Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
File: h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft (raw, json)
Hash identifier: gAmdzWzLWHCRb+jr1GkG/UhxVY7Ci5WVMvOOJtDIdhs=
Subject key identifier: 99:42:19:EF:03:9D:04:11:70:15:1F:30:18:1F:3A:AE:10:06:7D:64
Authority key identifier: 87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
Certificate issuer: /CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Certificate serial: 0197CB03547A5E75C1771166996E5D244381
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
Manifest number: 15C2
Signing time: Wed 02 Jul 2025 12:01:22 +0000
Manifest this update: Wed 02 Jul 2025 12:01:22 +0000
Manifest next update: Thu 03 Jul 2025 12:01:22 +0000
Files and hashes: 1: FsLVTd1Z_Y1_QKD3XsSC6T-7WSc.roa (hash: MfqtShshWzvZLLqxVYU/rnjLf5/rPRnD2xrlVc90HQU=)
2: O26SvIi-iLlAArpGPoL_kcRMLz8.roa (hash: x6EwUP7G9se/ub/wgAs57oTYgG0nrtLTkuveOv5jyO4=)
3: eXFZQO35x46hI1_B-kM0oX7ba3w.roa (hash: IKEAMPDMrBLKazuRwlONi5mwZJ2E45qg/Wd4/iF4QYg=)
4: h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl (hash: u6ZG+vBndg6KO47mb1W27HUKVqcuQqa7CKopyQ70Ab8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 03 Jul 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:cb:03:54:7a:5e:75:c1:77:11:66:99:6e:5d:24:43:81
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=87c37d035d95fefba1d47f98b9ff4973f17df6cd
Validity
Not Before: Jul 2 12:01:22 2025 GMT
Not After : Jul 3 12:01:22 2025 GMT
Subject: CN=994219ef039d041170151f30181f3aae10067d64
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b4:8b:1e:ad:ec:a6:ce:ae:e0:3b:9d:4c:77:9f:
7d:3c:50:81:55:1f:46:6e:cf:81:74:29:16:a8:67:
67:f4:1b:db:12:58:70:89:7a:e3:8d:89:32:64:2c:
a8:b3:64:5d:ca:5c:15:1b:ac:19:7c:9a:bc:fd:16:
4e:25:2c:2c:73:ff:b8:5b:e0:2e:e5:8e:fa:80:d8:
a5:83:d2:ad:ba:09:c0:9d:db:af:cf:c9:4a:49:3b:
b3:2c:02:3b:a9:00:fa:f6:2b:8e:97:83:76:14:02:
80:5b:4c:4d:1b:5a:f5:1c:42:bd:40:f3:40:a4:94:
76:01:5d:b1:f6:63:db:49:ef:e1:48:43:80:b2:9e:
8c:ea:4d:f1:ad:a7:1a:20:de:d2:04:52:a8:29:9b:
a5:ee:d1:77:82:25:3a:d5:33:1c:d3:1d:89:1f:2a:
50:72:93:1b:06:b9:f5:14:38:46:05:e6:f2:2b:39:
cc:5d:57:75:de:2e:1c:27:fd:78:8a:93:e0:13:26:
00:2d:07:2f:da:6c:b4:36:19:5f:ff:25:c7:e8:42:
b7:11:fa:6a:bc:a1:37:04:24:9c:54:ee:d7:66:37:
f1:00:34:47:46:1f:ad:4e:38:58:d6:2c:7e:49:8d:
2d:95:c1:8e:ef:04:c3:8c:92:e4:e6:a2:28:e2:60:
7c:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
99:42:19:EF:03:9D:04:11:70:15:1F:30:18:1F:3A:AE:10:06:7D:64
X509v3 Authority Key Identifier:
keyid:87:C3:7D:03:5D:95:FE:FB:A1:D4:7F:98:B9:FF:49:73:F1:7D:F6:CD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h8N9A12V_vuh1H-Yuf9Jc_F99s0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/5ef060-f473-4043-b8a2-e1b7c7649fa3/1/h8N9A12V_vuh1H-Yuf9Jc_F99s0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
43:22:f6:22:38:87:ef:87:19:55:9f:8f:85:a8:8a:a2:76:c4:
03:6a:92:f5:d7:56:21:a9:0d:26:c8:43:3e:ad:5d:c0:d8:a3:
c9:33:97:f1:7b:de:52:d8:99:fe:57:a8:ff:45:23:34:5e:70:
fa:2f:84:c0:3c:27:c1:39:24:ef:07:8e:65:33:0d:c1:60:09:
ac:bf:a1:4e:b2:12:52:22:07:65:19:2c:55:3e:9e:18:37:d7:
02:a2:24:6b:58:5f:3e:4a:45:b4:36:a9:b4:38:6b:ce:4b:ff:
51:e8:39:c3:23:88:be:b8:b1:89:03:56:dd:d5:6e:d6:33:1f:
98:a1:a7:1d:c8:5c:a1:6c:0c:14:ec:64:ae:6c:08:50:7c:79:
09:d5:ea:a8:50:51:cc:6a:aa:32:bc:61:0c:a9:8e:87:f1:9f:
b9:74:eb:d1:e5:90:f4:9d:06:cc:43:63:bf:01:9f:fa:5d:50:
3e:ae:9d:b2:ae:4b:3e:0a:ef:66:8a:8e:de:fe:a4:0d:55:ba:
ef:55:e9:b2:29:0c:10:0d:bc:68:a4:e4:b1:12:5a:b6:ea:b9:
5f:3f:59:ed:c1:23:a0:cf:fc:75:5d:cb:d0:66:70:fd:ec:d6:
ef:fa:39:7e:ae:07:a8:f7:c6:04:83:ab:c8:c5:3c:c2:8e:08:
fe:2d:6c:df
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZfLA1R6XnXBdxFmmW5dJEOBMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3YzM3ZDAzNWQ5NWZlZmJhMWQ0N2Y5OGI5ZmY0OTczZjE3
ZGY2Y2QwHhcNMjUwNzAyMTIwMTIyWhcNMjUwNzAzMTIwMTIyWjAzMTEwLwYDVQQD
Eyg5OTQyMTllZjAzOWQwNDExNzAxNTFmMzAxODFmM2FhZTEwMDY3ZDY0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtIsereymzq7gO51Md599PFCBVR9G
bs+BdCkWqGdn9BvbElhwiXrjjYkyZCyos2RdylwVG6wZfJq8/RZOJSwsc/+4W+Au
5Y76gNilg9KtugnAnduvz8lKSTuzLAI7qQD69iuOl4N2FAKAW0xNG1r1HEK9QPNA
pJR2AV2x9mPbSe/hSEOAsp6M6k3xracaIN7SBFKoKZul7tF3giU61TMc0x2JHypQ
cpMbBrn1FDhGBebyKznMXVd13i4cJ/14ipPgEyYALQcv2my0Nhlf/yXH6EK3Efpq
vKE3BCScVO7XZjfxADRHRh+tTjhY1ix+SY0tlcGO7wTDjJLk5qIo4mB8yQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJlCGe8DnQQRcBUfMBgfOq4QBn1kMB8GA1UdIwQY
MBaAFIfDfQNdlf77odR/mLn/SXPxffbNMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS81ZWYwNjAtZjQ3My00MDQzLWI4YTIt
ZTFiN2M3NjQ5ZmEzLzEvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS81ZWYwNjAtZjQ3My00MDQzLWI4YTItZTFiN2M3NjQ5ZmEz
LzEvaDhOOUExMlZfdnVoMUgtWXVmOUpjX0Y5OXMwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAQyL2IjiH
74cZVZ+PhaiKonbEA2qS9ddWIakNJshDPq1dwNijyTOX8XveUtiZ/leo/0UjNF5w
+i+EwDwnwTkk7weOZTMNwWAJrL+hTrISUiIHZRksVT6eGDfXAqIka1hfPkpFtDap
tDhrzkv/Ueg5wyOIvrixiQNW3dVu1jMfmKGnHchcoWwMFOxkrmwIUHx5CdXqqFBR
zGqqMrxhDKmOh/GfuXTr0eWQ9J0GzENjvwGf+l1QPq6dsq5LPgrvZoqO3v6kDVW6
71XpsikMEA28aKTksRJatuq5Xz9Z7cEjoM/8dV3L0GZw/ezW7/o5fq4HqPfGBIOr
yMU8wo4I/i1s3w==
-----END CERTIFICATE-----
Generated at Wed Jul 2 16:19:10 2025 by rpki-client