Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
File: mRXw1qlhquvGsLUInaApObMQpRw.mft (raw, json)
Hash identifier: 7n5PyqdrZr6QSrnExxA7V63L5KCkbrEgU2cgIS73JU8=
Subject key identifier: 1B:99:40:0E:4B:38:C4:14:F6:16:2D:15:DC:AB:17:E0:48:2B:1E:F6
Authority key identifier: 99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
Certificate issuer: /CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Certificate serial: 01976F99C98E2AB007720EFCE139DD7A3A1A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
Manifest number: 1522
Signing time: Sat 14 Jun 2025 18:00:38 +0000
Manifest this update: Sat 14 Jun 2025 18:00:38 +0000
Manifest next update: Sun 15 Jun 2025 18:00:38 +0000
Files and hashes: 1: 3EoDXcpFiHwKQL3NphGsn39OCs8.roa (hash: ComC0hDOhJ69SVTLkm+pHNkS7oN++Uq45Amm8PB7U5o=)
2: mRXw1qlhquvGsLUInaApObMQpRw.crl (hash: iwGWpOkUgIja/ZExY+PrpgONqTkhyTOzbALxw8Jdn/Y=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 18:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:99:c9:8e:2a:b0:07:72:0e:fc:e1:39:dd:7a:3a:1a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=9915f0d6a961aaebc6b0b5089da02939b310a51c
Validity
Not Before: Jun 14 18:00:38 2025 GMT
Not After : Jun 15 18:00:38 2025 GMT
Subject: CN=1b99400e4b38c414f6162d15dcab17e0482b1ef6
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:1e:7a:7c:ee:53:ce:12:9b:2d:1c:51:21:7d:
0d:47:54:b9:f0:f1:1c:c1:77:b9:47:c7:2e:b2:70:
53:29:88:15:7d:66:27:5a:65:6f:2d:da:d3:be:05:
9d:8d:ff:5e:06:f3:91:c3:9e:06:97:db:af:f9:c9:
15:e5:71:0a:a0:f8:42:a0:7a:02:fc:cf:87:2b:61:
92:8a:c5:56:16:03:9f:d9:b2:61:f3:51:9d:65:0c:
89:75:94:4f:17:50:ba:fe:13:b7:91:ad:32:ad:99:
2a:53:a6:53:49:54:1e:3d:4e:d7:d2:28:90:c8:4f:
e7:bf:77:83:f3:42:e6:59:b3:53:aa:f3:0f:15:07:
75:4e:4c:0a:2f:f5:31:56:1e:17:80:8d:1e:2f:4a:
3e:62:c5:90:bc:e3:a9:b0:8c:e8:94:2f:5a:c5:99:
f0:ac:1a:63:7a:9e:55:98:e7:af:7f:11:ac:08:fb:
c3:0e:6b:a3:da:5e:47:96:ae:c5:ba:b1:db:5d:e8:
ed:b6:f2:55:ec:ea:91:ba:13:57:30:ce:5b:1f:88:
b6:66:da:b6:48:74:b2:f9:56:7e:5f:e9:6d:4b:cf:
a0:04:02:bd:ce:9c:b9:ec:c4:4b:28:8e:dd:23:9d:
e3:22:bf:0d:a1:6d:e0:68:82:8d:fd:14:69:e9:a5:
ee:4f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
1B:99:40:0E:4B:38:C4:14:F6:16:2D:15:DC:AB:17:E0:48:2B:1E:F6
X509v3 Authority Key Identifier:
keyid:99:15:F0:D6:A9:61:AA:EB:C6:B0:B5:08:9D:A0:29:39:B3:10:A5:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mRXw1qlhquvGsLUInaApObMQpRw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8b/fa110d-e6e5-4bf9-84fe-bf26a7faa603/1/mRXw1qlhquvGsLUInaApObMQpRw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
13:8a:f4:9d:df:97:9d:a0:54:26:b9:58:5b:06:35:10:45:5a:
03:e6:df:b3:d5:05:28:90:8b:df:d1:73:a2:f4:7e:f3:fa:e4:
ab:e8:08:4b:19:62:11:84:c5:ab:a9:0c:70:59:83:92:3f:cf:
58:ad:94:15:34:c9:e4:70:46:7a:46:71:dd:2d:f4:04:09:55:
c0:7c:e0:0b:66:3c:2e:75:4f:d1:80:bb:92:2d:9f:07:bd:d6:
a1:00:9f:fc:aa:14:87:80:6a:17:12:15:f8:07:80:29:f9:17:
a6:fd:ba:df:db:50:bf:40:e3:50:f8:4d:96:0e:33:c3:5b:15:
90:2b:d4:dc:97:f1:41:15:be:cd:41:96:6d:39:8e:f8:71:41:
11:59:7f:72:ba:e1:15:15:54:ff:d7:18:6b:50:23:ec:51:b2:
6e:02:df:8b:e3:9d:01:bb:40:9d:77:62:d0:32:b8:e3:d9:ab:
4e:2a:10:d2:3b:0e:e6:a8:65:e8:fb:a9:05:bc:61:a6:e7:d0:
0a:eb:b4:13:c6:88:be:7d:bd:c9:0e:87:9b:3f:cb:36:0a:90:
20:bf:08:fa:82:59:85:c2:56:31:43:2a:b1:65:a9:58:ae:cc:
ee:ac:f6:59:15:a0:10:48:6e:8f:f4:5e:0e:5c:ee:ce:ea:11:
f9:a6:bf:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvmcmOKrAHcg784TndejoaMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5MTVmMGQ2YTk2MWFhZWJjNmIwYjUwODlkYTAyOTM5YjMx
MGE1MWMwHhcNMjUwNjE0MTgwMDM4WhcNMjUwNjE1MTgwMDM4WjAzMTEwLwYDVQQD
EygxYjk5NDAwZTRiMzhjNDE0ZjYxNjJkMTVkY2FiMTdlMDQ4MmIxZWY2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxR56fO5TzhKbLRxRIX0NR1S58PEc
wXe5R8cusnBTKYgVfWYnWmVvLdrTvgWdjf9eBvORw54Gl9uv+ckV5XEKoPhCoHoC
/M+HK2GSisVWFgOf2bJh81GdZQyJdZRPF1C6/hO3ka0yrZkqU6ZTSVQePU7X0iiQ
yE/nv3eD80LmWbNTqvMPFQd1TkwKL/UxVh4XgI0eL0o+YsWQvOOpsIzolC9axZnw
rBpjep5VmOevfxGsCPvDDmuj2l5Hlq7FurHbXejttvJV7OqRuhNXMM5bH4i2Ztq2
SHSy+VZ+X+ltS8+gBAK9zpy57MRLKI7dI53jIr8NoW3gaIKN/RRp6aXuTwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBuZQA5LOMQU9hYtFdyrF+BIKx72MB8GA1UdIwQY
MBaAFJkV8NapYarrxrC1CJ2gKTmzEKUcMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yi9mYTExMGQtZTZlNS00YmY5LTg0ZmUt
YmYyNmE3ZmFhNjAzLzEvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yi9mYTExMGQtZTZlNS00YmY5LTg0ZmUtYmYyNmE3ZmFhNjAz
LzEvbVJYdzFxbGhxdXZHc0xVSW5hQXBPYk1RcFJ3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAE4r0nd+X
naBUJrlYWwY1EEVaA+bfs9UFKJCL39FzovR+8/rkq+gISxliEYTFq6kMcFmDkj/P
WK2UFTTJ5HBGekZx3S30BAlVwHzgC2Y8LnVP0YC7ki2fB73WoQCf/KoUh4BqFxIV
+AeAKfkXpv2639tQv0DjUPhNlg4zw1sVkCvU3JfxQRW+zUGWbTmO+HFBEVl/crrh
FRVU/9cYa1Aj7FGybgLfi+OdAbtAnXdi0DK449mrTioQ0jsO5qhl6PupBbxhpufQ
Cuu0E8aIvn29yQ6Hmz/LNgqQIL8I+oJZhcJWMUMqsWWpWK7M7qz2WRWgEEhuj/Re
DlzuzuoR+aa/NA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 23:55:44 2025 by rpki-client