Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
File: exSNtC-Q6WRHvX9j7dinzL7qqEI.mft (raw, json)
Hash identifier: iFILdmAUk9kGX1BJLH3SeopbV8aeooU5iSEIT5+QHsg=
Subject key identifier: 48:48:85:9B:F2:21:3D:9D:A7:73:FB:E1:CD:A9:39:57:25:83:F5:B8
Authority key identifier: 7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
Certificate issuer: /CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Certificate serial: 01987306C7A053B5C7402E6A2E201501FE13
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
Manifest number: 161B
Signing time: Mon 04 Aug 2025 03:01:20 +0000
Manifest this update: Mon 04 Aug 2025 03:01:20 +0000
Manifest next update: Tue 05 Aug 2025 03:01:20 +0000
Files and hashes: 1: 4RKif-sVDnQcBzYwPxTkoab85KM.roa (hash: SrOlgyMeJ89vYHgpHfX8GmpEUx/qSwc8CkZHX0V14Kg=)
2: exSNtC-Q6WRHvX9j7dinzL7qqEI.crl (hash: fhgt3ESU6iVIt6U7JNMrAxnZr62EeHIlkcLw3LlohrI=)
3: xPN9YjQh6cWbiBVSRMvIJ-yRdfQ.roa (hash: NF3FvBakkmVr+pBAEq+awbP4Tn7Z+Cmnixhp8Jn6OBo=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 05 Aug 2025 03:00:28 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:73:06:c7:a0:53:b5:c7:40:2e:6a:2e:20:15:01:fe:13
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=7b148db42f90e96447bd7f63edd8a7ccbeeaa842
Validity
Not Before: Aug 4 03:01:20 2025 GMT
Not After : Aug 5 03:01:20 2025 GMT
Subject: CN=4848859bf2213d9da773fbe1cda939572583f5b8
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:eb:f7:01:45:f4:3c:75:b0:f8:4e:9a:28:8e:
81:ea:d9:f6:16:97:6a:21:c8:a6:1c:bb:ee:43:58:
85:1c:61:96:29:ec:91:1f:84:ba:8e:d3:ae:20:d3:
7e:30:ad:67:95:23:21:64:65:3d:1c:e1:08:26:46:
aa:a7:23:c7:28:72:d7:0b:c7:3c:2a:e8:16:e2:ee:
02:10:79:db:e3:ce:e9:94:73:71:88:6d:6c:47:6c:
9e:f4:ae:ad:aa:e2:c7:c8:90:4c:89:f5:f9:79:73:
88:5a:4b:2e:b6:7d:b3:37:60:58:cc:65:e2:f3:52:
93:7d:5f:41:51:94:60:2b:6f:28:83:61:d8:d8:11:
07:6d:d8:2e:86:43:bd:88:e6:4e:c1:7b:5a:5b:70:
99:42:15:89:b3:d1:83:8b:78:3f:f4:99:11:21:78:
84:99:75:8a:33:d8:a4:49:a1:87:8a:dc:f2:36:e8:
1e:04:e7:b3:5f:b4:2c:df:14:28:d7:f6:6c:57:1b:
c0:46:0d:c6:bc:44:a4:bd:75:44:41:ce:e0:a5:9b:
bb:98:13:55:eb:31:45:6b:dd:0a:a9:2b:e8:17:8d:
4b:50:09:be:a6:54:e1:48:1e:a3:1d:8f:e8:61:87:
6d:71:de:78:7a:53:b8:de:a7:27:41:ff:e7:ae:fb:
05:dd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
48:48:85:9B:F2:21:3D:9D:A7:73:FB:E1:CD:A9:39:57:25:83:F5:B8
X509v3 Authority Key Identifier:
keyid:7B:14:8D:B4:2F:90:E9:64:47:BD:7F:63:ED:D8:A7:CC:BE:EA:A8:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/exSNtC-Q6WRHvX9j7dinzL7qqEI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6c/f24885-a4db-4fa1-a72d-86d6c1305357/1/exSNtC-Q6WRHvX9j7dinzL7qqEI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
98:7d:89:02:96:af:61:9c:43:24:73:84:bc:7f:4c:e2:6d:29:
25:b6:75:e2:75:6f:41:57:98:95:4a:92:f6:80:7b:58:76:a2:
61:ba:6e:be:a9:cd:b0:45:39:bf:6d:9a:c1:6f:1a:ca:d6:52:
41:fd:44:4c:e9:2c:46:6a:cf:0a:8d:fa:96:e4:0c:10:35:99:
f8:f9:91:b2:48:eb:f1:ab:4a:e0:2d:4d:45:48:a4:23:a0:03:
50:44:ea:af:1c:2e:9b:64:5f:30:34:12:dd:0a:23:db:b3:2b:
27:7d:2c:ba:89:ed:6c:fe:02:a7:ee:84:b0:4a:54:b4:fc:55:
51:ba:d5:ef:1e:d8:83:8a:59:2a:70:17:4a:4e:07:29:e6:c0:
34:98:1e:4e:fc:12:ae:17:ac:d3:e8:18:c6:fd:b7:99:83:81:
09:45:7c:8d:17:4d:cc:a0:89:3a:78:44:48:a9:41:e1:cc:5f:
03:08:92:39:22:80:f9:c7:83:d2:d4:fd:36:d2:33:67:c8:72:
4e:b8:0c:9b:08:b6:86:d1:f0:8f:e9:82:98:09:55:3c:ed:f8:
93:59:b5:55:b0:05:f6:b0:14:ef:2a:e8:59:6d:10:7d:23:8b:
26:11:c4:04:25:b9:07:3c:92:e3:17:e9:8f:5f:59:0f:16:f0:
af:2d:e2:de
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhzBsegU7XHQC5qLiAVAf4TMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDdiMTQ4ZGI0MmY5MGU5NjQ0N2JkN2Y2M2VkZDhhN2NjYmVl
YWE4NDIwHhcNMjUwODA0MDMwMTIwWhcNMjUwODA1MDMwMTIwWjAzMTEwLwYDVQQD
Eyg0ODQ4ODU5YmYyMjEzZDlkYTc3M2ZiZTFjZGE5Mzk1NzI1ODNmNWI4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtuv3AUX0PHWw+E6aKI6B6tn2Fpdq
IcimHLvuQ1iFHGGWKeyRH4S6jtOuINN+MK1nlSMhZGU9HOEIJkaqpyPHKHLXC8c8
KugW4u4CEHnb487plHNxiG1sR2ye9K6tquLHyJBMifX5eXOIWksutn2zN2BYzGXi
81KTfV9BUZRgK28og2HY2BEHbdguhkO9iOZOwXtaW3CZQhWJs9GDi3g/9JkRIXiE
mXWKM9ikSaGHitzyNugeBOezX7Qs3xQo1/ZsVxvARg3GvESkvXVEQc7gpZu7mBNV
6zFFa90KqSvoF41LUAm+plThSB6jHY/oYYdtcd54elO43qcnQf/nrvsF3QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEhIhZvyIT2dp3P74c2pOVclg/W4MB8GA1UdIwQY
MBaAFHsUjbQvkOlkR71/Y+3Yp8y+6qhCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82Yy9mMjQ4ODUtYTRkYi00ZmExLWE3MmQt
ODZkNmMxMzA1MzU3LzEvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82Yy9mMjQ4ODUtYTRkYi00ZmExLWE3MmQtODZkNmMxMzA1MzU3
LzEvZXhTTnRDLVE2V1JIdlg5ajdkaW56TDdxcUVJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmH2JApav
YZxDJHOEvH9M4m0pJbZ14nVvQVeYlUqS9oB7WHaiYbpuvqnNsEU5v22awW8aytZS
Qf1ETOksRmrPCo36luQMEDWZ+PmRskjr8atK4C1NRUikI6ADUETqrxwum2RfMDQS
3Qoj27MrJ30suontbP4Cp+6EsEpUtPxVUbrV7x7Yg4pZKnAXSk4HKebANJgeTvwS
rhes0+gYxv23mYOBCUV8jRdNzKCJOnhESKlB4cxfAwiSOSKA+ceD0tT9NtIzZ8hy
TrgMmwi2htHwj+mCmAlVPO34k1m1VbAF9rAU7yroWW0QfSOLJhHEBCW5BzyS4xfp
j19ZDxbwry3i3g==
-----END CERTIFICATE-----
Generated at Mon Aug 4 11:27:48 2025 by rpki-client