Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
File: b0IywZ0Kf37XacRxVCHmzBi9tkA.mft (raw, json)
Hash identifier: fpauc0IquLs8ZNEpyzear5/qhXu5Q/bTMVkT964klBI=
Subject key identifier: 48:AE:FF:77:BE:54:C3:7D:A6:DC:3E:80:AB:F3:8C:59:2B:F4:0F:60
Authority key identifier: 6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
Certificate issuer: /CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Certificate serial: 0197B77BF7593A95211E4D046297A3E2B549
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
Manifest number: 0C70
Signing time: Sat 28 Jun 2025 17:00:43 +0000
Manifest this update: Sat 28 Jun 2025 17:00:43 +0000
Manifest next update: Sun 29 Jun 2025 17:00:43 +0000
Files and hashes: 1: 1gDvISiJeBsiPwYz4SY-svlQBnI.roa (hash: TbL9yAwFZc+YcGPNcHElB5t7SsEiiC06AsozHAUITq0=)
2: FSvZKOyprvPTwpvLudP_lAeqhlU.roa (hash: Cxa/2gvgTaa5x9r85ztjFw7YmkKPnGeCTh6zV9r6OPQ=)
3: b0IywZ0Kf37XacRxVCHmzBi9tkA.crl (hash: Exsju1D1C+E+ZWnxTzs9b2TRM0cTu7BrxPLawOCuajQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7b:f7:59:3a:95:21:1e:4d:04:62:97:a3:e2:b5:49
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6f4232c19d0a7f7ed769c4715421e6cc18bdb640
Validity
Not Before: Jun 28 17:00:43 2025 GMT
Not After : Jun 29 17:00:43 2025 GMT
Subject: CN=48aeff77be54c37da6dc3e80abf38c592bf40f60
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:83:c2:6f:c6:a0:f6:e8:5e:db:0a:02:45:98:
0a:1a:4e:54:27:c0:40:7a:a3:1d:98:a2:01:55:48:
e8:b6:e2:3c:b6:a3:3d:9d:d0:2b:9e:d9:bb:bf:c9:
a5:cb:83:6a:8c:8b:08:c6:5c:62:ee:13:fe:f7:70:
40:9f:2e:04:b2:d9:37:64:ba:49:a2:67:80:c5:88:
9f:b1:01:e3:32:7c:cb:7e:cb:3f:6d:4b:2e:dd:8b:
55:ec:6a:26:d5:27:ab:e8:61:e0:16:02:16:f6:ac:
55:ad:f9:3e:39:55:9b:03:6c:9f:76:6b:6f:24:76:
93:ff:2d:29:fc:0f:c1:56:90:66:55:f3:8d:5f:92:
42:31:c2:e4:a9:cc:9d:11:e8:21:5a:57:23:b5:75:
ac:e1:ea:ed:6c:6d:c7:9e:f2:69:b0:cc:08:5d:29:
65:1d:75:98:c6:1d:03:40:5b:ee:f4:61:a4:9f:56:
70:44:04:c9:99:7a:16:e7:9a:5f:7b:6c:0d:1a:ac:
48:55:eb:42:b4:69:c3:3c:04:7d:e0:5d:5e:b8:07:
f6:e4:a3:86:47:4c:ac:9f:74:e0:89:8c:d1:aa:a0:
6c:0a:d1:e9:cb:c3:2b:b2:ff:da:0c:62:4b:d4:36:
a0:09:71:3f:75:90:87:4c:cb:2c:e6:78:04:2e:3c:
1c:47
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:AE:FF:77:BE:54:C3:7D:A6:DC:3E:80:AB:F3:8C:59:2B:F4:0F:60
X509v3 Authority Key Identifier:
keyid:6F:42:32:C1:9D:0A:7F:7E:D7:69:C4:71:54:21:E6:CC:18:BD:B6:40
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0IywZ0Kf37XacRxVCHmzBi9tkA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/f1d703-ff9a-44b1-8e65-66ca57f74e0d/1/b0IywZ0Kf37XacRxVCHmzBi9tkA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
38:19:90:11:5c:21:2b:7a:61:7a:b6:bd:1f:15:e6:3e:4b:15:
3e:6a:2c:c9:8d:df:18:4f:a8:52:c7:09:e9:02:03:41:73:79:
36:9e:7e:45:ba:dc:dc:d1:cd:e3:2e:69:1b:06:db:eb:5f:53:
c8:51:d4:0a:67:56:cd:5a:9a:2e:69:4f:a4:16:a4:ab:14:29:
4f:77:5a:5f:25:52:77:5e:62:67:3c:f4:d3:9c:56:84:c4:e3:
ba:af:2d:f9:18:b8:14:8c:cf:0f:b8:48:e3:9f:4d:73:2e:d0:
db:80:31:c6:3c:5c:87:06:c6:2a:2b:1b:7d:5a:7b:dd:12:43:
93:1a:55:35:55:47:a9:76:e7:74:f5:36:65:a7:13:05:44:b7:
58:7d:01:44:e8:c3:25:a9:18:66:68:3d:b0:ce:c4:a7:21:44:
d2:93:79:ef:97:64:56:71:d7:6a:b6:c6:ec:1e:fc:ba:f0:f0:
ef:27:38:8f:12:a3:42:ed:9f:74:3a:cd:f6:a0:bc:bd:4d:ea:
01:24:b6:9e:b0:94:90:ec:40:d8:64:56:5d:1f:4d:91:d4:d7:
f8:44:4a:4b:8b:74:12:6c:01:d3:e0:9a:b9:25:9c:c8:df:35:
db:30:f0:90:4f:c2:91:5d:3a:9c:41:3a:c9:3a:a6:f1:62:a2:
b3:19:6d:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3e/dZOpUhHk0EYpej4rVJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZmNDIzMmMxOWQwYTdmN2VkNzY5YzQ3MTU0MjFlNmNjMThi
ZGI2NDAwHhcNMjUwNjI4MTcwMDQzWhcNMjUwNjI5MTcwMDQzWjAzMTEwLwYDVQQD
Eyg0OGFlZmY3N2JlNTRjMzdkYTZkYzNlODBhYmYzOGM1OTJiZjQwZjYwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArYPCb8ag9uhe2woCRZgKGk5UJ8BA
eqMdmKIBVUjotuI8tqM9ndArntm7v8mly4NqjIsIxlxi7hP+93BAny4Estk3ZLpJ
omeAxYifsQHjMnzLfss/bUsu3YtV7Gom1Ser6GHgFgIW9qxVrfk+OVWbA2yfdmtv
JHaT/y0p/A/BVpBmVfONX5JCMcLkqcydEeghWlcjtXWs4ertbG3HnvJpsMwIXSll
HXWYxh0DQFvu9GGkn1ZwRATJmXoW55pfe2wNGqxIVetCtGnDPAR94F1euAf25KOG
R0ysn3TgiYzRqqBsCtHpy8Mrsv/aDGJL1DagCXE/dZCHTMss5ngELjwcRwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEiu/3e+VMN9ptw+gKvzjFkr9A9gMB8GA1UdIwQY
MBaAFG9CMsGdCn9+12nEcVQh5swYvbZAMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUt
NjZjYTU3Zjc0ZTBkLzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS9mMWQ3MDMtZmY5YS00NGIxLThlNjUtNjZjYTU3Zjc0ZTBk
LzEvYjBJeXdaMEtmMzdYYWNSeFZDSG16Qmk5dGtBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAOBmQEVwh
K3phera9HxXmPksVPmosyY3fGE+oUscJ6QIDQXN5Np5+Rbrc3NHN4y5pGwbb619T
yFHUCmdWzVqaLmlPpBakqxQpT3daXyVSd15iZzz005xWhMTjuq8t+Ri4FIzPD7hI
459Ncy7Q24AxxjxchwbGKisbfVp73RJDkxpVNVVHqXbndPU2ZacTBUS3WH0BROjD
JakYZmg9sM7EpyFE0pN575dkVnHXarbG7B78uvDw7yc4jxKjQu2fdDrN9qC8vU3q
ASS2nrCUkOxA2GRWXR9NkdTX+ERKS4t0EmwB0+CauSWcyN812zDwkE/CkV06nEE6
yTqm8WKisxlt+w==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:05:57 2025 by rpki-client