Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
File: itpL9fGQ85mLgMYUmhRjJw-77hU.mft (raw, json)
Hash identifier: vxGKaXemZiCUAzWDms/mOZRtJVFf7Amk24Q2jhiXueM=
Subject key identifier: 0B:6F:4A:B3:57:26:18:3E:98:52:AF:E0:66:B9:2A:33:32:20:23:8D
Authority key identifier: 8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
Certificate issuer: /CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Certificate serial: 01976C98F23B0291C953F613B907C921094C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
Manifest number: 0B26
Signing time: Sat 14 Jun 2025 04:00:52 +0000
Manifest this update: Sat 14 Jun 2025 04:00:52 +0000
Manifest next update: Sun 15 Jun 2025 04:00:52 +0000
Files and hashes: 1: U9YffwceqXxTMUqyDWCzvXHoX1g.roa (hash: /csuQO3etFqd6uIjkI+HLHNXHWK6MILTkxxMM7ARd6Q=)
2: itpL9fGQ85mLgMYUmhRjJw-77hU.crl (hash: xcmwinl2LXLnYlxv4JUNz4PLSa3ngmicX83yLL/Aaes=)
3: mogbma_RtoADQ0xZNuTva7SSLFU.roa (hash: rClnvodfou+7xsqC44z7GFztSAn0mdcV3oviTeI4b0g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:98:f2:3b:02:91:c9:53:f6:13:b9:07:c9:21:09:4c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8ada4bf5f190f3998b80c6149a1463270fbbee15
Validity
Not Before: Jun 14 04:00:52 2025 GMT
Not After : Jun 15 04:00:52 2025 GMT
Subject: CN=0b6f4ab35726183e9852afe066b92a333220238d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:a3:be:e6:14:4d:94:d9:0c:de:4c:6f:17:4c:
fb:5c:4d:c2:5a:8d:4a:7a:a7:42:24:fd:02:8a:19:
c8:6b:a5:0d:d4:37:fc:20:4e:47:e7:43:33:1e:81:
7a:b3:67:95:d1:94:8f:34:90:f1:85:4f:0c:86:87:
1b:ce:5b:05:8d:80:ce:7a:f0:5b:37:fb:57:16:c3:
8a:c1:cf:8f:c2:93:5e:44:1f:21:cd:cf:72:92:a4:
f9:cf:50:27:a2:43:63:be:1d:25:e7:0b:54:7d:19:
c2:c5:03:50:57:f2:c4:88:4a:de:78:05:14:9a:bc:
e1:ea:4f:20:6d:d9:ef:e1:55:c6:a1:33:b6:da:b1:
c8:64:03:1e:69:6f:8c:f3:a2:60:4a:ce:f2:ae:4f:
87:55:22:bc:a8:9f:4e:69:97:4e:9d:3d:21:74:59:
4a:cb:5a:5e:ea:f6:4e:c2:45:f8:c7:0a:b4:ce:7e:
5b:43:e7:7d:89:2e:1b:b3:86:ce:c8:b2:46:cb:54:
c9:d6:95:ab:23:b3:af:79:b5:03:2f:fe:90:4d:1c:
47:a2:4f:20:99:c7:66:b1:f4:6b:73:5a:1e:f9:48:
8f:4f:3c:4c:29:74:2e:58:e8:ed:ad:e1:0f:13:48:
2e:bd:c3:dd:52:d0:dc:81:67:f4:64:88:8a:1a:71:
ab:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:6F:4A:B3:57:26:18:3E:98:52:AF:E0:66:B9:2A:33:32:20:23:8D
X509v3 Authority Key Identifier:
keyid:8A:DA:4B:F5:F1:90:F3:99:8B:80:C6:14:9A:14:63:27:0F:BB:EE:15
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/itpL9fGQ85mLgMYUmhRjJw-77hU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/7f/ca5e24-6e92-4d3a-9ad5-8935e9079796/1/itpL9fGQ85mLgMYUmhRjJw-77hU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1f:36:d1:f3:0b:ff:b2:d3:72:73:0d:c3:cc:e1:0f:a8:40:16:
6b:2b:79:e9:ed:34:97:72:74:f7:8d:f1:35:83:3d:be:14:5b:
bc:ef:79:60:0c:ed:c6:d4:9f:fa:60:09:10:41:86:31:36:00:
73:c3:89:03:13:56:80:09:0f:7c:37:74:23:95:2d:62:51:35:
fc:1a:89:07:f9:4a:2d:06:6c:48:89:30:53:91:44:21:50:6f:
43:1c:7f:3c:09:cb:4f:6b:e0:53:f1:10:86:fd:65:af:73:f2:
06:98:6f:cc:9a:80:a8:95:c1:83:63:59:48:29:55:05:50:6a:
93:6c:0d:e4:42:f2:b0:f0:fa:ab:c8:ab:83:f0:de:0b:8a:12:
2e:a4:64:7c:ec:12:e8:9c:2e:45:f1:8c:b6:91:38:4e:3f:28:
34:ac:a9:1e:f9:f6:f0:af:25:52:08:e6:45:24:10:3e:9d:fa:
3d:d4:8e:0c:3d:a0:aa:48:db:cf:7b:f2:12:4c:15:9b:aa:f3:
25:c0:d8:44:fb:e7:c9:21:34:86:d8:6c:c5:d0:91:65:d6:9c:
51:77:c8:00:00:f6:1e:aa:31:c1:a2:b7:a8:9b:49:d4:ba:bc:
9c:0c:5e:9e:35:e6:95:f6:0c:7f:b9:91:7f:33:d5:74:d3:ba:
21:84:16:03
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsmPI7ApHJU/YTuQfJIQlMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDhhZGE0YmY1ZjE5MGYzOTk4YjgwYzYxNDlhMTQ2MzI3MGZi
YmVlMTUwHhcNMjUwNjE0MDQwMDUyWhcNMjUwNjE1MDQwMDUyWjAzMTEwLwYDVQQD
EygwYjZmNGFiMzU3MjYxODNlOTg1MmFmZTA2NmI5MmEzMzMyMjAyMzhkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt6O+5hRNlNkM3kxvF0z7XE3CWo1K
eqdCJP0CihnIa6UN1Df8IE5H50MzHoF6s2eV0ZSPNJDxhU8MhocbzlsFjYDOevBb
N/tXFsOKwc+PwpNeRB8hzc9ykqT5z1AnokNjvh0l5wtUfRnCxQNQV/LEiEreeAUU
mrzh6k8gbdnv4VXGoTO22rHIZAMeaW+M86JgSs7yrk+HVSK8qJ9OaZdOnT0hdFlK
y1pe6vZOwkX4xwq0zn5bQ+d9iS4bs4bOyLJGy1TJ1pWrI7OvebUDL/6QTRxHok8g
mcdmsfRrc1oe+UiPTzxMKXQuWOjtreEPE0guvcPdUtDcgWf0ZIiKGnGrMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAtvSrNXJhg+mFKv4Ga5KjMyICONMB8GA1UdIwQY
MBaAFIraS/XxkPOZi4DGFJoUYycPu+4VMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUt
ODkzNWU5MDc5Nzk2LzEvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83Zi9jYTVlMjQtNmU5Mi00ZDNhLTlhZDUtODkzNWU5MDc5Nzk2
LzEvaXRwTDlmR1E4NW1MZ01ZVW1oUmpKdy03N2hVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHzbR8wv/
stNycw3DzOEPqEAWayt56e00l3J0943xNYM9vhRbvO95YAztxtSf+mAJEEGGMTYA
c8OJAxNWgAkPfDd0I5UtYlE1/BqJB/lKLQZsSIkwU5FEIVBvQxx/PAnLT2vgU/EQ
hv1lr3PyBphvzJqAqJXBg2NZSClVBVBqk2wN5ELysPD6q8irg/DeC4oSLqRkfOwS
6JwuRfGMtpE4Tj8oNKypHvn28K8lUgjmRSQQPp36PdSODD2gqkjbz3vyEkwVm6rz
JcDYRPvnySE0hthsxdCRZdacUXfIAAD2HqoxwaK3qJtJ1Lq8nAxenjXmlfYMf7mR
fzPVdNO6IYQWAw==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:26:40 2025 by rpki-client