Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
File: n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft (raw, json)
Hash identifier: LgiHzL+PhJwJ1YNowigdWq79rJGkQS3n+uRZoJGhjeM=
Subject key identifier: 6D:B2:52:4E:A0:45:E1:71:55:1A:CE:E4:F6:35:27:98:8D:3A:16:39
Authority key identifier: 9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
Certificate issuer: /CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Certificate serial: 0197C04A022BD38E1F3647DED37B37D904BD
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
Manifest number: 15BD
Signing time: Mon 30 Jun 2025 10:02:44 +0000
Manifest this update: Mon 30 Jun 2025 10:02:44 +0000
Manifest next update: Tue 01 Jul 2025 10:02:44 +0000
Files and hashes: 1: 4OydZQEJVaj8JF-uoTmGENGb7Is.roa (hash: a1svWgU+LYKwh9ujA37IlIq254s7oEhH/xm68kQfTL0=)
2: WbLB1D5MYx_PgfcFWuvA_-UUgKg.roa (hash: 1LjofbnkllkaD2D3HBXrE3UcL9Erxo+FTPhwZWfcOlk=)
3: Xdap8lWOk_OPrPnAHjZrax0V0YY.roa (hash: 36jUlYBcRqreAxC1qFacFfo9gII7DpsC+iKcaU5I/sQ=)
4: n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl (hash: aNMCa7/96kkDBkOpRLJLAm3TsnfihT3pxSxgXbnP5BE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 07:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c0:4a:02:2b:d3:8e:1f:36:47:de:d3:7b:37:d9:04:bd
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9f5646f7d8afc0a933fb33333f37013d83a04d00
Validity
Not Before: Jun 30 10:02:44 2025 GMT
Not After : Jul 1 10:02:44 2025 GMT
Subject: CN=6db2524ea045e171551acee4f63527988d3a1639
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:ef:88:84:67:1a:4e:dd:f9:0e:ff:7c:d5:c6:
03:cb:f8:ef:0c:31:8d:e5:92:5e:84:96:2c:bd:80:
af:de:f9:44:e6:b5:af:b3:34:bf:9e:b9:60:7f:74:
a9:f5:70:d1:3f:c2:be:54:08:16:9f:f4:91:76:ac:
99:d8:f2:b7:da:5a:31:aa:48:76:53:30:35:2e:4f:
91:33:10:d5:b7:fd:2c:db:bd:e4:ef:07:11:e1:06:
2f:9a:3e:0b:1a:a6:84:1b:65:15:5d:6e:d0:2b:c8:
21:18:75:8b:6c:bc:07:9b:61:34:29:28:d5:7e:f8:
0a:c8:88:0c:3f:60:ff:64:07:20:98:f2:8d:41:c0:
47:99:63:85:0e:9e:c0:52:84:c1:7a:e5:67:e8:b7:
5b:72:d8:5a:e4:23:76:2e:ef:e8:0d:96:d2:85:6e:
b7:27:32:c2:b0:5b:f3:49:b7:46:38:5e:a8:27:63:
c5:c6:80:7e:50:ce:68:c6:b0:ab:3f:8f:1f:37:9e:
1b:d9:d6:9b:b3:a0:0f:db:6e:52:c2:fb:77:cb:ae:
04:25:1f:0c:bd:f7:ef:2c:bf:f5:2e:cc:44:ca:85:
0e:ce:8c:ad:d6:ed:7d:43:fb:81:f8:32:34:68:21:
78:6a:1e:88:c9:6c:a8:97:00:6b:68:85:e8:9e:ec:
02:61
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6D:B2:52:4E:A0:45:E1:71:55:1A:CE:E4:F6:35:27:98:8D:3A:16:39
X509v3 Authority Key Identifier:
keyid:9F:56:46:F7:D8:AF:C0:A9:33:FB:33:33:3F:37:01:3D:83:A0:4D:00
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/n1ZG99ivwKkz-zMzPzcBPYOgTQA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/916917-88c5-4e7b-811e-7d32ca065b66/1/n1ZG99ivwKkz-zMzPzcBPYOgTQA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
8c:db:a7:ad:14:5c:a2:12:d4:6b:bd:e7:a3:d1:ea:2a:fe:9a:
97:48:42:cf:98:91:45:88:e6:87:77:ae:67:9f:db:cf:fc:66:
e9:35:c0:12:17:e3:1f:84:f5:e8:11:32:15:18:e4:24:72:6c:
c0:b2:23:41:fc:69:b8:bb:4a:d8:f5:6f:ba:49:35:85:d9:7d:
25:66:9f:a6:58:02:a6:e4:ba:5d:40:86:9e:f9:d3:d1:71:ff:
9c:61:97:f7:97:f5:49:93:04:09:fd:60:2f:19:98:04:9f:f6:
8e:38:bb:d4:88:30:c2:ec:25:5b:64:0a:4b:28:19:62:d9:3e:
5f:85:f0:8a:36:47:ac:d4:c0:92:05:c6:67:d5:fa:d5:16:df:
1f:b3:5b:90:93:55:ea:a6:f2:da:1c:18:ac:4f:9b:fc:3f:80:
0d:49:fe:b8:33:68:9f:68:35:12:86:31:8b:04:c9:8e:21:d9:
f1:6e:2c:d8:0d:12:0d:2b:43:fd:71:60:cf:49:10:38:6b:81:
e0:e8:b6:a6:64:ff:ce:c1:51:fe:79:78:28:a8:50:36:79:ec:
23:ad:a9:88:1d:00:20:bf:88:10:43:df:73:51:f9:63:b6:2f:
dd:f2:69:57:47:3b:2c:4d:a2:78:10:7a:93:47:72:51:52:11:
9e:da:ee:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfASgIr044fNkfe03s32QS9MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDlmNTY0NmY3ZDhhZmMwYTkzM2ZiMzMzMzNmMzcwMTNkODNh
MDRkMDAwHhcNMjUwNjMwMTAwMjQ0WhcNMjUwNzAxMTAwMjQ0WjAzMTEwLwYDVQQD
Eyg2ZGIyNTI0ZWEwNDVlMTcxNTUxYWNlZTRmNjM1Mjc5ODhkM2ExNjM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp++IhGcaTt35Dv981cYDy/jvDDGN
5ZJehJYsvYCv3vlE5rWvszS/nrlgf3Sp9XDRP8K+VAgWn/SRdqyZ2PK32loxqkh2
UzA1Lk+RMxDVt/0s273k7wcR4QYvmj4LGqaEG2UVXW7QK8ghGHWLbLwHm2E0KSjV
fvgKyIgMP2D/ZAcgmPKNQcBHmWOFDp7AUoTBeuVn6Ldbctha5CN2Lu/oDZbShW63
JzLCsFvzSbdGOF6oJ2PFxoB+UM5oxrCrP48fN54b2dabs6AP225Swvt3y64EJR8M
vffvLL/1LsxEyoUOzoyt1u19Q/uB+DI0aCF4ah6IyWyolwBraIXonuwCYQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFG2yUk6gReFxVRrO5PY1J5iNOhY5MB8GA1UdIwQY
MBaAFJ9WRvfYr8CpM/szMz83AT2DoE0AMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbjFaRzk5aXZ3S2t6LXpNelB6Y0JQWU9nVFFBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi85MTY5MTctODhjNS00ZTdiLTgxMWUt
N2QzMmNhMDY1YjY2LzEvbjFaRzk5aXZ3S2t6LXpNelB6Y0JQWU9nVFFBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi85MTY5MTctODhjNS00ZTdiLTgxMWUtN2QzMmNhMDY1YjY2
LzEvbjFaRzk5aXZ3S2t6LXpNelB6Y0JQWU9nVFFBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAjNunrRRc
ohLUa73no9HqKv6al0hCz5iRRYjmh3euZ5/bz/xm6TXAEhfjH4T16BEyFRjkJHJs
wLIjQfxpuLtK2PVvukk1hdl9JWafplgCpuS6XUCGnvnT0XH/nGGX95f1SZMECf1g
LxmYBJ/2jji71IgwwuwlW2QKSygZYtk+X4XwijZHrNTAkgXGZ9X61RbfH7NbkJNV
6qby2hwYrE+b/D+ADUn+uDNon2g1EoYxiwTJjiHZ8W4s2A0SDStD/XFgz0kQOGuB
4Oi2pmT/zsFR/nl4KKhQNnnsI62piB0AIL+IEEPfc1H5Y7Yv3fJpV0c7LE2ieBB6
k0dyUVIRntruqQ==
-----END CERTIFICATE-----
Generated at Mon Jun 30 12:16:38 2025 by rpki-client