Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File: RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier: gUU092G9rz3PNZT7jK3Ex1Fr5HlYg6O8FcTbw7PtRgg=
Subject key identifier: 45:FC:40:A4:1A:28:F6:C7:53:1D:61:A8:6D:2C:60:8A:43:9C:1A:F1
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 0197756580D22572084726DFED352775C048
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number: 03EB
Signing time: Sun 15 Jun 2025 21:01:15 +0000
Manifest this update: Sun 15 Jun 2025 21:01:15 +0000
Manifest next update: Mon 16 Jun 2025 21:01:15 +0000
Files and hashes: 1: FMOrAvuXC1st0AxiGEbiYaRYpDg.roa (hash: OmIWmIcqWrtJmv8GjH0kjZnCnt6Sjb2fVpbncWqIDDs=)
2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: ZLQmXF2W5ZWxTmExC9q4/5eRWurMvk5XKoRGKmIdKtU=)
3: Rn8OIh8zHAwmG50kXHn-kNbTEto.roa (hash: RiLsXz+R4XXCz86+60MDV16LzwORDjEzlHMC7VSLj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 20:59:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:75:65:80:d2:25:72:08:47:26:df:ed:35:27:75:c0:48
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Jun 15 21:01:15 2025 GMT
Not After : Jun 16 21:01:15 2025 GMT
Subject: CN=45fc40a41a28f6c7531d61a86d2c608a439c1af1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:be:63:01:19:64:e4:18:ae:45:d8:c2:71:28:32:
b3:59:9a:a9:b7:d8:f5:74:77:42:64:c8:0b:a8:d1:
b4:0e:20:fb:6e:e5:3f:b5:c3:13:7d:2a:16:de:21:
9e:a1:28:47:0c:f2:1a:8c:01:16:c5:13:cb:8a:a9:
41:12:b8:e1:b8:03:8e:2f:0f:24:cc:83:ca:d9:9a:
92:03:4c:85:c9:7d:c8:f2:3b:7c:04:65:bb:ea:cb:
1d:73:d1:c8:a7:47:71:b2:6d:57:29:9c:99:5a:62:
44:7f:50:ea:da:52:bc:25:c0:f4:9b:35:27:93:7e:
fb:9c:51:7f:93:89:6b:2c:0c:a9:c6:83:98:eb:d7:
07:29:dd:e7:22:a0:5c:49:a1:7b:34:9a:6e:a1:80:
9e:d8:c5:21:9c:d9:28:04:62:a7:3d:e2:84:7e:b3:
92:88:ab:f6:34:04:93:f5:2e:e6:96:02:02:74:7c:
21:85:6f:32:22:56:e7:f5:65:a4:40:e2:e3:e5:a7:
12:38:da:b5:0c:4f:0a:22:32:66:54:80:a1:71:b1:
c2:30:97:eb:6a:ba:4f:b5:ba:91:de:bc:0b:9c:ca:
c0:c8:69:65:d6:27:54:7a:3a:28:35:25:1d:e8:c6:
30:39:40:81:85:dd:a6:f1:7a:c0:66:f2:ee:2e:f3:
54:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
45:FC:40:A4:1A:28:F6:C7:53:1D:61:A8:6D:2C:60:8A:43:9C:1A:F1
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2c:5c:aa:56:19:43:ae:b9:0c:dd:a1:f2:4b:ab:7b:b2:2e:be:
7e:9e:7b:42:51:3d:c2:77:97:3c:a3:7b:7d:7a:10:94:7b:eb:
3b:2c:b7:b8:b1:9b:f0:09:97:99:20:6e:75:b7:74:95:07:3a:
6f:d7:bb:c5:6b:9b:31:3d:a2:c1:62:f7:9e:85:92:0b:d5:0e:
cb:86:bf:b6:d7:2b:32:44:5c:0a:65:d2:1c:bb:35:bb:d4:62:
f0:90:e4:6d:3b:93:2b:4f:23:a5:09:3b:e5:fd:28:25:b9:5d:
ef:9c:da:57:28:e7:71:8b:04:f2:1b:18:97:b1:a6:d7:cd:7d:
48:f0:a9:14:53:dd:95:ac:c4:2b:14:1b:53:d5:92:7a:0a:bd:
ed:9f:6a:c3:c5:7b:61:bc:ba:a5:a6:dd:f5:ab:e9:bd:47:0b:
4f:6d:6e:f7:a4:07:66:1e:db:1d:8e:6d:b3:c2:3c:b1:a6:3c:
dc:2b:73:b3:ce:1e:29:d7:53:11:65:20:06:f8:08:75:24:50:
e6:4a:9b:ca:c6:4a:49:ab:16:1e:14:f4:5e:32:55:5a:80:a0:
a0:4a:3e:a7:83:b1:0b:29:1a:50:ca:1d:59:f8:65:91:5c:4e:
a7:64:c5:3d:73:74:15:84:2e:f1:37:43:b9:21:63:8a:c4:fb:
75:24:41:a9
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd1ZYDSJXIIRybf7TUndcBIMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjI1MjFlYjU4YjQ1YjBjNWEyY2NiZTM4MzMxNWNlNzlk
N2VlYTUwHhcNMjUwNjE1MjEwMTE1WhcNMjUwNjE2MjEwMTE1WjAzMTEwLwYDVQQD
Eyg0NWZjNDBhNDFhMjhmNmM3NTMxZDYxYTg2ZDJjNjA4YTQzOWMxYWYxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvmMBGWTkGK5F2MJxKDKzWZqpt9j1
dHdCZMgLqNG0DiD7buU/tcMTfSoW3iGeoShHDPIajAEWxRPLiqlBErjhuAOOLw8k
zIPK2ZqSA0yFyX3I8jt8BGW76ssdc9HIp0dxsm1XKZyZWmJEf1Dq2lK8JcD0mzUn
k377nFF/k4lrLAypxoOY69cHKd3nIqBcSaF7NJpuoYCe2MUhnNkoBGKnPeKEfrOS
iKv2NAST9S7mlgICdHwhhW8yIlbn9WWkQOLj5acSONq1DE8KIjJmVIChcbHCMJfr
arpPtbqR3rwLnMrAyGll1idUejooNSUd6MYwOUCBhd2m8XrAZvLuLvNUdwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEX8QKQaKPbHUx1hqG0sYIpDnBrxMB8GA1UdIwQY
MBaAFEZiUh61i0WwxaLMvjgzFc551+6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUt
OGFiODY5Mzc0MTBhLzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUtOGFiODY5Mzc0MTBh
LzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEALFyqVhlD
rrkM3aHyS6t7si6+fp57QlE9wneXPKN7fXoQlHvrOyy3uLGb8AmXmSBudbd0lQc6
b9e7xWubMT2iwWL3noWSC9UOy4a/ttcrMkRcCmXSHLs1u9Ri8JDkbTuTK08jpQk7
5f0oJbld75zaVyjncYsE8hsYl7Gm1819SPCpFFPdlazEKxQbU9WSegq97Z9qw8V7
Yby6pabd9avpvUcLT21u96QHZh7bHY5ts8I8saY83Ctzs84eKddTEWUgBvgIdSRQ
5kqbysZKSasWHhT0XjJVWoCgoEo+p4OxCykaUModWfhlkVxOp2TFPXN0FYQu8TdD
uSFjisT7dSRBqQ==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:15:09 2025 by rpki-client