Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
File: h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft (raw, json)
Hash identifier: zgfw5GWha/mc7YEEtMyfg0LZ+w/ePsXT5xs7yQwk0aM=
Subject key identifier: 10:D9:74:75:10:A9:29:77:6C:AB:04:36:F8:BE:CE:CE:D4:EB:79:BA
Authority key identifier: 87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
Certificate issuer: /CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Certificate serial: 019770759EFAA37CB7840F047C9C6A14A924
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
Manifest number: 016C
Signing time: Sat 14 Jun 2025 22:00:45 +0000
Manifest this update: Sat 14 Jun 2025 22:00:45 +0000
Manifest next update: Sun 15 Jun 2025 22:00:45 +0000
Files and hashes: 1: JY1Ry82sD4kNWhz4gQuDnSIFpN8.roa (hash: 8elrrlaE2J0H4bGnc8sBg7PwEFKBgdvohUzIrvCFh2E=)
2: h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl (hash: h3trx5z+Rjdg3TcbwngbVIpCSEamVnEd+q2mHtCn1xQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:45 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:9e:fa:a3:7c:b7:84:0f:04:7c:9c:6a:14:a9:24
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8775e6408b8e05aa914b874635a47b7b820c6c32
Validity
Not Before: Jun 14 22:00:45 2025 GMT
Not After : Jun 15 22:00:45 2025 GMT
Subject: CN=10d9747510a929776cab0436f8bececed4eb79ba
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e1:71:9c:c0:e8:bf:4b:c7:36:d2:e7:b4:e2:bc:
10:80:f2:7e:29:70:f6:b6:73:11:42:f0:2e:ae:86:
a6:09:44:38:02:22:00:a3:b8:2a:1a:c3:9b:90:8f:
dd:71:2d:22:5e:7b:30:bd:ce:34:87:66:89:1b:50:
8d:9b:56:75:c9:24:e6:48:82:e4:91:a2:8a:4a:d5:
4f:f3:98:b6:07:5a:8b:c9:b2:0e:74:85:82:37:5d:
76:6a:ba:06:b4:3b:83:91:69:b0:c5:18:26:1e:be:
39:05:e5:4e:40:4f:9b:81:b0:92:c7:3f:b0:a3:32:
21:b9:e4:bd:83:f9:58:dc:6c:d8:8b:06:d2:cb:f0:
b8:a7:de:a3:2a:88:31:de:da:3e:05:82:6e:0e:94:
f4:c2:b2:fc:e2:fb:61:c6:f3:e7:86:00:bf:b9:bc:
6b:df:30:92:c2:ca:a1:0b:77:3b:0d:ba:71:e0:17:
2f:a4:cc:f5:a5:10:57:15:40:0a:65:1a:a5:34:3b:
e8:5d:e3:4a:c3:d3:f1:35:0a:43:a1:b3:ca:53:90:
4a:d1:ac:c4:16:e8:2a:15:ec:96:c7:a5:11:75:ac:
b5:e9:e6:c2:20:32:21:16:8b:e9:49:30:d5:f6:d3:
2e:8f:3c:e2:c5:c2:5e:9d:e6:50:84:87:fd:a6:b0:
09:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
10:D9:74:75:10:A9:29:77:6C:AB:04:36:F8:BE:CE:CE:D4:EB:79:BA
X509v3 Authority Key Identifier:
keyid:87:75:E6:40:8B:8E:05:AA:91:4B:87:46:35:A4:7B:7B:82:0C:6C:32
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/h3XmQIuOBaqRS4dGNaR7e4IMbDI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/36e065-a1f6-4e14-b2d7-61e54cfc2abc/1/h3XmQIuOBaqRS4dGNaR7e4IMbDI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
54:fa:de:cd:57:a7:51:1d:c7:c1:0d:28:9c:53:2e:ea:a6:d2:
5f:51:65:a6:82:df:ca:46:3a:3b:5f:4a:8d:e0:b8:c7:fa:ca:
87:98:9e:20:3e:ef:23:14:c8:b1:dd:83:28:09:6a:38:ef:c7:
63:99:73:80:3b:60:6c:c1:43:f8:d6:ce:a7:23:a7:19:f5:bf:
33:9b:bb:31:ba:13:fe:89:b2:07:b4:03:ec:25:43:2e:b7:87:
b5:66:47:cb:3f:14:1a:5c:1f:51:d9:4a:7c:99:72:83:07:95:
34:e7:69:f1:58:33:86:4f:f6:e4:9a:79:14:0a:04:63:87:9d:
fd:40:ab:97:9f:da:a4:bf:83:a6:d2:01:9b:3b:4c:48:06:7f:
63:5f:cc:80:93:75:8f:94:db:dd:13:f2:d3:6e:a7:da:04:a3:
e4:e8:99:25:26:2d:d6:af:ca:2b:26:58:66:87:2f:c4:26:74:
57:af:99:48:15:3b:8a:6d:c7:7b:f4:bf:07:0c:5b:76:bd:ad:
3e:bc:29:9e:6d:23:60:d8:b6:0d:62:49:5c:8e:c1:2b:f3:ba:
3e:03:59:f1:81:6f:3b:07:f2:ee:be:e1:aa:81:91:fd:4b:54:
b6:5a:57:cd:56:95:c6:ea:26:be:60:72:14:3d:90:b4:1d:27:
8d:5d:ed:42
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdZ76o3y3hA8EfJxqFKkkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDg3NzVlNjQwOGI4ZTA1YWE5MTRiODc0NjM1YTQ3YjdiODIw
YzZjMzIwHhcNMjUwNjE0MjIwMDQ1WhcNMjUwNjE1MjIwMDQ1WjAzMTEwLwYDVQQD
EygxMGQ5NzQ3NTEwYTkyOTc3NmNhYjA0MzZmOGJlY2VjZWQ0ZWI3OWJhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA4XGcwOi/S8c20ue04rwQgPJ+KXD2
tnMRQvAuroamCUQ4AiIAo7gqGsObkI/dcS0iXnswvc40h2aJG1CNm1Z1ySTmSILk
kaKKStVP85i2B1qLybIOdIWCN112aroGtDuDkWmwxRgmHr45BeVOQE+bgbCSxz+w
ozIhueS9g/lY3GzYiwbSy/C4p96jKogx3to+BYJuDpT0wrL84vthxvPnhgC/ubxr
3zCSwsqhC3c7Dbpx4BcvpMz1pRBXFUAKZRqlNDvoXeNKw9PxNQpDobPKU5BK0azE
FugqFeyWx6URday16ebCIDIhFovpSTDV9tMujzzixcJeneZQhIf9prAJLQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBDZdHUQqSl3bKsENvi+zs7U63m6MB8GA1UdIwQY
MBaAFId15kCLjgWqkUuHRjWke3uCDGwyMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDct
NjFlNTRjZmMyYWJjLzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi8zNmUwNjUtYTFmNi00ZTE0LWIyZDctNjFlNTRjZmMyYWJj
LzEvaDNYbVFJdU9CYXFSUzRkR05hUjdlNElNYkRJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVPrezVen
UR3HwQ0onFMu6qbSX1FlpoLfykY6O19KjeC4x/rKh5ieID7vIxTIsd2DKAlqOO/H
Y5lzgDtgbMFD+NbOpyOnGfW/M5u7MboT/omyB7QD7CVDLreHtWZHyz8UGlwfUdlK
fJlygweVNOdp8Vgzhk/25Jp5FAoEY4ed/UCrl5/apL+DptIBmztMSAZ/Y1/MgJN1
j5Tb3RPy026n2gSj5OiZJSYt1q/KKyZYZocvxCZ0V6+ZSBU7im3He/S/Bwxbdr2t
Prwpnm0jYNi2DWJJXI7BK/O6PgNZ8YFvOwfy7r7hqoGR/UtUtlpXzVaVxuomvmBy
FD2QtB0njV3tQg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:03:08 2025 by rpki-client