Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
File: 8mHfRLNGgjzOjGZDtfppGa-yMZU.mft (raw, json)
Hash identifier: Z5euydhLRXigSL+rvSZ30A4POolE+r/HKh1fpcQud5c=
Subject key identifier: 1E:CC:34:8B:31:8B:92:17:52:98:A9:7D:30:D7:35:AD:14:2D:07:9B
Authority key identifier: F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
Certificate issuer: /CN=f261df44b346823cce8c6643b5fa6919afb23195
Certificate serial: 0197B7B337015EA5DEAFE2E50E13EF9C6C39
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
Manifest number: 101B
Signing time: Sat 28 Jun 2025 18:01:04 +0000
Manifest this update: Sat 28 Jun 2025 18:01:04 +0000
Manifest next update: Sun 29 Jun 2025 18:01:04 +0000
Files and hashes: 1: 8mHfRLNGgjzOjGZDtfppGa-yMZU.crl (hash: emBSY14gJ/nWpzvQUoRMTvvBvgvDfsFm64ATLiHLiJM=)
2: dPscEX-Zy8evMbxWuU7vJ2Ixhv8.roa (hash: D+72QcpH+TK76A0ijjgkoRMMQ5NsFbRIC95DTaeOIrc=)
3: eKaWRxU48jVjME70Pg-sKw71ysM.roa (hash: Fvcwn/TmHPQrbKfRxQXdczBfOElJLonqigBoxqw+IFk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:37:01:5e:a5:de:af:e2:e5:0e:13:ef:9c:6c:39
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f261df44b346823cce8c6643b5fa6919afb23195
Validity
Not Before: Jun 28 18:01:04 2025 GMT
Not After : Jun 29 18:01:04 2025 GMT
Subject: CN=1ecc348b318b92175298a97d30d735ad142d079b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ec:38:f4:01:b8:08:5f:6a:17:5a:f4:cf:a2:59:
3f:4c:b6:83:cf:6b:61:c9:43:72:fa:5e:22:4e:81:
98:64:8b:d3:00:55:e6:93:0f:cf:0b:41:fb:7d:e9:
16:00:6e:30:2d:7d:06:7c:ed:22:a7:92:5b:b3:68:
ca:39:a3:93:cf:0f:ea:9c:00:90:56:a1:ee:5a:aa:
50:fc:22:b0:af:4a:69:07:9f:da:d2:4d:af:00:e8:
e7:7e:dc:c8:bf:1b:b8:44:0d:c7:4c:0c:bc:1b:55:
4d:c3:03:d1:e2:e8:ab:4d:3a:0e:9c:16:a0:df:fa:
9c:02:e1:31:28:8e:06:45:be:6f:a0:39:cc:c2:63:
2c:5e:ad:96:bc:e9:77:d3:70:cf:7e:83:12:3a:d8:
30:95:37:f8:95:77:52:4d:42:67:96:67:91:19:5f:
a3:da:d5:4f:2a:26:ca:f7:68:64:11:81:16:08:85:
f8:fd:a5:e2:4e:29:5e:97:13:b7:98:f2:9d:39:b6:
b4:ce:e6:fd:39:0b:0d:f7:5a:34:5a:87:51:c6:32:
ea:fb:90:da:99:fe:a8:bf:c6:29:da:97:9b:f4:49:
ef:70:ae:01:a6:31:6e:8c:66:ed:a0:23:2f:66:60:
0b:d7:fa:b5:4f:f1:1d:58:5e:c5:af:d0:8a:ea:7b:
ea:f1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1E:CC:34:8B:31:8B:92:17:52:98:A9:7D:30:D7:35:AD:14:2D:07:9B
X509v3 Authority Key Identifier:
keyid:F2:61:DF:44:B3:46:82:3C:CE:8C:66:43:B5:FA:69:19:AF:B2:31:95
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/8mHfRLNGgjzOjGZDtfppGa-yMZU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/3cb9d2-70ff-46d6-9c73-57586156354e/1/8mHfRLNGgjzOjGZDtfppGa-yMZU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4b:bf:e4:91:4e:9e:66:e4:c5:75:98:75:27:6e:b7:ad:02:a6:
88:4e:b6:59:1c:19:05:75:81:68:fd:be:08:67:e5:4a:67:a9:
91:25:40:f1:a3:2b:d0:5f:21:ef:b6:a4:55:a5:82:2a:fb:49:
70:75:66:42:13:c3:68:de:bd:52:89:bc:47:5d:af:99:32:3c:
3c:e5:78:6d:ca:81:a0:37:e5:cc:17:ce:3d:40:b8:56:d7:a7:
97:9f:c0:33:a5:c5:74:e0:45:a4:08:9f:be:17:5c:1e:5d:bf:
02:06:a8:70:88:28:26:22:69:a9:1a:2a:ea:8f:0d:e7:e3:3a:
dd:4e:43:51:e5:61:4b:b5:7a:63:a3:00:da:62:d2:38:22:aa:
96:2d:15:f9:6a:4b:ae:d8:d3:ae:c6:12:da:50:3f:c2:c4:e6:
f3:97:8e:fc:16:b8:c0:66:f2:e0:6e:1f:f0:91:19:a2:13:b6:
c9:58:2a:98:7d:c8:1a:fd:49:9d:f5:1a:aa:6b:f2:46:65:14:
9a:42:ee:17:55:6c:0b:18:7d:ee:91:0b:60:c2:09:96:d9:5c:
54:65:69:51:f8:57:fa:ee:c9:e1:06:00:c4:9e:c8:3a:e1:cc:
8e:93:01:9f:15:ac:38:a1:c6:0a:0a:76:ce:2a:ce:6d:6e:db:
4d:be:a6:d5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3szcBXqXer+LlDhPvnGw5MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYyNjFkZjQ0YjM0NjgyM2NjZThjNjY0M2I1ZmE2OTE5YWZi
MjMxOTUwHhcNMjUwNjI4MTgwMTA0WhcNMjUwNjI5MTgwMTA0WjAzMTEwLwYDVQQD
EygxZWNjMzQ4YjMxOGI5MjE3NTI5OGE5N2QzMGQ3MzVhZDE0MmQwNzliMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7Dj0AbgIX2oXWvTPolk/TLaDz2th
yUNy+l4iToGYZIvTAFXmkw/PC0H7fekWAG4wLX0GfO0ip5Jbs2jKOaOTzw/qnACQ
VqHuWqpQ/CKwr0ppB5/a0k2vAOjnftzIvxu4RA3HTAy8G1VNwwPR4uirTToOnBag
3/qcAuExKI4GRb5voDnMwmMsXq2WvOl303DPfoMSOtgwlTf4lXdSTUJnlmeRGV+j
2tVPKibK92hkEYEWCIX4/aXiTilelxO3mPKdOba0zub9OQsN91o0WodRxjLq+5Da
mf6ov8Yp2peb9EnvcK4BpjFujGbtoCMvZmAL1/q1T/EdWF7Fr9CK6nvq8QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFB7MNIsxi5IXUpipfTDXNa0ULQebMB8GA1UdIwQY
MBaAFPJh30SzRoI8zoxmQ7X6aRmvsjGVMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMt
NTc1ODYxNTYzNTRlLzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny8zY2I5ZDItNzBmZi00NmQ2LTljNzMtNTc1ODYxNTYzNTRl
LzEvOG1IZlJMTkdnanpPakdaRHRmcHBHYS15TVpVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAS7/kkU6e
ZuTFdZh1J263rQKmiE62WRwZBXWBaP2+CGflSmepkSVA8aMr0F8h77akVaWCKvtJ
cHVmQhPDaN69Uom8R12vmTI8POV4bcqBoDflzBfOPUC4Vtenl5/AM6XFdOBFpAif
vhdcHl2/AgaocIgoJiJpqRoq6o8N5+M63U5DUeVhS7V6Y6MA2mLSOCKqli0V+WpL
rtjTrsYS2lA/wsTm85eO/Ba4wGby4G4f8JEZohO2yVgqmH3IGv1JnfUaqmvyRmUU
mkLuF1VsCxh97pELYMIJltlcVGVpUfhX+u7J4QYAxJ7IOuHMjpMBnxWsOKHGCgp2
zirObW7bTb6m1Q==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:03:12 2025 by rpki-client