Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
File: RkVleaUXL8oI4EOwK7ly-3UDrq8.mft (raw, json)
Hash identifier: xI2dWvlBuVUrkz4ELU33dSaT9OdxIzMIkhwLqf1NmlE=
Subject key identifier: 6A:CE:B5:46:6A:4A:1F:A8:E9:C0:36:7D:33:95:ED:78:8E:BB:54:5F
Authority key identifier: 46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
Certificate issuer: /CN=46456579a5172fca08e043b02bb972fb7503aeaf
Certificate serial: 019846645A21B8B3D5BFA673638D13099402
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
Manifest number: 1354
Signing time: Sat 26 Jul 2025 11:00:38 +0000
Manifest this update: Sat 26 Jul 2025 11:00:38 +0000
Manifest next update: Sun 27 Jul 2025 11:00:38 +0000
Files and hashes: 1: 6--mKTLhcJSvHElJeuoDt_lQE_Q.roa (hash: SXpjKVkVSr9zsLSxhubs4WsDg8DBpMmGqFFwLSfPmwo=)
2: RkVleaUXL8oI4EOwK7ly-3UDrq8.crl (hash: w0SJNINz57bGvmLwWhlCaO6b8gJ07uRsfZ9azhWoFLM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 11:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:46:64:5a:21:b8:b3:d5:bf:a6:73:63:8d:13:09:94:02
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46456579a5172fca08e043b02bb972fb7503aeaf
Validity
Not Before: Jul 26 11:00:38 2025 GMT
Not After : Jul 27 11:00:38 2025 GMT
Subject: CN=6aceb5466a4a1fa8e9c0367d3395ed788ebb545f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:e7:22:40:71:e6:3e:b6:ac:17:17:1a:c1:a8:
e6:d5:32:ae:29:53:5d:e5:6a:f0:f7:73:53:b3:af:
fc:b1:97:8d:1d:44:bf:2d:a8:26:69:a8:5e:a0:bd:
a1:4c:b3:64:5b:35:eb:60:45:27:51:99:18:23:46:
04:14:ec:56:96:5c:ea:87:70:75:b9:d5:0d:cb:1a:
de:d7:08:b3:2f:ac:ac:c4:c2:d3:57:d7:f7:8f:fb:
ee:7c:83:c2:ad:5d:79:31:ae:00:fc:fc:97:91:0b:
99:88:0f:40:f7:08:5a:e5:e5:a0:67:20:e3:0b:fc:
ab:65:b9:c8:e2:10:49:f0:d1:d5:58:f8:29:a2:04:
0d:3a:36:be:8f:d5:e4:a8:c8:07:4c:88:ab:c2:39:
55:9c:d4:49:f0:46:19:1f:0c:76:05:8e:88:57:6a:
c4:fc:f4:e5:8a:42:0d:d0:fc:72:75:28:c7:fd:c7:
7b:9c:48:51:8b:1e:d7:70:4a:24:89:d2:16:28:0d:
14:5c:d7:c6:13:d1:1e:3c:47:e3:e8:25:5d:71:4c:
ab:00:a6:ea:c5:a2:a7:1d:79:52:74:2b:26:4f:81:
1c:87:d6:db:96:ab:b7:36:fd:d4:c5:d7:80:08:f8:
3d:20:18:6d:b5:34:26:89:01:0d:57:d2:c0:81:59:
c7:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
6A:CE:B5:46:6A:4A:1F:A8:E9:C0:36:7D:33:95:ED:78:8E:BB:54:5F
X509v3 Authority Key Identifier:
keyid:46:45:65:79:A5:17:2F:CA:08:E0:43:B0:2B:B9:72:FB:75:03:AE:AF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RkVleaUXL8oI4EOwK7ly-3UDrq8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/02/ec9e26-20f2-4e23-a08f-a34c855b5aab/1/RkVleaUXL8oI4EOwK7ly-3UDrq8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:f4:1c:7a:db:c0:0f:da:ad:1e:7e:36:e4:24:c3:78:56:bf:
f6:31:77:d5:b7:29:f8:66:0d:d0:9c:80:40:ba:c9:36:b9:8e:
05:d5:50:23:97:df:c3:9b:d8:91:59:4e:b7:ba:8d:f6:7b:cd:
bf:49:22:a9:9a:ee:a3:e6:d1:ed:7d:69:bc:e8:71:96:c5:09:
1d:1b:1e:e6:56:44:28:c3:a8:50:5b:3b:7e:7b:b7:54:6b:46:
8c:ba:6c:ff:6c:f8:c1:9c:7f:02:da:5d:28:bd:7e:49:40:71:
67:e2:71:ab:d6:0f:01:f9:fb:a0:7a:5b:fe:b3:42:31:bd:c9:
0b:bd:09:5a:80:b2:33:1d:ad:7a:c3:b9:90:48:c7:67:fe:af:
32:dd:0d:89:72:84:f1:e9:91:65:e0:dc:94:15:25:1c:cf:e6:
e7:67:45:91:3f:85:ca:a8:ed:4c:79:a3:32:65:44:51:c3:8b:
3e:99:32:6f:6a:f7:3b:2b:99:8c:10:d6:c0:d0:10:6c:1c:2f:
14:e3:eb:45:22:0e:e2:6f:4d:b5:b8:3d:b0:3e:9b:ca:45:07:
2a:a4:82:63:99:0b:81:1e:0a:51:5b:14:8e:77:ff:ad:cb:ee:
eb:78:07:5a:a5:be:6a:d8:ea:94:82:c7:03:e9:f5:2e:ac:ca:
e6:85:e8:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhGZFohuLPVv6ZzY40TCZQCMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NDU2NTc5YTUxNzJmY2EwOGUwNDNiMDJiYjk3MmZiNzUw
M2FlYWYwHhcNMjUwNzI2MTEwMDM4WhcNMjUwNzI3MTEwMDM4WjAzMTEwLwYDVQQD
Eyg2YWNlYjU0NjZhNGExZmE4ZTljMDM2N2QzMzk1ZWQ3ODhlYmI1NDVmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsOciQHHmPrasFxcawajm1TKuKVNd
5Wrw93NTs6/8sZeNHUS/LagmaaheoL2hTLNkWzXrYEUnUZkYI0YEFOxWllzqh3B1
udUNyxre1wizL6ysxMLTV9f3j/vufIPCrV15Ma4A/PyXkQuZiA9A9wha5eWgZyDj
C/yrZbnI4hBJ8NHVWPgpogQNOja+j9XkqMgHTIirwjlVnNRJ8EYZHwx2BY6IV2rE
/PTlikIN0PxydSjH/cd7nEhRix7XcEokidIWKA0UXNfGE9EePEfj6CVdcUyrAKbq
xaKnHXlSdCsmT4Ech9bblqu3Nv3UxdeACPg9IBhttTQmiQENV9LAgVnHbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGrOtUZqSh+o6cA2fTOV7XiOu1RfMB8GA1UdIwQY
MBaAFEZFZXmlFy/KCOBDsCu5cvt1A66vMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmtWbGVhVVhMOG9JNEVPd0s3bHktM1VEcnE4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wMi9lYzllMjYtMjBmMi00ZTIzLWEwOGYt
YTM0Yzg1NWI1YWFiLzEvUmtWbGVhVVhMOG9JNEVPd0s3bHktM1VEcnE4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wMi9lYzllMjYtMjBmMi00ZTIzLWEwOGYtYTM0Yzg1NWI1YWFi
LzEvUmtWbGVhVVhMOG9JNEVPd0s3bHktM1VEcnE4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcvQcetvA
D9qtHn425CTDeFa/9jF31bcp+GYN0JyAQLrJNrmOBdVQI5ffw5vYkVlOt7qN9nvN
v0kiqZruo+bR7X1pvOhxlsUJHRse5lZEKMOoUFs7fnu3VGtGjLps/2z4wZx/Atpd
KL1+SUBxZ+Jxq9YPAfn7oHpb/rNCMb3JC70JWoCyMx2tesO5kEjHZ/6vMt0NiXKE
8emRZeDclBUlHM/m52dFkT+FyqjtTHmjMmVEUcOLPpkyb2r3OyuZjBDWwNAQbBwv
FOPrRSIO4m9Ntbg9sD6bykUHKqSCY5kLgR4KUVsUjnf/rcvu63gHWqW+atjqlILH
A+n1LqzK5oXo7g==
-----END CERTIFICATE-----
Generated at Sat Jul 26 20:24:36 2025 by rpki-client