Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
File: m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft (raw, json)
Hash identifier: bTDO//3iSrTV3/dW+J6FKOedwlRwOW7nEqVRy4O2tFU=
Subject key identifier: 0B:86:87:13:89:F0:CA:EB:CD:26:A7:B0:4A:3C:9E:29:31:53:18:9D
Authority key identifier: 9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
Certificate issuer: /CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Certificate serial: 01978661709FB7D98B6E73AF99A4EE3075DB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
Manifest number: 159D
Signing time: Thu 19 Jun 2025 04:10:21 +0000
Manifest this update: Thu 19 Jun 2025 04:10:21 +0000
Manifest next update: Fri 20 Jun 2025 04:10:21 +0000
Files and hashes: 1: OiM9JuUPwUTx93F-WTm9SJAc1-E.roa (hash: U1Ux7NpyE3Jd/TFpdNZuyjTyOl5BfpF5UVtjtoD5dLc=)
2: S8dvvAfNFMFvLZJQtmEgT4xz-WM.roa (hash: jr3hzHwhC0clqyZ9qyCXuid3+6HUV82zq4hGikAgUEw=)
3: m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl (hash: /WWMEzT8+qNu53DA+ob2nkSi67mNuf8xech9sAgO6s4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 20 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:86:61:70:9f:b7:d9:8b:6e:73:af:99:a4:ee:30:75:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b986fc646fda0cf145e10d93fe1b10eb0dee625
Validity
Not Before: Jun 19 04:10:21 2025 GMT
Not After : Jun 20 04:10:21 2025 GMT
Subject: CN=0b86871389f0caebcd26a7b04a3c9e293153189d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:51:e8:f4:57:58:59:05:e9:5a:bb:ff:98:e3:
2d:b2:f1:85:4a:29:d2:bb:fd:2e:00:af:ab:89:0e:
24:9c:a9:d0:2a:ff:eb:e1:fc:64:d3:2a:2a:67:de:
8d:fc:ec:3a:0e:b4:c3:f1:22:08:d2:53:f3:61:4f:
ea:0b:7f:ec:88:74:6a:14:66:af:36:43:7e:a7:ec:
6d:5e:42:92:1d:db:46:52:11:1e:34:42:e4:aa:fa:
65:0a:3b:58:a1:01:91:64:91:72:b0:d8:dd:de:d2:
4f:f3:11:0a:a9:11:18:d2:36:77:70:51:4f:40:c9:
32:7d:17:08:09:a6:05:8d:8d:ef:1e:d4:4a:58:96:
a6:2e:28:f8:f9:fc:8d:90:1d:45:89:e3:78:db:3b:
0a:01:eb:8e:4f:13:45:64:76:a6:87:7e:16:47:5c:
1e:36:1c:89:b2:a1:ae:89:28:b3:2d:9b:54:bf:25:
2d:fd:d3:01:dc:df:cc:43:c0:ae:6c:6a:81:63:eb:
74:1b:b2:f1:b9:5e:c8:57:27:b7:93:ad:5f:b3:da:
2e:0d:08:9c:2f:c3:66:53:be:24:5b:3b:6e:45:2e:
8f:7c:24:a5:75:9b:f2:c9:00:d6:ef:3c:6b:a2:35:
e8:cb:b2:45:7e:01:f8:b6:75:67:01:19:fb:1a:9f:
e4:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:86:87:13:89:F0:CA:EB:CD:26:A7:B0:4A:3C:9E:29:31:53:18:9D
X509v3 Authority Key Identifier:
keyid:9B:98:6F:C6:46:FD:A0:CF:14:5E:10:D9:3F:E1:B1:0E:B0:DE:E6:25
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m5hvxkb9oM8UXhDZP-GxDrDe5iU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0a/34bb77-c847-4111-96f3-bdd5cc440396/1/m5hvxkb9oM8UXhDZP-GxDrDe5iU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1d:06:8b:9f:d5:a8:ec:c2:73:53:8b:a7:db:4b:c3:66:ef:5f:
61:1c:91:26:5a:77:ad:33:56:80:e8:81:f8:92:62:ac:bc:3f:
36:f9:9c:a4:40:ea:5f:a2:f5:ae:38:e2:f5:44:80:b7:57:c8:
19:06:fd:6c:5a:c8:55:d9:2d:9e:06:cb:91:c2:8b:6c:8d:07:
af:fe:e1:65:07:15:ba:0f:3b:88:b6:14:87:98:9b:da:23:6a:
cf:4c:69:96:60:a9:e4:db:71:17:d4:dc:98:c4:f1:a6:2f:06:
32:e5:e7:ec:8c:84:cb:fd:7e:99:f2:30:a4:5a:0b:29:ae:ff:
e9:55:46:04:e9:79:70:74:7c:a0:d1:65:15:9e:23:be:e3:17:
d6:ed:c3:3d:3c:a3:cd:32:43:c3:61:bd:ee:a9:ff:07:4d:f5:
14:4a:02:92:7d:cc:3f:bd:e7:fd:95:a8:d2:df:6f:72:7e:e0:
49:ac:b7:81:f9:f8:b8:f7:f8:42:5c:21:20:3b:2c:8b:07:1f:
ca:fd:d9:4f:2d:34:66:d6:7f:b1:cf:cd:57:14:4f:d1:db:03:
f7:48:d7:d1:48:70:14:96:87:a0:7d:9a:a0:83:9e:2a:2f:30:
ee:b5:9f:14:41:5d:3a:43:d3:ec:ad:f9:92:b7:7d:fa:b2:5d:
7b:62:1b:2d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeGYXCft9mLbnOvmaTuMHXbMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliOTg2ZmM2NDZmZGEwY2YxNDVlMTBkOTNmZTFiMTBlYjBk
ZWU2MjUwHhcNMjUwNjE5MDQxMDIxWhcNMjUwNjIwMDQxMDIxWjAzMTEwLwYDVQQD
EygwYjg2ODcxMzg5ZjBjYWViY2QyNmE3YjA0YTNjOWUyOTMxNTMxODlkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtVHo9FdYWQXpWrv/mOMtsvGFSinS
u/0uAK+riQ4knKnQKv/r4fxk0yoqZ96N/Ow6DrTD8SII0lPzYU/qC3/siHRqFGav
NkN+p+xtXkKSHdtGUhEeNELkqvplCjtYoQGRZJFysNjd3tJP8xEKqREY0jZ3cFFP
QMkyfRcICaYFjY3vHtRKWJamLij4+fyNkB1FieN42zsKAeuOTxNFZHamh34WR1we
NhyJsqGuiSizLZtUvyUt/dMB3N/MQ8CubGqBY+t0G7LxuV7IVye3k61fs9ouDQic
L8NmU74kWztuRS6PfCSldZvyyQDW7zxrojXoy7JFfgH4tnVnARn7Gp/kdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAuGhxOJ8MrrzSansEo8nikxUxidMB8GA1UdIwQY
MBaAFJuYb8ZG/aDPFF4Q2T/hsQ6w3uYlMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wYS8zNGJiNzctYzg0Ny00MTExLTk2ZjMt
YmRkNWNjNDQwMzk2LzEvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wYS8zNGJiNzctYzg0Ny00MTExLTk2ZjMtYmRkNWNjNDQwMzk2
LzEvbTVodnhrYjlvTThVWGhEWlAtR3hEckRlNWlVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHQaLn9Wo
7MJzU4un20vDZu9fYRyRJlp3rTNWgOiB+JJirLw/NvmcpEDqX6L1rjji9USAt1fI
GQb9bFrIVdktngbLkcKLbI0Hr/7hZQcVug87iLYUh5ib2iNqz0xplmCp5NtxF9Tc
mMTxpi8GMuXn7IyEy/1+mfIwpFoLKa7/6VVGBOl5cHR8oNFlFZ4jvuMX1u3DPTyj
zTJDw2G97qn/B031FEoCkn3MP73n/ZWo0t9vcn7gSay3gfn4uPf4QlwhIDssiwcf
yv3ZTy00ZtZ/sc/NVxRP0dsD90jX0UhwFJaHoH2aoIOeKi8w7rWfFEFdOkPT7K35
krd9+rJde2IbLQ==
-----END CERTIFICATE-----
Generated at Thu Jun 19 10:34:26 2025 by rpki-client