Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
File: m1M3vRp8XunFenOwozxhIZzSqcs.mft (raw, json)
Hash identifier: +eRqLXC89KWGOieRNk5C6BcMMG9p9e/fuapk1yk4PGc=
Subject key identifier: 7B:AC:61:1B:45:09:EE:FF:3F:2C:97:25:47:F5:E6:7D:D9:86:94:E4
Authority key identifier: 9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
Certificate issuer: /CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Certificate serial: 01976D3D6F394336E9A563B6493A1CEDAFA3
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
Manifest number: 1523
Signing time: Sat 14 Jun 2025 07:00:32 +0000
Manifest this update: Sat 14 Jun 2025 07:00:32 +0000
Manifest next update: Sun 15 Jun 2025 07:00:32 +0000
Files and hashes: 1: hH6hMaSyonrhQA9h_vP1HTqln7M.roa (hash: 8QJDFdFinb7s3U9xb08fJBm7sr1In5Pe6TKE9Vk8YEA=)
2: m1M3vRp8XunFenOwozxhIZzSqcs.crl (hash: +M4lH05OEitZTNw8cGb5QG4ZOdBvLr8AY1fUifiRqGE=)
3: xZRwQEVBqhCo3g2OnfWg1phYcj0.roa (hash: Up0oMZDKtVNJTjmYE39xr0VdPFglYOYmh22V1+hmiHs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3d:6f:39:43:36:e9:a5:63:b6:49:3a:1c:ed:af:a3
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9b5337bd1a7c5ee9c57a73b0a33c61219cd2a9cb
Validity
Not Before: Jun 14 07:00:32 2025 GMT
Not After : Jun 15 07:00:32 2025 GMT
Subject: CN=7bac611b4509eeff3f2c972547f5e67dd98694e4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:96:91:2d:48:d4:87:d8:f7:87:14:96:f1:58:
c0:b6:cf:9f:44:db:96:e4:98:13:25:80:e8:49:c3:
55:84:4d:01:51:d8:ef:5e:21:a1:b9:67:a1:a8:e9:
09:ed:48:c4:7d:6a:31:74:8d:7f:ff:0b:40:83:d8:
54:bb:f6:69:c8:77:30:8e:ff:95:d6:27:42:f2:49:
94:dd:95:06:1a:7e:83:c5:20:ad:c4:93:44:5d:fd:
b7:d1:3b:1d:22:11:1a:b6:36:1d:3c:8a:c7:db:7c:
05:f9:23:af:0d:89:49:ad:ca:2e:61:c3:75:c0:da:
41:bb:39:e8:6d:5e:3d:00:5a:4e:59:35:41:34:4a:
40:2b:19:05:6d:15:bd:b5:9c:72:8b:8a:47:13:a6:
fc:5c:1c:62:35:eb:44:a8:37:a4:62:a6:94:ae:a8:
6c:0a:56:e9:ab:09:48:57:57:4f:75:8b:e5:d7:6b:
ae:34:47:b0:ca:ec:c8:ee:f8:22:0f:2a:aa:f6:bc:
fa:a3:8e:7b:62:b6:2b:39:70:5b:a4:64:23:2d:d3:
29:b3:53:8f:f9:fa:e7:99:e6:ef:08:3f:33:59:c6:
fc:54:e5:e0:6e:cb:00:9c:62:84:2d:10:db:52:6f:
e2:5b:0a:7f:ee:c6:2e:b7:8f:df:a9:28:18:59:41:
1f:43
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
7B:AC:61:1B:45:09:EE:FF:3F:2C:97:25:47:F5:E6:7D:D9:86:94:E4
X509v3 Authority Key Identifier:
keyid:9B:53:37:BD:1A:7C:5E:E9:C5:7A:73:B0:A3:3C:61:21:9C:D2:A9:CB
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/m1M3vRp8XunFenOwozxhIZzSqcs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/0e/9cb5fb-ab65-4a2b-88dd-2ef7165b21b5/1/m1M3vRp8XunFenOwozxhIZzSqcs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0b:dd:37:9b:5e:3b:07:c8:c4:bc:b9:90:db:cb:b3:de:d1:48:
5e:cd:2d:ba:a2:d6:0a:57:4c:97:33:79:34:8d:f9:a3:2d:22:
28:3c:c1:aa:ef:a1:a1:bd:3c:8a:a4:7e:95:10:5a:c5:36:ff:
9e:9c:eb:81:8b:6b:db:43:f3:64:70:7c:49:82:07:d0:a3:a2:
79:6e:6e:4b:65:51:4a:fe:29:0e:a6:e1:cb:be:2e:3b:25:b3:
53:ae:8b:ae:5f:97:6e:53:66:0f:1b:06:80:5a:70:11:d7:b1:
09:22:6f:e0:46:47:1c:a3:41:0c:45:0d:73:fb:59:03:56:91:
57:32:15:a0:18:36:c6:ec:b9:e7:9f:b9:4a:ab:30:61:fc:a4:
a9:eb:cd:10:17:ff:fa:c2:50:1a:df:8f:22:44:cf:93:9c:a7:
6f:17:9a:3e:bb:97:c8:59:01:d1:ff:cc:a0:e5:1b:39:67:2c:
c3:f3:23:85:61:50:9c:4d:82:0e:20:d9:22:07:60:63:df:d6:
81:ae:64:00:96:5d:7b:0e:bc:3a:f2:e3:80:1a:14:02:0b:b2:
99:a7:6f:33:cf:76:af:dc:33:67:d2:a8:20:df:96:29:67:41:
67:d3:8d:be:29:92:38:7d:7d:be:ab:21:a6:0f:bf:36:18:b9:
44:2a:a7:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPW85QzbppWO2SToc7a+jMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDliNTMzN2JkMWE3YzVlZTljNTdhNzNiMGEzM2M2MTIxOWNk
MmE5Y2IwHhcNMjUwNjE0MDcwMDMyWhcNMjUwNjE1MDcwMDMyWjAzMTEwLwYDVQQD
Eyg3YmFjNjExYjQ1MDllZWZmM2YyYzk3MjU0N2Y1ZTY3ZGQ5ODY5NGU0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAs5aRLUjUh9j3hxSW8VjAts+fRNuW
5JgTJYDoScNVhE0BUdjvXiGhuWehqOkJ7UjEfWoxdI1//wtAg9hUu/ZpyHcwjv+V
1idC8kmU3ZUGGn6DxSCtxJNEXf230TsdIhEatjYdPIrH23wF+SOvDYlJrcouYcN1
wNpBuznobV49AFpOWTVBNEpAKxkFbRW9tZxyi4pHE6b8XBxiNetEqDekYqaUrqhs
ClbpqwlIV1dPdYvl12uuNEewyuzI7vgiDyqq9rz6o457YrYrOXBbpGQjLdMps1OP
+frnmebvCD8zWcb8VOXgbssAnGKELRDbUm/iWwp/7sYut4/fqSgYWUEfQwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHusYRtFCe7/PyyXJUf15n3ZhpTkMB8GA1UdIwQY
MBaAFJtTN70afF7pxXpzsKM8YSGc0qnLMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wZS85Y2I1ZmItYWI2NS00YTJiLTg4ZGQt
MmVmNzE2NWIyMWI1LzEvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wZS85Y2I1ZmItYWI2NS00YTJiLTg4ZGQtMmVmNzE2NWIyMWI1
LzEvbTFNM3ZScDhYdW5GZW5Pd296eGhJWnpTcWNzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAC903m147
B8jEvLmQ28uz3tFIXs0tuqLWCldMlzN5NI35oy0iKDzBqu+hob08iqR+lRBaxTb/
npzrgYtr20PzZHB8SYIH0KOieW5uS2VRSv4pDqbhy74uOyWzU66Lrl+XblNmDxsG
gFpwEdexCSJv4EZHHKNBDEUNc/tZA1aRVzIVoBg2xuy555+5SqswYfykqevNEBf/
+sJQGt+PIkTPk5ynbxeaPruXyFkB0f/MoOUbOWcsw/MjhWFQnE2CDiDZIgdgY9/W
ga5kAJZdew68OvLjgBoUAguymadvM892r9wzZ9KoIN+WKWdBZ9ONvimSOH19vqsh
pg+/Nhi5RCqn8Q==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:19:22 2025 by rpki-client