Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
File: rImvYJhubZWDIvsCbGtlruyUmg0.mft (raw, json)
Hash identifier: g8TshA3HSb+hubQ+CnyoE+vmkIHhlKLBQxT8fWZq2qY=
Subject key identifier: DE:E1:49:85:B6:3C:B8:CD:E4:84:4A:60:FE:EE:6D:86:07:19:E3:C6
Authority key identifier: AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
Certificate issuer: /CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Certificate serial: 0197B6A0B431947AA72391BAD448B356C3CA
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
Manifest number: 0700
Signing time: Sat 28 Jun 2025 13:01:14 +0000
Manifest this update: Sat 28 Jun 2025 13:01:14 +0000
Manifest next update: Sun 29 Jun 2025 13:01:14 +0000
Files and hashes: 1: HWWs6MqFS2nmbLw3ShctihMbNaY.roa (hash: KSXNNa9oIp9r32J4311J0aN03+Peflc2SZu+HPxriyM=)
2: QUH08L51MfImU-aeLB1gViX82cI.roa (hash: YfmDCd25c+HZBRwpm39HGU+G/47jVrQR3XrIyRY2J8U=)
3: b81h_NWwhKjMbH2-sUXyjP4n64s.roa (hash: e3T+4A186w/5PvOch5tYGnvLHtBctNKp6kP6+X8+j/w=)
4: rImvYJhubZWDIvsCbGtlruyUmg0.crl (hash: +c0v9FIL+R9xLepgt9jZZDlUSjQChxt4QBPPDA3mZt8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 13:01:14 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b6:a0:b4:31:94:7a:a7:23:91:ba:d4:48:b3:56:c3:ca
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ac89af60986e6d958322fb026c6b65aeec949a0d
Validity
Not Before: Jun 28 13:01:14 2025 GMT
Not After : Jun 29 13:01:14 2025 GMT
Subject: CN=dee14985b63cb8cde4844a60feee6d860719e3c6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:dc:10:a2:2a:9a:80:5b:d9:d2:35:3e:b2:46:
1e:e0:58:68:7a:18:8f:b0:0f:43:85:00:58:a1:da:
26:97:73:b5:25:24:69:aa:bf:68:76:48:c6:96:2d:
b7:53:50:e6:2f:51:09:bb:6e:15:66:ec:d3:42:be:
f1:9d:94:51:5f:da:59:82:ae:32:06:36:f7:9b:dc:
4f:1d:a3:f7:31:21:24:6a:fd:f2:ac:39:d7:9f:20:
08:dd:d4:eb:f5:ec:82:58:71:32:50:3b:d5:46:74:
bd:3b:99:85:e4:b4:ec:aa:b6:7d:eb:94:20:c4:de:
5b:82:66:f8:1b:f6:42:64:89:38:25:01:7f:ec:de:
d4:fd:3c:fc:8d:f1:3c:51:1f:9a:35:6c:e7:81:3c:
30:75:f4:4f:f6:0a:b1:6b:24:37:50:81:1e:f9:52:
5f:68:30:e5:65:be:d7:a6:d8:47:13:9b:fc:34:0f:
49:00:bc:00:d8:9e:83:74:4c:95:5f:ad:f5:1e:ba:
c6:07:86:03:2c:fe:a3:79:61:dc:2e:07:36:50:ff:
40:66:49:b7:57:26:38:05:e9:6c:af:12:df:d0:ff:
84:31:b9:b3:da:40:cf:cd:ca:4d:be:48:43:76:0e:
bd:35:b1:16:c4:7a:e6:26:07:b6:6f:ee:f9:2f:a0:
a8:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DE:E1:49:85:B6:3C:B8:CD:E4:84:4A:60:FE:EE:6D:86:07:19:E3:C6
X509v3 Authority Key Identifier:
keyid:AC:89:AF:60:98:6E:6D:95:83:22:FB:02:6C:6B:65:AE:EC:94:9A:0D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rImvYJhubZWDIvsCbGtlruyUmg0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7a/3ccb85-918b-4de8-bda2-9c8bba664ff0/1/rImvYJhubZWDIvsCbGtlruyUmg0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:40:4f:3a:2c:6e:34:7a:02:0e:e6:5c:3e:d3:37:b2:55:39:
99:4f:d1:85:ff:f5:66:43:86:b7:ae:cb:cd:b6:df:4d:5a:0f:
49:62:b0:52:3b:a2:1f:ee:be:0f:41:d4:dc:d1:54:72:ae:22:
bf:d2:f4:41:e8:e7:18:24:d7:e7:64:d6:59:e4:3b:60:ff:49:
9b:ba:36:28:44:81:43:01:31:5c:b3:18:f9:17:ea:23:6e:75:
f8:19:0e:2b:fb:6a:1e:2e:ab:6b:80:09:6a:b7:e0:0d:bf:b1:
e6:f9:03:8d:ec:c4:68:d8:09:b3:17:66:80:63:bf:eb:8b:5c:
c0:b4:25:57:c1:4c:1c:e9:c2:22:3a:6b:a8:31:55:99:12:f7:
c3:19:26:c7:d6:0c:c7:af:d0:da:3f:39:cf:40:f9:3d:98:50:
6b:1c:40:22:7d:9d:e7:39:51:c2:ac:11:72:d4:7d:da:1d:a6:
30:ed:d1:98:2d:c1:28:95:32:f8:d9:8f:b3:87:4c:aa:fe:87:
f8:93:f7:f6:21:d2:19:b1:1d:e9:f7:6e:05:bc:46:2a:17:55:
a5:c1:bb:2f:72:e8:1d:23:ac:81:e7:33:24:59:43:df:57:0a:
36:eb:87:a6:a2:30:ff:08:d2:ec:e2:f5:a0:47:38:c6:c2:0e:
ba:b9:e2:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe2oLQxlHqnI5G61EizVsPKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjODlhZjYwOTg2ZTZkOTU4MzIyZmIwMjZjNmI2NWFlZWM5
NDlhMGQwHhcNMjUwNjI4MTMwMTE0WhcNMjUwNjI5MTMwMTE0WjAzMTEwLwYDVQQD
EyhkZWUxNDk4NWI2M2NiOGNkZTQ4NDRhNjBmZWVlNmQ4NjA3MTllM2M2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwNwQoiqagFvZ0jU+skYe4FhoehiP
sA9DhQBYodoml3O1JSRpqr9odkjGli23U1DmL1EJu24VZuzTQr7xnZRRX9pZgq4y
Bjb3m9xPHaP3MSEkav3yrDnXnyAI3dTr9eyCWHEyUDvVRnS9O5mF5LTsqrZ965Qg
xN5bgmb4G/ZCZIk4JQF/7N7U/Tz8jfE8UR+aNWzngTwwdfRP9gqxayQ3UIEe+VJf
aDDlZb7XpthHE5v8NA9JALwA2J6DdEyVX631HrrGB4YDLP6jeWHcLgc2UP9AZkm3
VyY4BelsrxLf0P+EMbmz2kDPzcpNvkhDdg69NbEWxHrmJge2b+75L6CoAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN7hSYW2PLjN5IRKYP7ubYYHGePGMB8GA1UdIwQY
MBaAFKyJr2CYbm2VgyL7AmxrZa7slJoNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTIt
OWM4YmJhNjY0ZmYwLzEvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83YS8zY2NiODUtOTE4Yi00ZGU4LWJkYTItOWM4YmJhNjY0ZmYw
LzEvckltdllKaHViWldESXZzQ2JHdGxydXlVbWcwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAEBPOixu
NHoCDuZcPtM3slU5mU/Rhf/1ZkOGt67LzbbfTVoPSWKwUjuiH+6+D0HU3NFUcq4i
v9L0QejnGCTX52TWWeQ7YP9Jm7o2KESBQwExXLMY+RfqI251+BkOK/tqHi6ra4AJ
arfgDb+x5vkDjezEaNgJsxdmgGO/64tcwLQlV8FMHOnCIjprqDFVmRL3wxkmx9YM
x6/Q2j85z0D5PZhQaxxAIn2d5zlRwqwRctR92h2mMO3RmC3BKJUy+NmPs4dMqv6H
+JP39iHSGbEd6fduBbxGKhdVpcG7L3LoHSOsgeczJFlD31cKNuuHpqIw/wjS7OL1
oEc4xsIOurni9g==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:04:27 2025 by rpki-client