
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
File: R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft (raw, json)
Hash identifier: W32PtK3UEmgWHAkq9WuiVW0qtZUcr9CcsodQIQske0s=
Subject key identifier: F4:E9:02:88:4A:59:07:93:F5:8A:50:EE:12:B5:CD:63:EA:F4:D7:06
Authority key identifier: 47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
Certificate issuer: /CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Certificate serial: 019873E2AB1E9EF19F43F32DB7F5D47C50E2
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
Manifest number: 1617
Signing time: Mon 04 Aug 2025 07:01:31 +0000
Manifest this update: Mon 04 Aug 2025 07:01:31 +0000
Manifest next update: Tue 05 Aug 2025 07:01:31 +0000
Files and hashes: 1: M_ZucCsuJb1Fkv6phLwqAkn6J0Q.roa (hash: f0NnZS14FEEVK+otZH9sTWdHvzqdq6zBgg0/lm/taxs=)
2: R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl (hash: A2j5GW005glfmHQ1He0tbCcRxi0f0fP6CG8407274qo=)
3: kNpqx0tZlqJV-cV06kVoinEAEvE.roa (hash: yXJYbGR5++qBsVQrRHL4bHSCZiui648QCWfzX8PBFak=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:e2:ab:1e:9e:f1:9f:43:f3:2d:b7:f5:d4:7c:50:e2
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=474a88bc6e9e10bbaf150f019bbf8a615a2b03c2
Validity
Not Before: Aug 4 07:01:31 2025 GMT
Not After : Aug 5 07:01:31 2025 GMT
Subject: CN=f4e902884a590793f58a50ee12b5cd63eaf4d706
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9b:9c:e2:ae:12:7a:80:fe:b6:68:63:c0:80:74:
86:54:95:d7:7f:cd:0c:19:b2:ce:04:8e:2a:60:a5:
fb:49:30:b4:5c:80:46:f6:7e:4c:79:9d:62:b4:71:
49:b5:80:17:36:60:20:5e:e9:4f:47:76:46:67:e7:
37:7b:32:49:ff:ea:d4:90:8c:10:82:d7:09:13:f8:
40:c5:a6:3d:d1:84:82:89:a9:1c:89:4c:18:2a:24:
01:7c:9d:b9:b1:0d:c3:ea:86:9d:e0:76:c7:6f:d8:
39:b1:03:1b:8f:7e:8a:8c:44:97:2d:b6:69:31:fc:
c8:66:1c:b0:22:24:1f:b7:7f:15:24:41:19:ec:5d:
35:03:62:c1:7e:b1:87:cd:1a:84:48:6b:1c:93:84:
bf:fc:61:03:56:8b:62:25:75:60:9b:3c:3d:49:40:
8f:4c:9e:48:bc:c4:67:b0:f7:e6:8a:d5:09:c6:5b:
d9:44:89:29:1a:93:52:e5:7b:63:c3:70:26:09:ff:
27:ea:81:26:0a:59:5b:de:94:b9:71:db:98:89:3d:
a9:43:32:a3:02:41:b2:67:63:1d:6f:09:7f:26:52:
e6:db:7d:be:8c:5f:4f:2b:6c:b5:b8:49:13:9a:f7:
c7:5e:a7:09:39:f5:1e:b4:27:56:3c:be:38:b0:bf:
58:d9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F4:E9:02:88:4A:59:07:93:F5:8A:50:EE:12:B5:CD:63:EA:F4:D7:06
X509v3 Authority Key Identifier:
keyid:47:4A:88:BC:6E:9E:10:BB:AF:15:0F:01:9B:BF:8A:61:5A:2B:03:C2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R0qIvG6eELuvFQ8Bm7-KYVorA8I.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/67/bad1c1-365d-41de-ad7c-ce8fc93adb21/1/R0qIvG6eELuvFQ8Bm7-KYVorA8I.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
12:08:b2:47:5c:f0:bb:97:41:47:2e:88:a1:37:21:e6:cd:78:
03:eb:0c:88:b7:41:25:5c:0f:48:8d:9d:1c:65:d6:33:0c:e0:
fd:ad:8d:d9:12:8a:ac:1a:6d:d3:a9:09:f5:a4:d2:70:1e:5e:
70:7c:08:ea:a1:28:d3:4a:c5:9c:84:e7:dd:28:c8:1b:5c:dc:
9d:2e:b9:ed:2a:29:50:0d:47:ab:e7:47:1c:7b:29:bf:b6:01:
9a:f8:c5:33:f9:7d:11:2c:40:71:4f:2e:fb:dd:cb:b7:43:f7:
9d:7d:59:2c:75:17:e9:fd:0f:aa:32:ab:a0:1c:d4:6e:44:9d:
a8:4d:18:ea:55:2a:41:65:29:17:d6:94:3e:ad:a0:07:e0:e2:
fa:19:78:17:1d:ad:f7:03:bc:9a:dd:01:63:df:d6:7f:5f:fa:
67:9f:15:96:0c:97:9e:fe:c7:b5:03:fe:4d:ee:36:23:76:8b:
49:f7:30:91:a2:f6:69:0c:2f:47:d2:b6:fc:fe:cd:22:a2:ab:
73:2b:9f:9a:36:3d:ba:9f:32:01:fe:81:b8:cd:e2:81:3a:9a:
4f:41:15:1c:69:24:6f:1f:26:ba:e3:bc:1c:7e:96:c5:2a:16:
5f:59:d2:7c:90:53:98:8b:f1:9d:2c:e3:cf:99:0e:a4:d8:35:
e6:57:69:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhz4qsenvGfQ/Mtt/XUfFDiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NGE4OGJjNmU5ZTEwYmJhZjE1MGYwMTliYmY4YTYxNWEy
YjAzYzIwHhcNMjUwODA0MDcwMTMxWhcNMjUwODA1MDcwMTMxWjAzMTEwLwYDVQQD
EyhmNGU5MDI4ODRhNTkwNzkzZjU4YTUwZWUxMmI1Y2Q2M2VhZjRkNzA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAm5zirhJ6gP62aGPAgHSGVJXXf80M
GbLOBI4qYKX7STC0XIBG9n5MeZ1itHFJtYAXNmAgXulPR3ZGZ+c3ezJJ/+rUkIwQ
gtcJE/hAxaY90YSCiakciUwYKiQBfJ25sQ3D6oad4HbHb9g5sQMbj36KjESXLbZp
MfzIZhywIiQft38VJEEZ7F01A2LBfrGHzRqESGsck4S//GEDVotiJXVgmzw9SUCP
TJ5IvMRnsPfmitUJxlvZRIkpGpNS5Xtjw3AmCf8n6oEmCllb3pS5cduYiT2pQzKj
AkGyZ2Mdbwl/JlLm232+jF9PK2y1uEkTmvfHXqcJOfUetCdWPL44sL9Y2QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPTpAohKWQeT9YpQ7hK1zWPq9NcGMB8GA1UdIwQY
MBaAFEdKiLxunhC7rxUPAZu/imFaKwPCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Ny9iYWQxYzEtMzY1ZC00MWRlLWFkN2Mt
Y2U4ZmM5M2FkYjIxLzEvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Ny9iYWQxYzEtMzY1ZC00MWRlLWFkN2MtY2U4ZmM5M2FkYjIx
LzEvUjBxSXZHNmVFTHV2RlE4Qm03LUtZVm9yQThJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAEgiyR1zw
u5dBRy6IoTch5s14A+sMiLdBJVwPSI2dHGXWMwzg/a2N2RKKrBpt06kJ9aTScB5e
cHwI6qEo00rFnITn3SjIG1zcnS657SopUA1Hq+dHHHspv7YBmvjFM/l9ESxAcU8u
+93Lt0P3nX1ZLHUX6f0PqjKroBzUbkSdqE0Y6lUqQWUpF9aUPq2gB+Di+hl4Fx2t
9wO8mt0BY9/Wf1/6Z58VlgyXnv7HtQP+Te42I3aLSfcwkaL2aQwvR9K2/P7NIqKr
cyufmjY9up8yAf6BuM3igTqaT0EVHGkkbx8muuO8HH6WxSoWX1nSfJBTmIvxnSzj
z5kOpNg15ldpIg==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:05:18 2025 by rpki-client