Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
File: R1oGyte9DD25-KOB8euc1sdaqyg.mft (raw, json)
Hash identifier: tc7SGjNi63OhQf0s/dQE33b0JwDs8Nr/29tSlMQDp1M=
Subject key identifier: 8A:13:9E:77:09:95:29:2D:55:9D:40:5B:35:5B:6C:CD:7F:2E:6F:4F
Authority key identifier: 47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28
Certificate issuer: /CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28
Certificate serial: 01976D06D905A7C5AEFC4D573DCAF82C758A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
Manifest number: 014A
Signing time: Sat 14 Jun 2025 06:00:54 +0000
Manifest this update: Sat 14 Jun 2025 06:00:54 +0000
Manifest next update: Sun 15 Jun 2025 06:00:54 +0000
Files and hashes: 1: P26izWnWykundEbYZ5JEBhpU0uU.roa (hash: cWV+pN/zcAshvYcQxK5v+o4IGsyjFJQg91I3ipirKBI=)
2: R1oGyte9DD25-KOB8euc1sdaqyg.crl (hash: g+UdKdehNrJfoSyXJ1xnYJlEnw9mXaIqYgMFUGsu/gA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.crl
rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:06:d9:05:a7:c5:ae:fc:4d:57:3d:ca:f8:2c:75:8a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=475a06cad7bd0c3db9f8a381f1eb9cd6c75aab28
Validity
Not Before: Jun 14 06:00:54 2025 GMT
Not After : Jun 15 06:00:54 2025 GMT
Subject: CN=8a139e770995292d559d405b355b6ccd7f2e6f4f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:3c:76:b2:63:fb:aa:d6:b6:d1:7d:93:d5:e9:
e4:51:3e:5b:6c:30:c3:80:6c:23:82:fb:ed:f3:b9:
9a:69:15:85:5a:fc:fc:e3:aa:aa:8d:48:d7:75:45:
7a:1a:21:8b:9c:4b:b0:9f:89:31:9d:29:42:31:ba:
5c:6f:96:c6:79:2e:94:b0:45:43:83:b4:12:6f:85:
20:40:c3:ea:d2:9e:c0:e6:69:97:dc:1a:5d:e5:78:
30:a7:66:dc:34:91:e6:fe:32:71:03:88:73:88:b5:
e8:00:9c:30:a4:be:ee:93:b4:7f:45:bf:43:53:aa:
05:30:9f:9e:a4:97:01:a3:11:5e:54:83:57:b0:2d:
d3:cc:a0:5a:92:0d:93:2e:30:6e:18:08:6c:c5:14:
be:b8:27:2e:81:04:b8:2f:d6:cf:7c:72:c2:f0:e0:
f5:2e:2d:29:b6:a3:1b:66:b0:81:ef:0a:d8:24:ed:
91:04:df:ad:a9:dc:9a:ef:04:41:e3:e3:ef:50:0d:
dd:f6:57:ca:a2:5c:61:86:16:d6:46:3d:e6:dd:bf:
db:db:b0:7f:2b:5c:92:8a:4d:94:25:90:eb:9b:89:
57:aa:fe:07:be:3d:92:09:48:85:41:02:bd:5d:ee:
ed:08:ef:24:96:77:9d:aa:7b:a6:35:80:1d:d7:80:
79:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8A:13:9E:77:09:95:29:2D:55:9D:40:5B:35:5B:6C:CD:7F:2E:6F:4F
X509v3 Authority Key Identifier:
keyid:47:5A:06:CA:D7:BD:0C:3D:B9:F8:A3:81:F1:EB:9C:D6:C7:5A:AB:28
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/R1oGyte9DD25-KOB8euc1sdaqyg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/89/bdfd70-3067-473d-8f65-b55322028bb8/1/R1oGyte9DD25-KOB8euc1sdaqyg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:56:2d:c1:de:1d:08:67:06:01:30:00:38:c3:6a:7a:72:3c:
93:36:30:53:09:88:f3:9e:67:c2:73:9f:8d:c9:25:4d:ea:f2:
64:7a:88:d9:ba:fa:4c:6e:11:74:be:7c:fd:56:92:a4:d4:ae:
96:0c:72:bd:4f:71:f4:72:7a:85:e6:30:e2:4e:e9:ce:f6:f4:
6e:40:f5:d2:95:b3:ef:ae:5a:81:83:28:2d:e3:5a:bc:58:e8:
2c:b5:0b:ca:57:31:0f:6c:53:c7:c4:cc:c8:27:e5:8b:77:72:
2b:72:e2:3d:cb:f7:c0:d0:04:77:61:aa:74:45:53:da:cd:e5:
07:d3:02:0a:dc:69:3d:8f:e6:0d:05:99:ba:2a:30:e7:83:2b:
1f:34:69:85:49:e2:57:3a:a8:3f:61:19:e6:23:4e:f2:87:eb:
a4:cb:87:18:47:aa:c3:f7:bf:18:04:40:65:4f:46:45:d5:0b:
73:e3:9b:03:63:71:98:85:9d:66:60:bf:a4:ff:4e:9a:38:34:
3f:9c:1a:7f:1a:9f:9d:83:81:71:3c:9c:e8:20:d8:fa:a8:67:
ae:c9:b6:6a:c2:69:e5:04:c6:0b:fd:c5:a1:58:28:e0:5f:fe:
22:5e:80:8d:9c:15:01:ca:af:6a:ec:9f:6c:23:72:72:4e:ef:
1c:9e:9d:92
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtBtkFp8Wu/E1XPcr4LHWKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3NWEwNmNhZDdiZDBjM2RiOWY4YTM4MWYxZWI5Y2Q2Yzc1
YWFiMjgwHhcNMjUwNjE0MDYwMDU0WhcNMjUwNjE1MDYwMDU0WjAzMTEwLwYDVQQD
Eyg4YTEzOWU3NzA5OTUyOTJkNTU5ZDQwNWIzNTViNmNjZDdmMmU2ZjRmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuTx2smP7qta20X2T1enkUT5bbDDD
gGwjgvvt87maaRWFWvz846qqjUjXdUV6GiGLnEuwn4kxnSlCMbpcb5bGeS6UsEVD
g7QSb4UgQMPq0p7A5mmX3Bpd5Xgwp2bcNJHm/jJxA4hziLXoAJwwpL7uk7R/Rb9D
U6oFMJ+epJcBoxFeVINXsC3TzKBakg2TLjBuGAhsxRS+uCcugQS4L9bPfHLC8OD1
Li0ptqMbZrCB7wrYJO2RBN+tqdya7wRB4+PvUA3d9lfKolxhhhbWRj3m3b/b27B/
K1ySik2UJZDrm4lXqv4Hvj2SCUiFQQK9Xe7tCO8klnedqnumNYAd14B5JQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIoTnncJlSktVZ1AWzVbbM1/Lm9PMB8GA1UdIwQY
MBaAFEdaBsrXvQw9ufijgfHrnNbHWqsoMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUjFvR3l0ZTlERDI1LUtPQjhldWMxc2RhcXlnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84OS9iZGZkNzAtMzA2Ny00NzNkLThmNjUt
YjU1MzIyMDI4YmI4LzEvUjFvR3l0ZTlERDI1LUtPQjhldWMxc2RhcXlnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84OS9iZGZkNzAtMzA2Ny00NzNkLThmNjUtYjU1MzIyMDI4YmI4
LzEvUjFvR3l0ZTlERDI1LUtPQjhldWMxc2RhcXlnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiVYtwd4d
CGcGATAAOMNqenI8kzYwUwmI855nwnOfjcklTeryZHqI2br6TG4RdL58/VaSpNSu
lgxyvU9x9HJ6heYw4k7pzvb0bkD10pWz765agYMoLeNavFjoLLULylcxD2xTx8TM
yCfli3dyK3LiPcv3wNAEd2GqdEVT2s3lB9MCCtxpPY/mDQWZuiow54MrHzRphUni
VzqoP2EZ5iNO8ofrpMuHGEeqw/e/GARAZU9GRdULc+ObA2NxmIWdZmC/pP9Omjg0
P5wafxqfnYOBcTyc6CDY+qhnrsm2asJp5QTGC/3FoVgo4F/+Il6AjZwVAcqvauyf
bCNyck7vHJ6dkg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 09:45:07 2025 by rpki-client