Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
File: Af6IJc4pEV7HHNzPw1XYGjX9fow.mft (raw, json)
Hash identifier: GfZSmodaZxH5fJMbCSuoEWeCn3P9/TQdiA/Mz9myf8A=
Subject key identifier: F2:0A:6C:BB:54:7C:19:9D:1E:B1:51:A3:00:5C:0D:43:7E:85:D1:65
Authority key identifier: 01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
Certificate issuer: /CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Certificate serial: 01977A1DB7A308CC9294F37FB36816D0BA25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
Manifest number: 030E
Signing time: Mon 16 Jun 2025 19:00:57 +0000
Manifest this update: Mon 16 Jun 2025 19:00:57 +0000
Manifest next update: Tue 17 Jun 2025 19:00:57 +0000
Files and hashes: 1: Af6IJc4pEV7HHNzPw1XYGjX9fow.crl (hash: xH63JeSoAIGwKOwWT1Bheq98TG5/ieyJsubOB6GplEU=)
2: Ju6K_k5aEz6SqSZhNuewgFZ6Tpc.roa (hash: eSc+nFa0PsPsCuhZ0NSVf3t+L8KNOuXb5VC0gk1mWnU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:7a:1d:b7:a3:08:cc:92:94:f3:7f:b3:68:16:d0:ba:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=01fe8825ce29115ec71cdccfc355d81a35fd7e8c
Validity
Not Before: Jun 16 19:00:57 2025 GMT
Not After : Jun 17 19:00:57 2025 GMT
Subject: CN=f20a6cbb547c199d1eb151a3005c0d437e85d165
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:be:c4:70:3b:57:b2:ec:1e:8f:81:94:28:53:
ad:82:b0:a7:8b:28:5e:de:f5:7d:93:4a:80:5e:9a:
a8:5b:9e:a0:27:da:b0:11:a1:cd:6b:6f:b1:1d:f1:
d7:e2:d1:f5:58:8a:40:10:8d:f0:07:81:be:70:99:
67:1a:8f:17:e8:b2:a3:9f:18:70:4c:49:16:69:8d:
9d:02:82:54:99:c3:28:dd:4a:08:d1:43:31:e1:78:
2b:d9:51:f1:19:70:89:5d:f2:b8:bb:a3:85:9e:96:
00:47:9f:b8:59:8c:b4:76:fd:b3:4f:45:7f:9b:b2:
4c:eb:d8:9c:8b:c7:1a:75:a9:cc:b6:16:e7:ad:7e:
b3:58:a2:a9:ea:71:c3:7c:6c:d3:30:0c:8b:b5:f6:
bf:52:7c:57:87:f1:b5:e8:7b:a5:5d:df:47:9d:3b:
f4:dc:76:08:c5:95:3e:b5:0c:55:35:c9:8f:9e:b5:
7d:53:f0:11:72:8a:b4:ad:54:4e:da:5f:ce:4a:c1:
47:6b:4c:88:ec:d5:64:07:0a:ea:51:dd:b7:73:43:
70:fd:5f:af:d6:a8:68:24:5c:fd:27:7b:b1:1e:b7:
13:0b:a3:49:d3:de:37:dc:c8:98:21:54:4a:45:96:
f9:bc:e2:6d:92:ee:8a:12:71:3e:12:2c:58:dd:44:
44:cd
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F2:0A:6C:BB:54:7C:19:9D:1E:B1:51:A3:00:5C:0D:43:7E:85:D1:65
X509v3 Authority Key Identifier:
keyid:01:FE:88:25:CE:29:11:5E:C7:1C:DC:CF:C3:55:D8:1A:35:FD:7E:8C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Af6IJc4pEV7HHNzPw1XYGjX9fow.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/90/0ee558-f08c-42ca-a953-53828f43fea0/1/Af6IJc4pEV7HHNzPw1XYGjX9fow.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
a0:59:9f:03:22:42:70:4f:13:bb:47:13:b6:ca:fb:98:b7:d9:
cd:bf:c3:0d:89:bf:a2:27:85:b0:8f:44:d1:70:b1:ae:c1:2e:
2b:6d:f2:b2:72:9d:9d:d2:5b:ee:87:e1:2c:fa:9d:35:00:b1:
94:9c:7a:52:eb:b1:c4:d9:46:35:47:0b:af:4a:9a:86:3e:c3:
59:46:3a:4a:2c:bd:1e:e8:bc:80:e0:a7:49:9d:a7:23:ca:9e:
96:de:1b:f3:e5:48:07:b3:f0:a5:24:68:c7:69:97:5e:e4:6a:
11:c1:93:a8:f5:10:ca:9b:33:da:d3:dd:93:52:d0:c8:e9:c6:
26:9f:d0:1b:ed:c6:6f:bf:b1:ba:d3:d1:b8:d0:c0:73:2d:7c:
94:c4:38:ca:d3:b7:f8:da:cd:28:c7:4d:80:9f:cb:51:eb:50:
98:c8:81:fd:a6:ea:da:d9:fb:8b:80:8a:33:f6:46:17:99:23:
dc:99:81:67:e1:3e:09:2c:69:75:40:df:b2:65:7d:b9:66:de:
2a:f0:75:e8:b8:8a:32:e4:0f:98:66:9b:03:d3:fe:23:8a:de:
7f:e1:63:e4:32:a1:e3:02:b5:83:be:2a:fa:2a:b3:b5:e3:15:
9e:fc:ee:16:26:4e:6b:ef:2a:b7:d4:01:b9:85:a7:38:25:9c:
3c:11:6f:f1
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd6HbejCMySlPN/s2gW0LolMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDAxZmU4ODI1Y2UyOTExNWVjNzFjZGNjZmMzNTVkODFhMzVm
ZDdlOGMwHhcNMjUwNjE2MTkwMDU3WhcNMjUwNjE3MTkwMDU3WjAzMTEwLwYDVQQD
EyhmMjBhNmNiYjU0N2MxOTlkMWViMTUxYTMwMDVjMGQ0MzdlODVkMTY1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArL7EcDtXsuwej4GUKFOtgrCniyhe
3vV9k0qAXpqoW56gJ9qwEaHNa2+xHfHX4tH1WIpAEI3wB4G+cJlnGo8X6LKjnxhw
TEkWaY2dAoJUmcMo3UoI0UMx4Xgr2VHxGXCJXfK4u6OFnpYAR5+4WYy0dv2zT0V/
m7JM69ici8cadanMthbnrX6zWKKp6nHDfGzTMAyLtfa/UnxXh/G16HulXd9HnTv0
3HYIxZU+tQxVNcmPnrV9U/ARcoq0rVRO2l/OSsFHa0yI7NVkBwrqUd23c0Nw/V+v
1qhoJFz9J3uxHrcTC6NJ09433MiYIVRKRZb5vOJtku6KEnE+EixY3UREzQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPIKbLtUfBmdHrFRowBcDUN+hdFlMB8GA1UdIwQY
MBaAFAH+iCXOKRFexxzcz8NV2Bo1/X6MMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85MC8wZWU1NTgtZjA4Yy00MmNhLWE5NTMt
NTM4MjhmNDNmZWEwLzEvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85MC8wZWU1NTgtZjA4Yy00MmNhLWE5NTMtNTM4MjhmNDNmZWEw
LzEvQWY2SUpjNHBFVjdISE56UHcxWFlHalg5Zm93LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAoFmfAyJC
cE8Tu0cTtsr7mLfZzb/DDYm/oieFsI9E0XCxrsEuK23ysnKdndJb7ofhLPqdNQCx
lJx6UuuxxNlGNUcLr0qahj7DWUY6Siy9Hui8gOCnSZ2nI8qelt4b8+VIB7PwpSRo
x2mXXuRqEcGTqPUQypsz2tPdk1LQyOnGJp/QG+3Gb7+xutPRuNDAcy18lMQ4ytO3
+NrNKMdNgJ/LUetQmMiB/abq2tn7i4CKM/ZGF5kj3JmBZ+E+CSxpdUDfsmV9uWbe
KvB16LiKMuQPmGabA9P+I4ref+Fj5DKh4wK1g74q+iqzteMVnvzuFiZOa+8qt9QB
uYWnOCWcPBFv8Q==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:05:14 2025 by rpki-client