Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
File: MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft (raw, json)
Hash identifier: 1sm3iHJKtqvdjNfWP7PaYZxDFZURnnssG9uStncuaUE=
Subject key identifier: AD:3F:2B:C6:23:AA:7D:6F:FE:47:79:1D:77:CE:EB:73:D0:54:2D:A3
Authority key identifier: 32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
Certificate issuer: /CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Certificate serial: 0197B70F1ED11CBBCE858A934DDB278AA597
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
Manifest number: 15B6
Signing time: Sat 28 Jun 2025 15:01:50 +0000
Manifest this update: Sat 28 Jun 2025 15:01:50 +0000
Manifest next update: Sun 29 Jun 2025 15:01:50 +0000
Files and hashes: 1: FhZSLFV8-vM046QI8Vb33R1E0e8.roa (hash: f3eqnqdq9rWk7n9nPOwGunFqubODgfs5rafbqH5/HQw=)
2: MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl (hash: Rly/+ZM2KyRcMkbc8hsQrHzJXKP9zFUxCzFihFLJhSA=)
3: X-ClDjMzAtgNyKBr2k9TMrqu3vE.roa (hash: 7Ip8LVyEIhcWLOz6eWH0cRFN5zErMvUCRSSMLokd5pg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:0f:1e:d1:1c:bb:ce:85:8a:93:4d:db:27:8a:a5:97
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32967a7747365c819de6076f7f5aa0ba3c9e598a
Validity
Not Before: Jun 28 15:01:50 2025 GMT
Not After : Jun 29 15:01:50 2025 GMT
Subject: CN=ad3f2bc623aa7d6ffe47791d77ceeb73d0542da3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:2f:5f:3b:5d:dd:4a:25:1e:b4:e8:25:db:98:
57:2f:94:e5:0c:f0:b2:28:7d:20:a7:60:e0:d0:6f:
aa:03:93:b0:cb:a7:c2:24:e5:28:50:21:e9:9e:f9:
85:81:28:33:bc:7d:b3:50:22:c4:62:05:97:b7:c4:
39:12:94:c5:ef:15:92:7f:6d:66:71:57:f5:0d:27:
26:b8:bd:39:bc:3d:51:f9:24:d6:a6:f5:2f:3e:d8:
92:36:63:2a:fe:0f:42:51:e8:a4:41:e6:b5:de:95:
07:ef:80:da:61:1b:30:38:58:99:5a:46:e8:3d:86:
53:c9:1b:3e:c8:82:75:6f:f3:56:ee:4c:0b:1f:72:
06:ae:22:66:0d:8c:ea:2d:20:49:d9:9b:1a:e0:a8:
9a:0c:46:ff:7b:b5:f5:a0:24:e5:38:81:97:eb:43:
82:09:4f:9e:18:9e:61:de:99:cd:01:38:06:15:61:
27:18:11:5d:45:6c:a8:84:a9:fb:0e:10:a5:7d:92:
fa:db:ee:f8:ba:a0:09:1e:5b:19:bc:0e:b7:38:91:
6a:90:13:f2:15:b5:e0:e8:ff:76:b2:e0:16:bd:a7:
96:ed:39:f3:a3:66:ee:41:ca:8a:54:9a:44:87:e6:
34:f9:15:54:c4:4d:d9:f9:04:25:51:33:8a:50:f7:
ac:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:3F:2B:C6:23:AA:7D:6F:FE:47:79:1D:77:CE:EB:73:D0:54:2D:A3
X509v3 Authority Key Identifier:
keyid:32:96:7A:77:47:36:5C:81:9D:E6:07:6F:7F:5A:A0:BA:3C:9E:59:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MpZ6d0c2XIGd5gdvf1qgujyeWYo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/3e77dc-4868-41d4-90c4-2ac8bcd83550/1/MpZ6d0c2XIGd5gdvf1qgujyeWYo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
97:12:d3:ff:6a:4f:20:85:93:01:49:6c:c3:d9:13:4a:d4:d5:
fe:14:a7:38:25:e1:46:25:13:ec:99:60:5e:f9:33:40:ec:82:
d9:72:ce:43:5e:ec:85:62:8d:e4:ad:66:36:ef:36:fd:07:f5:
ba:e9:58:f5:2f:bd:55:35:60:52:01:ca:d3:48:51:06:4f:cb:
68:b0:47:92:82:ca:fe:86:33:9e:a0:f3:5c:56:12:2c:69:26:
c8:75:eb:9e:a6:42:b4:49:34:86:52:98:1f:5b:27:dc:59:7f:
93:59:d9:c5:ed:5a:e9:09:7d:66:88:a8:ca:72:ca:a4:7b:88:
25:b8:15:1b:e5:2a:c9:46:99:b6:ab:37:56:cb:47:45:15:43:
46:dd:9c:1a:b5:d9:97:77:e8:d9:dc:02:cb:94:32:65:8e:b7:
42:df:d1:3a:52:84:c0:95:42:c6:08:70:2b:ef:2c:42:33:ce:
b7:b3:cd:6b:7a:79:dc:b0:b0:7e:a0:16:25:cd:72:95:06:fd:
58:4b:ae:41:ef:d3:7e:5f:76:bc:ab:e9:fb:55:1c:8b:aa:a6:
8c:2d:40:3a:45:12:98:d4:19:ee:2d:4c:83:17:48:e2:22:05:
a0:29:8d:75:e6:d2:09:17:93:f9:39:9c:ce:86:42:ef:64:24:
89:97:b2:20
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3Dx7RHLvOhYqTTdsniqWXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyOTY3YTc3NDczNjVjODE5ZGU2MDc2ZjdmNWFhMGJhM2M5
ZTU5OGEwHhcNMjUwNjI4MTUwMTUwWhcNMjUwNjI5MTUwMTUwWjAzMTEwLwYDVQQD
EyhhZDNmMmJjNjIzYWE3ZDZmZmU0Nzc5MWQ3N2NlZWI3M2QwNTQyZGEzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA7y9fO13dSiUetOgl25hXL5TlDPCy
KH0gp2Dg0G+qA5Owy6fCJOUoUCHpnvmFgSgzvH2zUCLEYgWXt8Q5EpTF7xWSf21m
cVf1DScmuL05vD1R+STWpvUvPtiSNmMq/g9CUeikQea13pUH74DaYRswOFiZWkbo
PYZTyRs+yIJ1b/NW7kwLH3IGriJmDYzqLSBJ2Zsa4KiaDEb/e7X1oCTlOIGX60OC
CU+eGJ5h3pnNATgGFWEnGBFdRWyohKn7DhClfZL62+74uqAJHlsZvA63OJFqkBPy
FbXg6P92suAWvaeW7Tnzo2buQcqKVJpEh+Y0+RVUxE3Z+QQlUTOKUPesdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0/K8Yjqn1v/kd5HXfO63PQVC2jMB8GA1UdIwQY
MBaAFDKWendHNlyBneYHb39aoLo8nlmKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXBaNmQwYzJYSUdkNWdkdmYxcWd1anllV1lvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy8zZTc3ZGMtNDg2OC00MWQ0LTkwYzQt
MmFjOGJjZDgzNTUwLzEvTXBaNmQwYzJYSUdkNWdkdmYxcWd1anllV1lvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy8zZTc3ZGMtNDg2OC00MWQ0LTkwYzQtMmFjOGJjZDgzNTUw
LzEvTXBaNmQwYzJYSUdkNWdkdmYxcWd1anllV1lvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlxLT/2pP
IIWTAUlsw9kTStTV/hSnOCXhRiUT7JlgXvkzQOyC2XLOQ17shWKN5K1mNu82/Qf1
uulY9S+9VTVgUgHK00hRBk/LaLBHkoLK/oYznqDzXFYSLGkmyHXrnqZCtEk0hlKY
H1sn3Fl/k1nZxe1a6Ql9ZoioynLKpHuIJbgVG+UqyUaZtqs3VstHRRVDRt2cGrXZ
l3fo2dwCy5QyZY63Qt/ROlKEwJVCxghwK+8sQjPOt7PNa3p53LCwfqAWJc1ylQb9
WEuuQe/Tfl92vKvp+1Uci6qmjC1AOkUSmNQZ7i1MgxdI4iIFoCmNdebSCReT+Tmc
zoZC72QkiZeyIA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:22:50 2025 by rpki-client