Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
File: MAVrA3XYlLk8sOJtm01koIxYNx4.mft (raw, json)
Hash identifier: 3ZZx/LLgesk7nNVkpEaWhMF5F+8AojjBGC9PuSRTJts=
Subject key identifier: 19:F2:0B:E8:40:3F:AE:DD:0C:71:FC:D0:46:6D:DA:C9:D7:38:67:18
Authority key identifier: 30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
Certificate issuer: /CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Certificate serial: 0197B5C4C5D1C33797E55FF593F5E5FF57F1
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
Manifest number: 0B3E
Signing time: Sat 28 Jun 2025 09:01:01 +0000
Manifest this update: Sat 28 Jun 2025 09:01:01 +0000
Manifest next update: Sun 29 Jun 2025 09:01:01 +0000
Files and hashes: 1: 3O6Y3eQ5OpGsAft35AyeyfVjQ6o.roa (hash: u+uYD6/L10KdiWIH/nhFz7IkGG28050DGlwgSDFBhnk=)
2: MAVrA3XYlLk8sOJtm01koIxYNx4.crl (hash: aRJ9Tekb00AkAN6IHn2mU7wAsBonihbrK/fSXD2jl6s=)
3: vQwx6cGSIAT7m9K8R35GzUVPtvc.roa (hash: zbCFg7Xh1dqpHRv2DApSfzHkCmAjvg9jJtigoE/GHhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 09:01:01 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:c4:c5:d1:c3:37:97:e5:5f:f5:93:f5:e5:ff:57:f1
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30056b0375d894b93cb0e26d9b4d64a08c58371e
Validity
Not Before: Jun 28 09:01:01 2025 GMT
Not After : Jun 29 09:01:01 2025 GMT
Subject: CN=19f20be8403faedd0c71fcd0466ddac9d7386718
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c4:61:ce:e8:59:fb:1a:d5:52:26:5f:23:16:ef:
92:8d:4c:fe:23:25:3c:cc:a0:3e:4e:ba:d8:b8:e9:
10:9c:1d:7c:5b:8c:a6:f6:fa:92:11:2f:ab:67:33:
89:af:f1:ca:02:17:21:7a:ed:67:e4:d1:0d:19:07:
71:f6:91:e9:ee:90:33:a8:b7:de:d6:35:b9:8c:cb:
d2:7f:95:7b:9f:06:dd:13:a0:6a:f7:cb:8e:09:56:
1e:86:ec:14:96:c2:af:2b:63:01:70:c0:3a:b8:bf:
76:25:91:0c:1f:d9:70:77:97:fd:ed:63:76:c7:f7:
52:74:08:6b:a8:e1:96:eb:a0:22:c1:d0:84:3b:e2:
18:33:3c:97:a6:5d:3e:23:81:91:e7:a2:77:fd:99:
03:be:e8:ee:3e:36:7e:5a:ec:37:1f:64:7b:09:42:
23:76:36:0f:fd:ea:08:25:46:49:d1:b9:3d:e5:58:
1d:ff:70:4c:af:cc:6b:35:f9:75:a0:c1:d2:cd:49:
09:92:c7:df:fd:f3:d9:c4:e2:11:ae:21:db:e1:d6:
aa:fd:9d:94:d9:91:87:24:0f:b8:e5:9d:eb:af:5d:
55:d7:02:41:2f:bc:b0:fc:1c:25:b2:d8:b3:8a:99:
0b:7b:a5:11:f5:d3:d6:a3:49:3e:31:48:d6:a6:7a:
46:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:F2:0B:E8:40:3F:AE:DD:0C:71:FC:D0:46:6D:DA:C9:D7:38:67:18
X509v3 Authority Key Identifier:
keyid:30:05:6B:03:75:D8:94:B9:3C:B0:E2:6D:9B:4D:64:A0:8C:58:37:1E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MAVrA3XYlLk8sOJtm01koIxYNx4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/21/2a7472-cbb8-4c99-be21-11b4afbede19/1/MAVrA3XYlLk8sOJtm01koIxYNx4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c8:25:49:d3:44:4c:07:94:50:b6:bc:a6:c1:22:2b:10:32:ef:
e4:eb:e3:ff:63:c3:6b:0b:ea:6b:82:e0:1f:35:b6:f6:f3:06:
64:35:39:4b:a4:21:91:5f:2a:06:a6:12:68:f1:ab:44:b9:ba:
29:ab:ca:4f:40:c1:c3:3b:51:0a:5d:85:27:8c:66:38:b4:03:
2d:78:de:79:c8:1c:22:4d:ed:bb:bb:1b:c4:7f:09:f1:ef:40:
f3:25:62:01:a7:fe:81:2d:ce:a4:02:f6:05:99:15:1d:f6:ff:
1f:45:ef:cb:94:2f:3b:3d:92:a4:15:1a:4d:21:76:b8:8a:25:
9e:7c:cf:81:c0:41:1a:45:33:ab:46:eb:f5:ea:f5:c6:c2:20:
a4:ec:bd:1d:3c:ee:0a:5f:cd:e7:c5:e8:e5:3b:0f:7d:37:2c:
31:16:c1:a0:97:1f:e4:42:63:35:90:c7:55:44:1c:66:4f:b9:
14:88:ba:8b:7b:9e:b9:f6:a1:5f:16:07:72:19:7a:88:ac:44:
72:54:86:25:80:74:e6:ba:44:ea:3c:ff:73:58:3f:bd:f9:e1:
f0:e8:7d:65:1e:30:9b:d0:e9:5a:84:59:53:99:9c:76:59:0c:
67:4f:9a:2d:97:00:32:f2:da:53:5e:a2:a0:fd:05:f5:42:42:
8a:dd:2a:74
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1xMXRwzeX5V/1k/Xl/1fxMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwMDU2YjAzNzVkODk0YjkzY2IwZTI2ZDliNGQ2NGEwOGM1
ODM3MWUwHhcNMjUwNjI4MDkwMTAxWhcNMjUwNjI5MDkwMTAxWjAzMTEwLwYDVQQD
EygxOWYyMGJlODQwM2ZhZWRkMGM3MWZjZDA0NjZkZGFjOWQ3Mzg2NzE4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxGHO6Fn7GtVSJl8jFu+SjUz+IyU8
zKA+TrrYuOkQnB18W4ym9vqSES+rZzOJr/HKAhcheu1n5NENGQdx9pHp7pAzqLfe
1jW5jMvSf5V7nwbdE6Bq98uOCVYehuwUlsKvK2MBcMA6uL92JZEMH9lwd5f97WN2
x/dSdAhrqOGW66AiwdCEO+IYMzyXpl0+I4GR56J3/ZkDvujuPjZ+Wuw3H2R7CUIj
djYP/eoIJUZJ0bk95Vgd/3BMr8xrNfl1oMHSzUkJksff/fPZxOIRriHb4daq/Z2U
2ZGHJA+45Z3rr11V1wJBL7yw/BwlstizipkLe6UR9dPWo0k+MUjWpnpG3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBnyC+hAP67dDHH80EZt2snXOGcYMB8GA1UdIwQY
MBaAFDAFawN12JS5PLDibZtNZKCMWDceMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEt
MTFiNGFmYmVkZTE5LzEvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMS8yYTc0NzItY2JiOC00Yzk5LWJlMjEtMTFiNGFmYmVkZTE5
LzEvTUFWckEzWFlsTGs4c09KdG0wMWtvSXhZTng0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAyCVJ00RM
B5RQtrymwSIrEDLv5Ovj/2PDawvqa4LgHzW29vMGZDU5S6QhkV8qBqYSaPGrRLm6
KavKT0DBwztRCl2FJ4xmOLQDLXjeecgcIk3tu7sbxH8J8e9A8yViAaf+gS3OpAL2
BZkVHfb/H0Xvy5QvOz2SpBUaTSF2uIolnnzPgcBBGkUzq0br9er1xsIgpOy9HTzu
Cl/N58Xo5TsPfTcsMRbBoJcf5EJjNZDHVUQcZk+5FIi6i3ueufahXxYHchl6iKxE
clSGJYB05rpE6jz/c1g/vfnh8Oh9ZR4wm9DpWoRZU5mcdlkMZ0+aLZcAMvLaU16i
oP0F9UJCit0qdA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 19:26:20 2025 by rpki-client