Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
File: r6URZapQNqzaEf7gAg40_MQ57eY.mft (raw, json)
Hash identifier: dsnuPCIPdPqHJ5R4wj2tICvc5WrLflTxDtANuY6YS/w=
Subject key identifier: 14:78:4B:15:09:0A:17:DA:1C:92:67:82:3B:71:BA:00:12:80:CB:03
Authority key identifier: AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
Certificate issuer: /CN=afa51165aa5036acda11fee0020e34fcc439ede6
Certificate serial: 019885E7F24D45B477EAA69B691C0182E3CF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
Manifest number: 1626
Signing time: Thu 07 Aug 2025 19:00:27 +0000
Manifest this update: Thu 07 Aug 2025 19:00:27 +0000
Manifest next update: Fri 08 Aug 2025 19:00:27 +0000
Files and hashes: 1: JXD4YyeKM2DbSEsSMseYjT0o7Ww.roa (hash: YAf2/29DjA3Na+Hgt1fQsq3jSQYLqFSkMb1fHAx4RUM=)
2: r6URZapQNqzaEf7gAg40_MQ57eY.crl (hash: Q4cdCvP/0KWzBOcszCIfDO0aphGpirseW8GIZkUQ7QY=)
3: rJjHJUl0uD_7dHjW4bG3nCxQ5iY.roa (hash: nazoboMf2p4XX7ExK1xqcEEDrXTJmHzU9uxX+kIOchk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 08 Aug 2025 16:13:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:85:e7:f2:4d:45:b4:77:ea:a6:9b:69:1c:01:82:e3:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=afa51165aa5036acda11fee0020e34fcc439ede6
Validity
Not Before: Aug 7 19:00:27 2025 GMT
Not After : Aug 8 19:00:27 2025 GMT
Subject: CN=14784b15090a17da1c9267823b71ba001280cb03
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:f9:55:fe:c4:58:06:a5:f9:cf:f6:01:62:4f:f9:
53:77:3d:5f:8d:4b:1e:ff:84:20:6d:76:47:98:93:
9d:8b:1c:0c:88:c8:d2:9d:b8:81:7c:69:66:de:9e:
f0:4a:56:e4:5d:5a:25:d9:ba:77:a5:20:8c:81:41:
27:47:47:c8:15:3b:5a:3b:69:b0:87:f5:ea:54:03:
0f:9b:80:76:ce:9f:3d:ce:4f:1b:17:11:bd:79:98:
04:a4:78:3a:17:ed:f4:15:35:8d:af:37:f5:78:71:
7e:a0:fd:90:c7:29:91:24:6e:20:ad:4e:96:88:d4:
43:a4:99:28:4a:75:00:06:60:4f:ce:3f:61:4c:bb:
58:34:aa:d8:0a:96:0b:40:f5:bd:48:bc:d2:3a:f0:
ac:e9:f1:ed:2d:59:9d:10:13:ff:a8:96:ed:21:24:
a8:60:05:ef:48:0f:51:b3:66:1d:37:41:ab:31:06:
6b:c3:71:3b:67:50:b6:4e:22:df:df:b3:f8:f0:26:
dd:93:95:a0:47:82:79:7a:2b:c8:0e:1b:10:92:f8:
fb:63:7c:1e:99:6e:2d:3d:cf:db:c9:cb:17:ce:1c:
4e:2d:a2:03:02:99:43:c7:09:51:80:f1:fc:61:e0:
d9:e6:68:16:dc:2e:4b:0c:98:15:d8:a3:82:0f:42:
38:49
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:78:4B:15:09:0A:17:DA:1C:92:67:82:3B:71:BA:00:12:80:CB:03
X509v3 Authority Key Identifier:
keyid:AF:A5:11:65:AA:50:36:AC:DA:11:FE:E0:02:0E:34:FC:C4:39:ED:E6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/r6URZapQNqzaEf7gAg40_MQ57eY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/78/2da1ec-aa4b-4d94-98cb-a776e4a63e6f/1/r6URZapQNqzaEf7gAg40_MQ57eY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7a:5e:ed:98:bf:39:74:89:4b:81:f8:d6:87:02:93:20:de:c9:
2f:41:40:45:fb:b6:4e:a1:8c:c7:39:18:53:c9:df:18:82:86:
bd:5b:48:ec:97:95:0a:0d:62:f3:78:ff:a9:af:b9:62:9a:68:
3e:0d:db:c2:b3:99:1d:8d:c2:d1:78:33:fe:6d:36:e3:5b:e6:
b9:75:6a:43:a1:8b:32:cb:57:fb:42:9c:34:05:d0:ac:bd:a0:
97:89:9f:9a:07:a5:c5:53:fd:a1:ee:5d:ea:4f:51:b3:08:12:
85:65:b8:2d:27:dc:7c:df:b0:75:4b:cd:68:94:6f:e5:30:cb:
7e:7e:62:49:26:47:f3:11:c6:98:44:a0:d2:5f:4b:cb:1e:66:
99:e0:58:48:33:ed:3b:83:7f:52:7b:bd:0d:09:fd:9b:26:1a:
71:67:5c:50:0d:09:43:4a:38:a5:67:cd:49:f5:68:66:37:56:
bb:5a:14:20:48:12:4e:c5:2f:10:60:89:f3:ec:d3:95:bd:4e:
2a:22:e6:0f:4a:a4:03:6f:f3:5f:ba:d8:dc:63:0c:b8:14:11:
1a:c0:96:d2:21:fa:9a:21:eb:6e:df:60:74:b2:ff:f5:21:01:
27:42:e3:58:f7:6a:20:ce:20:e4:9d:ff:65:c2:2a:c5:a1:2f:
dc:f2:ce:83
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZiF5/JNRbR36qabaRwBguPPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFmYTUxMTY1YWE1MDM2YWNkYTExZmVlMDAyMGUzNGZjYzQz
OWVkZTYwHhcNMjUwODA3MTkwMDI3WhcNMjUwODA4MTkwMDI3WjAzMTEwLwYDVQQD
EygxNDc4NGIxNTA5MGExN2RhMWM5MjY3ODIzYjcxYmEwMDEyODBjYjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA+VX+xFgGpfnP9gFiT/lTdz1fjUse
/4QgbXZHmJOdixwMiMjSnbiBfGlm3p7wSlbkXVol2bp3pSCMgUEnR0fIFTtaO2mw
h/XqVAMPm4B2zp89zk8bFxG9eZgEpHg6F+30FTWNrzf1eHF+oP2QxymRJG4grU6W
iNRDpJkoSnUABmBPzj9hTLtYNKrYCpYLQPW9SLzSOvCs6fHtLVmdEBP/qJbtISSo
YAXvSA9Rs2YdN0GrMQZrw3E7Z1C2TiLf37P48Cbdk5WgR4J5eivIDhsQkvj7Y3we
mW4tPc/bycsXzhxOLaIDAplDxwlRgPH8YeDZ5mgW3C5LDJgV2KOCD0I4SQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBR4SxUJChfaHJJngjtxugASgMsDMB8GA1UdIwQY
MBaAFK+lEWWqUDas2hH+4AIONPzEOe3mMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcjZVUlphcFFOcXphRWY3Z0FnNDBfTVE1N2VZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83OC8yZGExZWMtYWE0Yi00ZDk0LTk4Y2It
YTc3NmU0YTYzZTZmLzEvcjZVUlphcFFOcXphRWY3Z0FnNDBfTVE1N2VZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83OC8yZGExZWMtYWE0Yi00ZDk0LTk4Y2ItYTc3NmU0YTYzZTZm
LzEvcjZVUlphcFFOcXphRWY3Z0FnNDBfTVE1N2VZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAel7tmL85
dIlLgfjWhwKTIN7JL0FARfu2TqGMxzkYU8nfGIKGvVtI7JeVCg1i83j/qa+5Yppo
Pg3bwrOZHY3C0Xgz/m0241vmuXVqQ6GLMstX+0KcNAXQrL2gl4mfmgelxVP9oe5d
6k9RswgShWW4LSfcfN+wdUvNaJRv5TDLfn5iSSZH8xHGmESg0l9Lyx5mmeBYSDPt
O4N/Unu9DQn9myYacWdcUA0JQ0o4pWfNSfVoZjdWu1oUIEgSTsUvEGCJ8+zTlb1O
KiLmD0qkA2/zX7rY3GMMuBQRGsCW0iH6miHrbt9gdLL/9SEBJ0LjWPdqIM4g5J3/
ZcIqxaEv3PLOgw==
-----END CERTIFICATE-----
Generated at Fri Aug 8 00:19:10 2025 by rpki-client