Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
File: rTn6fNFTPal1zzmbms_-v-0mqes.mft (raw, json)
Hash identifier: 8WfkZvfNnfs9lHjAkcLzdo5aqPeeqy9dLcNUyLXaFi4=
Subject key identifier: F4:B2:A1:BF:DA:9F:CF:D2:0D:0D:C5:7D:99:40:07:8E:DE:5C:28:0C
Authority key identifier: AD:39:FA:7C:D1:53:3D:A9:75:CF:39:9B:9A:CF:FE:BF:ED:26:A9:EB
Certificate issuer: /CN=ad39fa7cd1533da975cf399b9acffebfed26a9eb
Certificate serial: 0197B8C611EDD28D936E1F9A547F9EFA5145
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
Manifest number: 0C70
Signing time: Sat 28 Jun 2025 23:01:17 +0000
Manifest this update: Sat 28 Jun 2025 23:01:17 +0000
Manifest next update: Sun 29 Jun 2025 23:01:17 +0000
Files and hashes: 1: CMlrDDFsYjHx1MPg2lyXpQ3DpFs.roa (hash: MsLGIx/t++duqgpMvVk0jo/ApATi4rMLAAgAWe7j6rM=)
2: rTn6fNFTPal1zzmbms_-v-0mqes.crl (hash: eIx/otP3oulXJkgTwdZpatwyZ3iNbQ6/rB/MFU6X4L4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.crl
rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 19:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:c6:11:ed:d2:8d:93:6e:1f:9a:54:7f:9e:fa:51:45
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad39fa7cd1533da975cf399b9acffebfed26a9eb
Validity
Not Before: Jun 28 23:01:17 2025 GMT
Not After : Jun 29 23:01:17 2025 GMT
Subject: CN=f4b2a1bfda9fcfd20d0dc57d9940078ede5c280c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:f1:0b:76:5d:6e:00:8c:b5:ac:f6:4d:43:07:
8f:78:8d:fd:7c:52:69:89:fd:1b:a5:aa:6b:5c:db:
38:6c:ae:19:78:1e:af:4c:32:4b:92:81:e2:6e:5a:
1e:16:61:55:de:df:6c:9c:94:45:45:d5:ad:0b:86:
77:82:f0:ab:36:e2:06:8f:78:d4:c6:da:cd:27:79:
09:4d:5d:6e:d2:e9:e6:82:b0:4a:72:69:59:c3:69:
c4:ee:33:b5:33:d7:98:32:22:20:c1:07:3e:e0:78:
3d:7e:45:c3:80:56:26:8e:14:3d:5d:06:ae:c4:27:
01:04:98:76:b8:3e:be:15:da:70:60:95:c3:d5:f0:
ea:49:f6:c9:42:15:ae:3d:07:5d:7f:5b:f4:a0:a9:
f8:60:b5:b0:73:7a:f0:91:1f:a0:20:b7:6d:65:96:
f9:eb:6f:06:ee:d9:9b:42:cb:a9:2b:b9:56:e3:49:
c4:5a:af:48:f7:99:bb:10:64:c4:bd:c6:6d:32:66:
98:1f:e2:31:35:88:8d:ef:5e:34:b2:0c:71:f4:5b:
51:06:fe:2c:fb:73:36:a3:46:40:58:5e:8c:49:2b:
37:b4:eb:ff:8b:42:98:cd:b4:d9:cd:73:fe:73:30:
35:0c:47:7f:f1:7d:a4:75:fa:28:3b:8f:82:3a:3a:
7c:9f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:B2:A1:BF:DA:9F:CF:D2:0D:0D:C5:7D:99:40:07:8E:DE:5C:28:0C
X509v3 Authority Key Identifier:
keyid:AD:39:FA:7C:D1:53:3D:A9:75:CF:39:9B:9A:CF:FE:BF:ED:26:A9:EB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rTn6fNFTPal1zzmbms_-v-0mqes.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d1/abb89f-09b9-44e8-8487-e31c0fdecd27/1/rTn6fNFTPal1zzmbms_-v-0mqes.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4a:f1:d0:51:61:a3:5a:f0:ab:c9:ad:8d:1d:8d:a9:8d:30:55:
78:d6:de:c3:8a:4d:d9:e3:da:55:40:60:ff:84:6a:d7:b9:6e:
24:3f:a5:c1:13:89:f7:0f:28:2b:5c:17:7c:8c:2f:59:4b:18:
2d:6c:da:fa:5d:14:c2:13:c7:dd:f2:78:23:7d:d4:12:a3:7f:
11:47:18:aa:56:07:34:73:c5:e1:c4:64:a7:65:1b:18:8a:0c:
56:2b:cc:dc:6d:bb:f4:e2:85:58:fb:2c:8d:68:96:f1:89:c3:
fd:d1:b3:3d:ea:84:1c:dc:f8:cf:e8:a5:88:c0:4d:8b:f8:b8:
08:fd:93:1d:67:fe:a3:cb:8f:4b:29:b9:15:ec:89:4f:0f:60:
9e:2d:c4:44:c8:ef:80:03:d4:5e:1f:f1:d8:1c:6a:77:b9:fa:
d2:4a:dd:b7:d3:e6:a3:bc:66:70:6d:f9:55:6a:cf:67:2e:aa:
2b:e9:29:1c:b1:d5:d8:50:ad:d9:50:88:d5:5a:66:b4:5a:04:
29:34:6d:7e:15:c0:e2:ab:8d:d7:a5:4a:35:c1:df:1f:02:64:
98:2d:3d:14:ce:33:e7:5c:4e:93:98:c0:3a:10:df:71:77:56:
9b:84:16:4c:50:e8:65:5a:61:53:2b:0b:d0:39:e6:72:32:64:
2c:02:16:6a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4xhHt0o2Tbh+aVH+e+lFFMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMzlmYTdjZDE1MzNkYTk3NWNmMzk5YjlhY2ZmZWJmZWQy
NmE5ZWIwHhcNMjUwNjI4MjMwMTE3WhcNMjUwNjI5MjMwMTE3WjAzMTEwLwYDVQQD
EyhmNGIyYTFiZmRhOWZjZmQyMGQwZGM1N2Q5OTQwMDc4ZWRlNWMyODBjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsPELdl1uAIy1rPZNQwePeI39fFJp
if0bpaprXNs4bK4ZeB6vTDJLkoHibloeFmFV3t9snJRFRdWtC4Z3gvCrNuIGj3jU
xtrNJ3kJTV1u0unmgrBKcmlZw2nE7jO1M9eYMiIgwQc+4Hg9fkXDgFYmjhQ9XQau
xCcBBJh2uD6+FdpwYJXD1fDqSfbJQhWuPQddf1v0oKn4YLWwc3rwkR+gILdtZZb5
628G7tmbQsupK7lW40nEWq9I95m7EGTEvcZtMmaYH+IxNYiN7140sgxx9FtRBv4s
+3M2o0ZAWF6MSSs3tOv/i0KYzbTZzXP+czA1DEd/8X2kdfooO4+COjp8nwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPSyob/an8/SDQ3FfZlAB47eXCgMMB8GA1UdIwQY
MBaAFK05+nzRUz2pdc85m5rP/r/tJqnrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclRuNmZORlRQYWwxenptYm1zXy12LTBtcWVzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMS9hYmI4OWYtMDliOS00NGU4LTg0ODct
ZTMxYzBmZGVjZDI3LzEvclRuNmZORlRQYWwxenptYm1zXy12LTBtcWVzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMS9hYmI4OWYtMDliOS00NGU4LTg0ODctZTMxYzBmZGVjZDI3
LzEvclRuNmZORlRQYWwxenptYm1zXy12LTBtcWVzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEASvHQUWGj
WvCrya2NHY2pjTBVeNbew4pN2ePaVUBg/4Rq17luJD+lwROJ9w8oK1wXfIwvWUsY
LWza+l0UwhPH3fJ4I33UEqN/EUcYqlYHNHPF4cRkp2UbGIoMVivM3G279OKFWPss
jWiW8YnD/dGzPeqEHNz4z+iliMBNi/i4CP2THWf+o8uPSym5FeyJTw9gni3ERMjv
gAPUXh/x2Bxqd7n60krdt9Pmo7xmcG35VWrPZy6qK+kpHLHV2FCt2VCI1VpmtFoE
KTRtfhXA4quN16VKNcHfHwJkmC09FM4z51xOk5jAOhDfcXdWm4QWTFDoZVphUysL
0DnmcjJkLAIWag==
-----END CERTIFICATE-----
Generated at Sun Jun 29 04:08:21 2025 by rpki-client