Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
File: rONjRGSGG9S_jFvH48m_09JGpN0.mft (raw, json)
Hash identifier: nLoLoN5i26re3V+hCvS5UlShFiI6GyX06Fo2uuHQXPc=
Subject key identifier: F3:20:90:FD:EF:A4:22:71:63:EA:BB:8C:9B:56:7C:5E:F6:E6:B7:B1
Authority key identifier: AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
Certificate issuer: /CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Certificate serial: 0197B9A1D146BA1F9B99704BDF103C231F02
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
Manifest number: 15B7
Signing time: Sun 29 Jun 2025 03:01:19 +0000
Manifest this update: Sun 29 Jun 2025 03:01:19 +0000
Manifest next update: Mon 30 Jun 2025 03:01:19 +0000
Files and hashes: 1: Obsiy3NGEoUjL-DLQo0yhLx4KAI.roa (hash: p9j2sVfI93AXLXtc3YNcT/Xcs3W13x3825+kRDw3Ko8=)
2: rONjRGSGG9S_jFvH48m_09JGpN0.crl (hash: bqx4Jyx/yxtIoET3WcMGxxH2vWGirLXwh0BDW9uQxrQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:a1:d1:46:ba:1f:9b:99:70:4b:df:10:3c:23:1f:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ace3634464861bd4bf8c5bc7e3c9bfd3d246a4dd
Validity
Not Before: Jun 29 03:01:19 2025 GMT
Not After : Jun 30 03:01:19 2025 GMT
Subject: CN=f32090fdefa4227163eabb8c9b567c5ef6e6b7b1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:de:a3:e3:53:c7:b7:c6:07:6e:9a:38:84:71:
f8:f2:94:a1:3d:c2:01:43:bf:48:fe:a2:39:35:6d:
c5:bf:76:eb:93:67:29:36:02:49:41:0d:d4:44:75:
49:b4:a3:b5:60:95:42:fc:8e:d1:a2:52:26:9a:20:
44:2c:33:8c:51:5d:00:7a:a0:6a:39:70:f5:f7:8d:
bf:04:b2:b4:7e:d6:4f:32:50:c4:38:54:35:47:82:
b0:01:1d:30:52:02:82:64:22:f2:21:38:0f:7f:47:
5d:c3:78:7d:0c:40:95:26:27:67:d5:4f:55:a2:4e:
7e:a4:cb:c2:e4:e2:aa:0d:c4:7c:4d:b8:73:95:b0:
c2:9f:63:20:41:10:08:e9:33:fc:9b:31:2c:61:02:
95:75:33:0f:92:29:43:21:f8:69:f8:21:73:cd:f1:
15:e8:33:03:98:7b:4c:f9:b9:55:59:1b:5e:49:05:
f4:94:07:4f:f6:27:53:64:14:bb:17:ca:56:53:ac:
8a:55:34:03:d2:97:36:3e:c3:34:ca:a6:9e:71:e7:
b2:25:17:4a:de:b7:a3:1a:cb:db:e6:3e:bd:c1:5b:
af:20:83:0c:a8:84:51:4c:d0:1d:da:4e:e0:78:a1:
42:b0:95:26:b6:5a:ef:66:98:55:d6:94:bf:fd:a6:
70:b5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:20:90:FD:EF:A4:22:71:63:EA:BB:8C:9B:56:7C:5E:F6:E6:B7:B1
X509v3 Authority Key Identifier:
keyid:AC:E3:63:44:64:86:1B:D4:BF:8C:5B:C7:E3:C9:BF:D3:D2:46:A4:DD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rONjRGSGG9S_jFvH48m_09JGpN0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/1c/b0ef59-1842-4ca3-9865-067cc4426c28/1/rONjRGSGG9S_jFvH48m_09JGpN0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:c2:8b:73:b2:bd:df:1d:4a:37:14:c3:86:d4:5a:f3:3b:8c:
fa:65:54:c1:9f:d2:cd:b4:4e:b6:ce:10:8f:5f:61:5d:d6:5f:
a5:08:78:c7:fd:6d:59:29:75:b7:84:8e:62:55:2d:c3:37:67:
c4:18:ad:bb:eb:3c:8a:cf:ba:af:fd:8d:07:ef:f8:ec:9b:b3:
85:58:05:67:32:74:6e:05:0c:f6:53:3a:2a:7d:69:28:77:0e:
ba:1b:db:0d:22:c5:5b:1b:b5:28:a9:b0:df:cc:12:bc:8b:17:
27:39:fb:04:a3:46:de:f6:68:3f:8a:f9:45:3b:7f:b1:b4:40:
82:92:a4:81:cf:dd:51:b8:3a:5f:d2:26:4e:bb:3a:f9:67:67:
e9:19:27:58:98:92:57:07:ef:95:ee:13:46:c3:df:48:97:fa:
76:26:ef:72:13:5b:78:9a:fd:fe:3c:17:75:5e:83:31:f5:b2:
f8:0c:60:94:74:70:05:d5:1b:75:2a:12:19:7b:1d:8b:aa:04:
b9:00:39:0c:c4:0c:fe:7c:81:8e:16:5b:06:78:6b:42:9c:51:
f5:2d:3e:3d:80:3a:b0:8d:5f:dc:ed:52:f6:6e:52:bd:00:9e:
3a:a1:a4:bb:47:28:e1:50:0e:29:a6:a7:db:c1:50:87:a6:7b:
a7:fc:65:b2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe5odFGuh+bmXBL3xA8Ix8CMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZTM2MzQ0NjQ4NjFiZDRiZjhjNWJjN2UzYzliZmQzZDI0
NmE0ZGQwHhcNMjUwNjI5MDMwMTE5WhcNMjUwNjMwMDMwMTE5WjAzMTEwLwYDVQQD
EyhmMzIwOTBmZGVmYTQyMjcxNjNlYWJiOGM5YjU2N2M1ZWY2ZTZiN2IxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArt6j41PHt8YHbpo4hHH48pShPcIB
Q79I/qI5NW3Fv3brk2cpNgJJQQ3URHVJtKO1YJVC/I7RolImmiBELDOMUV0AeqBq
OXD1942/BLK0ftZPMlDEOFQ1R4KwAR0wUgKCZCLyITgPf0ddw3h9DECVJidn1U9V
ok5+pMvC5OKqDcR8TbhzlbDCn2MgQRAI6TP8mzEsYQKVdTMPkilDIfhp+CFzzfEV
6DMDmHtM+blVWRteSQX0lAdP9idTZBS7F8pWU6yKVTQD0pc2PsM0yqaeceeyJRdK
3rejGsvb5j69wVuvIIMMqIRRTNAd2k7geKFCsJUmtlrvZphV1pS//aZwtQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPMgkP3vpCJxY+q7jJtWfF725rexMB8GA1UdIwQY
MBaAFKzjY0RkhhvUv4xbx+PJv9PSRqTdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUt
MDY3Y2M0NDI2YzI4LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xYy9iMGVmNTktMTg0Mi00Y2EzLTk4NjUtMDY3Y2M0NDI2YzI4
LzEvck9OalJHU0dHOVNfakZ2SDQ4bV8wOUpHcE4wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAf8KLc7K9
3x1KNxTDhtRa8zuM+mVUwZ/SzbROts4Qj19hXdZfpQh4x/1tWSl1t4SOYlUtwzdn
xBitu+s8is+6r/2NB+/47JuzhVgFZzJ0bgUM9lM6Kn1pKHcOuhvbDSLFWxu1KKmw
38wSvIsXJzn7BKNG3vZoP4r5RTt/sbRAgpKkgc/dUbg6X9ImTrs6+Wdn6RknWJiS
Vwfvle4TRsPfSJf6dibvchNbeJr9/jwXdV6DMfWy+AxglHRwBdUbdSoSGXsdi6oE
uQA5DMQM/nyBjhZbBnhrQpxR9S0+PYA6sI1f3O1S9m5SvQCeOqGku0co4VAOKaan
28FQh6Z7p/xlsg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:31:55 2025 by rpki-client