Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
File: MHR0lP9OJleNneq-LubQBLP-LYw.mft (raw, json)
Hash identifier: mXAfYmXYwtD7o1fhCyqYB4H2dNsyOID7b93O1oL/bNk=
Subject key identifier: 02:0F:E8:A2:D6:5A:32:8D:E1:D7:84:D0:9D:60:AD:D0:87:D2:46:D4
Authority key identifier: 30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
Certificate issuer: /CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Certificate serial: 0197B77C21E66957582EF5F4FBDF91991738
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
Manifest number: 0A20
Signing time: Sat 28 Jun 2025 17:00:54 +0000
Manifest this update: Sat 28 Jun 2025 17:00:54 +0000
Manifest next update: Sun 29 Jun 2025 17:00:54 +0000
Files and hashes: 1: MHR0lP9OJleNneq-LubQBLP-LYw.crl (hash: XtC/mjgnPXu+zakjkHZ075QKtsV6854WbyfjGIZi+14=)
2: TFll5ENpjCR3fFAI_0E-ikt6_GM.roa (hash: cdCSDqZSpIOGUxCTSX+KjodpOB497W7vlYLMjlGxydw=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:21:e6:69:57:58:2e:f5:f4:fb:df:91:99:17:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=30747494ff4e26578d9deabe2ee6d004b3fe2d8c
Validity
Not Before: Jun 28 17:00:54 2025 GMT
Not After : Jun 29 17:00:54 2025 GMT
Subject: CN=020fe8a2d65a328de1d784d09d60add087d246d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:51:57:78:5b:67:fa:aa:63:af:82:16:06:7e:
2b:4e:84:c0:d6:a0:25:1e:55:94:80:11:54:0d:1a:
3e:7c:a4:6a:83:68:16:44:5f:07:d3:e5:87:50:97:
33:72:7f:eb:05:3b:39:19:5e:57:f3:bb:35:71:17:
33:de:82:f4:9f:da:ea:77:f0:93:e1:96:62:c0:38:
61:46:27:ac:19:0a:80:ac:15:e7:e2:62:03:cf:e8:
48:27:50:23:8a:e9:36:03:bb:3b:76:5c:bc:2a:b5:
bd:06:e0:aa:66:28:66:15:25:35:5c:99:19:67:d6:
ce:29:fd:c7:5f:37:9d:20:e5:38:37:c8:8b:9f:f5:
34:b7:8e:03:ad:c8:f5:89:e3:1b:14:a9:67:c6:dd:
b8:fa:81:55:8e:c7:aa:19:7a:ef:61:01:2e:e1:e6:
63:6b:24:0b:df:8a:f1:ad:20:b3:4c:6c:b6:4d:15:
0e:16:71:7c:72:50:b2:49:05:da:d6:d6:fa:c7:4d:
2d:7b:d7:fc:3a:c0:40:79:2b:68:85:1a:f6:d9:78:
59:01:fd:00:da:b2:0c:d8:64:8e:ab:26:50:1d:68:
4c:2c:72:ab:b7:21:49:3f:ac:8c:ab:3c:6f:eb:55:
54:b2:35:24:8a:dc:fa:89:c8:16:61:00:cf:da:90:
f9:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
02:0F:E8:A2:D6:5A:32:8D:E1:D7:84:D0:9D:60:AD:D0:87:D2:46:D4
X509v3 Authority Key Identifier:
keyid:30:74:74:94:FF:4E:26:57:8D:9D:EA:BE:2E:E6:D0:04:B3:FE:2D:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHR0lP9OJleNneq-LubQBLP-LYw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/84/bcf9a3-6963-43c3-b8dd-389a3098ec2a/1/MHR0lP9OJleNneq-LubQBLP-LYw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
53:de:47:bc:32:da:c6:30:94:be:5a:af:57:65:45:02:a8:ea:
aa:bf:87:72:21:12:bb:ea:07:c8:ff:f9:8c:b6:c9:c9:21:73:
47:4d:c4:b6:e2:74:b9:ec:3d:03:bf:8e:0a:9a:9a:ee:58:4d:
6d:44:66:c5:64:f2:f5:10:d5:8d:cc:4e:b7:14:14:85:e5:0e:
3e:8b:cb:7c:b0:94:b3:a8:02:18:81:7a:4c:cb:d7:83:22:e0:
a0:cf:69:18:79:2f:4c:68:be:32:21:9f:23:ec:bc:4d:b7:11:
9c:43:63:ac:1a:bc:91:ec:e4:fe:e0:79:12:29:2d:8d:6a:4d:
b4:c3:ca:b9:91:ae:13:54:7a:6e:76:cf:6c:ad:dc:67:6d:a9:
54:05:5c:9e:5c:e3:ab:3d:d9:1b:05:c9:56:70:ce:39:23:0b:
ca:88:b6:5f:6d:f3:a0:41:ce:c4:e1:7b:6e:7f:b7:06:d1:de:
cc:00:3c:89:72:2f:3f:86:d4:1c:52:7f:21:ee:e2:10:df:31:
40:0e:cd:19:d1:07:8c:85:fa:d9:ce:3b:08:bd:34:eb:bb:4c:
ca:ef:ae:8a:37:3b:28:5a:13:88:34:b4:a5:bb:9b:06:42:f7:
a1:14:32:b2:e1:63:16:a9:e8:33:23:fd:61:1d:3e:f0:9e:c5:
2b:33:1b:a3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fCHmaVdYLvX0+9+RmRc4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwNzQ3NDk0ZmY0ZTI2NTc4ZDlkZWFiZTJlZTZkMDA0YjNm
ZTJkOGMwHhcNMjUwNjI4MTcwMDU0WhcNMjUwNjI5MTcwMDU0WjAzMTEwLwYDVQQD
EygwMjBmZThhMmQ2NWEzMjhkZTFkNzg0ZDA5ZDYwYWRkMDg3ZDI0NmQ0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqlFXeFtn+qpjr4IWBn4rToTA1qAl
HlWUgBFUDRo+fKRqg2gWRF8H0+WHUJczcn/rBTs5GV5X87s1cRcz3oL0n9rqd/CT
4ZZiwDhhRiesGQqArBXn4mIDz+hIJ1Ajiuk2A7s7dly8KrW9BuCqZihmFSU1XJkZ
Z9bOKf3HXzedIOU4N8iLn/U0t44Drcj1ieMbFKlnxt24+oFVjseqGXrvYQEu4eZj
ayQL34rxrSCzTGy2TRUOFnF8clCySQXa1tb6x00te9f8OsBAeStohRr22XhZAf0A
2rIM2GSOqyZQHWhMLHKrtyFJP6yMqzxv61VUsjUkitz6icgWYQDP2pD55QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAIP6KLWWjKN4deE0J1grdCH0kbUMB8GA1UdIwQY
MBaAFDB0dJT/TiZXjZ3qvi7m0ASz/i2MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhSMGxQOU9KbGVObmVxLUx1YlFCTFAtTFl3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84NC9iY2Y5YTMtNjk2My00M2MzLWI4ZGQt
Mzg5YTMwOThlYzJhLzEvTUhSMGxQOU9KbGVObmVxLUx1YlFCTFAtTFl3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84NC9iY2Y5YTMtNjk2My00M2MzLWI4ZGQtMzg5YTMwOThlYzJh
LzEvTUhSMGxQOU9KbGVObmVxLUx1YlFCTFAtTFl3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAU95HvDLa
xjCUvlqvV2VFAqjqqr+HciESu+oHyP/5jLbJySFzR03EtuJ0uew9A7+OCpqa7lhN
bURmxWTy9RDVjcxOtxQUheUOPovLfLCUs6gCGIF6TMvXgyLgoM9pGHkvTGi+MiGf
I+y8TbcRnENjrBq8kezk/uB5EiktjWpNtMPKuZGuE1R6bnbPbK3cZ22pVAVcnlzj
qz3ZGwXJVnDOOSMLyoi2X23zoEHOxOF7bn+3BtHezAA8iXIvP4bUHFJ/Ie7iEN8x
QA7NGdEHjIX62c47CL0067tMyu+uijc7KFoTiDS0pbubBkL3oRQysuFjFqnoMyP9
YR0+8J7FKzMbow==
-----END CERTIFICATE-----
Generated at Sat Jun 28 23:12:43 2025 by rpki-client