Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
File: _m1KNjQMPa2HoDkh0PiP9lFiiXo.mft (raw, json)
Hash identifier: Ah52vQTQIYHzkcbjmCyg4T74KC8hYwqeEtI6/GzIZIw=
Subject key identifier: 43:89:8C:4A:6F:55:1F:88:0B:E8:78:51:81:E7:DB:1F:45:37:FF:71
Authority key identifier: FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
Certificate issuer: /CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Certificate serial: 0197BA0FB872F2A0E3325080DA83C10AEA64
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
Manifest number: 0A7D
Signing time: Sun 29 Jun 2025 05:01:21 +0000
Manifest this update: Sun 29 Jun 2025 05:01:21 +0000
Manifest next update: Mon 30 Jun 2025 05:01:21 +0000
Files and hashes: 1: _m1KNjQMPa2HoDkh0PiP9lFiiXo.crl (hash: 00eXM6VpDk0NzNZzE3oLfcyE0M0WZ9qrTXB5+nEs7Mo=)
2: fNjIviZE-rak2nx-LNx6AaZmje8.roa (hash: OJD0Sen5B4Pm8+7K0PKLwNWQlIZiuvKDQ8wOO8ai7W8=)
3: vtbeMLgEiJIMz5_yaCwan-k-_x8.roa (hash: aUmr6KPHOpH3nBu3CynTnd8kH0I7Kbxq4Ukon/iSThY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 00:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:ba:0f:b8:72:f2:a0:e3:32:50:80:da:83:c1:0a:ea:64
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fe6d4a36340c3dad87a03921d0f88ff65162897a
Validity
Not Before: Jun 29 05:01:21 2025 GMT
Not After : Jun 30 05:01:21 2025 GMT
Subject: CN=43898c4a6f551f880be8785181e7db1f4537ff71
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ef:a1:e4:2a:4c:76:71:42:68:e5:b4:00:70:94:
63:70:71:9b:49:56:5d:83:a5:3c:f8:25:2a:5c:a4:
09:97:41:09:59:46:b1:ac:d9:7f:b3:1f:c5:c6:1a:
9c:84:35:e5:d3:8e:88:01:06:d0:10:54:17:4c:0f:
f1:a3:c5:1a:d1:de:6f:28:92:f7:27:1a:46:a0:9c:
81:9e:02:4f:ca:1a:18:c2:2f:4e:1e:8a:55:88:2d:
79:29:a8:ff:da:16:54:eb:f1:c1:d2:b7:54:2b:01:
53:8c:1b:c1:21:c1:54:8e:ef:0f:69:54:ee:d2:d4:
02:d2:4e:62:da:6e:50:e5:4f:da:05:04:bf:52:6b:
18:87:9d:6d:8f:a6:dd:3e:3b:d0:f5:10:4e:6c:1b:
9e:77:4b:67:82:13:09:38:9c:65:63:10:8d:91:7b:
9d:dd:78:05:63:c7:12:bc:ef:03:aa:ef:1c:42:61:
28:8a:2a:ea:55:a5:c8:3d:5e:88:0e:7b:31:27:c9:
e8:48:8e:ed:b0:7c:e5:c9:79:30:88:de:cd:44:db:
0d:a4:c7:8d:b5:a5:21:82:3e:e0:0f:0f:9d:81:ff:
72:fd:97:53:ac:44:12:f1:84:74:4d:14:ec:e4:1b:
1e:50:3d:02:97:1d:39:b0:27:53:09:04:db:f6:51:
bd:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
43:89:8C:4A:6F:55:1F:88:0B:E8:78:51:81:E7:DB:1F:45:37:FF:71
X509v3 Authority Key Identifier:
keyid:FE:6D:4A:36:34:0C:3D:AD:87:A0:39:21:D0:F8:8F:F6:51:62:89:7A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_m1KNjQMPa2HoDkh0PiP9lFiiXo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a3/b70490-fcae-48ec-9249-beba754add57/1/_m1KNjQMPa2HoDkh0PiP9lFiiXo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6e:e5:3a:4d:9f:0a:3c:96:f6:6a:0e:9b:30:53:d8:13:8e:c5:
72:07:ef:a5:c8:7d:03:34:13:24:d7:88:6e:c4:5a:35:40:91:
b1:93:b8:8e:84:36:15:25:40:1d:75:f3:ba:a6:31:55:95:20:
3b:cd:62:5e:96:8f:3d:c1:b5:f4:a2:93:8b:ea:9f:e1:db:7d:
57:24:ad:aa:f2:a0:21:fa:42:21:e6:9b:dd:52:a2:75:33:a0:
b4:49:d2:05:e2:67:34:7a:f4:eb:bd:65:75:ec:90:64:77:26:
8d:17:d4:f3:83:d5:35:40:c1:0d:02:f3:c1:2c:6b:c9:95:50:
42:30:77:69:48:ed:54:ba:dd:63:f0:23:dc:0e:e2:34:10:53:
4d:19:13:3e:a4:71:6c:ed:8e:02:44:37:43:9d:4c:32:81:c6:
cb:53:13:9b:8a:4c:d1:ec:1a:4f:34:17:44:d7:96:bc:e3:54:
35:b9:1b:7a:46:36:37:66:f9:e5:74:8a:32:f9:d9:c0:df:c7:
7e:b9:05:95:8b:d7:f6:e3:25:7c:ce:bf:f4:6a:ff:e8:93:cc:
68:46:59:46:e7:20:54:e5:76:41:1e:b8:74:44:c3:52:c7:9a:
a9:54:4f:c9:08:2f:03:d2:aa:8e:d4:39:f0:50:59:12:0f:2e:
40:fb:47:e0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe6D7hy8qDjMlCA2oPBCupkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlNmQ0YTM2MzQwYzNkYWQ4N2EwMzkyMWQwZjg4ZmY2NTE2
Mjg5N2EwHhcNMjUwNjI5MDUwMTIxWhcNMjUwNjMwMDUwMTIxWjAzMTEwLwYDVQQD
Eyg0Mzg5OGM0YTZmNTUxZjg4MGJlODc4NTE4MWU3ZGIxZjQ1MzdmZjcxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA76HkKkx2cUJo5bQAcJRjcHGbSVZd
g6U8+CUqXKQJl0EJWUaxrNl/sx/FxhqchDXl046IAQbQEFQXTA/xo8Ua0d5vKJL3
JxpGoJyBngJPyhoYwi9OHopViC15Kaj/2hZU6/HB0rdUKwFTjBvBIcFUju8PaVTu
0tQC0k5i2m5Q5U/aBQS/UmsYh51tj6bdPjvQ9RBObBued0tnghMJOJxlYxCNkXud
3XgFY8cSvO8Dqu8cQmEoiirqVaXIPV6IDnsxJ8noSI7tsHzlyXkwiN7NRNsNpMeN
taUhgj7gDw+dgf9y/ZdTrEQS8YR0TRTs5BseUD0Clx05sCdTCQTb9lG9twIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEOJjEpvVR+IC+h4UYHn2x9FN/9xMB8GA1UdIwQY
MBaAFP5tSjY0DD2th6A5IdD4j/ZRYol6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDkt
YmViYTc1NGFkZDU3LzEvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hMy9iNzA0OTAtZmNhZS00OGVjLTkyNDktYmViYTc1NGFkZDU3
LzEvX20xS05qUU1QYTJIb0RraDBQaVA5bEZpaVhvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbuU6TZ8K
PJb2ag6bMFPYE47Fcgfvpch9AzQTJNeIbsRaNUCRsZO4joQ2FSVAHXXzuqYxVZUg
O81iXpaPPcG19KKTi+qf4dt9VyStqvKgIfpCIeab3VKidTOgtEnSBeJnNHr0671l
deyQZHcmjRfU84PVNUDBDQLzwSxryZVQQjB3aUjtVLrdY/Aj3A7iNBBTTRkTPqRx
bO2OAkQ3Q51MMoHGy1MTm4pM0ewaTzQXRNeWvONUNbkbekY2N2b55XSKMvnZwN/H
frkFlYvX9uMlfM6/9Gr/6JPMaEZZRucgVOV2QR64dETDUseaqVRPyQgvA9KqjtQ5
8FBZEg8uQPtH4A==
-----END CERTIFICATE-----
Generated at Sun Jun 29 08:12:14 2025 by rpki-client