Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
File: 70d8o7RJu8QSR-jJIeTI2r_Br64.mft (raw, json)
Hash identifier: we0quTiXnfEQBwkWErfHY1bDtR0LIZ2vKljsmjJixOg=
Subject key identifier: 91:7E:72:F8:2E:EB:1F:31:42:49:1A:CE:E8:BD:05:F4:B8:6B:F5:5A
Authority key identifier: EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
Certificate issuer: /CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Certificate serial: 01988F9004C8E18CD5A60853A989295F5783
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
Manifest number: 15B9
Signing time: Sat 09 Aug 2025 16:00:36 +0000
Manifest this update: Sat 09 Aug 2025 16:00:36 +0000
Manifest next update: Sun 10 Aug 2025 16:00:36 +0000
Files and hashes: 1: 0fxrFgaOEJg9dbqq-7NyccGKfo8.roa (hash: PianfnGVaMrVPowuDRPfsiFVI9vqBZ2hff1ALtVypRc=)
2: 70d8o7RJu8QSR-jJIeTI2r_Br64.crl (hash: WX9CdwziIjsZbLqwuRO4rAcklbhAvnVxMpbTuT9kHIA=)
3: wlvSN6qng0SspfaRqRgU0QaR_is.roa (hash: dvmYB11eIHXfV35gEc7/J0+3NCXH6IER/8ZhOiLqTT4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 10 Aug 2025 14:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8f:90:04:c8:e1:8c:d5:a6:08:53:a9:89:29:5f:57:83
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ef477ca3b449bbc41247e8c921e4c8dabfc1afae
Validity
Not Before: Aug 9 16:00:36 2025 GMT
Not After : Aug 10 16:00:36 2025 GMT
Subject: CN=917e72f82eeb1f3142491acee8bd05f4b86bf55a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9a:46:1c:d5:2d:46:f0:01:3b:b8:58:37:d1:6f:
31:4e:46:f7:35:c2:91:b2:6a:10:d0:b8:85:36:85:
5f:8b:fe:ff:23:fe:71:21:31:3a:1e:3b:60:ac:f3:
ce:43:e1:c6:40:43:50:18:a8:90:9a:86:67:04:54:
78:5b:5a:78:d5:ab:8b:7d:74:07:cb:ca:3a:bb:24:
88:1c:de:67:ce:d5:9c:6b:7c:30:b0:4a:6e:e5:74:
dd:53:ce:78:45:2d:46:dd:ab:d1:d3:60:ae:de:0e:
b2:ee:aa:d5:07:77:47:da:99:b0:85:d0:91:55:91:
d9:51:a2:2d:00:02:bd:80:4d:a9:a4:6a:ee:88:ca:
17:3f:40:7b:6c:f9:e2:e9:b4:47:ab:66:9e:ed:9f:
81:8f:dd:e6:2c:0a:d1:b5:9c:b2:b9:79:70:33:cf:
b1:4b:e1:d2:90:62:92:b9:2e:6c:f3:69:34:e1:74:
24:ee:14:30:be:f8:cc:8a:a4:c3:61:b9:e5:2b:1c:
0b:36:a9:72:e0:58:b4:82:67:56:bb:66:78:d6:41:
67:47:01:db:f1:b6:b5:64:69:89:b7:cd:5a:ce:e9:
22:b6:2f:16:26:5a:cc:e9:50:68:c9:d1:4b:97:73:
52:c6:76:c3:51:f2:a2:21:af:5f:80:f7:f5:e0:ee:
1d:fb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
91:7E:72:F8:2E:EB:1F:31:42:49:1A:CE:E8:BD:05:F4:B8:6B:F5:5A
X509v3 Authority Key Identifier:
keyid:EF:47:7C:A3:B4:49:BB:C4:12:47:E8:C9:21:E4:C8:DA:BF:C1:AF:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/70d8o7RJu8QSR-jJIeTI2r_Br64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/f1eea2-9582-4a65-b5be-603aa1f209d8/1/70d8o7RJu8QSR-jJIeTI2r_Br64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
51:44:83:5b:1f:3c:49:0c:a4:4a:a1:ad:0d:0e:9c:36:51:e6:
10:28:3c:f4:f1:c6:96:71:57:47:71:32:91:44:36:98:d1:55:
5f:c6:81:14:70:fc:a7:d9:10:f6:12:04:a9:80:f7:b2:77:3f:
fd:11:4b:cf:75:30:57:55:74:ee:c9:e8:94:f3:5a:39:54:42:
9b:6d:75:1d:06:79:a9:69:c3:bb:82:f2:d2:43:45:0b:f5:e0:
2d:97:b1:86:cb:af:7d:73:4e:0c:11:c8:d3:8e:c4:3a:5c:49:
f8:35:20:c6:c5:da:44:4c:d9:9b:7f:3b:a1:06:71:72:c8:b7:
30:43:46:58:48:5b:5a:5e:14:eb:2c:2a:06:b6:a2:d7:07:c2:
ac:a8:a8:23:fe:5a:0e:5b:32:ad:6f:f8:47:4f:b3:1e:2f:83:
63:6a:f9:84:1a:80:ad:dc:7c:35:d5:a9:f8:df:6a:9a:cd:70:
78:ae:5a:46:65:58:45:bb:cd:44:67:82:cd:02:03:87:d7:df:
6f:7f:60:04:3b:66:8b:62:44:6f:24:32:c2:9d:24:64:8f:11:
e3:4b:ae:79:4f:33:0e:ce:c5:2f:f9:af:cb:27:bb:38:5e:b2:
da:26:5f:7e:d2:d5:f3:a0:3b:1e:ab:62:e7:c7:8b:5a:69:9a:
42:64:50:01
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiPkATI4YzVpghTqYkpX1eDMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGVmNDc3Y2EzYjQ0OWJiYzQxMjQ3ZThjOTIxZTRjOGRhYmZj
MWFmYWUwHhcNMjUwODA5MTYwMDM2WhcNMjUwODEwMTYwMDM2WjAzMTEwLwYDVQQD
Eyg5MTdlNzJmODJlZWIxZjMxNDI0OTFhY2VlOGJkMDVmNGI4NmJmNTVhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmkYc1S1G8AE7uFg30W8xTkb3NcKR
smoQ0LiFNoVfi/7/I/5xITE6HjtgrPPOQ+HGQENQGKiQmoZnBFR4W1p41auLfXQH
y8o6uySIHN5nztWca3wwsEpu5XTdU854RS1G3avR02Cu3g6y7qrVB3dH2pmwhdCR
VZHZUaItAAK9gE2ppGruiMoXP0B7bPni6bRHq2ae7Z+Bj93mLArRtZyyuXlwM8+x
S+HSkGKSuS5s82k04XQk7hQwvvjMiqTDYbnlKxwLNqly4Fi0gmdWu2Z41kFnRwHb
8ba1ZGmJt81azukiti8WJlrM6VBoydFLl3NSxnbDUfKiIa9fgPf14O4d+wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJF+cvgu6x8xQkkazui9BfS4a/VaMB8GA1UdIwQY
MBaAFO9HfKO0SbvEEkfoySHkyNq/wa+uMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUt
NjAzYWExZjIwOWQ4LzEvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi9mMWVlYTItOTU4Mi00YTY1LWI1YmUtNjAzYWExZjIwOWQ4
LzEvNzBkOG83Ukp1OFFTUi1qSkllVEkycl9CcjY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAUUSDWx88
SQykSqGtDQ6cNlHmECg89PHGlnFXR3EykUQ2mNFVX8aBFHD8p9kQ9hIEqYD3snc/
/RFLz3UwV1V07snolPNaOVRCm211HQZ5qWnDu4Ly0kNFC/XgLZexhsuvfXNODBHI
047EOlxJ+DUgxsXaREzZm387oQZxcsi3MENGWEhbWl4U6ywqBrai1wfCrKioI/5a
DlsyrW/4R0+zHi+DY2r5hBqArdx8NdWp+N9qms1weK5aRmVYRbvNRGeCzQIDh9ff
b39gBDtmi2JEbyQywp0kZI8R40uueU8zDs7FL/mvyye7OF6y2iZfftLV86A7Hqti
58eLWmmaQmRQAQ==
-----END CERTIFICATE-----
Generated at Sat Aug 9 22:42:32 2025 by rpki-client