Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
File: rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft (raw, json)
Hash identifier: RuLFQDGXy0T/jsSMoKsOLtr9A5IScemesBPe2LSFzns=
Subject key identifier: 74:87:D6:F4:D5:A4:30:4F:B0:3E:E6:84:8B:C1:0E:72:70:19:6D:11
Authority key identifier: AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
Certificate issuer: /CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Certificate serial: 0197B7B303A403CE04094037B113925E9189
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
Manifest number: 11AC
Signing time: Sat 28 Jun 2025 18:00:51 +0000
Manifest this update: Sat 28 Jun 2025 18:00:51 +0000
Manifest next update: Sun 29 Jun 2025 18:00:51 +0000
Files and hashes: 1: 0_n0dJGdGPC54n6Su3XhjRpEGaE.roa (hash: ecsdCD7tgZtKRsUvKu336lhnysfVM1v2m6QNHH0P3gg=)
2: rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl (hash: 83uWTobAkLZpaY42jmY/2+xinyYQCg+XUVXeSycRsAY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b7:b3:03:a4:03:ce:04:09:40:37:b1:13:92:5e:91:89
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad7d8de8ca061ea164e671c34eb3377f5736bbc3
Validity
Not Before: Jun 28 18:00:51 2025 GMT
Not After : Jun 29 18:00:51 2025 GMT
Subject: CN=7487d6f4d5a4304fb03ee6848bc10e7270196d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:4e:3f:53:58:ce:04:4f:88:a3:3d:dc:b9:8c:
b1:2d:7c:56:4f:66:c3:bc:39:8c:d7:22:91:1b:c4:
0a:75:9a:98:4d:fd:12:1e:d9:2e:b2:3e:ac:c8:d5:
77:b8:a6:40:74:28:61:89:c9:a6:4e:97:95:4d:ce:
bf:6e:50:2e:ba:62:e4:d6:5e:a6:3f:b1:01:00:33:
ea:6b:07:d4:b7:97:2c:34:e7:fd:aa:7c:00:e1:2a:
11:05:38:84:cf:b7:c0:13:c3:28:5a:47:23:28:1f:
12:e1:75:a7:d0:1f:77:72:b0:38:cf:28:21:89:a6:
b0:7b:0d:5d:00:b8:80:86:7e:5a:8a:78:a6:ab:f1:
0c:f7:fb:14:e5:85:d5:38:ae:cd:0e:f3:09:7c:8f:
d8:7b:3b:69:10:cc:f1:b7:c6:5d:e7:ad:45:f2:cb:
f4:76:61:ac:7d:7e:57:d1:24:1c:b4:d3:57:32:8b:
94:ed:81:fb:b3:8b:97:64:04:7e:5e:e6:36:50:93:
2e:0e:76:7f:14:88:7b:5b:0e:8d:df:7e:05:01:6c:
9a:75:eb:2b:e2:65:ea:a8:07:44:7c:58:8b:c6:a2:
53:1b:b6:a7:75:07:19:ad:1d:71:b9:e7:ee:57:15:
e9:5a:16:71:91:b8:56:e5:66:b5:2c:bc:7c:40:37:
c3:db
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
74:87:D6:F4:D5:A4:30:4F:B0:3E:E6:84:8B:C1:0E:72:70:19:6D:11
X509v3 Authority Key Identifier:
keyid:AD:7D:8D:E8:CA:06:1E:A1:64:E6:71:C3:4E:B3:37:7F:57:36:BB:C3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rX2N6MoGHqFk5nHDTrM3f1c2u8M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/c4/a08520-7f06-4f12-8640-49785fcdd9c4/1/rX2N6MoGHqFk5nHDTrM3f1c2u8M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
26:3c:08:b9:59:70:0c:55:48:d2:f2:bb:d4:68:33:d4:5e:73:
56:1f:96:ff:0d:1c:bf:8d:18:c3:35:a8:d8:e1:ce:80:4b:6e:
a7:ec:60:a8:08:31:10:51:f1:40:78:4f:14:1c:8d:38:fe:a5:
66:dd:a4:3b:77:88:ed:5f:74:c1:30:da:23:89:64:e0:15:ef:
36:f5:04:8f:55:f8:65:50:d8:ff:14:3d:30:86:96:a6:64:9c:
05:e5:dd:01:91:6b:d7:ec:2f:fb:5c:81:9d:cd:4c:8b:ed:b7:
c0:fa:8f:95:89:38:b7:a9:f4:60:55:ea:0e:fd:7b:cc:48:8b:
f1:32:76:43:ae:57:fd:88:92:75:07:c8:00:5b:20:7b:05:d0:
b9:7d:4f:f5:5b:27:90:12:31:9c:b6:b3:15:f2:09:cd:2f:5f:
ac:c1:99:84:97:4a:94:b7:14:7e:03:44:3c:e6:a0:93:c4:02:
07:06:93:00:78:86:ca:3c:99:48:4a:e4:fe:28:e8:10:31:3c:
9e:c0:88:1f:c2:48:99:ca:bd:90:67:09:b5:f9:e7:2b:f9:ec:
ad:fe:7c:91:9d:f2:aa:d8:f2:96:6a:03:5a:b6:01:b2:df:d3:
a0:0e:9f:01:2d:dc:0f:0d:89:a6:47:5e:ad:a9:8b:f8:a0:42:
3a:87:45:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe3swOkA84ECUA3sROSXpGJMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkN2Q4ZGU4Y2EwNjFlYTE2NGU2NzFjMzRlYjMzNzdmNTcz
NmJiYzMwHhcNMjUwNjI4MTgwMDUxWhcNMjUwNjI5MTgwMDUxWjAzMTEwLwYDVQQD
Eyg3NDg3ZDZmNGQ1YTQzMDRmYjAzZWU2ODQ4YmMxMGU3MjcwMTk2ZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuU4/U1jOBE+Ioz3cuYyxLXxWT2bD
vDmM1yKRG8QKdZqYTf0SHtkusj6syNV3uKZAdChhicmmTpeVTc6/blAuumLk1l6m
P7EBADPqawfUt5csNOf9qnwA4SoRBTiEz7fAE8MoWkcjKB8S4XWn0B93crA4zygh
iaawew1dALiAhn5ainimq/EM9/sU5YXVOK7NDvMJfI/YeztpEMzxt8Zd561F8sv0
dmGsfX5X0SQctNNXMouU7YH7s4uXZAR+XuY2UJMuDnZ/FIh7Ww6N334FAWyadesr
4mXqqAdEfFiLxqJTG7andQcZrR1xuefuVxXpWhZxkbhW5Wa1LLx8QDfD2wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHSH1vTVpDBPsD7mhIvBDnJwGW0RMB8GA1UdIwQY
MBaAFK19jejKBh6hZOZxw06zN39XNrvDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jNC9hMDg1MjAtN2YwNi00ZjEyLTg2NDAt
NDk3ODVmY2RkOWM0LzEvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jNC9hMDg1MjAtN2YwNi00ZjEyLTg2NDAtNDk3ODVmY2RkOWM0
LzEvclgyTjZNb0dIcUZrNW5IRFRyTTNmMWMydThNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJjwIuVlw
DFVI0vK71Ggz1F5zVh+W/w0cv40YwzWo2OHOgEtup+xgqAgxEFHxQHhPFByNOP6l
Zt2kO3eI7V90wTDaI4lk4BXvNvUEj1X4ZVDY/xQ9MIaWpmScBeXdAZFr1+wv+1yB
nc1Mi+23wPqPlYk4t6n0YFXqDv17zEiL8TJ2Q65X/YiSdQfIAFsgewXQuX1P9Vsn
kBIxnLazFfIJzS9frMGZhJdKlLcUfgNEPOagk8QCBwaTAHiGyjyZSErk/ijoEDE8
nsCIH8JImcq9kGcJtfnnK/nsrf58kZ3yqtjylmoDWrYBst/ToA6fAS3cDw2Jpkde
ramL+KBCOodFpA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:26:52 2025 by rpki-client