Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
File: cMvrOI9ZAsFhYLvtCWLLYisruDI.mft (raw, json)
Hash identifier: SoW8Xy3UraSXLycGGpJsSLv918lbxoAxV+DoVTCgk88=
Subject key identifier: E9:51:44:24:42:35:C8:8E:58:B7:C2:8A:48:7A:23:CA:82:C0:0E:7A
Authority key identifier: 70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
Certificate issuer: /CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Certificate serial: 0197B77C230A189541628B8501B78CE2A23A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
Manifest number: 0BCA
Signing time: Sat 28 Jun 2025 17:00:55 +0000
Manifest this update: Sat 28 Jun 2025 17:00:55 +0000
Manifest next update: Sun 29 Jun 2025 17:00:55 +0000
Files and hashes: 1: Jx2nTRr5pEsEFWo_5nDYJEdIJkI.roa (hash: 5SCIBFwRcqmCVA4jK7ObW5hmOVN8QwAIditbrQHD6YU=)
2: cMvrOI9ZAsFhYLvtCWLLYisruDI.crl (hash: hJm+SOAq+1Twwpyr9B/2i1NBZMCtXaoeA39Kacsd3gc=)
3: fVZny3FRspGg7D4Ss3AUbX0JyBI.roa (hash: SocyXocZHSo8f5zsAWiffJrBZyiPOdy55HQXZcolvh4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:7c:23:0a:18:95:41:62:8b:85:01:b7:8c:e2:a2:3a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=70cbeb388f5902c16160bbed0962cb622b2bb832
Validity
Not Before: Jun 28 17:00:55 2025 GMT
Not After : Jun 29 17:00:55 2025 GMT
Subject: CN=e95144244235c88e58b7c28a487a23ca82c00e7a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:85:ef:17:96:0f:de:c3:ed:46:27:e4:e0:8f:a3:
90:34:0d:07:e9:eb:58:8f:fb:aa:2a:f2:bf:33:d7:
a9:07:cc:b1:5a:a1:c9:63:24:93:60:91:0d:f2:f0:
ff:a6:f5:89:66:d4:90:4d:c9:12:36:88:25:1f:da:
e9:63:08:48:a0:99:d8:df:4a:2a:7e:d4:31:4b:2d:
30:96:4a:41:48:6f:58:28:96:c4:1d:48:1d:14:82:
c0:14:87:9d:c0:38:53:2f:5c:37:93:8b:ee:7c:c8:
7a:97:b7:69:22:14:12:66:1d:ce:e6:97:47:8f:fd:
71:03:ef:02:c4:5e:84:69:f9:8b:70:1d:4e:0f:42:
11:e1:ce:aa:6c:9c:d4:1a:b3:77:87:37:f4:bc:76:
11:f1:ea:6b:b4:d4:31:e3:ae:eb:e2:09:16:46:f0:
20:4b:f5:60:d7:64:3d:12:25:9f:ee:3d:62:be:16:
1b:7a:df:32:97:0d:19:78:52:04:2e:1a:7f:86:87:
0e:7a:6f:b3:cb:d4:32:4f:e9:8b:7e:a2:c9:4a:bd:
75:cd:ee:62:f5:77:90:d0:bb:46:31:8a:d0:3e:c2:
2e:5b:6c:ba:da:54:f9:9a:ba:00:00:b3:af:eb:c8:
60:57:5b:ba:e9:89:c1:46:2b:ad:28:6e:c9:9b:ae:
5c:29
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E9:51:44:24:42:35:C8:8E:58:B7:C2:8A:48:7A:23:CA:82:C0:0E:7A
X509v3 Authority Key Identifier:
keyid:70:CB:EB:38:8F:59:02:C1:61:60:BB:ED:09:62:CB:62:2B:2B:B8:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/cMvrOI9ZAsFhYLvtCWLLYisruDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ae/149cf6-611d-4e03-a660-dce1127ab223/1/cMvrOI9ZAsFhYLvtCWLLYisruDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9c:df:5a:7e:fb:dd:eb:e0:7d:a4:03:c0:69:9b:04:89:48:e4:
dd:39:09:5e:09:e9:b6:90:40:9a:ed:d7:c7:6f:ee:47:b5:2d:
4b:c0:c9:9c:1a:f7:1e:a4:d4:b5:48:31:b4:97:9e:9a:7d:85:
85:51:1a:f2:98:ca:ba:1a:29:02:0c:74:49:54:2f:7f:56:48:
e8:c6:85:99:88:b9:c8:34:51:22:3b:47:ea:c8:5e:60:33:60:
53:51:25:30:87:bf:94:e8:2f:42:d7:44:51:c6:f6:0d:35:01:
f4:30:cf:61:29:04:b9:f2:58:a4:ff:2b:80:1b:57:bd:e3:09:
2a:3a:ba:93:26:d8:f9:8e:5b:5c:e4:aa:a8:ed:40:a7:e0:7f:
99:06:0e:22:65:b7:73:6c:20:a2:ce:1a:12:a9:e5:bd:d4:28:
f7:f2:88:27:42:e3:97:66:5f:72:b4:4a:d5:5e:e6:7b:76:03:
21:33:12:87:47:ae:13:25:4e:d0:55:97:a4:1c:cd:73:45:ad:
94:07:cc:62:50:81:85:22:dd:03:3c:dd:ea:8d:1c:a3:4f:1a:
71:a0:c4:de:49:1b:b6:e6:ed:f0:23:95:87:2e:a1:21:0e:38:
e0:d8:72:9d:24:cf:db:90:8b:a0:1e:ec:c9:b5:20:85:ab:95:
64:68:20:06
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3fCMKGJVBYouFAbeM4qI6MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDcwY2JlYjM4OGY1OTAyYzE2MTYwYmJlZDA5NjJjYjYyMmIy
YmI4MzIwHhcNMjUwNjI4MTcwMDU1WhcNMjUwNjI5MTcwMDU1WjAzMTEwLwYDVQQD
EyhlOTUxNDQyNDQyMzVjODhlNThiN2MyOGE0ODdhMjNjYTgyYzAwZTdhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAhe8Xlg/ew+1GJ+Tgj6OQNA0H6etY
j/uqKvK/M9epB8yxWqHJYySTYJEN8vD/pvWJZtSQTckSNoglH9rpYwhIoJnY30oq
ftQxSy0wlkpBSG9YKJbEHUgdFILAFIedwDhTL1w3k4vufMh6l7dpIhQSZh3O5pdH
j/1xA+8CxF6EafmLcB1OD0IR4c6qbJzUGrN3hzf0vHYR8eprtNQx467r4gkWRvAg
S/Vg12Q9EiWf7j1ivhYbet8ylw0ZeFIELhp/hocOem+zy9QyT+mLfqLJSr11ze5i
9XeQ0LtGMYrQPsIuW2y62lT5mroAALOv68hgV1u66YnBRiutKG7Jm65cKQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOlRRCRCNciOWLfCikh6I8qCwA56MB8GA1UdIwQY
MBaAFHDL6ziPWQLBYWC77Qliy2IrK7gyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZS8xNDljZjYtNjExZC00ZTAzLWE2NjAt
ZGNlMTEyN2FiMjIzLzEvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZS8xNDljZjYtNjExZC00ZTAzLWE2NjAtZGNlMTEyN2FiMjIz
LzEvY012ck9JOVpBc0ZoWUx2dENXTExZaXNydURJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAnN9afvvd
6+B9pAPAaZsEiUjk3TkJXgnptpBAmu3Xx2/uR7UtS8DJnBr3HqTUtUgxtJeemn2F
hVEa8pjKuhopAgx0SVQvf1ZI6MaFmYi5yDRRIjtH6sheYDNgU1ElMIe/lOgvQtdE
Ucb2DTUB9DDPYSkEufJYpP8rgBtXveMJKjq6kybY+Y5bXOSqqO1Ap+B/mQYOImW3
c2wgos4aEqnlvdQo9/KIJ0Ljl2ZfcrRK1V7me3YDITMSh0euEyVO0FWXpBzNc0Wt
lAfMYlCBhSLdAzzd6o0co08acaDE3kkbtubt8COVhy6hIQ444NhynSTP25CLoB7s
ybUghauVZGggBg==
-----END CERTIFICATE-----
Generated at Sat Jun 28 22:27:58 2025 by rpki-client