Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
File: mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft (raw, json)
Hash identifier: dhjWln5bcpyOL7HIxF28wr7klW4jvxoH/uLswcs9/xo=
Subject key identifier: 92:A0:46:AA:CC:1F:10:7A:F7:33:72:00:72:21:29:31:8F:14:CD:17
Authority key identifier: 98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
Certificate issuer: /CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Certificate serial: 0197748949339D2261FA9B02E466ED341060
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
Manifest number: 0308
Signing time: Sun 15 Jun 2025 17:00:43 +0000
Manifest this update: Sun 15 Jun 2025 17:00:43 +0000
Manifest next update: Mon 16 Jun 2025 17:00:43 +0000
Files and hashes: 1: ZGE5AizrKbXlhiOgUpEa0BfhvKE.roa (hash: Sdtf+jxpdyeU8qrUbikLaDInkHhOfKlXAEXYnF5rIdk=)
2: mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl (hash: EOwnbJAlTsRVhPa/3eNneCW6A9ySAEycSPrJ75yHQqY=)
3: ubYQhCPAc1y9PWfDDFmtFKcMhjQ.roa (hash: 4pYqeQ4V8Sj7VAcygq8v+qY+0dXhWe9XfBkV8soN9nY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 16 Jun 2025 17:00:43 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:74:89:49:33:9d:22:61:fa:9b:02:e4:66:ed:34:10:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=98fb582c1cd1881f2d46d0a70382cab69225f1a9
Validity
Not Before: Jun 15 17:00:43 2025 GMT
Not After : Jun 16 17:00:43 2025 GMT
Subject: CN=92a046aacc1f107af7337200722129318f14cd17
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:8d:5a:53:5e:d2:47:22:8b:66:2d:42:b9:02:
07:15:c7:13:61:86:55:e9:75:90:af:91:e9:8e:7a:
be:f8:24:d7:7c:99:71:a5:46:cb:cb:0f:63:a4:23:
29:68:01:56:ab:91:94:4a:c5:29:1d:4a:9a:61:4a:
41:a0:cd:c4:3d:65:8f:2d:91:23:be:d9:6c:09:7f:
88:79:66:05:12:ce:cf:40:12:9b:a7:82:82:e6:27:
f8:8f:a8:32:7b:97:32:37:ba:fa:77:42:c2:8a:58:
fa:e5:90:ae:63:f1:e8:fa:51:45:66:ac:25:ed:f6:
fd:59:f9:28:98:29:24:6e:1d:71:81:38:9c:cf:fb:
c7:be:c0:a3:8c:6d:f8:72:8c:2b:05:d0:5c:6e:f9:
d6:e3:b3:09:86:4e:34:05:29:f7:0a:ee:db:d1:44:
d7:97:2d:0e:31:d3:5e:2a:b8:2b:2a:6d:d0:11:b7:
9b:95:79:c4:91:43:91:f4:48:2c:6f:ad:26:12:1b:
64:e9:3c:05:ea:b2:68:55:96:4b:c7:47:a7:ba:84:
62:66:9c:9d:82:27:2d:f9:7f:bf:7c:7f:91:38:af:
6f:22:26:28:64:0e:8b:36:a9:93:2a:da:1f:47:fd:
d1:47:21:ae:b9:b6:de:e5:52:aa:57:cc:50:a5:8f:
5e:99
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
92:A0:46:AA:CC:1F:10:7A:F7:33:72:00:72:21:29:31:8F:14:CD:17
X509v3 Authority Key Identifier:
keyid:98:FB:58:2C:1C:D1:88:1F:2D:46:D0:A7:03:82:CA:B6:92:25:F1:A9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/mPtYLBzRiB8tRtCnA4LKtpIl8ak.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/fd/ec401c-44e4-4fcc-b037-3bc44101ec00/1/mPtYLBzRiB8tRtCnA4LKtpIl8ak.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b6:57:42:03:f9:2b:d3:e5:27:6f:2d:92:75:07:df:10:d4:e6:
40:19:8f:32:ec:14:52:b2:cb:b3:68:59:1a:3c:52:34:ec:aa:
68:90:5a:98:87:00:53:db:bc:fe:12:4d:4c:51:67:36:75:ae:
ff:c4:b8:5b:b4:0e:7a:49:8f:1f:49:90:b9:b4:74:8c:f6:4a:
75:19:44:0e:1c:e2:50:fe:c0:22:ac:44:3c:57:d9:8c:f6:ca:
07:52:5c:1d:0e:b9:3a:10:45:d7:0f:d2:dc:d8:39:80:2d:af:
6b:c9:c5:08:aa:fc:a1:7f:0a:45:f8:93:b0:bc:75:3f:e2:eb:
0a:9a:d0:56:be:7e:84:1a:f3:87:ef:20:81:71:e7:d8:1d:57:
2c:17:03:54:6c:6f:aa:dc:e7:2f:7f:41:04:0a:7a:9d:17:5e:
db:c1:42:1d:d7:f9:cf:86:a9:47:38:d8:b0:ff:8f:1c:29:6a:
e9:7e:9a:7b:a2:14:f6:31:3c:20:c5:78:e0:cc:ba:ef:77:90:
2d:4c:e7:fc:65:e2:60:c7:ea:8b:48:67:99:d0:0d:7b:ba:2a:
47:8a:c9:82:a4:4c:d9:4d:14:9a:b2:6d:8b:2e:b8:09:96:c2:
08:1e:53:9f:ee:92:5f:1d:33:85:b4:1f:a4:92:ec:0b:30:56:
14:37:2c:90
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd0iUkznSJh+psC5GbtNBBgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk4ZmI1ODJjMWNkMTg4MWYyZDQ2ZDBhNzAzODJjYWI2OTIy
NWYxYTkwHhcNMjUwNjE1MTcwMDQzWhcNMjUwNjE2MTcwMDQzWjAzMTEwLwYDVQQD
Eyg5MmEwNDZhYWNjMWYxMDdhZjczMzcyMDA3MjIxMjkzMThmMTRjZDE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo41aU17SRyKLZi1CuQIHFccTYYZV
6XWQr5Hpjnq++CTXfJlxpUbLyw9jpCMpaAFWq5GUSsUpHUqaYUpBoM3EPWWPLZEj
vtlsCX+IeWYFEs7PQBKbp4KC5if4j6gye5cyN7r6d0LCilj65ZCuY/Ho+lFFZqwl
7fb9WfkomCkkbh1xgTicz/vHvsCjjG34cowrBdBcbvnW47MJhk40BSn3Cu7b0UTX
ly0OMdNeKrgrKm3QEbeblXnEkUOR9Egsb60mEhtk6TwF6rJoVZZLx0enuoRiZpyd
gict+X+/fH+ROK9vIiYoZA6LNqmTKtofR/3RRyGuubbe5VKqV8xQpY9emQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJKgRqrMHxB69zNyAHIhKTGPFM0XMB8GA1UdIwQY
MBaAFJj7WCwc0YgfLUbQpwOCyraSJfGpMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mZC9lYzQwMWMtNDRlNC00ZmNjLWIwMzct
M2JjNDQxMDFlYzAwLzEvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mZC9lYzQwMWMtNDRlNC00ZmNjLWIwMzctM2JjNDQxMDFlYzAw
LzEvbVB0WUxCelJpQjh0UnRDbkE0TEt0cElsOGFrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAtldCA/kr
0+Unby2SdQffENTmQBmPMuwUUrLLs2hZGjxSNOyqaJBamIcAU9u8/hJNTFFnNnWu
/8S4W7QOekmPH0mQubR0jPZKdRlEDhziUP7AIqxEPFfZjPbKB1JcHQ65OhBF1w/S
3Ng5gC2va8nFCKr8oX8KRfiTsLx1P+LrCprQVr5+hBrzh+8ggXHn2B1XLBcDVGxv
qtznL39BBAp6nRde28FCHdf5z4apRzjYsP+PHClq6X6ae6IU9jE8IMV44My673eQ
LUzn/GXiYMfqi0hnmdANe7oqR4rJgqRM2U0UmrJtiy64CZbCCB5Tn+6SXx0zhbQf
pJLsCzBWFDcskA==
-----END CERTIFICATE-----
Generated at Mon Jun 16 02:40:23 2025 by rpki-client