Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
File: 240I7cQ5OoZxKW-OrLvs-U12Vio.mft (raw, json)
Hash identifier: msalp9rh7abonj8grwtf+EUPH2Dnz/AISvEnyPkxB2g=
Subject key identifier: C4:A4:D3:72:09:92:63:AF:EC:60:44:3A:0A:73:D6:61:6E:79:CF:CE
Authority key identifier: DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
Certificate issuer: /CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Certificate serial: 01988B0EC45BB0374D20FFCB3AFD792CBA2D
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
Manifest number: 12FB
Signing time: Fri 08 Aug 2025 19:00:57 +0000
Manifest this update: Fri 08 Aug 2025 19:00:57 +0000
Manifest next update: Sat 09 Aug 2025 19:00:57 +0000
Files and hashes: 1: 240I7cQ5OoZxKW-OrLvs-U12Vio.crl (hash: Uj+nzKKJe6Ek41yEAOPrx/E580vrXvgFEc34v8brL2w=)
2: EAKe9346ONHQ_VuM_WxVCj_cv4Y.roa (hash: 5H5/ZpQAnmY/nM8N1VtyRS6/84qLoSsU0G+AmpT2T/k=)
3: RBJ-L0gnLCM7Rv9f1a6uxn7Yu-0.roa (hash: 4xHToao8czKd/Xx3uSwWIpAVRfAfaES7tBaw71UFRvY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 09 Aug 2025 19:00:57 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:8b:0e:c4:5b:b0:37:4d:20:ff:cb:3a:fd:79:2c:ba:2d
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db8d08edc4393a8671296f8eacbbecf94d76562a
Validity
Not Before: Aug 8 19:00:57 2025 GMT
Not After : Aug 9 19:00:57 2025 GMT
Subject: CN=c4a4d372099263afec60443a0a73d6616e79cfce
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:d0:97:62:89:29:16:b0:22:39:0f:b1:f0:ce:
b0:29:ad:4c:70:f5:52:17:fc:44:72:79:1f:76:03:
b5:09:cc:5f:57:3f:39:86:40:63:a5:a4:ab:3e:1f:
e2:f3:65:69:0d:42:cf:22:ca:71:9f:ec:8d:0c:87:
e1:07:cf:f6:9a:7f:b7:a9:36:88:ab:6b:8e:17:fa:
f2:f7:92:08:08:59:e1:f6:98:50:e3:65:a7:51:2f:
8d:f9:fb:52:d4:a0:94:80:79:43:16:60:91:0d:d3:
90:ca:bd:c1:ff:98:d4:fe:5a:88:af:9e:55:08:d2:
d4:18:52:cd:3e:cd:7e:bc:ba:22:30:03:d4:a1:4b:
55:0f:13:ca:e3:4c:52:bd:98:4f:d8:f3:47:d4:09:
bc:29:d8:f7:8d:04:32:c9:8d:78:7d:63:d9:6b:43:
bb:6f:af:91:20:11:32:93:18:88:5b:f4:0e:e5:a5:
1f:63:0a:cc:f2:1c:2a:be:2e:ca:f4:da:0d:4c:28:
01:01:6d:3b:73:ca:f4:9c:1b:57:e2:57:e6:c4:84:
a3:eb:88:76:06:38:0e:5d:0a:2f:48:f3:28:9d:96:
7e:01:83:65:ab:1d:ea:2b:a7:8a:82:f5:45:53:0f:
c1:22:a9:74:1f:f3:d5:f6:b2:01:0c:4a:34:90:ae:
44:35
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C4:A4:D3:72:09:92:63:AF:EC:60:44:3A:0A:73:D6:61:6E:79:CF:CE
X509v3 Authority Key Identifier:
keyid:DB:8D:08:ED:C4:39:3A:86:71:29:6F:8E:AC:BB:EC:F9:4D:76:56:2A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/240I7cQ5OoZxKW-OrLvs-U12Vio.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/7d5607-0a8a-4447-8651-c6349db9499b/1/240I7cQ5OoZxKW-OrLvs-U12Vio.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:54:b3:54:17:91:db:37:91:a9:2f:5f:ae:6c:7c:11:46:60:
fe:e7:fa:80:b5:94:87:eb:53:db:80:20:45:28:b0:8c:e8:64:
19:f5:b8:3d:38:ff:a1:db:f4:68:c3:51:c0:46:5b:27:e5:01:
26:f2:ea:95:45:38:a5:0e:1d:0b:b0:da:c9:92:1f:33:97:09:
af:09:78:86:de:60:1d:48:f6:ed:30:99:95:15:ca:d2:3a:27:
f6:21:a6:b5:57:c7:bb:fb:64:b7:15:36:1a:22:b0:99:22:68:
1d:1d:0a:ea:6e:6d:46:6b:a2:6d:83:8c:1f:09:67:be:03:15:
69:e7:17:ec:ee:e3:44:19:d7:18:28:f9:74:2e:54:60:9f:d3:
4e:e2:ce:f4:b1:04:47:58:bb:2f:71:ba:87:d1:4a:0c:16:0b:
4c:49:12:1d:53:e3:69:f1:34:8f:c4:cc:a5:ee:a3:e5:19:55:
a3:43:62:ee:11:3a:61:b4:09:83:51:50:f0:b7:27:31:ae:fc:
b9:3a:9f:ad:71:7e:36:ba:42:e0:46:76:91:e1:23:1c:d1:18:
5c:63:a3:7d:3c:3f:2c:bd:f8:f6:e8:77:88:5b:1d:42:84:63:
e1:69:05:4b:08:98:d8:69:5d:fc:3d:54:f8:fd:fb:d4:d0:18:
28:b8:f1:d1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiLDsRbsDdNIP/LOv15LLotMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOGQwOGVkYzQzOTNhODY3MTI5NmY4ZWFjYmJlY2Y5NGQ3
NjU2MmEwHhcNMjUwODA4MTkwMDU3WhcNMjUwODA5MTkwMDU3WjAzMTEwLwYDVQQD
EyhjNGE0ZDM3MjA5OTI2M2FmZWM2MDQ0M2EwYTczZDY2MTZlNzljZmNlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAyNCXYokpFrAiOQ+x8M6wKa1McPVS
F/xEcnkfdgO1CcxfVz85hkBjpaSrPh/i82VpDULPIspxn+yNDIfhB8/2mn+3qTaI
q2uOF/ry95IICFnh9phQ42WnUS+N+ftS1KCUgHlDFmCRDdOQyr3B/5jU/lqIr55V
CNLUGFLNPs1+vLoiMAPUoUtVDxPK40xSvZhP2PNH1Am8Kdj3jQQyyY14fWPZa0O7
b6+RIBEykxiIW/QO5aUfYwrM8hwqvi7K9NoNTCgBAW07c8r0nBtX4lfmxISj64h2
BjgOXQovSPMonZZ+AYNlqx3qK6eKgvVFUw/BIql0H/PV9rIBDEo0kK5ENQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMSk03IJkmOv7GBEOgpz1mFuec/OMB8GA1UdIwQY
MBaAFNuNCO3EOTqGcSlvjqy77PlNdlYqMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEt
YzYzNDlkYjk0OTliLzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy83ZDU2MDctMGE4YS00NDQ3LTg2NTEtYzYzNDlkYjk0OTli
LzEvMjQwSTdjUTVPb1p4S1ctT3JMdnMtVTEyVmlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABVSzVBeR
2zeRqS9frmx8EUZg/uf6gLWUh+tT24AgRSiwjOhkGfW4PTj/odv0aMNRwEZbJ+UB
JvLqlUU4pQ4dC7DayZIfM5cJrwl4ht5gHUj27TCZlRXK0jon9iGmtVfHu/tktxU2
GiKwmSJoHR0K6m5tRmuibYOMHwlnvgMVaecX7O7jRBnXGCj5dC5UYJ/TTuLO9LEE
R1i7L3G6h9FKDBYLTEkSHVPjafE0j8TMpe6j5RlVo0Ni7hE6YbQJg1FQ8LcnMa78
uTqfrXF+NrpC4EZ2keEjHNEYXGOjfTw/LL349uh3iFsdQoRj4WkFSwiY2Gld/D1U
+P371NAYKLjx0Q==
-----END CERTIFICATE-----
Generated at Sat Aug 9 01:17:37 2025 by rpki-client