Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
File: cAoSMdHCenVORu8Q6SpzCuFdD1U.mft (raw, json)
Hash identifier: t/xHp7TuFgD/LwnRMxMzSapjHHduM3SO7m4GGHyYp84=
Subject key identifier: 4F:FF:33:8B:27:10:B9:DA:69:D1:C1:AF:96:2D:8E:C7:06:E8:C2:0D
Authority key identifier: 70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
Certificate issuer: /CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Certificate serial: 0197BBC6DEC188C057B3A7EC4D643D409A6D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
Manifest number: 12BE
Signing time: Sun 29 Jun 2025 13:01:01 +0000
Manifest this update: Sun 29 Jun 2025 13:01:01 +0000
Manifest next update: Mon 30 Jun 2025 13:01:01 +0000
Files and hashes: 1: 9NhpD2GhK7nhCkw4Ln2hgR-a9FI.roa (hash: +fqLpWLcEuKJBmzQK+NoGzgKFUXuG2sR0jOCjmaF7ws=)
2: CsTskpGu2067EbH05wfUIZUPjxk.roa (hash: CGKvFO8hPB5WwPOizq8WbZfwBPb68T3rzaJWX9q+khg=)
3: NMtf5g2h09CpLbmo1MKTK6aenWk.roa (hash: tfFi0QE+bzYcqYuU5pyH35ZlykRfgC3AccLaeKevVfo=)
4: Ui7tOCQMpzQZKjrz8TKsRSE40Q4.roa (hash: DHT0OqKz8zWpIsPzI8wSWAnHvpUIUXG4m7B7nool0IE=)
5: YcOS2Wm4uyMkkPXlfvg_yl6nKYE.roa (hash: khcCUHFHG89+gqzsvASfhdPwL9xGw6oHEE1dsfVjZXE=)
6: cAoSMdHCenVORu8Q6SpzCuFdD1U.crl (hash: k243C8YOQzpAYZX3MB+OoXjMiK78aGWZ2Zbs8zPbfqc=)
7: dH9xmN_c-ogf3lMo2xsIcwvlDWE.roa (hash: SFJ3H40oDJz+xjK+HZI55sajPf6JpJrE0sfXbpnpYH0=)
8: mmEVKc1EFKuheB4FKizBXFspVtg.roa (hash: /mO5uMHmI8PnkMInS/fvq5meo8U4FCe78Pgb4cEwmJA=)
9: qoKING8LOUliqm_EPi7hMcuvFCE.roa (hash: 2DIbzoBlPqvX6X6H+KZMj8Ugg/FShiQHvw+LRdtArgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 13:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:c6:de:c1:88:c0:57:b3:a7:ec:4d:64:3d:40:9a:6d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=700a1231d1c27a754e46ef10e92a730ae15d0f55
Validity
Not Before: Jun 29 13:01:01 2025 GMT
Not After : Jun 30 13:01:01 2025 GMT
Subject: CN=4fff338b2710b9da69d1c1af962d8ec706e8c20d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:98:ab:0f:ee:13:b1:43:72:bc:3f:2c:66:11:5d:
11:bf:cb:db:17:de:ff:fa:d0:3b:ca:ad:0f:27:37:
d2:30:66:3c:ae:0b:22:40:99:14:bb:b6:a2:5d:6b:
3e:cd:f0:8c:5f:29:0e:39:ab:db:d9:8a:01:c1:e2:
ed:eb:db:09:1c:da:58:c3:c4:52:ad:e7:e2:23:22:
99:4f:9f:e4:20:46:4f:7f:8c:97:bd:3d:db:b9:b8:
12:2c:87:49:1e:32:91:75:c1:8f:81:13:b5:42:33:
3b:80:15:7e:47:28:ca:87:b5:b8:40:fd:a4:b2:3f:
d5:25:24:5d:9d:a6:e8:cd:da:04:34:db:82:a6:91:
34:16:95:43:2b:1a:81:97:24:23:a6:e4:8b:6c:8c:
be:42:8f:eb:c6:72:c0:b0:3f:ad:3d:6c:10:74:27:
44:46:5c:3a:d9:93:76:01:50:2a:67:d4:47:5a:dd:
52:3a:f2:7c:ea:8e:4b:e4:26:a4:0c:51:b4:4b:f1:
66:eb:0a:b1:3c:39:91:95:16:03:6b:a9:fd:8e:c1:
79:50:e4:47:73:a9:d5:a4:e1:89:07:cc:86:e5:11:
5f:2d:a2:b4:28:5b:5c:90:c2:ac:ff:44:2d:27:26:
97:02:c8:e4:6c:76:f6:67:67:23:03:14:ab:76:5d:
35:09
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4F:FF:33:8B:27:10:B9:DA:69:D1:C1:AF:96:2D:8E:C7:06:E8:C2:0D
X509v3 Authority Key Identifier:
keyid:70:0A:12:31:D1:C2:7A:75:4E:46:EF:10:E9:2A:73:0A:E1:5D:0F:55
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cAoSMdHCenVORu8Q6SpzCuFdD1U.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a1/dcc2b4-9ded-4678-8398-ab79a3789f8f/1/cAoSMdHCenVORu8Q6SpzCuFdD1U.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
49:85:b6:f7:29:b8:f3:b5:b3:a1:13:3b:eb:0b:6b:d6:54:25:
95:ed:7c:2d:e6:06:e1:c3:39:ed:9b:4f:b1:97:81:60:4b:7c:
4c:4d:88:df:2a:84:6f:ef:51:ef:12:78:e1:22:13:33:e2:00:
5e:2a:bf:0f:a9:94:43:ba:1c:88:0b:9b:11:9e:0f:68:32:31:
a5:0d:05:eb:d8:18:fe:d9:68:2f:30:b0:ec:37:98:1d:49:bf:
94:6a:35:5c:36:ae:d2:30:f9:b8:cd:ec:d1:e2:d9:ee:3d:59:
af:2f:7d:8b:95:09:b9:6a:33:7d:6a:5d:cd:fb:a7:79:7b:02:
63:20:dc:b6:b1:16:8c:72:2d:01:19:2e:ea:e0:52:6f:9d:04:
ad:fe:9e:2d:40:93:41:42:e5:7f:53:b5:b0:c2:2e:de:2e:ba:
72:db:06:30:5a:36:b1:bd:ce:52:c5:46:b5:42:bf:1c:98:fc:
50:ab:8b:e9:c4:ce:ba:e6:35:af:2a:1a:72:ba:b3:65:58:ab:
02:63:08:81:07:98:73:d7:12:ad:34:a2:32:f6:26:c2:04:27:
a9:80:d8:de:36:de:a4:af:c4:fc:07:05:d3:7c:4f:51:05:f0:
4c:18:a3:7f:15:2d:27:98:7a:e7:0c:84:14:68:b9:95:53:dd:
f3:c8:53:bf
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7xt7BiMBXs6fsTWQ9QJptMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwMGExMjMxZDFjMjdhNzU0ZTQ2ZWYxMGU5MmE3MzBhZTE1
ZDBmNTUwHhcNMjUwNjI5MTMwMTAxWhcNMjUwNjMwMTMwMTAxWjAzMTEwLwYDVQQD
Eyg0ZmZmMzM4YjI3MTBiOWRhNjlkMWMxYWY5NjJkOGVjNzA2ZThjMjBkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmKsP7hOxQ3K8PyxmEV0Rv8vbF97/
+tA7yq0PJzfSMGY8rgsiQJkUu7aiXWs+zfCMXykOOavb2YoBweLt69sJHNpYw8RS
refiIyKZT5/kIEZPf4yXvT3bubgSLIdJHjKRdcGPgRO1QjM7gBV+RyjKh7W4QP2k
sj/VJSRdnabozdoENNuCppE0FpVDKxqBlyQjpuSLbIy+Qo/rxnLAsD+tPWwQdCdE
Rlw62ZN2AVAqZ9RHWt1SOvJ86o5L5CakDFG0S/Fm6wqxPDmRlRYDa6n9jsF5UORH
c6nVpOGJB8yG5RFfLaK0KFtckMKs/0QtJyaXAsjkbHb2Z2cjAxSrdl01CQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFE//M4snELnaadHBr5YtjscG6MINMB8GA1UdIwQY
MBaAFHAKEjHRwnp1TkbvEOkqcwrhXQ9VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgt
YWI3OWEzNzg5ZjhmLzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMS9kY2MyYjQtOWRlZC00Njc4LTgzOTgtYWI3OWEzNzg5Zjhm
LzEvY0FvU01kSENlblZPUnU4UTZTcHpDdUZkRDFVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASYW29ym4
87WzoRM76wtr1lQlle18LeYG4cM57ZtPsZeBYEt8TE2I3yqEb+9R7xJ44SITM+IA
Xiq/D6mUQ7ociAubEZ4PaDIxpQ0F69gY/tloLzCw7DeYHUm/lGo1XDau0jD5uM3s
0eLZ7j1Zry99i5UJuWozfWpdzfuneXsCYyDctrEWjHItARku6uBSb50Erf6eLUCT
QULlf1O1sMIu3i66ctsGMFo2sb3OUsVGtUK/HJj8UKuL6cTOuuY1ryoacrqzZVir
AmMIgQeYc9cSrTSiMvYmwgQnqYDY3jbepK/E/AcF03xPUQXwTBijfxUtJ5h65wyE
FGi5lVPd88hTvw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 21:04:07 2025 by rpki-client