cf:61:03:8f:ca:64:91:db:
1e:b9:61:93:60:03:2a:35:14:ef:78:c5:59:21:7d:55:6c:7e:
77:bf:d1:61:53:3a:a1:05:0b:e4:1f:d4:01:f5:11:ef:98:64:
60:4a:70:c3:9c:96:b4:ec:09:91:05:c9:d8:16:64:1d:71:1b:
95:a6:2f:63:41:d5:f3:9c:40:8d:da:b9:eb:b2:b1:82:9c:bc:
50:17:c3:de:6c:b4:9a:c5:48:e9:51:94:95:01:25:2d:6a:85:
33:dc:1a:5f:ed:df:67:c1:d3:bc:c2:99:67:6c:21:5a:32:fd:
45:3d:b9:9e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2ofy76w7cX+b1sZQdqyxKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiN2UxNzcwYTM4MDRjNzRiOWYxMmNiOWI2ZmE3MDM5NmRl
OTMyOWYwHhcNMjUwNjI4MTMwMjM4WhcNMjUwNjI5MTMwMjM4WjAzMTEwLwYDVQQD
EygwMmQ4ODdmMzM3ODdhNmZhYTEyNGE3ZmZjOGYxZmUyYTYzZTBkOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsLXaLKukLx+mUIRfRvS3BwY5Rb9J
GY/0Xn6RxD5lVfLs12j49gefVaVbFlye0/794D2f8Ec5LMgU9742tuxpz6NNATml
XPwEhrsENKYBN08aq4QOxyVvyG7+zAM3tMuVnIkPqLxSNDhn71w2Oz/88V7fDmLP
FO+fRhvD/+j9Vcrax1XI9hDVFZAnDffK4m0wgUDbm3VFrZqjccZ3s0eexWPrNB2L
lIkobCtawf1EEI9RBRh8NuKYJQ53/D7PUBjKhJDeOUFnmZLk7Scfk+AUmu36Nckh
ia+k2k+onb7N74ctu5VoU6Q/bWpvm9gA+8zKTSRUgriQvhlXdBlV2J+/PwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFALYh/M3h6b6oSSn/8jx/ipj4NkhMB8GA1UdIwQY
MBaAFNt+F3CjgEx0ufEsubb6cDlt6TKfMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQt
NmM3NjdiOTJjOWE1LzEvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9kMTEzMGUtZTA3Zi00OWJhLWJlZjQtNmM3NjdiOTJjOWE1
LzEvMjM0WGNLT0FUSFM1OFN5NXR2cHdPVzNwTXA4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXpfkklwd
hQpmuD2VEcPldNoGK8TM/8GmBzbI+CSKOAnbixoFMpBZZbHeLt3HmNjhMFtTKAbO
nqj1oWewDZJsW4fm71d9GDAPyKI6RO3Ero4hckHOdv2EEQZETiVXzyMvf/G453fs
/GAPVtJV2PCVO7ptwJQm+18mlhVeU0j4Lf1DOKGYsmCnec9hA4/KZJHbHrlhk2AD
KjUU73jFWSF9VWx+d7/RYVM6oQUL5B/UAfUR75hkYEpww5yWtOwJkQXJ2BZkHXEb
laYvY0HV85xAjdq567Kxgpy8UBfD3my0msVI6VGUlQElLWqFM9waX+3fZ8HTvMKZ
Z2whWjL9RT25ng==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:55:48 2025 by rpki-client