Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: 081+paYq5GtWWkj+7DdW4UnvYvqjOjAWNP6ylkzDpRU=
Subject key identifier: B9:CE:27:C9:83:98:AF:C6:11:FF:4A:0D:D2:DF:67:0A:61:DA:66:94
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 0197BFDAA6BC5E7765D3DA18293CDC477ED2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 15C0
Signing time: Mon 30 Jun 2025 08:01:07 +0000
Manifest this update: Mon 30 Jun 2025 08:01:07 +0000
Manifest next update: Tue 01 Jul 2025 08:01:07 +0000
Files and hashes: 1: GGuZV4w4l_L1AAB0u4gI9OxObhI.roa (hash: CLNm60QGfX0COSZodNNnpcHnrbcFlA00OSTVLEP9aw4=)
2: QgESeVhsipvfmTCXEv6UR11P7ys.roa (hash: Mu2ldKy/m2YeXhlwaFd2rkbf1PYIDTAFyxWdZhH8Ols=)
3: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: BtjkUyDfKc87qFrSmoOi0WspwKOqtejTv6QQTgtiP74=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 01 Jul 2025 08:01:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bf:da:a6:bc:5e:77:65:d3:da:18:29:3c:dc:47:7e:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Jun 30 08:01:07 2025 GMT
Not After : Jul 1 08:01:07 2025 GMT
Subject: CN=b9ce27c98398afc611ff4a0dd2df670a61da6694
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:db:32:e2:3d:25:87:44:08:1c:52:9d:e6:db:3b:
9f:c9:77:ce:f3:ca:65:71:ea:3a:73:09:34:10:2d:
82:d2:b3:9e:ab:c5:3c:88:7e:f8:8d:68:aa:aa:e3:
91:d6:98:76:ae:14:85:f6:f6:11:8d:01:18:55:56:
7e:d1:fa:1c:0b:e3:0b:ee:0d:dd:22:91:8e:fa:2f:
0b:12:90:bd:76:1d:e4:9e:69:81:d2:ac:93:5b:ac:
17:0b:67:bc:57:12:4f:0c:13:52:51:45:51:7c:6b:
57:8e:db:46:c0:26:bd:af:de:b4:2c:3a:e7:56:ae:
a6:1e:9c:0b:be:dd:47:91:b7:80:8d:92:a3:62:62:
10:20:d5:3d:3c:03:bf:3c:bc:1e:79:d7:86:44:09:
a1:99:56:52:78:af:a8:d4:54:19:28:eb:de:99:a1:
8c:f6:11:c5:f7:dc:21:ed:d1:d9:72:4b:b3:a9:46:
e5:97:19:a7:b7:a4:cc:42:1d:79:67:ba:d7:f6:fd:
9a:ef:f3:00:05:81:ca:3b:c8:a4:1b:36:17:21:1a:
08:09:80:1e:fd:12:d1:97:c3:70:df:50:0a:dc:d2:
d1:10:2b:4a:e9:98:74:19:ea:e7:b2:78:7a:df:7d:
fd:70:b0:7d:8d:6e:a4:30:bc:25:d5:ad:90:e7:42:
28:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:CE:27:C9:83:98:AF:C6:11:FF:4A:0D:D2:DF:67:0A:61:DA:66:94
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
67:70:49:e0:6c:82:ab:d2:01:2d:6f:c3:de:49:de:dd:c6:0c:
14:ef:26:e4:19:c7:2a:37:25:84:5f:f6:66:ff:e4:01:d8:4f:
7f:cf:cf:1c:7d:0f:de:b6:44:81:0d:03:60:e9:7e:b9:68:49:
91:dd:68:5c:04:27:a4:33:35:02:68:cb:89:c9:e9:47:b3:21:
53:b7:74:83:77:78:56:82:ea:fd:fc:b1:fc:95:55:f6:93:9c:
42:06:cd:b7:18:a3:bc:f5:38:16:81:84:77:a8:7b:34:28:77:
52:02:19:a2:f3:eb:9d:c6:d0:d2:ff:83:65:06:1b:6e:1f:af:
58:1f:e4:69:97:6b:f9:60:7a:f4:89:99:56:43:8d:84:df:42:
9f:6d:1a:e5:e5:76:67:54:1a:fe:48:8b:86:8f:e6:27:79:be:
39:82:1c:a3:ab:21:0b:4e:8e:a9:bb:d0:96:e3:1c:00:f6:d4:
9b:6a:bf:41:d1:6f:88:5d:f6:5e:de:0a:a7:5a:52:8a:31:f7:
e3:e9:03:31:e3:6c:69:09:98:32:60:82:57:81:ae:c9:e9:4c:
18:57:22:94:04:51:cd:c1:5c:b5:b2:e3:51:12:3b:13:f6:0e:
3d:68:ed:b9:7d:a6:45:64:82:36:d7:f0:8e:78:aa:00:ae:db:
5b:31:31:79
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe/2qa8Xndl09oYKTzcR37SMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODUzYWExZWIzMmJmZWUwZmViMTQ4M2MxNDkzNmQxMDFm
MTZlZGYwHhcNMjUwNjMwMDgwMTA3WhcNMjUwNzAxMDgwMTA3WjAzMTEwLwYDVQQD
EyhiOWNlMjdjOTgzOThhZmM2MTFmZjRhMGRkMmRmNjcwYTYxZGE2Njk0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2zLiPSWHRAgcUp3m2zufyXfO88pl
ceo6cwk0EC2C0rOeq8U8iH74jWiqquOR1ph2rhSF9vYRjQEYVVZ+0focC+ML7g3d
IpGO+i8LEpC9dh3knmmB0qyTW6wXC2e8VxJPDBNSUUVRfGtXjttGwCa9r960LDrn
Vq6mHpwLvt1HkbeAjZKjYmIQINU9PAO/PLweedeGRAmhmVZSeK+o1FQZKOvemaGM
9hHF99wh7dHZckuzqUbllxmnt6TMQh15Z7rX9v2a7/MABYHKO8ikGzYXIRoICYAe
/RLRl8Nw31AK3NLRECtK6Zh0Gernsnh63339cLB9jW6kMLwl1a2Q50Io7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnOJ8mDmK/GEf9KDdLfZwph2maUMB8GA1UdIwQY
MBaAFLKFOqHrMr/uD+sUg8FJNtEB8W7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2Yt
ZjJiODEwNzliNzQ2LzEvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2YtZjJiODEwNzliNzQ2
LzEvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAZ3BJ4GyC
q9IBLW/D3kne3cYMFO8m5BnHKjclhF/2Zv/kAdhPf8/PHH0P3rZEgQ0DYOl+uWhJ
kd1oXAQnpDM1AmjLicnpR7MhU7d0g3d4VoLq/fyx/JVV9pOcQgbNtxijvPU4FoGE
d6h7NCh3UgIZovPrncbQ0v+DZQYbbh+vWB/kaZdr+WB69ImZVkONhN9Cn20a5eV2
Z1Qa/kiLho/mJ3m+OYIco6shC06OqbvQluMcAPbUm2q/QdFviF32Xt4Kp1pSijH3
4+kDMeNsaQmYMmCCV4GuyelMGFcilARRzcFctbLjURI7E/YOPWjtuX2mRWSCNtfw
jniqAK7bWzExeQ==
-----END CERTIFICATE-----
Generated at Mon Jun 30 18:34:50 2025 by rpki-client