Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
File: MtRJGf3QivuaTQqHeJIwESUd1_A.mft (raw, json)
Hash identifier: m8zaZP97OUyjzqQArcODK3n6BOxi7Fg3t051J6y31RE=
Subject key identifier: D8:84:22:AE:A9:3A:EA:A5:5D:2D:19:75:7B:8A:50:74:B1:42:01:83
Authority key identifier: 32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
Certificate issuer: /CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Certificate serial: 0197B6A1A8B40F5140BBD3C68370387EE56D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
Manifest number: 0C37
Signing time: Sat 28 Jun 2025 13:02:17 +0000
Manifest this update: Sat 28 Jun 2025 13:02:17 +0000
Manifest next update: Sun 29 Jun 2025 13:02:17 +0000
Files and hashes: 1: EcMSrqduSSEdpF-7ulVjTtPYpNE.roa (hash: ZA8qM0bISMva3I03nVcIL7KQUByRBGHdqun/Plkp8KA=)
2: MtRJGf3QivuaTQqHeJIwESUd1_A.crl (hash: S9ZBwpIXiqBXygqT0KGbi48dlekVu80xYAWEt4Vihfg=)
3: ant41ZKD96l4WAVLo9wrXso0aLA.roa (hash: 4K6WUz90Jye7WV1VDdQMdxKlwlzmRn7OIrbr4mY6WUc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:02:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a1:a8:b4:0f:51:40:bb:d3:c6:83:70:38:7e:e5:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32d44919fdd08afb9a4d0a8778923011251dd7f0
Validity
Not Before: Jun 28 13:02:17 2025 GMT
Not After : Jun 29 13:02:17 2025 GMT
Subject: CN=d88422aea93aeaa55d2d19757b8a5074b1420183
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:31:33:e2:a9:fd:dd:d6:a3:25:ca:88:c2:ab:
88:da:f4:e3:0c:88:2b:45:6a:94:96:22:68:07:60:
54:ef:3f:59:a4:55:13:92:aa:3f:8b:c2:85:23:87:
ff:50:bc:07:af:1f:2b:39:2b:6c:f2:d2:06:19:6e:
22:16:11:ff:5e:c1:79:bb:7a:6f:77:28:4a:9f:c9:
8d:b0:7d:c8:3a:2d:48:85:29:36:ed:65:d8:84:9c:
fe:2e:1a:a4:61:0c:21:a4:21:61:f8:6b:1a:cd:f9:
cf:8e:d8:9f:9b:f2:d9:ff:48:8c:c4:a3:44:74:bf:
b7:f2:36:83:0e:a7:f5:a7:ed:e4:2c:1b:23:f1:3b:
69:27:5b:df:81:f1:f5:6d:39:15:89:36:28:95:05:
09:fc:26:10:a9:e5:2c:d1:07:3c:5c:2f:e9:e6:20:
d8:35:d5:a5:bc:bf:b8:f3:4f:16:a1:3c:c1:44:ce:
58:95:ca:c7:fa:42:8c:20:b4:7f:b6:92:f6:5a:b4:
c3:08:bc:01:48:a3:4a:3f:83:b5:c1:54:ef:36:f7:
9d:67:17:67:52:b0:95:51:c8:87:cc:5d:e7:21:f7:
86:69:03:9d:f8:8a:1d:e4:04:49:07:a7:72:e2:4b:
b0:b4:d5:39:21:6d:87:47:53:36:cb:a7:e9:aa:8f:
ff:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D8:84:22:AE:A9:3A:EA:A5:5D:2D:19:75:7B:8A:50:74:B1:42:01:83
X509v3 Authority Key Identifier:
keyid:32:D4:49:19:FD:D0:8A:FB:9A:4D:0A:87:78:92:30:11:25:1D:D7:F0
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MtRJGf3QivuaTQqHeJIwESUd1_A.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6f/fd2294-cf37-4fc9-9edd-a4f7b088bc1a/1/MtRJGf3QivuaTQqHeJIwESUd1_A.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:75:3a:0d:4c:b8:ff:89:d9:80:03:0e:d0:90:26:72:0b:c7:
59:b1:1b:f0:11:43:81:d9:6c:92:de:57:8a:77:4b:e8:ff:89:
e3:4b:05:26:60:94:ef:3f:8f:b1:0d:37:43:83:7c:98:37:bc:
33:ce:50:fd:14:05:86:f8:e6:ff:a6:88:8f:ae:e8:f2:b1:ac:
f3:b3:b9:64:42:7d:5c:4c:38:12:6d:1d:4f:4c:d3:2d:29:51:
20:e8:d5:37:c1:ae:03:02:57:9f:42:37:c1:1d:ac:73:b1:c3:
4e:af:35:bf:ba:b4:00:ff:56:3b:b6:55:9b:e5:ba:3b:d8:c6:
59:5d:43:87:08:82:3f:42:48:7b:ba:c6:48:92:23:12:62:4b:
b4:84:62:24:d2:c3:35:74:99:61:81:c4:13:8e:da:7d:99:2e:
22:38:88:25:25:99:d7:48:6e:66:39:6d:d0:fc:22:f2:57:29:
70:00:99:a4:a6:64:03:2e:0c:91:a5:49:d6:bf:1b:04:cb:bc:
aa:99:48:35:51:ca:37:26:3b:51:08:d2:b1:37:65:b8:b0:64:
88:b2:2f:1b:9b:32:0c:33:1e:59:d3:be:3a:de:3f:a7:06:0f:
21:15:50:5a:17:a1:33:19:43:95:71:62:25:7b:f3:85:f5:a1:
b4:9b:d5:f4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oai0D1FAu9PGg3A4fuVtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyZDQ0OTE5ZmRkMDhhZmI5YTRkMGE4Nzc4OTIzMDExMjUx
ZGQ3ZjAwHhcNMjUwNjI4MTMwMjE3WhcNMjUwNjI5MTMwMjE3WjAzMTEwLwYDVQQD
EyhkODg0MjJhZWE5M2FlYWE1NWQyZDE5NzU3YjhhNTA3NGIxNDIwMTgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqzEz4qn93dajJcqIwquI2vTjDIgr
RWqUliJoB2BU7z9ZpFUTkqo/i8KFI4f/ULwHrx8rOSts8tIGGW4iFhH/XsF5u3pv
dyhKn8mNsH3IOi1IhSk27WXYhJz+LhqkYQwhpCFh+GsazfnPjtifm/LZ/0iMxKNE
dL+38jaDDqf1p+3kLBsj8TtpJ1vfgfH1bTkViTYolQUJ/CYQqeUs0Qc8XC/p5iDY
NdWlvL+4808WoTzBRM5YlcrH+kKMILR/tpL2WrTDCLwBSKNKP4O1wVTvNvedZxdn
UrCVUciHzF3nIfeGaQOd+Iod5ARJB6dy4kuwtNU5IW2HR1M2y6fpqo//AQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNiEIq6pOuqlXS0ZdXuKUHSxQgGDMB8GA1UdIwQY
MBaAFDLUSRn90Ir7mk0Kh3iSMBElHdfwMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQt
YTRmN2IwODhiYzFhLzEvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Zi9mZDIyOTQtY2YzNy00ZmM5LTllZGQtYTRmN2IwODhiYzFh
LzEvTXRSSkdmM1FpdnVhVFFxSGVKSXdFU1VkMV9BLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJnU6DUy4
/4nZgAMO0JAmcgvHWbEb8BFDgdlskt5XindL6P+J40sFJmCU7z+PsQ03Q4N8mDe8
M85Q/RQFhvjm/6aIj67o8rGs87O5ZEJ9XEw4Em0dT0zTLSlRIOjVN8GuAwJXn0I3
wR2sc7HDTq81v7q0AP9WO7ZVm+W6O9jGWV1DhwiCP0JIe7rGSJIjEmJLtIRiJNLD
NXSZYYHEE47afZkuIjiIJSWZ10huZjlt0Pwi8lcpcACZpKZkAy4MkaVJ1r8bBMu8
qplINVHKNyY7UQjSsTdluLBkiLIvG5syDDMeWdO+Ot4/pwYPIRVQWhehMxlDlXFi
JXvzhfWhtJvV9A==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:48:05 2025 by rpki-client