
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
File: S-iWpBlThdS5S3KVmIzPv6ismcU.mft (raw, json)
Hash identifier: BmCt6eunA1jqDid/uqqxhrsccaFmU5uu8hMFYlGFuJQ=
Subject key identifier: 0D:85:AC:0C:4D:9E:68:FD:8C:41:67:D6:C1:4A:A1:68:E2:C2:BF:68
Authority key identifier: 4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
Certificate issuer: /CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Certificate serial: 01977AF9372274E10C4926C97DE4CA41A4D2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
Manifest number: 0C2A
Signing time: Mon 16 Jun 2025 23:00:42 +0000
Manifest this update: Mon 16 Jun 2025 23:00:42 +0000
Manifest next update: Tue 17 Jun 2025 23:00:42 +0000
Files and hashes: 1: 6KASjwCz7ilKa_zbYR8rA5RUBrc.roa (hash: T4+QVQXXLI7KFzCBe08m6pD6fADi9vWJFsV+O2tzwnA=)
2: S-iWpBlThdS5S3KVmIzPv6ismcU.crl (hash: j/x24V/zrisOUi24e0Q6FGr6DtsnbHsgvA70EKIk7zI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 21:51:18 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:f9:37:22:74:e1:0c:49:26:c9:7d:e4:ca:41:a4:d2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4be896a4195385d4b94b7295988ccfbfa8ac99c5
Validity
Not Before: Jun 16 23:00:42 2025 GMT
Not After : Jun 17 23:00:42 2025 GMT
Subject: CN=0d85ac0c4d9e68fd8c4167d6c14aa168e2c2bf68
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:2f:26:05:2a:33:50:87:6e:7c:ee:99:af:11:
c5:e8:c2:1d:5f:0c:7d:57:3e:b9:59:2d:64:67:1c:
b0:92:d8:3d:4f:30:c2:15:95:e8:d6:bc:2e:59:c5:
31:9a:88:19:9a:fa:a5:ee:df:3f:51:22:bc:d6:c3:
39:26:1b:02:5d:2b:39:d7:e2:ed:eb:20:8c:83:a6:
82:8c:71:12:35:cc:ba:24:90:ce:3f:29:12:01:4d:
f6:9b:49:55:7c:77:ca:ce:31:06:9d:2a:7c:2a:9f:
7e:8f:86:2d:7e:cc:a2:70:94:5d:d3:f0:1f:88:2d:
d2:05:dc:4c:b1:42:b7:d9:dc:dc:ad:ff:52:dd:95:
86:a8:53:51:41:6e:0c:0c:29:3f:e8:d5:67:13:41:
1e:23:c2:c7:b7:eb:b9:6d:58:c9:00:ba:28:ab:ad:
d5:13:22:e6:33:3d:de:3f:85:71:af:a5:5b:6f:56:
bb:8c:b4:33:c0:21:16:ac:53:5a:df:3c:35:e2:27:
97:21:52:a2:73:f1:61:b3:a9:27:13:6f:ad:a1:6c:
37:27:ca:ae:b1:a9:75:98:32:63:36:29:de:f9:5f:
1b:40:18:84:f3:1a:c1:d4:33:ef:0a:36:0d:9b:68:
c3:ad:31:c1:4b:ef:9f:25:00:86:cb:12:23:6d:bf:
53:8b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0D:85:AC:0C:4D:9E:68:FD:8C:41:67:D6:C1:4A:A1:68:E2:C2:BF:68
X509v3 Authority Key Identifier:
keyid:4B:E8:96:A4:19:53:85:D4:B9:4B:72:95:98:8C:CF:BF:A8:AC:99:C5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/S-iWpBlThdS5S3KVmIzPv6ismcU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/01/7a13ee-b731-4ff9-bef0-4b1581f09d3b/1/S-iWpBlThdS5S3KVmIzPv6ismcU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7f:18:08:e7:07:21:b4:58:d1:97:f0:a7:e8:2f:cd:f3:b6:db:
70:b3:63:cf:c7:9f:0c:31:a6:a7:0f:28:98:8c:4e:62:1f:b1:
96:0e:8a:f0:11:0f:4e:a8:ee:ed:59:d5:a4:77:9f:c7:26:0c:
79:11:5b:ac:9e:63:b8:97:54:5b:e5:36:3e:41:14:e1:81:37:
95:b2:b2:80:ac:2f:0d:dd:34:a8:54:19:d2:3e:ad:52:a6:81:
98:1c:86:b2:99:68:0e:a0:33:de:06:c1:78:76:a7:c4:b6:1f:
0b:88:c1:79:af:70:fc:92:21:6c:53:38:65:9e:14:9f:37:d0:
c4:c2:30:32:49:a3:c5:9a:6e:44:5f:cf:ac:2c:e4:6b:1d:9e:
c1:69:7e:73:a6:47:17:ce:b4:3c:89:79:6e:0d:a2:ee:20:f7:
7a:50:5f:0b:35:90:40:d9:81:04:e4:8c:59:22:1e:fb:0e:26:
f4:84:ce:99:8a:09:6c:7d:e8:f5:9c:09:59:b6:af:96:6a:30:
2e:5f:bf:43:a4:61:c6:d2:04:30:67:b6:c3:4f:44:a0:6a:8f:
5f:45:b6:bd:10:aa:b7:4d:14:7e:90:f0:9a:31:76:58:46:32:
71:64:1c:3d:5a:47:ed:99:d6:94:17:ae:3a:dd:7d:2e:9b:1d:
ed:02:50:02
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6+TcidOEMSSbJfeTKQaTSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRiZTg5NmE0MTk1Mzg1ZDRiOTRiNzI5NTk4OGNjZmJmYThh
Yzk5YzUwHhcNMjUwNjE2MjMwMDQyWhcNMjUwNjE3MjMwMDQyWjAzMTEwLwYDVQQD
EygwZDg1YWMwYzRkOWU2OGZkOGM0MTY3ZDZjMTRhYTE2OGUyYzJiZjY4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA3S8mBSozUIdufO6ZrxHF6MIdXwx9
Vz65WS1kZxywktg9TzDCFZXo1rwuWcUxmogZmvql7t8/USK81sM5JhsCXSs51+Lt
6yCMg6aCjHESNcy6JJDOPykSAU32m0lVfHfKzjEGnSp8Kp9+j4YtfsyicJRd0/Af
iC3SBdxMsUK32dzcrf9S3ZWGqFNRQW4MDCk/6NVnE0EeI8LHt+u5bVjJALooq63V
EyLmMz3eP4Vxr6Vbb1a7jLQzwCEWrFNa3zw14ieXIVKic/Fhs6knE2+toWw3J8qu
sal1mDJjNine+V8bQBiE8xrB1DPvCjYNm2jDrTHBS++fJQCGyxIjbb9TiwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFA2FrAxNnmj9jEFn1sFKoWjiwr9oMB8GA1UdIwQY
MBaAFEvolqQZU4XUuUtylZiMz7+orJnFMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMS83YTEzZWUtYjczMS00ZmY5LWJlZjAt
NGIxNTgxZjA5ZDNiLzEvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMS83YTEzZWUtYjczMS00ZmY5LWJlZjAtNGIxNTgxZjA5ZDNi
LzEvUy1pV3BCbFRoZFM1UzNLVm1JelB2NmlzbWNVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAfxgI5wch
tFjRl/Cn6C/N87bbcLNjz8efDDGmpw8omIxOYh+xlg6K8BEPTqju7VnVpHefxyYM
eRFbrJ5juJdUW+U2PkEU4YE3lbKygKwvDd00qFQZ0j6tUqaBmByGsploDqAz3gbB
eHanxLYfC4jBea9w/JIhbFM4ZZ4UnzfQxMIwMkmjxZpuRF/PrCzkax2ewWl+c6ZH
F860PIl5bg2i7iD3elBfCzWQQNmBBOSMWSIe+w4m9ITOmYoJbH3o9ZwJWbavlmow
Ll+/Q6RhxtIEMGe2w09EoGqPX0W2vRCqt00UfpDwmjF2WEYycWQcPVpH7ZnWlBeu
Ot19Lpsd7QJQAg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 05:07:06 2025 by rpki-client