Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
File: soU6oesyv-4P6xSDwUk20QHxbt8.mft (raw, json)
Hash identifier: DekOF+TSoiAjXf+Nh2gCZF3yLk7V9ZWmpruTJkXA49c=
Subject key identifier: 16:9A:54:4E:FE:2E:76:13:39:98:77:AD:EE:68:A4:51:97:A2:88:34
Authority key identifier: B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
Certificate issuer: /CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Certificate serial: 01977978E01D1FEB03FBD8ED666E08BD780A
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
Manifest number: 159A
Signing time: Mon 16 Jun 2025 16:00:54 +0000
Manifest this update: Mon 16 Jun 2025 16:00:54 +0000
Manifest next update: Tue 17 Jun 2025 16:00:54 +0000
Files and hashes: 1: QgESeVhsipvfmTCXEv6UR11P7ys.roa (hash: Mu2ldKy/m2YeXhlwaFd2rkbf1PYIDTAFyxWdZhH8Ols=)
2: nXXaYKD_d1MxUbe-6_FzTsWPKIg.roa (hash: OwFYUlDkb/OofczMk6EkLbLKjgmPMmo8vCWYFs08jQ8=)
3: soU6oesyv-4P6xSDwUk20QHxbt8.crl (hash: dtmDqfI7dgzSCnx9Lr1ulq0RCjH1AoAYbguXTY3klYg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:78:e0:1d:1f:eb:03:fb:d8:ed:66:6e:08:bd:78:0a
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b2853aa1eb32bfee0feb1483c14936d101f16edf
Validity
Not Before: Jun 16 16:00:54 2025 GMT
Not After : Jun 17 16:00:54 2025 GMT
Subject: CN=169a544efe2e7613399877adee68a45197a28834
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:df:dc:ec:7c:01:fa:9b:0a:3e:e5:30:e4:11:30:
8b:58:c7:42:9a:65:af:26:29:ae:36:19:ec:87:0f:
84:9c:49:f3:4f:b2:9e:fd:4e:d9:88:e5:4f:3b:ea:
18:5e:0c:d8:f8:46:e0:7f:39:7d:ce:e9:22:3e:46:
4e:f0:ca:5f:50:a1:5a:fb:46:a1:6f:3d:ee:55:78:
e4:c8:46:16:8f:b0:8d:ba:5f:11:cc:d8:12:b2:d2:
4b:3b:f3:2e:a7:f9:8f:cd:d8:99:4a:9c:95:9c:bd:
ac:df:fc:8c:32:77:3c:81:47:f0:61:ee:6f:5d:c2:
d2:3e:69:3c:00:77:1e:d9:88:87:f5:93:63:97:b6:
b4:27:26:02:f8:d4:2c:8f:b0:9c:f5:bc:fd:cf:05:
d1:c1:3d:90:80:27:09:4e:38:8f:51:cc:ae:43:3a:
91:2f:ca:fc:c0:54:83:01:1b:b7:f2:e0:ff:75:ed:
10:e0:ca:2f:04:f5:77:39:0c:11:6e:73:a8:1c:c5:
38:1b:88:4e:f1:7b:d1:1a:1c:fc:28:96:b1:ca:c7:
17:59:ab:dd:9a:9e:fc:2d:50:1b:92:39:29:b7:cc:
2f:0e:16:22:e0:5a:04:c2:5e:88:a3:a6:95:ac:74:
63:87:bc:ec:40:78:73:09:0e:74:b4:e3:fc:81:02:
7f:cb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
16:9A:54:4E:FE:2E:76:13:39:98:77:AD:EE:68:A4:51:97:A2:88:34
X509v3 Authority Key Identifier:
keyid:B2:85:3A:A1:EB:32:BF:EE:0F:EB:14:83:C1:49:36:D1:01:F1:6E:DF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/soU6oesyv-4P6xSDwUk20QHxbt8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a6/31c815-d96a-4bb6-8ccf-f2b81079b746/1/soU6oesyv-4P6xSDwUk20QHxbt8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5b:0d:36:be:c9:17:42:c3:f8:ce:98:c1:96:13:60:33:49:96:
f7:db:23:b7:82:d9:81:d7:fc:f9:70:31:24:0f:30:6e:72:ed:
44:de:28:b6:e5:0f:61:17:2d:44:82:01:85:8b:7b:3b:56:4a:
42:c0:cb:65:7c:4b:08:4c:1a:a3:c8:96:d4:c2:20:3b:1b:b3:
2e:de:83:e4:26:03:68:5f:8c:ac:59:96:db:4a:1a:1e:1f:a7:
96:8d:22:59:b9:42:b1:d4:bb:97:2d:ad:ba:a1:e4:9b:a4:70:
92:55:98:43:a6:57:bc:9c:10:76:2b:40:b6:29:85:ef:dc:f2:
b3:c5:c2:ce:d9:13:2e:92:03:05:93:03:63:29:bd:0e:4f:64:
f6:9f:38:9b:3c:70:76:ae:cd:ba:d5:e7:28:e6:a4:b6:dd:7e:
c0:7d:21:88:5e:98:91:95:91:48:19:22:14:3e:7b:3b:87:cd:
98:5c:43:79:86:d3:d1:70:38:76:b9:96:9a:6a:9e:3f:c8:ef:
10:32:0f:fa:e5:f0:d8:d2:46:23:48:79:4d:e2:0c:64:d8:32:
8e:71:19:49:ee:9c:8f:fc:ce:9f:ab:da:41:ce:de:47:ba:d7:
db:b3:5d:fc:3b:d7:51:b9:09:f4:34:ce:55:46:5c:1b:0d:d6:
7c:3a:5c:c0
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5eOAdH+sD+9jtZm4IvXgKMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIyODUzYWExZWIzMmJmZWUwZmViMTQ4M2MxNDkzNmQxMDFm
MTZlZGYwHhcNMjUwNjE2MTYwMDU0WhcNMjUwNjE3MTYwMDU0WjAzMTEwLwYDVQQD
EygxNjlhNTQ0ZWZlMmU3NjEzMzk5ODc3YWRlZTY4YTQ1MTk3YTI4ODM0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA39zsfAH6mwo+5TDkETCLWMdCmmWv
JimuNhnshw+EnEnzT7Ke/U7ZiOVPO+oYXgzY+Ebgfzl9zukiPkZO8MpfUKFa+0ah
bz3uVXjkyEYWj7CNul8RzNgSstJLO/Mup/mPzdiZSpyVnL2s3/yMMnc8gUfwYe5v
XcLSPmk8AHce2YiH9ZNjl7a0JyYC+NQsj7Cc9bz9zwXRwT2QgCcJTjiPUcyuQzqR
L8r8wFSDARu38uD/de0Q4MovBPV3OQwRbnOoHMU4G4hO8XvRGhz8KJaxyscXWavd
mp78LVAbkjkpt8wvDhYi4FoEwl6Io6aVrHRjh7zsQHhzCQ50tOP8gQJ/ywIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBaaVE7+LnYTOZh3re5opFGXoog0MB8GA1UdIwQY
MBaAFLKFOqHrMr/uD+sUg8FJNtEB8W7fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2Yt
ZjJiODEwNzliNzQ2LzEvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hNi8zMWM4MTUtZDk2YS00YmI2LThjY2YtZjJiODEwNzliNzQ2
LzEvc29VNm9lc3l2LTRQNnhTRHdVazIwUUh4YnQ4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWw02vskX
QsP4zpjBlhNgM0mW99sjt4LZgdf8+XAxJA8wbnLtRN4otuUPYRctRIIBhYt7O1ZK
QsDLZXxLCEwao8iW1MIgOxuzLt6D5CYDaF+MrFmW20oaHh+nlo0iWblCsdS7ly2t
uqHkm6RwklWYQ6ZXvJwQditAtimF79zys8XCztkTLpIDBZMDYym9Dk9k9p84mzxw
dq7NutXnKOaktt1+wH0hiF6YkZWRSBkiFD57O4fNmFxDeYbT0XA4drmWmmqeP8jv
EDIP+uXw2NJGI0h5TeIMZNgyjnEZSe6cj/zOn6vaQc7eR7rX27Nd/DvXUbkJ9DTO
VUZcGw3WfDpcwA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 19:29:07 2025 by rpki-client