Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
File: H3t8DW97NGCOskz6GoiL8zsbYVM.mft (raw, json)
Hash identifier: l3M92E37xRLVESQ0RL6lPVUciADNu3oSIPSxZqv8XQU=
Subject key identifier: 72:24:46:E7:40:D4:3F:73:65:20:35:58:53:5D:1D:2B:3A:9E:F0:FE
Authority key identifier: 1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
Certificate issuer: /CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Certificate serial: 0197C2DB52D152519FB2E0CD663B3B471528
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
Manifest number: 09F2
Signing time: Mon 30 Jun 2025 22:00:42 +0000
Manifest this update: Mon 30 Jun 2025 22:00:42 +0000
Manifest next update: Tue 01 Jul 2025 22:00:42 +0000
Files and hashes: 1: H3t8DW97NGCOskz6GoiL8zsbYVM.crl (hash: p9SV43D5EXOSC7suoSNoWlczDYA6kde+wZvS25tG3II=)
2: VUf_eExQI714X29LkFd3HNL5qOc.roa (hash: qlXkcSYlvviPgCfxmngZKQMwauhcQqJeFXxSq0WXurQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 22:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:c2:db:52:d1:52:51:9f:b2:e0:cd:66:3b:3b:47:15:28
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=1f7b7c0d6f7b34608eb24cfa1a888bf33b1b6153
Validity
Not Before: Jun 30 22:00:42 2025 GMT
Not After : Jul 1 22:00:42 2025 GMT
Subject: CN=722446e740d43f7365203558535d1d2b3a9ef0fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:2a:1b:25:d7:46:7b:2b:b3:07:7c:77:56:31:
5b:fc:5a:db:cd:0f:67:c3:81:fc:0f:a1:ac:62:d4:
93:a9:3b:bf:24:f7:8e:eb:b4:97:0a:49:2e:d7:c3:
8a:1e:a1:fe:a2:ac:63:04:21:b6:9a:35:d6:4a:13:
69:e0:64:6b:7e:c1:f0:48:9b:50:c5:3c:33:8d:5e:
7b:15:5f:de:b5:00:f0:88:bf:d1:38:94:ce:06:51:
2b:a0:13:0f:da:be:a2:0a:8a:d6:5c:78:ff:96:bb:
05:d6:50:21:ec:7d:89:bd:06:73:78:4c:f4:fe:d3:
10:b7:44:aa:49:63:9b:50:fd:6c:c1:eb:ef:21:23:
b9:ea:c6:5f:1a:76:05:a7:1b:f2:58:1c:44:ac:e2:
64:60:d4:9d:5b:19:ae:9c:46:e4:a0:a9:9c:8a:9e:
6b:0a:6d:59:f9:e6:a4:18:34:36:85:3d:84:50:1e:
0d:ab:f4:12:bd:eb:61:df:0c:c4:87:20:3a:93:d2:
76:4c:02:da:c6:e9:57:98:c7:c1:88:c3:c9:6e:52:
41:a1:d2:50:e5:44:f9:f4:1a:df:8a:05:2b:b1:ac:
d7:c2:10:c7:81:52:64:d9:bf:1d:8a:f4:0a:f1:62:
d2:57:11:45:67:04:83:90:ff:3e:dc:14:71:9e:28:
75:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
72:24:46:E7:40:D4:3F:73:65:20:35:58:53:5D:1D:2B:3A:9E:F0:FE
X509v3 Authority Key Identifier:
keyid:1F:7B:7C:0D:6F:7B:34:60:8E:B2:4C:FA:1A:88:8B:F3:3B:1B:61:53
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/H3t8DW97NGCOskz6GoiL8zsbYVM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/82/3e60ad-d6bb-45a3-aef3-2b932e6823ad/1/H3t8DW97NGCOskz6GoiL8zsbYVM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:73:31:30:46:fd:d2:83:1c:6f:08:9b:fd:fe:22:c4:a9:4a:
7f:0e:11:00:0a:f3:a3:b1:6d:de:4c:08:c6:eb:6d:5f:b5:01:
39:7d:d2:b1:22:98:4f:dc:02:e6:fe:74:bf:af:db:16:04:04:
0a:9a:14:81:e0:29:cd:7c:4d:3a:93:80:c8:4c:be:d7:29:af:
79:85:a4:fd:f1:09:3f:92:b9:7d:d7:7a:39:89:7e:43:46:15:
ee:54:09:5b:a1:de:b8:89:c4:b2:07:a3:57:fb:c9:5a:8f:d3:
23:52:16:4c:09:8d:e8:40:0f:a9:cd:15:7d:0f:2d:33:61:d6:
0b:88:93:a6:32:ef:01:28:ba:c8:81:eb:33:75:62:8b:fe:0b:
a9:27:ea:81:e6:db:2e:ec:e1:d2:ea:f1:4e:55:96:bb:f0:03:
ee:b4:dc:cd:ee:d9:0f:a4:eb:ef:b1:d4:7b:63:5b:61:32:ac:
8d:e4:dd:ae:77:77:69:8f:03:54:db:b8:7c:19:27:f1:ea:fa:
c0:d8:d5:09:ca:a7:4a:96:de:ec:a9:6d:88:04:df:62:b0:2c:
04:9e:a1:4d:2d:c5:6d:68:2a:6f:4a:1b:59:43:f6:4e:c3:5c:
ea:74:7a:51:d2:5b:f1:f6:9f:4f:98:bb:dd:ad:e0:66:8d:25:
6e:19:51:43
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfC21LRUlGfsuDNZjs7RxUoMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDFmN2I3YzBkNmY3YjM0NjA4ZWIyNGNmYTFhODg4YmYzM2Ix
YjYxNTMwHhcNMjUwNjMwMjIwMDQyWhcNMjUwNzAxMjIwMDQyWjAzMTEwLwYDVQQD
Eyg3MjI0NDZlNzQwZDQzZjczNjUyMDM1NTg1MzVkMWQyYjNhOWVmMGZlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApSobJddGeyuzB3x3VjFb/FrbzQ9n
w4H8D6GsYtSTqTu/JPeO67SXCkku18OKHqH+oqxjBCG2mjXWShNp4GRrfsHwSJtQ
xTwzjV57FV/etQDwiL/ROJTOBlEroBMP2r6iCorWXHj/lrsF1lAh7H2JvQZzeEz0
/tMQt0SqSWObUP1swevvISO56sZfGnYFpxvyWBxErOJkYNSdWxmunEbkoKmcip5r
Cm1Z+eakGDQ2hT2EUB4Nq/QSveth3wzEhyA6k9J2TALaxulXmMfBiMPJblJBodJQ
5UT59BrfigUrsazXwhDHgVJk2b8divQK8WLSVxFFZwSDkP8+3BRxnih1twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHIkRudA1D9zZSA1WFNdHSs6nvD+MB8GA1UdIwQY
MBaAFB97fA1vezRgjrJM+hqIi/M7G2FTMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvSDN0OERXOTdOR0NPc2t6NkdvaUw4enNiWVZNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Mi8zZTYwYWQtZDZiYi00NWEzLWFlZjMt
MmI5MzJlNjgyM2FkLzEvSDN0OERXOTdOR0NPc2t6NkdvaUw4enNiWVZNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Mi8zZTYwYWQtZDZiYi00NWEzLWFlZjMtMmI5MzJlNjgyM2Fk
LzEvSDN0OERXOTdOR0NPc2t6NkdvaUw4enNiWVZNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB3MxMEb9
0oMcbwib/f4ixKlKfw4RAArzo7Ft3kwIxuttX7UBOX3SsSKYT9wC5v50v6/bFgQE
CpoUgeApzXxNOpOAyEy+1ymveYWk/fEJP5K5fdd6OYl+Q0YV7lQJW6HeuInEsgej
V/vJWo/TI1IWTAmN6EAPqc0VfQ8tM2HWC4iTpjLvASi6yIHrM3Vii/4LqSfqgebb
Luzh0urxTlWWu/AD7rTcze7ZD6Tr77HUe2NbYTKsjeTdrnd3aY8DVNu4fBkn8er6
wNjVCcqnSpbe7KltiATfYrAsBJ6hTS3FbWgqb0obWUP2TsNc6nR6UdJb8fafT5i7
3a3gZo0lbhlRQw==
-----END CERTIFICATE-----
Generated at Tue Jul 1 07:05:44 2025 by rpki-client