Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
File: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft (raw, json)
Hash identifier: xMfLS1Dw85ZyuwDBBb3cc5Tlr86VSNKcp9fE+zYhA04=
Subject key identifier: AD:2C:46:FC:89:8F:A3:9A:C2:62:4C:50:31:10:26:1D:30:BE:E1:BE
Authority key identifier: D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
Certificate issuer: /CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Certificate serial: 0197B7EA78AC44F7973FE9175C04ED881624
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
Manifest number: 07DB
Signing time: Sat 28 Jun 2025 19:01:26 +0000
Manifest this update: Sat 28 Jun 2025 19:01:26 +0000
Manifest next update: Sun 29 Jun 2025 19:01:26 +0000
Files and hashes: 1: 0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl (hash: rpHQhs49BSZSqPxhe5erMMbONa2VpvHvZQkIp7P/fWI=)
2: YRQ4Vg3A1i1QaO-e977IcW6KB9E.roa (hash: rc17/JwW2r6jYEgRn/1E0O8jtu0CDbAtQ0C5kFjlEwU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:ea:78:ac:44:f7:97:3f:e9:17:5c:04:ed:88:16:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d31e4a8cd2898c5de6d6625f10c4b2e85f461f78
Validity
Not Before: Jun 28 19:01:26 2025 GMT
Not After : Jun 29 19:01:26 2025 GMT
Subject: CN=ad2c46fc898fa39ac2624c503110261d30bee1be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a8:70:fd:72:4e:df:ab:6a:c9:38:17:be:05:ac:
65:31:d3:91:18:7d:1b:c4:b9:13:92:ed:50:1a:bb:
65:99:5e:7a:2c:62:4d:94:72:d4:24:4d:96:4c:23:
a1:3f:28:f6:8b:81:ef:f7:41:cd:c5:01:cd:a0:a0:
4e:0e:7c:ce:b7:f6:54:a0:7d:6b:0f:dc:35:8e:4f:
99:0a:95:8f:7b:0e:0e:9e:9b:77:ba:ee:c0:db:88:
30:95:f0:ac:77:f1:9f:9b:7f:4a:95:21:dd:8c:e2:
6c:c6:ef:07:96:a0:48:43:8f:bd:29:9c:dd:e6:aa:
20:9a:56:0b:fa:6c:6d:ab:23:79:8f:ba:f6:13:f6:
0c:d9:42:95:0a:e6:ae:99:89:6d:cd:db:10:35:44:
b1:fc:29:da:38:82:3b:aa:bc:85:31:d6:24:20:39:
8e:80:5b:54:4c:3d:c1:ed:9a:0c:ab:04:ba:18:f7:
61:93:26:06:98:db:b4:de:5d:19:3b:d7:f4:27:d0:
e5:9e:8e:6a:a2:25:b8:84:1e:d0:97:e3:f3:de:6f:
96:f3:e4:1a:64:d4:0c:9e:fa:e4:3c:6d:95:29:9d:
c2:e6:fc:25:35:e8:e6:0a:e8:a0:5e:ec:2d:c7:06:
4f:ff:e4:3d:34:ae:8c:be:f9:ad:cb:69:1c:b7:d0:
fa:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AD:2C:46:FC:89:8F:A3:9A:C2:62:4C:50:31:10:26:1D:30:BE:E1:BE
X509v3 Authority Key Identifier:
keyid:D3:1E:4A:8C:D2:89:8C:5D:E6:D6:62:5F:10:C4:B2:E8:5F:46:1F:78
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0x5KjNKJjF3m1mJfEMSy6F9GH3g.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/9facae-fd90-4b4c-a2ec-9127e8105699/1/0x5KjNKJjF3m1mJfEMSy6F9GH3g.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4f:78:b0:41:ce:46:ba:86:7f:90:c6:f1:18:fb:4c:8a:aa:91:
31:69:17:00:03:0e:17:df:98:4e:e5:7b:dd:d7:28:ea:22:e0:
31:6d:96:b6:ec:79:e1:fc:77:ca:a7:7b:03:78:0f:6f:64:c2:
0c:f4:f5:f1:06:4d:ef:da:ae:54:ec:6c:43:7f:96:87:aa:c7:
97:22:64:49:e5:35:f7:ba:a4:8c:91:b1:13:79:54:5b:4a:b5:
0b:fc:cb:ec:cd:b0:a9:59:14:eb:58:72:76:dd:83:1c:af:09:
10:2a:89:83:30:73:cb:5c:31:f4:91:f1:0b:0b:32:bc:2b:21:
f6:6a:28:f3:e6:b9:58:b7:58:4b:73:aa:4b:6e:a9:58:a8:12:
6c:45:f8:de:ec:fe:2d:b1:dc:fa:df:32:e8:c9:cd:d8:73:82:
32:d5:32:39:87:3f:95:ba:da:fe:2c:f2:51:d5:fe:d4:43:59:
67:78:64:53:a1:92:da:53:1b:e2:0a:66:41:9c:89:cc:eb:37:
24:e5:54:63:5c:3b:94:59:1c:ea:95:88:0b:9d:22:7a:ae:0c:
df:d0:74:02:ad:22:75:35:09:4b:88:63:1b:ee:68:4a:b7:3e:
84:ea:80:d9:d3:3f:7c:db:2a:0a:9f:55:60:85:67:da:02:c0:
49:bc:3c:c3
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe36nisRPeXP+kXXATtiBYkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzMWU0YThjZDI4OThjNWRlNmQ2NjI1ZjEwYzRiMmU4NWY0
NjFmNzgwHhcNMjUwNjI4MTkwMTI2WhcNMjUwNjI5MTkwMTI2WjAzMTEwLwYDVQQD
EyhhZDJjNDZmYzg5OGZhMzlhYzI2MjRjNTAzMTEwMjYxZDMwYmVlMWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqHD9ck7fq2rJOBe+BaxlMdORGH0b
xLkTku1QGrtlmV56LGJNlHLUJE2WTCOhPyj2i4Hv90HNxQHNoKBODnzOt/ZUoH1r
D9w1jk+ZCpWPew4Onpt3uu7A24gwlfCsd/Gfm39KlSHdjOJsxu8HlqBIQ4+9KZzd
5qogmlYL+mxtqyN5j7r2E/YM2UKVCuaumYltzdsQNUSx/CnaOII7qryFMdYkIDmO
gFtUTD3B7ZoMqwS6GPdhkyYGmNu03l0ZO9f0J9Dlno5qoiW4hB7Ql+Pz3m+W8+Qa
ZNQMnvrkPG2VKZ3C5vwlNejmCuigXuwtxwZP/+Q9NK6Mvvmty2kct9D6nQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFK0sRvyJj6OawmJMUDEQJh0wvuG+MB8GA1UdIwQY
MBaAFNMeSozSiYxd5tZiXxDEsuhfRh94MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iZS85ZmFjYWUtZmQ5MC00YjRjLWEyZWMt
OTEyN2U4MTA1Njk5LzEvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iZS85ZmFjYWUtZmQ5MC00YjRjLWEyZWMtOTEyN2U4MTA1Njk5
LzEvMHg1S2pOS0pqRjNtMW1KZkVNU3k2RjlHSDNnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAT3iwQc5G
uoZ/kMbxGPtMiqqRMWkXAAMOF9+YTuV73dco6iLgMW2Wtux54fx3yqd7A3gPb2TC
DPT18QZN79quVOxsQ3+Wh6rHlyJkSeU197qkjJGxE3lUW0q1C/zL7M2wqVkU61hy
dt2DHK8JECqJgzBzy1wx9JHxCwsyvCsh9moo8+a5WLdYS3OqS26pWKgSbEX43uz+
LbHc+t8y6MnN2HOCMtUyOYc/lbra/izyUdX+1ENZZ3hkU6GS2lMb4gpmQZyJzOs3
JOVUY1w7lFkc6pWIC50ieq4M39B0Aq0idTUJS4hjG+5oSrc+hOqA2dM/fNsqCp9V
YIVn2gLASbw8ww==
-----END CERTIFICATE-----
Generated at Sat Jun 28 20:30:25 2025 by rpki-client