Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
File: dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft (raw, json)
Hash identifier: qet0dWPje96uJe/1ivuhvinwssoRkyRiS/wGrh4DbD0=
Subject key identifier: 64:F1:4E:04:9C:D4:B6:E5:75:47:92:A5:20:CD:E6:01:5D:5B:0C:E0
Authority key identifier: 76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
Certificate issuer: /CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Certificate serial: 01976C98DEA3AAA5510BADED5DEBEF9AD840
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
Manifest number: 1112
Signing time: Sat 14 Jun 2025 04:00:47 +0000
Manifest this update: Sat 14 Jun 2025 04:00:47 +0000
Manifest next update: Sun 15 Jun 2025 04:00:47 +0000
Files and hashes: 1: JmRIXqWgLbHOS_DUn9tYXP3VwvE.roa (hash: 07OywnLuhNnV2ffg9k1J1SDz7HRBDcbP+ENwBGJ8ZCU=)
2: dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl (hash: 6Z4f1kKQaLcCJ674ysCR/CFX/JOuoqgEViuhKLdNGJE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:de:a3:aa:a5:51:0b:ad:ed:5d:eb:ef:9a:d8:40
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=765ea3400a3748c3b6c61268d492f8bf0a908239
Validity
Not Before: Jun 14 04:00:47 2025 GMT
Not After : Jun 15 04:00:47 2025 GMT
Subject: CN=64f14e049cd4b6e5754792a520cde6015d5b0ce0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:3b:b5:44:27:03:ea:ab:6e:55:19:b0:7b:e0:
74:b5:c0:44:5d:cc:95:d7:34:a6:b7:8f:34:51:3b:
fd:36:37:55:c8:45:8c:cc:0e:21:d7:51:28:d8:33:
88:c6:f0:a3:37:a8:64:48:8a:eb:a7:ba:42:30:26:
5c:e9:f0:3a:6b:3c:dc:5c:46:03:9c:c3:f4:5c:e7:
a8:31:fb:09:0f:85:cb:76:d6:a4:1f:ff:85:b3:3a:
35:4f:6d:6f:d0:f8:8e:5c:3c:1f:85:a9:75:b8:09:
c1:4e:c4:74:c7:32:cd:7f:8b:31:3a:70:f2:9d:21:
08:02:ac:d0:4f:0f:c5:f1:33:71:e6:cf:59:94:d8:
92:2b:5f:35:be:de:0a:f9:34:4f:4e:9e:b2:d0:c7:
ee:9d:00:c4:16:a3:55:61:82:2d:cc:76:b1:c6:6f:
f7:dd:9d:9b:67:08:2b:74:2c:0d:80:5f:20:0e:3e:
29:ff:49:2f:e6:5d:6c:39:fa:ff:4d:ba:c3:d9:8e:
62:00:a4:a3:d7:31:26:2c:06:bd:73:18:52:74:47:
d3:7b:5a:c6:4c:23:d8:43:0b:38:43:0f:5c:d1:fc:
ff:ab:1d:5c:49:1f:94:a6:7f:b0:40:5c:df:f6:f0:
f5:51:b9:d9:9d:70:ba:b0:8c:6d:8f:ab:cc:a4:1f:
f9:13
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
64:F1:4E:04:9C:D4:B6:E5:75:47:92:A5:20:CD:E6:01:5D:5B:0C:E0
X509v3 Authority Key Identifier:
keyid:76:5E:A3:40:0A:37:48:C3:B6:C6:12:68:D4:92:F8:BF:0A:90:82:39
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/dl6jQAo3SMO2xhJo1JL4vwqQgjk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/65/74e15f-f487-4559-bfdd-0fc58e58cac9/1/dl6jQAo3SMO2xhJo1JL4vwqQgjk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:a7:67:ae:bc:3a:af:95:5a:a6:46:36:ed:15:55:a0:37:10:
5a:a2:4a:36:4f:d9:02:dc:d2:72:2b:15:43:e3:96:aa:54:a8:
24:80:db:bc:f7:18:0b:6e:a7:a8:64:d4:a5:30:22:4b:67:3a:
c4:c5:26:79:90:c3:65:5b:89:01:88:ab:33:65:aa:7e:5c:3d:
cf:6b:99:b5:9d:e9:7c:e1:80:12:fd:4d:07:2c:cb:da:5f:1c:
b1:16:f7:a4:77:02:5a:c3:7f:b2:5b:ac:78:96:b4:cb:04:44:
13:68:5c:74:5e:bf:70:1c:7a:e6:25:f3:cb:01:f6:86:94:34:
0b:30:1c:78:f1:55:99:fa:59:03:03:0d:23:a9:3f:29:9b:38:
d3:35:7e:06:3b:7b:4a:71:9c:8d:38:f4:80:11:07:fe:e1:5a:
81:18:97:32:5b:dc:8c:5b:21:eb:3d:51:98:00:8a:33:d7:25:
24:12:51:94:a6:76:b2:bc:19:c0:b4:40:e9:d1:08:f4:26:52:
3a:c9:bd:75:ba:6d:38:f5:f0:4a:88:75:02:5a:23:43:1c:9b:
b7:fb:ac:b8:a3:f6:71:c5:3f:b0:05:12:af:8c:d9:3f:9b:49:
93:35:2e:40:2a:51:ca:e4:fd:d7:ee:2f:98:c0:46:e4:8d:cc:
a4:e4:a0:24
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmN6jqqVRC63tXevvmthAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc2NWVhMzQwMGEzNzQ4YzNiNmM2MTI2OGQ0OTJmOGJmMGE5
MDgyMzkwHhcNMjUwNjE0MDQwMDQ3WhcNMjUwNjE1MDQwMDQ3WjAzMTEwLwYDVQQD
Eyg2NGYxNGUwNDljZDRiNmU1NzU0NzkyYTUyMGNkZTYwMTVkNWIwY2UwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqTu1RCcD6qtuVRmwe+B0tcBEXcyV
1zSmt480UTv9NjdVyEWMzA4h11Eo2DOIxvCjN6hkSIrrp7pCMCZc6fA6azzcXEYD
nMP0XOeoMfsJD4XLdtakH/+Fszo1T21v0PiOXDwfhal1uAnBTsR0xzLNf4sxOnDy
nSEIAqzQTw/F8TNx5s9ZlNiSK181vt4K+TRPTp6y0MfunQDEFqNVYYItzHaxxm/3
3Z2bZwgrdCwNgF8gDj4p/0kv5l1sOfr/TbrD2Y5iAKSj1zEmLAa9cxhSdEfTe1rG
TCPYQws4Qw9c0fz/qx1cSR+Upn+wQFzf9vD1UbnZnXC6sIxtj6vMpB/5EwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGTxTgSc1LbldUeSpSDN5gFdWwzgMB8GA1UdIwQY
MBaAFHZeo0AKN0jDtsYSaNSS+L8KkII5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82NS83NGUxNWYtZjQ4Ny00NTU5LWJmZGQt
MGZjNThlNThjYWM5LzEvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82NS83NGUxNWYtZjQ4Ny00NTU5LWJmZGQtMGZjNThlNThjYWM5
LzEvZGw2alFBbzNTTU8yeGhKbzFKTDR2d3FRZ2prLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAKdnrrw6
r5VapkY27RVVoDcQWqJKNk/ZAtzScisVQ+OWqlSoJIDbvPcYC26nqGTUpTAiS2c6
xMUmeZDDZVuJAYirM2Wqflw9z2uZtZ3pfOGAEv1NByzL2l8csRb3pHcCWsN/slus
eJa0ywREE2hcdF6/cBx65iXzywH2hpQ0CzAcePFVmfpZAwMNI6k/KZs40zV+Bjt7
SnGcjTj0gBEH/uFagRiXMlvcjFsh6z1RmACKM9clJBJRlKZ2srwZwLRA6dEI9CZS
Osm9dbptOPXwSoh1AlojQxybt/usuKP2ccU/sAUSr4zZP5tJkzUuQCpRyuT91+4v
mMBG5I3MpOSgJA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:40:56 2025 by rpki-client