Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
File: mP1EDLuwS5abkrtrOcC7tBY0zRI.mft (raw, json)
Hash identifier: G2PiE6UJrH/vNh7/hwV8hx7Yh0evCHRseMculQvJolo=
Subject key identifier: 23:29:E7:F7:38:F8:35:E1:96:03:23:DC:7C:7E:2C:E7:08:42:5F:DD
Authority key identifier: 98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
Certificate issuer: /CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Certificate serial: 01976F62B37A59F0EF5F3E7446E8F58A14ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
Manifest number: 1594
Signing time: Sat 14 Jun 2025 17:00:28 +0000
Manifest this update: Sat 14 Jun 2025 17:00:28 +0000
Manifest next update: Sun 15 Jun 2025 17:00:28 +0000
Files and hashes: 1: LftCOxJQ1oI6hFFXrfR0Ib7DvgM.roa (hash: cJ8bZtPB0/69tGKrzdUG2h5XVvEuA3yRLVGrsJgKFnE=)
2: fiJWC8ddg3-RMvnLmmNHKEtDpC4.roa (hash: +jcPkN0cWNwP620eirlv12vXP4bDJPvRMmAHlZSYorg=)
3: mP1EDLuwS5abkrtrOcC7tBY0zRI.crl (hash: XOVhLnEw1bmJLmpSUQQFXW3K+tMItJ795zsvbvy5oSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6f:62:b3:7a:59:f0:ef:5f:3e:74:46:e8:f5:8a:14:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fd440cbbb04b969b92bb6b39c0bbb41634cd12
Validity
Not Before: Jun 14 17:00:28 2025 GMT
Not After : Jun 15 17:00:28 2025 GMT
Subject: CN=2329e7f738f835e1960323dc7c7e2ce708425fdd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:f2:47:fc:b4:7d:2e:6c:66:c4:03:0a:89:50:
c4:3c:de:6a:88:39:9a:41:0e:3e:26:c9:21:94:34:
c6:f5:2f:9a:e2:7d:e5:da:1d:ba:04:d0:4e:da:8d:
37:10:92:10:78:b5:01:76:61:ff:76:e5:1e:aa:46:
2a:4b:d5:66:80:66:7f:b6:e1:0e:3e:59:3d:fb:19:
ae:29:52:0c:50:89:68:18:56:6d:ae:cf:be:33:27:
e7:8b:b7:d0:18:2a:93:fa:db:87:43:1d:49:21:fe:
09:5c:17:ba:98:44:43:88:7d:be:e6:2e:8c:0a:ff:
15:87:f6:2b:0f:6a:db:b1:42:e9:be:96:1b:5a:0e:
c0:34:56:dd:ba:e3:57:5a:64:22:e8:0a:84:1c:bc:
0c:3d:2f:9e:bd:42:59:22:11:a1:11:2c:46:1b:5f:
89:0b:cc:ce:14:b7:89:d6:cb:99:55:ec:b2:b4:67:
5c:c2:17:fa:53:e1:0c:8a:0c:14:c7:25:1a:16:5f:
e6:22:b3:7a:18:ec:35:11:6a:0a:e1:d8:0e:14:34:
c2:14:82:b6:e6:eb:ad:61:74:c0:0b:de:30:00:29:
44:4e:26:63:2f:b0:f3:9c:91:a8:20:e4:43:e5:0b:
14:e1:5f:8e:75:e2:12:84:c6:bb:eb:4d:4a:88:ae:
ad:2b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
23:29:E7:F7:38:F8:35:E1:96:03:23:DC:7C:7E:2C:E7:08:42:5F:DD
X509v3 Authority Key Identifier:
keyid:98:FD:44:0C:BB:B0:4B:96:9B:92:BB:6B:39:C0:BB:B4:16:34:CD:12
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mP1EDLuwS5abkrtrOcC7tBY0zRI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/99/66908c-d5cb-47c8-bfce-c9c12b866078/1/mP1EDLuwS5abkrtrOcC7tBY0zRI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4d:3d:fa:c8:86:bb:05:fb:4d:d1:6a:e7:cc:bf:9c:c3:4a:7a:
94:26:ab:33:02:42:7c:c2:0a:6f:d6:21:09:e5:d4:b6:5a:a8:
7c:2c:3b:80:a2:6c:8e:66:66:17:8f:e7:93:12:e2:54:c0:24:
0c:ba:ec:03:1c:fc:0c:e8:ab:73:4c:7e:1e:5f:32:12:28:12:
0d:86:52:04:62:6f:4d:b7:2b:0f:97:6f:4c:a0:0e:78:6a:82:
81:63:c1:53:e9:5e:f3:2d:08:aa:85:1d:c7:98:f7:fb:2e:43:
44:9d:a4:7c:bb:ab:95:cf:96:e9:a8:0c:f0:2e:05:c8:61:a5:
e5:8b:54:67:8e:81:10:b7:58:c6:8b:dd:f9:d6:02:d8:45:66:
d6:1c:20:8f:b1:96:00:da:24:28:8f:e7:6e:f1:49:71:9d:77:
1f:6e:3c:de:f6:c4:c7:92:88:a1:d4:79:28:36:16:e0:90:70:
7f:79:b0:e2:cc:c6:37:70:c2:bc:5b:ee:87:70:0e:7d:e8:47:
68:6b:0d:ed:ae:eb:e1:10:50:11:81:64:81:31:02:43:ce:fe:
52:25:29:33:b1:5d:ac:8f:55:23:23:04:d4:fb:82:16:8d:e3:
29:aa:46:ab:fe:8f:55:89:79:51:91:0d:47:e3:ee:32:71:94:
3b:1a:63:be
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdvYrN6WfDvXz50Ruj1ihTtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZmQ0NDBjYmJiMDRiOTY5YjkyYmI2YjM5YzBiYmI0MTYz
NGNkMTIwHhcNMjUwNjE0MTcwMDI4WhcNMjUwNjE1MTcwMDI4WjAzMTEwLwYDVQQD
EygyMzI5ZTdmNzM4ZjgzNWUxOTYwMzIzZGM3YzdlMmNlNzA4NDI1ZmRkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApPJH/LR9LmxmxAMKiVDEPN5qiDma
QQ4+JskhlDTG9S+a4n3l2h26BNBO2o03EJIQeLUBdmH/duUeqkYqS9VmgGZ/tuEO
Plk9+xmuKVIMUIloGFZtrs++Myfni7fQGCqT+tuHQx1JIf4JXBe6mERDiH2+5i6M
Cv8Vh/YrD2rbsULpvpYbWg7ANFbduuNXWmQi6AqEHLwMPS+evUJZIhGhESxGG1+J
C8zOFLeJ1suZVeyytGdcwhf6U+EMigwUxyUaFl/mIrN6GOw1EWoK4dgOFDTCFIK2
5uutYXTAC94wAClETiZjL7DznJGoIORD5QsU4V+OdeIShMa7601KiK6tKwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCMp5/c4+DXhlgMj3Hx+LOcIQl/dMB8GA1UdIwQY
MBaAFJj9RAy7sEuWm5K7aznAu7QWNM0SMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVAxRURMdXdTNWFia3J0ck9jQzd0QlkwelJJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85OS82NjkwOGMtZDVjYi00N2M4LWJmY2Ut
YzljMTJiODY2MDc4LzEvbVAxRURMdXdTNWFia3J0ck9jQzd0QlkwelJJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85OS82NjkwOGMtZDVjYi00N2M4LWJmY2UtYzljMTJiODY2MDc4
LzEvbVAxRURMdXdTNWFia3J0ck9jQzd0QlkwelJJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATT36yIa7
BftN0WrnzL+cw0p6lCarMwJCfMIKb9YhCeXUtlqofCw7gKJsjmZmF4/nkxLiVMAk
DLrsAxz8DOirc0x+Hl8yEigSDYZSBGJvTbcrD5dvTKAOeGqCgWPBU+le8y0IqoUd
x5j3+y5DRJ2kfLurlc+W6agM8C4FyGGl5YtUZ46BELdYxovd+dYC2EVm1hwgj7GW
ANokKI/nbvFJcZ13H2483vbEx5KIodR5KDYW4JBwf3mw4szGN3DCvFvuh3AOfehH
aGsN7a7r4RBQEYFkgTECQ87+UiUpM7FdrI9VIyME1PuCFo3jKapGq/6PVYl5UZEN
R+PuMnGUOxpjvg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 22:12:40 2025 by rpki-client