Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
File: 250Zf7vuKh3MtPVXIqghDTEFsEI.mft (raw, json)
Hash identifier: Absx6RHrTFqdxL0DUYpmgk5GHnmZ3qdcWp2CBULHwcs=
Subject key identifier: 4A:AF:BC:BC:0B:95:66:CE:D7:09:B8:0A:63:E7:22:A5:B5:5D:7F:F9
Authority key identifier: DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
Certificate issuer: /CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Certificate serial: 0198D4DFE69A3EAE8A7819B9EBCABCE55551
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
Manifest number: 1211
Signing time: Sat 23 Aug 2025 03:01:40 +0000
Manifest this update: Sat 23 Aug 2025 03:01:40 +0000
Manifest next update: Sun 24 Aug 2025 03:01:40 +0000
Files and hashes: 1: 0c-KKappZ1t73aXjS8mz1x-xTGc.roa (hash: MAa3tSzCnjrh/og+z4XVJnuDQ4AqmSQvPQCYBTfEoDQ=)
2: 250Zf7vuKh3MtPVXIqghDTEFsEI.crl (hash: npa6B8ncF2Cy5EyYmQIwolTp1p1lhSlZ413sQUS7Ppw=)
3: 3sv6NKDpba_DUykmu28n6vWbI8U.roa (hash: gUh8eARhI2X9S3x1fvxAhLVuOISp5wl4VqYYPGnDg8Y=)
4: 4rupNMtZnDN0QSWru1RNhLDuJIo.roa (hash: z4IbiN1+w7zdJy/d9hWZDYM0E9ZzQh9TzT+f2XEsa+o=)
5: 67A2CgJxemu3UONyMlCVAtsKdlY.roa (hash: xvBw7mNRlOl8XFOFSPthYphIDW4EGlwFC4zOhUwlCv8=)
6: E2YGCkvl1qJmLxaFsCR58I4gibo.roa (hash: xheLTw+nhNWSmWNkdWISArZADpVzS+Ca89hGltJJMno=)
7: Sp4iVd_pOq560eUzaVqvX_2Gqas.roa (hash: JgPqfPTZcwMnjOQsf/Q1+96TPKUck5H6ntnLpmTpKbM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 03:01:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:df:e6:9a:3e:ae:8a:78:19:b9:eb:ca:bc:e5:55:51
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9d197fbbee2a1dccb4f55722a8210d3105b042
Validity
Not Before: Aug 23 03:01:40 2025 GMT
Not After : Aug 24 03:01:40 2025 GMT
Subject: CN=4aafbcbc0b9566ced709b80a63e722a5b55d7ff9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bc:d5:da:18:07:b4:03:a0:76:48:2e:40:80:eb:
cc:30:d9:b7:8b:f3:ef:fd:c5:47:cc:8a:61:c3:bb:
40:2a:18:e8:ef:62:f3:52:2a:7e:69:51:50:62:fe:
b0:06:5e:0d:74:0e:22:84:dc:4f:80:75:97:f6:bc:
2d:33:8c:0e:8e:b5:1f:07:98:e0:a7:d6:91:37:39:
28:ce:c2:65:e8:f2:02:66:c5:a5:c3:35:6c:90:80:
8c:22:98:12:eb:8b:bf:80:57:82:fa:5e:09:e6:3e:
17:c6:bb:ed:3e:b3:47:56:b6:02:8e:71:7e:f4:12:
93:b2:37:d8:db:ad:e8:2a:a8:2d:67:0b:b0:2a:67:
cc:3f:37:29:66:6a:33:1c:43:06:79:36:6f:8c:78:
4b:4b:f0:d1:a9:dd:8e:03:ff:37:8c:9c:f7:6a:39:
02:cd:b6:36:38:48:36:75:a3:81:a0:eb:1c:8c:be:
12:86:29:2c:03:b3:61:c2:ae:1e:f6:10:4d:ed:9a:
08:08:99:db:39:7d:fb:78:7b:fc:fc:08:59:6c:5e:
06:88:1a:0e:0a:b6:32:01:8f:28:e6:af:d9:f2:34:
14:ff:ef:92:97:4a:e9:87:94:7e:e7:43:7e:05:2c:
66:47:9d:c4:86:44:28:73:c6:13:1e:7f:6a:07:1a:
aa:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
4A:AF:BC:BC:0B:95:66:CE:D7:09:B8:0A:63:E7:22:A5:B5:5D:7F:F9
X509v3 Authority Key Identifier:
keyid:DB:9D:19:7F:BB:EE:2A:1D:CC:B4:F5:57:22:A8:21:0D:31:05:B0:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/250Zf7vuKh3MtPVXIqghDTEFsEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ea/09d137-477b-4efe-a3d3-4b23956fbd86/1/250Zf7vuKh3MtPVXIqghDTEFsEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9f:a6:23:10:64:63:38:d8:b7:ac:6e:1c:f7:41:b2:e5:45:ae:
f1:cd:b9:a4:f0:57:6d:1c:8f:35:7c:6b:a7:8a:ac:98:2e:da:
7c:d8:5a:43:d1:f2:25:ad:af:a5:ac:71:d0:40:52:88:03:a2:
82:a7:fb:1d:4f:70:7c:71:a1:21:cc:64:c7:6e:08:e5:a8:79:
79:31:79:8e:03:bb:a0:77:ea:09:c6:47:af:e8:33:21:f3:ab:
86:c7:63:d5:cf:a0:af:d4:67:49:92:20:29:4c:fa:d5:cd:9b:
0e:0e:45:65:1e:c1:17:f7:5b:fc:d8:40:dd:60:8e:b8:38:73:
c5:30:6f:8f:05:65:5c:eb:65:1c:e2:c7:2e:54:90:81:03:9d:
7c:fd:c2:a1:3d:39:c7:d0:df:bc:1c:50:d9:86:85:4f:7b:47:
99:02:21:57:a8:5f:8e:0a:2f:58:38:63:a0:1e:a7:a7:15:36:
51:65:85:03:ca:20:1c:b2:8a:ad:68:ce:5c:bb:8a:0b:8a:4e:
54:f1:97:e0:e8:53:ac:3f:35:3a:aa:78:0a:4f:2a:39:9f:85:
6d:d3:16:29:c6:d7:f3:85:9b:25:d1:7f:72:cb:ff:a2:87:3e:
74:9f:24:1a:ed:2f:e4:61:b4:84:6e:be:ad:79:f6:f7:8f:8a:
ff:81:df:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZjU3+aaPq6KeBm568q85VVRMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWQxOTdmYmJlZTJhMWRjY2I0ZjU1NzIyYTgyMTBkMzEw
NWIwNDIwHhcNMjUwODIzMDMwMTQwWhcNMjUwODI0MDMwMTQwWjAzMTEwLwYDVQQD
Eyg0YWFmYmNiYzBiOTU2NmNlZDcwOWI4MGE2M2U3MjJhNWI1NWQ3ZmY5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvNXaGAe0A6B2SC5AgOvMMNm3i/Pv
/cVHzIphw7tAKhjo72LzUip+aVFQYv6wBl4NdA4ihNxPgHWX9rwtM4wOjrUfB5jg
p9aRNzkozsJl6PICZsWlwzVskICMIpgS64u/gFeC+l4J5j4XxrvtPrNHVrYCjnF+
9BKTsjfY263oKqgtZwuwKmfMPzcpZmozHEMGeTZvjHhLS/DRqd2OA/83jJz3ajkC
zbY2OEg2daOBoOscjL4ShiksA7Nhwq4e9hBN7ZoICJnbOX37eHv8/AhZbF4GiBoO
CrYyAY8o5q/Z8jQU/++Sl0rph5R+50N+BSxmR53EhkQoc8YTHn9qBxqq5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEqvvLwLlWbO1wm4CmPnIqW1XX/5MB8GA1UdIwQY
MBaAFNudGX+77iodzLT1VyKoIQ0xBbBCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMt
NGIyMzk1NmZiZDg2LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lYS8wOWQxMzctNDc3Yi00ZWZlLWEzZDMtNGIyMzk1NmZiZDg2
LzEvMjUwWmY3dnVLaDNNdFBWWElxZ2hEVEVGc0VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAn6YjEGRj
ONi3rG4c90Gy5UWu8c25pPBXbRyPNXxrp4qsmC7afNhaQ9HyJa2vpaxx0EBSiAOi
gqf7HU9wfHGhIcxkx24I5ah5eTF5jgO7oHfqCcZHr+gzIfOrhsdj1c+gr9RnSZIg
KUz61c2bDg5FZR7BF/db/NhA3WCOuDhzxTBvjwVlXOtlHOLHLlSQgQOdfP3CoT05
x9DfvBxQ2YaFT3tHmQIhV6hfjgovWDhjoB6npxU2UWWFA8ogHLKKrWjOXLuKC4pO
VPGX4OhTrD81Oqp4Ck8qOZ+FbdMWKcbX84WbJdF/csv/ooc+dJ8kGu0v5GG0hG6+
rXn294+K/4HfGA==
-----END CERTIFICATE-----
Generated at Sat Aug 23 14:28:45 2025 by rpki-client