Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
File: hF3ocysQFxOPhwMrcPo7e4d273E.mft (raw, json)
Hash identifier: /BnhE4rTeT0yPsGbxdLMXEZIPJFfdf2b4DC83smZ7GU=
Subject key identifier: 40:16:F4:9D:24:C9:69:4A:86:3C:5E:1E:B5:AB:29:D4:FA:3E:E5:BD
Authority key identifier: 84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
Certificate issuer: /CN=845de8732b1017138f87032b70fa3b7b8776ef71
Certificate serial: 019776AE945AC669BC914F8BE4DFE8C366D6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
Manifest number: 029B
Signing time: Mon 16 Jun 2025 03:00:41 +0000
Manifest this update: Mon 16 Jun 2025 03:00:41 +0000
Manifest next update: Tue 17 Jun 2025 03:00:41 +0000
Files and hashes: 1: 6Q2HcS2RcDd9Dr_MYHyibugbWc0.roa (hash: +al/CVwN5+E5qhE2z1hKzqr2S4yV6SQ/qbFlSTBTEk8=)
2: YJ38H1JUnUf4GaAI-4_L--wUJZI.roa (hash: GvPm+IdYGRMKJSr2LCsRHgR1/00CHHLsiEJ+iJ60p6s=)
3: hF3ocysQFxOPhwMrcPo7e4d273E.crl (hash: Zf/mC1w3wB+bDR97YHsyLeKu11rLf6I+B14iKCRJ0+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 22:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:76:ae:94:5a:c6:69:bc:91:4f:8b:e4:df:e8:c3:66:d6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=845de8732b1017138f87032b70fa3b7b8776ef71
Validity
Not Before: Jun 16 03:00:41 2025 GMT
Not After : Jun 17 03:00:41 2025 GMT
Subject: CN=4016f49d24c9694a863c5e1eb5ab29d4fa3ee5bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:9e:5d:73:1f:60:34:e1:eb:64:dc:70:cd:90:
6e:09:e2:0c:3b:86:4d:55:b9:bd:c3:fc:85:c6:d5:
c9:b7:bf:06:8e:a5:34:85:39:b2:e5:a1:e8:ad:77:
2b:32:6c:c7:29:7b:5b:9d:b4:43:a1:8e:41:cb:1b:
c9:aa:ea:72:22:f1:ab:65:05:d7:28:60:e9:30:b5:
cb:19:5a:d4:9b:5b:e3:aa:10:9e:be:df:17:1f:4b:
cc:c5:94:1a:45:9c:89:dd:ee:c0:c2:ff:9c:77:a9:
94:b2:c9:af:f1:e2:ff:f4:fc:9a:38:be:23:b9:52:
2b:92:5a:80:fc:de:76:54:cb:b2:f5:ff:03:d6:3c:
42:63:78:9a:1e:5d:8d:be:de:b2:a6:43:9c:03:7c:
17:35:cc:9f:5b:e6:61:f4:64:8e:b6:b6:0d:33:c1:
c4:57:d7:2c:85:3c:ac:7e:a4:5c:29:b8:33:10:81:
b6:0f:6f:46:8b:47:34:c2:d7:41:e2:c7:e8:c0:15:
5f:13:65:4e:b0:0a:13:25:f1:0f:01:1c:57:b3:de:
03:1c:f5:0f:74:a3:15:8e:fa:3b:e6:f8:5b:1e:b3:
94:6b:a5:ea:ce:64:5a:75:f9:a5:be:65:17:71:24:
31:2e:b8:c2:db:26:7e:8b:49:74:95:fc:ac:d2:c7:
f4:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
40:16:F4:9D:24:C9:69:4A:86:3C:5E:1E:B5:AB:29:D4:FA:3E:E5:BD
X509v3 Authority Key Identifier:
keyid:84:5D:E8:73:2B:10:17:13:8F:87:03:2B:70:FA:3B:7B:87:76:EF:71
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/hF3ocysQFxOPhwMrcPo7e4d273E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/af/9afb33-e0aa-493b-a46d-a885fb40d90d/1/hF3ocysQFxOPhwMrcPo7e4d273E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:09:44:fb:84:69:ff:e2:ad:c0:d3:5b:45:ce:50:d4:70:38:
c4:5e:4c:d0:28:83:47:f0:47:12:f8:a9:39:86:48:5f:a3:8a:
91:17:c7:e9:91:f3:cf:38:46:05:f7:da:b7:08:6b:c0:16:18:
10:a2:43:83:81:00:c5:20:21:39:56:18:86:7c:59:1c:5c:0f:
1b:21:64:f7:0c:55:de:65:73:09:67:84:23:67:75:84:b3:0e:
bd:b8:5a:d0:d4:92:b7:6c:2e:4f:e5:66:3b:f3:af:78:6d:0f:
61:04:64:0c:89:d4:2d:b9:44:9e:7a:72:90:8f:29:5d:35:02:
27:ad:b0:84:e1:30:11:8f:b7:e7:9d:e9:85:44:8a:d8:90:58:
dd:8f:c5:c8:f8:62:62:93:93:a5:a0:51:54:a0:fd:f1:08:39:
dd:36:d4:0c:29:9f:af:93:7d:77:9e:e5:70:81:0a:5b:1b:3b:
da:b0:ea:52:80:f0:74:52:1a:e6:d2:6c:b7:40:9d:96:bd:2b:
77:49:18:75:72:27:b3:a1:43:9c:18:be:62:90:90:93:00:e8:
84:0a:6c:ba:31:09:98:db:23:fd:a4:98:5a:aa:16:46:bc:7e:
c4:53:44:a2:0f:e5:9b:44:1c:1d:e7:fb:81:8c:f6:30:35:0c:
36:25:b3:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd2rpRaxmm8kU+L5N/ow2bWMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg0NWRlODczMmIxMDE3MTM4Zjg3MDMyYjcwZmEzYjdiODc3
NmVmNzEwHhcNMjUwNjE2MDMwMDQxWhcNMjUwNjE3MDMwMDQxWjAzMTEwLwYDVQQD
Eyg0MDE2ZjQ5ZDI0Yzk2OTRhODYzYzVlMWViNWFiMjlkNGZhM2VlNWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAl55dcx9gNOHrZNxwzZBuCeIMO4ZN
Vbm9w/yFxtXJt78GjqU0hTmy5aHorXcrMmzHKXtbnbRDoY5ByxvJqupyIvGrZQXX
KGDpMLXLGVrUm1vjqhCevt8XH0vMxZQaRZyJ3e7Awv+cd6mUssmv8eL/9PyaOL4j
uVIrklqA/N52VMuy9f8D1jxCY3iaHl2Nvt6ypkOcA3wXNcyfW+Zh9GSOtrYNM8HE
V9cshTysfqRcKbgzEIG2D29Gi0c0wtdB4sfowBVfE2VOsAoTJfEPARxXs94DHPUP
dKMVjvo75vhbHrOUa6XqzmRadfmlvmUXcSQxLrjC2yZ+i0l0lfys0sf0mwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEAW9J0kyWlKhjxeHrWrKdT6PuW9MB8GA1UdIwQY
MBaAFIRd6HMrEBcTj4cDK3D6O3uHdu9xMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQt
YTg4NWZiNDBkOTBkLzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9hZi85YWZiMzMtZTBhYS00OTNiLWE0NmQtYTg4NWZiNDBkOTBk
LzEvaEYzb2N5c1FGeE9QaHdNcmNQbzdlNGQyNzNFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEArglE+4Rp
/+KtwNNbRc5Q1HA4xF5M0CiDR/BHEvipOYZIX6OKkRfH6ZHzzzhGBffatwhrwBYY
EKJDg4EAxSAhOVYYhnxZHFwPGyFk9wxV3mVzCWeEI2d1hLMOvbha0NSSt2wuT+Vm
O/OveG0PYQRkDInULblEnnpykI8pXTUCJ62whOEwEY+3553phUSK2JBY3Y/FyPhi
YpOTpaBRVKD98Qg53TbUDCmfr5N9d57lcIEKWxs72rDqUoDwdFIa5tJst0Cdlr0r
d0kYdXIns6FDnBi+YpCQkwDohApsujEJmNsj/aSYWqoWRrx+xFNEog/lm0QcHef7
gYz2MDUMNiWzkA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 07:42:32 2025 by rpki-client