Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
File: h497ckDFitfp7vUFdPYIjpuQsC0.mft (raw, json)
Hash identifier: h1WTm5NhqdNv6nlkHLZjSAULmS3iIWK7BolDite0MkY=
Subject key identifier: DD:FF:0F:01:60:E5:3A:6E:89:BF:BD:F3:7E:D5:3A:42:C2:3A:1A:88
Authority key identifier: 87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
Certificate issuer: /CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Certificate serial: 0197B821139F1369274AE08F6278D1705F05
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
Manifest number: 1547
Signing time: Sat 28 Jun 2025 20:01:04 +0000
Manifest this update: Sat 28 Jun 2025 20:01:04 +0000
Manifest next update: Sun 29 Jun 2025 20:01:04 +0000
Files and hashes: 1: 6mTYkUzvhb-Htm6lfZWXyJFAe3g.roa (hash: wl2jbKj60gngwVW2ZgUBMEJL1S5Obo/uhCmKyt9SPvM=)
2: h497ckDFitfp7vUFdPYIjpuQsC0.crl (hash: IeMflI/TTZL7wEVNe3iUj7fLG0hFnUGZrWu7ks7zmBY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 29 Jun 2025 15:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:b8:21:13:9f:13:69:27:4a:e0:8f:62:78:d1:70:5f:05
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=878f7b7240c58ad7e9eef50574f6088e9b90b02d
Validity
Not Before: Jun 28 20:01:04 2025 GMT
Not After : Jun 29 20:01:04 2025 GMT
Subject: CN=ddff0f0160e53a6e89bfbdf37ed53a42c23a1a88
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:4a:71:65:69:c0:54:23:0c:bb:0e:17:4e:1b:
8e:b8:19:02:d2:1b:4e:94:10:a1:05:63:8f:4b:73:
69:00:50:9e:88:c6:e8:02:e9:1a:8c:85:69:df:88:
0a:ae:68:89:d5:f9:4b:80:78:ec:00:ce:ae:26:48:
97:e8:f7:ed:70:d0:8f:82:2a:9b:e5:11:1d:cb:83:
3c:80:e6:ff:c1:ab:2e:21:b4:71:ab:32:e0:a5:8e:
2c:aa:c3:7d:50:e4:79:f4:5c:74:eb:01:2b:e8:60:
c7:60:48:2e:a6:b3:82:07:de:2b:5b:14:e7:81:17:
36:74:26:ec:89:86:15:30:fd:9e:65:3c:a3:09:54:
90:94:8c:4d:0e:ad:94:0e:5d:06:9c:ad:2d:27:7f:
fc:13:5c:2e:99:6c:4d:3b:4a:fe:cc:72:e7:f9:1a:
6f:89:b7:05:a2:30:30:63:d3:1d:a3:14:6e:3e:9b:
56:37:a2:03:ee:83:9a:e3:6f:a2:0f:54:cb:7c:3d:
7b:be:1a:bb:4f:7b:6f:8f:b1:1c:49:0a:55:48:34:
81:0b:7c:cd:e8:9a:6f:82:0b:21:16:14:99:9f:e4:
e2:5c:01:6a:f4:30:74:a3:ec:e7:dc:61:f8:6f:e2:
cb:f1:8a:07:64:ec:05:f2:cc:56:a7:df:9c:ae:ec:
83:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
DD:FF:0F:01:60:E5:3A:6E:89:BF:BD:F3:7E:D5:3A:42:C2:3A:1A:88
X509v3 Authority Key Identifier:
keyid:87:8F:7B:72:40:C5:8A:D7:E9:EE:F5:05:74:F6:08:8E:9B:90:B0:2D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h497ckDFitfp7vUFdPYIjpuQsC0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fb/fc159e-8d56-4c3a-ae42-0cbdd95a16dd/1/h497ckDFitfp7vUFdPYIjpuQsC0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
69:aa:92:2c:e3:77:82:d6:e7:f7:c6:9a:f3:ff:db:f1:4a:f7:
78:9e:42:9f:4c:ca:ae:0c:6a:7c:b7:7c:a8:6c:36:fb:ba:80:
a5:29:ba:12:a4:5c:39:03:00:2b:bf:cd:6a:52:56:9a:5c:fc:
c3:91:d4:10:0d:eb:0d:50:0b:d8:48:ae:d5:18:90:45:29:3a:
23:6d:5d:4f:81:ca:38:32:fb:f3:13:3c:86:db:4f:f6:dd:29:
f5:30:f4:28:ee:3b:62:57:14:c8:d7:96:52:21:1f:be:04:b7:
67:7f:cd:9c:8a:f8:c4:82:3c:06:49:e3:76:0d:5c:22:4b:c3:
85:34:47:8f:29:22:21:4f:d0:42:ef:74:8e:f5:57:9c:d4:f2:
3a:f9:44:77:e4:96:87:07:0a:8e:bb:c2:cb:99:5b:94:9c:0e:
bf:5c:5f:00:d2:28:6c:e9:d1:86:6c:40:34:74:7f:5f:f0:cc:
10:3d:e8:ff:66:6d:9b:f9:e4:a1:17:63:be:8c:a3:41:ad:49:
fb:4d:13:69:de:a3:60:31:e2:d7:26:74:e4:4c:ec:37:3f:49:
98:bf:08:b1:0d:bf:ae:f0:cd:a1:93:7d:f1:9e:31:36:bc:99:
e2:d9:cb:9e:93:8f:a7:c5:d0:76:3f:30:d4:a4:f3:d4:c1:2d:
07:83:fd:30
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZe4IROfE2knSuCPYnjRcF8FMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3OGY3YjcyNDBjNThhZDdlOWVlZjUwNTc0ZjYwODhlOWI5
MGIwMmQwHhcNMjUwNjI4MjAwMTA0WhcNMjUwNjI5MjAwMTA0WjAzMTEwLwYDVQQD
EyhkZGZmMGYwMTYwZTUzYTZlODliZmJkZjM3ZWQ1M2E0MmMyM2ExYTg4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtkpxZWnAVCMMuw4XThuOuBkC0htO
lBChBWOPS3NpAFCeiMboAukajIVp34gKrmiJ1flLgHjsAM6uJkiX6PftcNCPgiqb
5REdy4M8gOb/wasuIbRxqzLgpY4sqsN9UOR59Fx06wEr6GDHYEguprOCB94rWxTn
gRc2dCbsiYYVMP2eZTyjCVSQlIxNDq2UDl0GnK0tJ3/8E1wumWxNO0r+zHLn+Rpv
ibcFojAwY9MdoxRuPptWN6ID7oOa42+iD1TLfD17vhq7T3tvj7EcSQpVSDSBC3zN
6JpvggshFhSZn+TiXAFq9DB0o+zn3GH4b+LL8YoHZOwF8sxWp9+cruyDIQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFN3/DwFg5Tpuib+9837VOkLCOhqIMB8GA1UdIwQY
MBaAFIePe3JAxYrX6e71BXT2CI6bkLAtMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDQ5N2NrREZpdGZwN3ZVRmRQWUlqcHVRc0MwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mYi9mYzE1OWUtOGQ1Ni00YzNhLWFlNDIt
MGNiZGQ5NWExNmRkLzEvaDQ5N2NrREZpdGZwN3ZVRmRQWUlqcHVRc0MwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mYi9mYzE1OWUtOGQ1Ni00YzNhLWFlNDItMGNiZGQ5NWExNmRk
LzEvaDQ5N2NrREZpdGZwN3ZVRmRQWUlqcHVRc0MwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAaaqSLON3
gtbn98aa8//b8Ur3eJ5Cn0zKrgxqfLd8qGw2+7qApSm6EqRcOQMAK7/NalJWmlz8
w5HUEA3rDVAL2Eiu1RiQRSk6I21dT4HKODL78xM8httP9t0p9TD0KO47YlcUyNeW
UiEfvgS3Z3/NnIr4xII8Bknjdg1cIkvDhTRHjykiIU/QQu90jvVXnNTyOvlEd+SW
hwcKjrvCy5lblJwOv1xfANIobOnRhmxANHR/X/DMED3o/2Ztm/nkoRdjvoyjQa1J
+00Tad6jYDHi1yZ05EzsNz9JmL8IsQ2/rvDNoZN98Z4xNryZ4tnLnpOPp8XQdj8w
1KTz1MEtB4P9MA==
-----END CERTIFICATE-----
Generated at Sat Jun 28 21:55:55 2025 by rpki-client