Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
File: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft (raw, json)
Hash identifier: pDrS3AmsQoF+sPHpSH39PS/psYJgJM0BmtBztgeo8/k=
Subject key identifier: 4A:3F:0E:80:13:1E:73:4A:FD:F3:57:65:BC:D3:5E:9A:B9:A0:3A:0C
Authority key identifier: 71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
Certificate issuer: /CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Certificate serial: 0197B9D8D172EF9BCE8A163F301CA3FD6680
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
Manifest number: 059B
Signing time: Sun 29 Jun 2025 04:01:23 +0000
Manifest this update: Sun 29 Jun 2025 04:01:23 +0000
Manifest next update: Mon 30 Jun 2025 04:01:23 +0000
Files and hashes: 1: 2eV3LLHue0F4_ix9uAQjG0RjeyM.roa (hash: voDescMFunJFQQ5TLKb+tVFSLAofvJuHvYtHn/Yjp+c=)
2: cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl (hash: A1rkSt6pmAs2QODObsoDKZpbCbmznCSGJ/+WlZqCh8s=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 04:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b9:d8:d1:72:ef:9b:ce:8a:16:3f:30:1c:a3:fd:66:80
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=716842dc439836635a5c9ed6c0a495b3e6344a03
Validity
Not Before: Jun 29 04:01:23 2025 GMT
Not After : Jun 30 04:01:23 2025 GMT
Subject: CN=4a3f0e80131e734afdf35765bcd35e9ab9a03a0c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0a:43:32:c0:23:de:a5:87:79:0d:ab:33:b6:
8c:0d:e2:47:0c:ef:df:26:48:8d:47:4d:02:6a:a9:
26:17:cf:9b:0d:01:55:91:62:35:8a:d6:a1:98:14:
15:56:81:d7:8f:d1:2e:ee:83:ca:20:d3:87:0e:c8:
7c:b4:ce:44:c8:e5:a2:f2:11:6c:46:e4:b7:34:9b:
56:13:42:c2:b9:6a:18:bf:1d:ea:7b:8f:5d:6e:84:
c1:9b:46:94:e1:1d:d4:db:7f:cf:ae:8d:b6:30:d1:
ef:a2:17:3c:3c:10:87:ef:50:b2:cb:4c:6f:2b:b3:
94:0e:e9:01:87:75:b2:ec:4b:55:0e:73:64:bb:c3:
86:98:6d:62:10:51:36:90:00:53:ca:b8:70:fe:35:
80:90:c5:b5:44:cb:c6:b3:dc:65:07:9a:21:24:98:
d8:39:92:d7:15:d2:ca:9a:bf:41:4a:b7:a3:06:05:
d7:40:9c:e8:20:34:11:be:99:e2:bb:47:85:df:c3:
48:ba:bc:9b:ff:09:c6:82:1c:ea:14:c1:5b:4b:c3:
fb:dc:a4:0f:5d:d7:9d:56:e7:9e:d7:bf:b7:b5:d7:
eb:a1:38:16:31:a6:12:49:27:f8:e5:10:80:3e:f8:
e1:5c:b9:df:f3:6a:d8:5b:8f:fc:ae:28:a8:10:5d:
9a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:3F:0E:80:13:1E:73:4A:FD:F3:57:65:BC:D3:5E:9A:B9:A0:3A:0C
X509v3 Authority Key Identifier:
keyid:71:68:42:DC:43:98:36:63:5A:5C:9E:D6:C0:A4:95:B3:E6:34:4A:03
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/f86007-a964-4d1f-835d-70602756cc8d/1/cWhC3EOYNmNaXJ7WwKSVs-Y0SgM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
58:81:58:13:7a:0a:c4:3f:a2:20:67:5d:89:28:82:34:ec:6a:
ab:8d:17:15:b0:3b:3f:dd:6c:15:7b:60:86:0e:49:36:f9:91:
8e:74:8d:b7:70:ae:2b:ed:6c:66:b2:fb:59:4b:f9:78:76:3b:
ee:75:86:8b:ef:46:32:8c:68:a3:b3:36:c0:e3:41:ea:24:56:
b7:69:47:f8:b3:2b:f1:c9:c0:32:e1:37:4a:a9:95:e6:2f:2d:
84:1e:81:9e:9b:fc:71:72:ae:ac:c2:6d:3d:96:68:3b:df:f1:
62:ac:d8:9b:92:1e:05:63:28:5c:19:a8:71:49:fa:73:5f:2e:
fa:16:23:bd:1c:90:25:cc:48:88:59:35:78:fc:56:b1:8d:49:
56:77:38:c4:65:60:32:4e:4a:9a:96:b2:49:82:ec:5b:87:f6:
b6:b8:a0:2f:c8:1f:10:41:ae:e2:3a:f0:b9:86:92:b9:58:93:
ef:87:a5:02:d3:47:e3:43:c6:b6:66:59:00:a5:4a:1f:0b:14:
62:12:b8:6d:d8:87:ef:75:95:07:fa:23:dc:b4:13:7f:9c:82:
e7:17:ca:4e:64:7b:98:2d:81:c1:49:24:d2:f3:77:d9:e1:85:
f3:85:0b:fe:a0:f3:60:e0:36:a6:2d:84:02:81:c5:d7:d6:61:
9f:89:71:4b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe52NFy75vOihY/MByj/WaAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcxNjg0MmRjNDM5ODM2NjM1YTVjOWVkNmMwYTQ5NWIzZTYz
NDRhMDMwHhcNMjUwNjI5MDQwMTIzWhcNMjUwNjMwMDQwMTIzWjAzMTEwLwYDVQQD
Eyg0YTNmMGU4MDEzMWU3MzRhZmRmMzU3NjViY2QzNWU5YWI5YTAzYTBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgpDMsAj3qWHeQ2rM7aMDeJHDO/f
JkiNR00CaqkmF8+bDQFVkWI1itahmBQVVoHXj9Eu7oPKINOHDsh8tM5EyOWi8hFs
RuS3NJtWE0LCuWoYvx3qe49dboTBm0aU4R3U23/Pro22MNHvohc8PBCH71Cyy0xv
K7OUDukBh3Wy7EtVDnNku8OGmG1iEFE2kABTyrhw/jWAkMW1RMvGs9xlB5ohJJjY
OZLXFdLKmr9BSrejBgXXQJzoIDQRvpniu0eF38NIuryb/wnGghzqFMFbS8P73KQP
XdedVuee17+3tdfroTgWMaYSSSf45RCAPvjhXLnf82rYW4/8riioEF2aVwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEo/DoATHnNK/fNXZbzTXpq5oDoMMB8GA1UdIwQY
MBaAFHFoQtxDmDZjWlye1sCklbPmNEoDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi9mODYwMDctYTk2NC00ZDFmLTgzNWQt
NzA2MDI3NTZjYzhkLzEvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi9mODYwMDctYTk2NC00ZDFmLTgzNWQtNzA2MDI3NTZjYzhk
LzEvY1doQzNFT1lObU5hWEo3V3dLU1ZzLVkwU2dNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWIFYE3oK
xD+iIGddiSiCNOxqq40XFbA7P91sFXtghg5JNvmRjnSNt3CuK+1sZrL7WUv5eHY7
7nWGi+9GMoxoo7M2wONB6iRWt2lH+LMr8cnAMuE3SqmV5i8thB6Bnpv8cXKurMJt
PZZoO9/xYqzYm5IeBWMoXBmocUn6c18u+hYjvRyQJcxIiFk1ePxWsY1JVnc4xGVg
Mk5KmpaySYLsW4f2trigL8gfEEGu4jrwuYaSuViT74elAtNH40PGtmZZAKVKHwsU
YhK4bdiH73WVB/oj3LQTf5yC5xfKTmR7mC2BwUkk0vN32eGF84UL/qDzYOA2pi2E
AoHF19Zhn4lxSw==
-----END CERTIFICATE-----
Generated at Sun Jun 29 11:24:56 2025 by rpki-client