Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
File: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft (raw, json)
Hash identifier: 0ZGo4LDV6hzTSVq8jUQXnoFyN4fayB4Usbgo7yEf18k=
Subject key identifier: D6:8F:32:FB:9D:6C:0B:F6:F2:AF:4B:62:68:FF:F3:FC:78:31:3C:1B
Authority key identifier: 33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
Certificate issuer: /CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Certificate serial: 0197BB9030EDDFE6B0A5CE1DEE36AD9A4317
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
Manifest number: 05DA
Signing time: Sun 29 Jun 2025 12:01:18 +0000
Manifest this update: Sun 29 Jun 2025 12:01:18 +0000
Manifest next update: Mon 30 Jun 2025 12:01:18 +0000
Files and hashes: 1: M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl (hash: X3bL3uK2sOQlSOBGjHtEsYaBHdBpmY3A9zb6qmoo0+o=)
2: XyjfJOj_ao5EyTb3E99N_HnlDMM.roa (hash: KGwUkqH7AqBxcL7k/BCVVIwTlBSdhX8/NAbdbiiMWC4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Jun 2025 07:42:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:bb:90:30:ed:df:e6:b0:a5:ce:1d:ee:36:ad:9a:43:17
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=33a9c7bdf2b82e343ec42667d6eede4b80610c84
Validity
Not Before: Jun 29 12:01:18 2025 GMT
Not After : Jun 30 12:01:18 2025 GMT
Subject: CN=d68f32fb9d6c0bf6f2af4b6268fff3fc78313c1b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:60:1b:f1:4b:fc:be:ee:80:35:93:81:e0:33:
b8:8e:65:a0:5b:92:fc:f2:ba:be:15:f6:62:a2:1e:
30:1d:eb:63:9c:88:c3:63:af:78:7a:f7:47:40:33:
e4:15:b6:06:97:52:01:13:81:2d:33:36:be:d6:0f:
ae:ac:fa:6a:b6:e0:f2:c1:ba:fa:d2:01:24:9e:bc:
1a:ea:7b:39:25:1e:13:28:f7:72:29:68:fa:b6:96:
c0:cc:7c:a7:58:0d:dd:26:96:8a:6c:09:71:ca:99:
ad:c5:52:a6:94:8e:57:89:3e:e0:78:da:e3:28:dd:
b1:a4:83:19:16:2f:b7:b7:20:1f:c5:a1:66:26:83:
5e:a0:b7:ba:98:5d:2b:a1:98:61:bc:15:b0:c1:88:
c9:14:8e:16:f8:d5:54:9f:2b:9b:68:a0:c9:da:76:
09:d1:6c:68:bf:db:b3:de:c9:d6:73:0a:7b:dc:f8:
0f:f2:ad:cf:7a:f8:40:34:f2:62:7c:e5:06:43:ef:
cc:58:d2:fe:d2:0b:de:33:b2:5a:29:5a:d0:e7:dd:
f9:0a:d9:12:c7:e7:f5:1a:43:b4:20:b1:3c:de:21:
e0:a4:51:fa:16:71:2b:56:dd:3a:5d:e1:7d:90:83:
12:85:82:93:e5:4b:6a:bb:49:20:f2:29:38:b0:bb:
27:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:8F:32:FB:9D:6C:0B:F6:F2:AF:4B:62:68:FF:F3:FC:78:31:3C:1B
X509v3 Authority Key Identifier:
keyid:33:A9:C7:BD:F2:B8:2E:34:3E:C4:26:67:D6:EE:DE:4B:80:61:0C:84
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b0/2f6595-d3d1-43ea-a4a3-ab3b7c3e8215/1/M6nHvfK4LjQ-xCZn1u7eS4BhDIQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
23:4d:a6:c5:60:d3:92:7f:d6:be:05:a9:9a:ab:fe:63:2b:1b:
bf:d8:c4:04:9c:e5:37:bc:c9:85:9d:f8:95:76:9e:8c:45:9d:
c2:a6:1a:fb:8c:1b:32:3d:01:da:d0:35:42:69:3d:49:eb:85:
7a:47:dd:97:9e:41:77:21:d0:90:75:37:4d:28:2e:49:9e:0b:
23:f7:40:0d:d8:df:0d:cd:51:7a:a9:aa:0c:71:51:94:8b:65:
2d:07:81:be:da:d5:ba:ff:79:53:94:00:bf:fb:6d:c6:cc:ad:
2b:3e:7f:e8:02:0e:97:a1:ab:89:39:42:d6:73:15:99:71:dd:
fb:69:b0:d4:e5:3c:04:0a:65:a4:68:d2:31:1b:a4:01:3c:90:
0c:f1:94:d8:0c:46:9b:a9:c9:0e:92:fc:24:cb:bc:b0:08:fa:
9d:f4:cb:4e:87:4c:55:bf:3a:b6:77:0a:db:23:90:fa:c0:84:
1f:76:72:66:f0:c1:69:50:9a:b2:15:c9:07:79:d7:4a:6c:cc:
45:c7:7a:ce:9c:b4:5b:09:fb:86:4e:7f:c1:a6:95:41:b2:85:
e7:35:1c:65:fd:c9:4b:19:8e:c0:d4:17:b5:d1:c9:a3:35:94:
63:4b:44:b6:91:bb:77:62:35:a6:24:50:55:bc:ab:04:0d:c0:
64:b7:ca:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe7kDDt3+awpc4d7jatmkMXMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMzYTljN2JkZjJiODJlMzQzZWM0MjY2N2Q2ZWVkZTRiODA2
MTBjODQwHhcNMjUwNjI5MTIwMTE4WhcNMjUwNjMwMTIwMTE4WjAzMTEwLwYDVQQD
EyhkNjhmMzJmYjlkNmMwYmY2ZjJhZjRiNjI2OGZmZjNmYzc4MzEzYzFiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAzGAb8Uv8vu6ANZOB4DO4jmWgW5L8
8rq+FfZioh4wHetjnIjDY694evdHQDPkFbYGl1IBE4EtMza+1g+urPpqtuDywbr6
0gEknrwa6ns5JR4TKPdyKWj6tpbAzHynWA3dJpaKbAlxypmtxVKmlI5XiT7geNrj
KN2xpIMZFi+3tyAfxaFmJoNeoLe6mF0roZhhvBWwwYjJFI4W+NVUnyubaKDJ2nYJ
0Wxov9uz3snWcwp73PgP8q3PevhANPJifOUGQ+/MWNL+0gveM7JaKVrQ5935CtkS
x+f1GkO0ILE83iHgpFH6FnErVt06XeF9kIMShYKT5Utqu0kg8ik4sLsn1QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFNaPMvudbAv28q9LYmj/8/x4MTwbMB8GA1UdIwQY
MBaAFDOpx73yuC40PsQmZ9bu3kuAYQyEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMC8yZjY1OTUtZDNkMS00M2VhLWE0YTMt
YWIzYjdjM2U4MjE1LzEvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMC8yZjY1OTUtZDNkMS00M2VhLWE0YTMtYWIzYjdjM2U4MjE1
LzEvTTZuSHZmSzRMalEteENabjF1N2VTNEJoRElRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAI02mxWDT
kn/WvgWpmqv+Yysbv9jEBJzlN7zJhZ34lXaejEWdwqYa+4wbMj0B2tA1Qmk9SeuF
ekfdl55BdyHQkHU3TSguSZ4LI/dADdjfDc1ReqmqDHFRlItlLQeBvtrVuv95U5QA
v/ttxsytKz5/6AIOl6GriTlC1nMVmXHd+2mw1OU8BAplpGjSMRukATyQDPGU2AxG
m6nJDpL8JMu8sAj6nfTLTodMVb86tncK2yOQ+sCEH3ZyZvDBaVCashXJB3nXSmzM
Rcd6zpy0Wwn7hk5/waaVQbKF5zUcZf3JSxmOwNQXtdHJozWUY0tEtpG7d2I1piRQ
VbyrBA3AZLfKTg==
-----END CERTIFICATE-----
Generated at Sun Jun 29 16:47:39 2025 by rpki-client