Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
File: 84BJvoAaE244erwUSY5IYETZYng.mft (raw, json)
Hash identifier: op0HTz05PtmcHc/bzEfdKwkwToBvK0TWvvv1SGIhQ74=
Subject key identifier: EE:1F:8C:F5:1D:78:51:0C:B7:1E:CC:F4:F3:8B:0F:83:EA:02:D5:2A
Authority key identifier: F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
Certificate issuer: /CN=f38049be801a136e387abc14498e486044d96278
Certificate serial: 0197B5FBCCBCAD3B9FA4CD2AE12F9DAF3EA2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
Manifest number: 0300
Signing time: Sat 28 Jun 2025 10:01:07 +0000
Manifest this update: Sat 28 Jun 2025 10:01:07 +0000
Manifest next update: Sun 29 Jun 2025 10:01:07 +0000
Files and hashes: 1: 84BJvoAaE244erwUSY5IYETZYng.crl (hash: hxU2i58X/z4ExEmOScIJtG9hElgKPWR9xoApOqNvndo=)
2: Iu2chtpqWcHWj5ICMYSAAIfiajQ.roa (hash: V17YrAyWPucLnXshp6FV+qrXZ0uT+XGK95n0G3fUe08=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 10:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b5:fb:cc:bc:ad:3b:9f:a4:cd:2a:e1:2f:9d:af:3e:a2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f38049be801a136e387abc14498e486044d96278
Validity
Not Before: Jun 28 10:01:07 2025 GMT
Not After : Jun 29 10:01:07 2025 GMT
Subject: CN=ee1f8cf51d78510cb71eccf4f38b0f83ea02d52a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:84:c3:c1:03:f8:0e:b9:b9:85:90:99:96:d9:
0e:2b:8c:b6:6f:82:ca:b9:14:a3:6c:1f:c4:95:87:
52:10:eb:bc:ef:4b:93:25:42:81:75:95:33:12:01:
5f:fa:a1:7a:a3:ad:98:77:28:8e:2f:a0:9e:e4:da:
c4:22:7a:4a:cf:78:6c:4b:b5:a2:6c:10:65:34:62:
94:e2:31:69:0c:29:88:87:fe:f4:38:8b:53:a3:1c:
90:c3:7a:89:1e:b6:31:0e:8f:24:92:b1:1f:2e:7d:
09:49:44:9c:74:75:46:af:44:d1:83:97:4e:c0:71:
d6:02:87:6a:2d:8c:87:6f:bb:5a:e0:e7:a4:85:4b:
92:a7:c3:8b:57:8a:31:ab:22:54:a8:aa:6e:d2:54:
1a:5b:10:ce:fd:60:47:11:1c:b3:30:99:8a:d0:e9:
e4:e0:c5:ad:6f:20:79:1b:54:e8:ef:52:ad:40:ac:
12:b7:eb:50:7e:de:1d:d1:22:7b:06:57:57:f5:49:
39:be:55:6c:d5:35:be:13:a0:55:dd:eb:5a:e3:13:
b4:e2:1e:30:92:25:10:70:6a:21:44:bb:93:27:ee:
6c:0c:97:69:b8:87:63:22:c1:75:0b:c7:be:02:ed:
bc:0c:37:4a:cc:b1:1f:a2:72:01:c6:20:b3:ce:49:
62:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
EE:1F:8C:F5:1D:78:51:0C:B7:1E:CC:F4:F3:8B:0F:83:EA:02:D5:2A
X509v3 Authority Key Identifier:
keyid:F3:80:49:BE:80:1A:13:6E:38:7A:BC:14:49:8E:48:60:44:D9:62:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/84BJvoAaE244erwUSY5IYETZYng.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/83/deedb4-2620-441b-8616-28f4dad378fc/1/84BJvoAaE244erwUSY5IYETZYng.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
99:0d:61:45:f3:76:bb:eb:27:32:f5:d8:d0:e8:f0:0b:60:74:
a4:1d:d6:38:04:5a:75:14:1e:f0:bf:2a:9e:64:a6:d2:38:6b:
65:9a:70:2b:24:fd:c2:9e:e8:cc:db:5a:6a:21:05:7c:9a:2f:
c2:9f:26:9c:45:39:b0:85:88:77:28:6d:d8:1a:2e:99:4b:99:
39:16:ac:f1:dc:ea:d2:3c:3c:9f:22:43:e3:30:e2:7f:c3:f5:
99:55:21:c4:3a:97:ca:e9:13:17:b9:29:4d:cd:3e:d9:21:6e:
17:7b:37:05:8a:b2:80:f0:71:d4:85:99:12:48:d6:24:47:b9:
d1:57:25:ed:bc:4e:e6:6e:d7:b9:96:49:ae:51:9f:e1:d2:e7:
ef:d0:6a:ce:63:7e:09:f4:d4:e6:62:3d:c9:cf:b7:d3:e6:f8:
9a:48:8e:9e:dc:0e:48:0c:33:0e:9d:6e:ab:de:4e:27:29:05:
6e:b8:77:c7:07:fe:67:69:9c:49:af:30:d5:42:f0:b0:de:58:
07:df:da:b0:34:76:a8:54:05:a6:eb:c6:75:0a:84:f1:e8:e1:
f6:77:d6:0a:3e:c2:ab:08:24:b9:b7:99:b6:f2:4b:a4:cc:6f:
93:87:61:d3:2d:93:81:56:45:f3:e5:3b:ce:9b:47:0d:3b:fa:
3f:8b:94:82
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe1+8y8rTufpM0q4S+drz6iMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGYzODA0OWJlODAxYTEzNmUzODdhYmMxNDQ5OGU0ODYwNDRk
OTYyNzgwHhcNMjUwNjI4MTAwMTA3WhcNMjUwNjI5MTAwMTA3WjAzMTEwLwYDVQQD
EyhlZTFmOGNmNTFkNzg1MTBjYjcxZWNjZjRmMzhiMGY4M2VhMDJkNTJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoITDwQP4Drm5hZCZltkOK4y2b4LK
uRSjbB/ElYdSEOu870uTJUKBdZUzEgFf+qF6o62YdyiOL6Ce5NrEInpKz3hsS7Wi
bBBlNGKU4jFpDCmIh/70OItToxyQw3qJHrYxDo8kkrEfLn0JSUScdHVGr0TRg5dO
wHHWAodqLYyHb7ta4OekhUuSp8OLV4oxqyJUqKpu0lQaWxDO/WBHERyzMJmK0Onk
4MWtbyB5G1To71KtQKwSt+tQft4d0SJ7BldX9Uk5vlVs1TW+E6BV3eta4xO04h4w
kiUQcGohRLuTJ+5sDJdpuIdjIsF1C8e+Au28DDdKzLEfonIBxiCzzkli4QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFO4fjPUdeFEMtx7M9POLD4PqAtUqMB8GA1UdIwQY
MBaAFPOASb6AGhNuOHq8FEmOSGBE2WJ4MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84My9kZWVkYjQtMjYyMC00NDFiLTg2MTYt
MjhmNGRhZDM3OGZjLzEvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84My9kZWVkYjQtMjYyMC00NDFiLTg2MTYtMjhmNGRhZDM3OGZj
LzEvODRCSnZvQWFFMjQ0ZXJ3VVNZNUlZRVRaWW5nLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmQ1hRfN2
u+snMvXY0OjwC2B0pB3WOARadRQe8L8qnmSm0jhrZZpwKyT9wp7ozNtaaiEFfJov
wp8mnEU5sIWIdyht2BoumUuZORas8dzq0jw8nyJD4zDif8P1mVUhxDqXyukTF7kp
Tc0+2SFuF3s3BYqygPBx1IWZEkjWJEe50Vcl7bxO5m7XuZZJrlGf4dLn79BqzmN+
CfTU5mI9yc+30+b4mkiOntwOSAwzDp1uq95OJykFbrh3xwf+Z2mcSa8w1ULwsN5Y
B9/asDR2qFQFpuvGdQqE8ejh9nfWCj7CqwgkubeZtvJLpMxvk4dh0y2TgVZF8+U7
zptHDTv6P4uUgg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:38:53 2025 by rpki-client