Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
File: mU78TONvxEPcWBYnTqwddpMCkIE.mft (raw, json)
Hash identifier: xdU9HVPZbqo+++d25c7yqShQQVizycWWr3lZ0z/txCw=
Subject key identifier: 2A:68:FA:9A:B5:6D:35:B2:22:F0:A9:54:7C:9A:68:49:69:69:95:2F
Authority key identifier: 99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
Certificate issuer: /CN=994efc4ce36fc443dc5816274eac1d7693029081
Certificate serial: 01976CCF63572B48051CE2BE33FE5163744C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
Manifest number: 158E
Signing time: Sat 14 Jun 2025 05:00:19 +0000
Manifest this update: Sat 14 Jun 2025 05:00:19 +0000
Manifest next update: Sun 15 Jun 2025 05:00:19 +0000
Files and hashes: 1: MhCfthOppsmBaiAYHVVk_2GAFYE.roa (hash: Prn81nEGvzCuVunt3w8adc4Qe6uMN6AiQAgwWZDR5Uo=)
2: mU78TONvxEPcWBYnTqwddpMCkIE.crl (hash: iimvAeh8jUXVrBRFzuUij7yIZU/xFcaVMp138fMMiI8=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:63:57:2b:48:05:1c:e2:be:33:fe:51:63:74:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=994efc4ce36fc443dc5816274eac1d7693029081
Validity
Not Before: Jun 14 05:00:19 2025 GMT
Not After : Jun 15 05:00:19 2025 GMT
Subject: CN=2a68fa9ab56d35b222f0a9547c9a68496969952f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:7a:b5:13:81:af:cc:e2:54:57:d5:2f:fc:59:
82:7a:9f:66:94:b3:28:b4:3b:a5:c9:bd:7d:2a:08:
d1:be:53:7a:73:e2:0b:47:98:ca:14:05:35:27:ac:
6d:76:6e:6d:8b:17:31:23:30:92:84:2c:4e:af:77:
4d:b7:3c:59:30:a1:52:a8:85:ba:ad:34:a9:47:fa:
c1:4c:db:7a:91:21:1e:db:5c:9e:e4:de:98:3f:59:
bc:58:df:50:4f:ce:fe:84:24:c1:0e:5e:5f:03:7c:
85:36:8a:ca:7b:d3:67:e7:11:02:3d:5d:ca:ec:41:
25:c6:cc:05:d2:2b:e7:3d:55:93:4a:55:cd:91:2a:
6f:b2:18:c8:41:76:7c:53:0c:91:d7:87:d9:a0:93:
24:52:71:eb:ea:50:52:23:e9:9d:1e:a6:21:50:03:
0c:5a:3c:42:29:9d:1f:18:01:df:0e:49:62:0c:6e:
7c:63:6a:76:a2:1b:34:e1:8a:8f:5e:46:b2:47:a8:
09:91:d0:89:8b:c9:46:64:7d:6c:51:54:0c:8d:bf:
e5:8b:6f:83:4a:a3:d7:3f:82:a7:fc:68:d4:ef:c1:
ac:dc:0e:69:a6:9a:00:4f:7f:04:c2:9f:98:79:e7:
5c:99:84:30:a9:25:18:78:f1:b8:16:82:5c:4c:86:
36:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
2A:68:FA:9A:B5:6D:35:B2:22:F0:A9:54:7C:9A:68:49:69:69:95:2F
X509v3 Authority Key Identifier:
keyid:99:4E:FC:4C:E3:6F:C4:43:DC:58:16:27:4E:AC:1D:76:93:02:90:81
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mU78TONvxEPcWBYnTqwddpMCkIE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/28/e439ca-519d-432c-b96a-3d2fb810e191/1/mU78TONvxEPcWBYnTqwddpMCkIE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6c:12:bb:52:7c:96:90:8d:24:27:ee:94:47:25:0e:67:9d:52:
45:1d:6d:d5:b2:d9:cc:98:dc:58:85:bd:2e:19:ad:80:c8:ec:
4b:d4:d0:61:fd:06:c5:bd:c3:2d:27:06:d6:b2:31:e4:a8:31:
3f:de:05:30:bb:80:ad:c7:bc:82:db:f5:2b:0d:8f:a6:e7:c9:
5b:25:fb:be:5c:29:d3:39:01:5e:91:54:fc:d0:79:d1:0c:b5:
44:57:18:67:fb:35:1a:e5:b7:06:4f:a3:44:3e:67:3c:ac:67:
ae:ca:37:6f:d3:a9:41:e2:ac:80:da:be:b0:8d:85:bb:0c:ba:
03:a4:b7:48:58:ac:b2:df:6d:3e:d2:9b:04:d5:d4:f2:c6:35:
d0:a3:5e:f5:1c:34:d8:2d:f0:ea:84:bc:dc:2f:44:bf:11:6c:
47:da:d2:52:b0:fa:48:f9:26:27:3e:dc:4a:c5:aa:ea:d1:d6:
70:5b:cd:e2:42:c2:9f:4d:e9:79:5b:36:01:89:4b:24:48:8b:
be:e1:34:00:20:26:ee:5f:8e:3c:c7:15:5a:06:f4:28:10:c6:
84:9a:cb:03:50:56:a0:bc:3a:05:a1:6a:4f:48:79:07:a3:c1:
58:bc:99:34:4b:7f:42:10:5a:9a:a0:d5:8e:fa:f0:06:67:ea:
35:f4:cf:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz2NXK0gFHOK+M/5RY3RMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5NGVmYzRjZTM2ZmM0NDNkYzU4MTYyNzRlYWMxZDc2OTMw
MjkwODEwHhcNMjUwNjE0MDUwMDE5WhcNMjUwNjE1MDUwMDE5WjAzMTEwLwYDVQQD
EygyYTY4ZmE5YWI1NmQzNWIyMjJmMGE5NTQ3YzlhNjg0OTY5Njk5NTJmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAwHq1E4GvzOJUV9Uv/FmCep9mlLMo
tDulyb19KgjRvlN6c+ILR5jKFAU1J6xtdm5tixcxIzCShCxOr3dNtzxZMKFSqIW6
rTSpR/rBTNt6kSEe21ye5N6YP1m8WN9QT87+hCTBDl5fA3yFNorKe9Nn5xECPV3K
7EElxswF0ivnPVWTSlXNkSpvshjIQXZ8UwyR14fZoJMkUnHr6lBSI+mdHqYhUAMM
WjxCKZ0fGAHfDkliDG58Y2p2ohs04YqPXkayR6gJkdCJi8lGZH1sUVQMjb/li2+D
SqPXP4Kn/GjU78Gs3A5pppoAT38Ewp+YeedcmYQwqSUYePG4FoJcTIY2xQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCpo+pq1bTWyIvCpVHyaaElpaZUvMB8GA1UdIwQY
MBaAFJlO/Ezjb8RD3FgWJ06sHXaTApCBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVU3OFRPTnZ4RVBjV0JZblRxd2RkcE1Da0lFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yOC9lNDM5Y2EtNTE5ZC00MzJjLWI5NmEt
M2QyZmI4MTBlMTkxLzEvbVU3OFRPTnZ4RVBjV0JZblRxd2RkcE1Da0lFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yOC9lNDM5Y2EtNTE5ZC00MzJjLWI5NmEtM2QyZmI4MTBlMTkx
LzEvbVU3OFRPTnZ4RVBjV0JZblRxd2RkcE1Da0lFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbBK7UnyW
kI0kJ+6URyUOZ51SRR1t1bLZzJjcWIW9LhmtgMjsS9TQYf0Gxb3DLScG1rIx5Kgx
P94FMLuArce8gtv1Kw2PpufJWyX7vlwp0zkBXpFU/NB50Qy1RFcYZ/s1GuW3Bk+j
RD5nPKxnrso3b9OpQeKsgNq+sI2Fuwy6A6S3SFisst9tPtKbBNXU8sY10KNe9Rw0
2C3w6oS83C9EvxFsR9rSUrD6SPkmJz7cSsWq6tHWcFvN4kLCn03peVs2AYlLJEiL
vuE0ACAm7l+OPMcVWgb0KBDGhJrLA1BWoLw6BaFqT0h5B6PBWLyZNEt/QhBamqDV
jvrwBmfqNfTPJg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:17:58 2025 by rpki-client