Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
File: sPoMerwQeWkV4zW6GXgORz4CeWk.mft (raw, json)
Hash identifier: c3HAVV4uJAgge+f6xfHAUO3lVn05I1AFrxxkAoPr99Q=
Subject key identifier: AA:22:C1:FE:A3:6C:51:A3:C6:32:3D:A9:AC:24:FE:EC:C2:40:3D:11
Authority key identifier: B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
Certificate issuer: /CN=b0fa0c7abc10796915e335ba19780e473e027969
Certificate serial: 01976A05BA07D65BBB9DD8FAA9C0B9124AFC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
Manifest number: 107F
Signing time: Fri 13 Jun 2025 16:00:49 +0000
Manifest this update: Fri 13 Jun 2025 16:00:49 +0000
Manifest next update: Sat 14 Jun 2025 16:00:49 +0000
Files and hashes: 1: Y9lkKqKsnQqZGmQo1Xo2fiLr5iU.roa (hash: 6A0trmFdZaEK+JW4D/IW96VMnZJTTVLOPMuYPUfapNM=)
2: sPoMerwQeWkV4zW6GXgORz4CeWk.crl (hash: 090Iws3QEW2yCPW81wdpfBBlATsuMxtZPipdOcVN9pQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 13:55:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6a:05:ba:07:d6:5b:bb:9d:d8:fa:a9:c0:b9:12:4a:fc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b0fa0c7abc10796915e335ba19780e473e027969
Validity
Not Before: Jun 13 16:00:49 2025 GMT
Not After : Jun 14 16:00:49 2025 GMT
Subject: CN=aa22c1fea36c51a3c6323da9ac24feecc2403d11
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ae:42:f2:d8:35:f1:b2:e2:84:f5:c6:37:20:d4:
b0:33:8a:da:b0:ad:75:74:54:01:58:9c:de:2b:6a:
56:1b:24:df:b1:01:2d:2d:ac:a1:e4:57:38:d5:de:
b5:2d:e7:08:2f:29:60:b7:e8:d5:e0:51:19:26:d5:
b8:3c:ee:fc:50:55:6c:2a:22:ce:f1:ae:b1:9b:fb:
af:6c:24:c3:5b:8d:96:e7:e5:44:17:98:73:58:0c:
9d:e7:e3:f0:44:76:69:40:7a:10:4d:b4:1a:5a:f5:
ec:23:03:d6:3d:fb:7a:b6:67:d0:29:01:3a:98:56:
ca:f0:f7:24:4d:3e:1d:16:bc:ae:76:f4:43:f1:db:
c7:96:9f:c9:40:0a:ce:c5:b0:4c:57:ed:63:29:da:
7c:2b:ba:01:b7:68:95:45:26:ee:9c:31:ff:65:81:
58:5e:a6:00:4c:c4:3e:7f:ed:61:42:86:eb:a5:4d:
ec:ef:b0:0f:db:ef:9e:7b:92:60:26:13:8f:da:a9:
61:a9:39:33:7a:6b:a1:9b:51:36:4a:65:b6:d3:e4:
c3:4d:10:8a:fd:ab:98:17:e7:92:8d:6f:55:3d:e4:
5c:27:21:db:de:4a:df:6d:6f:1a:b8:09:5f:85:90:
e5:0a:eb:51:21:97:84:38:b5:37:e0:e4:eb:ae:1a:
9f:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AA:22:C1:FE:A3:6C:51:A3:C6:32:3D:A9:AC:24:FE:EC:C2:40:3D:11
X509v3 Authority Key Identifier:
keyid:B0:FA:0C:7A:BC:10:79:69:15:E3:35:BA:19:78:0E:47:3E:02:79:69
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sPoMerwQeWkV4zW6GXgORz4CeWk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/974749-4d7e-4450-9793-df854f47baf4/1/sPoMerwQeWkV4zW6GXgORz4CeWk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
78:c7:01:53:4e:b3:3c:55:cf:27:af:60:f1:cb:f3:0a:38:58:
10:2e:20:e6:89:1a:63:98:cb:e5:0c:4c:ce:58:11:5a:9f:3f:
e0:02:d5:ae:a6:66:b9:63:23:9a:d2:05:6f:ac:ef:c4:f9:76:
a5:db:a0:a8:28:95:14:96:21:92:97:2a:75:41:dd:e2:02:92:
26:49:33:db:4f:16:91:03:8c:9a:a7:b8:8c:a9:19:8a:25:fb:
3e:d0:9d:5d:ff:5c:d5:93:1c:fe:49:bd:64:2f:57:90:4c:6c:
37:22:6d:5d:a1:29:05:7d:c8:f9:e5:34:33:20:3c:cd:3a:3d:
a2:2c:18:e5:f1:a2:61:1e:b4:30:62:0d:4b:bd:3c:53:c3:55:
ed:d2:86:5a:80:e6:1a:1e:33:c3:0a:a3:4a:b0:56:dc:f1:82:
0a:00:94:d8:f5:b5:0d:46:eb:23:f0:95:16:35:ff:f6:be:f2:
0b:5e:fd:5a:6f:e3:cd:cc:5e:fc:b1:e9:92:51:9d:f9:fd:3f:
af:af:2c:b7:9e:79:f3:8c:e3:f7:53:c0:73:4b:e7:ef:f6:21:
1a:36:a6:5c:d2:70:0c:fd:1a:6a:95:04:62:ce:9f:6f:04:47:
a7:32:54:93:3b:2a:dc:55:1d:31:10:9b:59:2d:9c:63:2b:5e:
31:5e:32:34
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdqBboH1lu7ndj6qcC5Ekr8MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIwZmEwYzdhYmMxMDc5NjkxNWUzMzViYTE5NzgwZTQ3M2Uw
Mjc5NjkwHhcNMjUwNjEzMTYwMDQ5WhcNMjUwNjE0MTYwMDQ5WjAzMTEwLwYDVQQD
EyhhYTIyYzFmZWEzNmM1MWEzYzYzMjNkYTlhYzI0ZmVlY2MyNDAzZDExMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArkLy2DXxsuKE9cY3INSwM4rasK11
dFQBWJzeK2pWGyTfsQEtLayh5Fc41d61LecILylgt+jV4FEZJtW4PO78UFVsKiLO
8a6xm/uvbCTDW42W5+VEF5hzWAyd5+PwRHZpQHoQTbQaWvXsIwPWPft6tmfQKQE6
mFbK8PckTT4dFryudvRD8dvHlp/JQArOxbBMV+1jKdp8K7oBt2iVRSbunDH/ZYFY
XqYATMQ+f+1hQobrpU3s77AP2++ee5JgJhOP2qlhqTkzemuhm1E2SmW20+TDTRCK
/auYF+eSjW9VPeRcJyHb3krfbW8auAlfhZDlCutRIZeEOLU34OTrrhqfdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKoiwf6jbFGjxjI9qawk/uzCQD0RMB8GA1UdIwQY
MBaAFLD6DHq8EHlpFeM1uhl4Dkc+AnlpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mMC85NzQ3NDktNGQ3ZS00NDUwLTk3OTMt
ZGY4NTRmNDdiYWY0LzEvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mMC85NzQ3NDktNGQ3ZS00NDUwLTk3OTMtZGY4NTRmNDdiYWY0
LzEvc1BvTWVyd1FlV2tWNHpXNkdYZ09SejRDZVdrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAeMcBU06z
PFXPJ69g8cvzCjhYEC4g5okaY5jL5QxMzlgRWp8/4ALVrqZmuWMjmtIFb6zvxPl2
pdugqCiVFJYhkpcqdUHd4gKSJkkz208WkQOMmqe4jKkZiiX7PtCdXf9c1ZMc/km9
ZC9XkExsNyJtXaEpBX3I+eU0MyA8zTo9oiwY5fGiYR60MGINS708U8NV7dKGWoDm
Gh4zwwqjSrBW3PGCCgCU2PW1DUbrI/CVFjX/9r7yC179Wm/jzcxe/LHpklGd+f0/
r68st55584zj91PAc0vn7/YhGjamXNJwDP0aapUEYs6fbwRHpzJUkzsq3FUdMRCb
WS2cYyteMV4yNA==
-----END CERTIFICATE-----
Generated at Fri Jun 13 18:57:36 2025 by rpki-client