Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
File: 00-mvj9cOPS7fgYrZwd0f0lhoEg.mft (raw, json)
Hash identifier: dyrLaCOz0KpsDgAnGb/tbL5ZowqQ13L0n2OfRaKoUnc=
Subject key identifier: 20:91:E1:EC:82:84:D9:4F:3C:78:45:7E:EA:00:A1:E5:1C:F8:F9:E1
Authority key identifier: D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
Certificate issuer: /CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Certificate serial: 01982AEDC04D1E3315C6C00F3B5DF423C892
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
Manifest number: 0F76
Signing time: Mon 21 Jul 2025 03:01:20 +0000
Manifest this update: Mon 21 Jul 2025 03:01:20 +0000
Manifest next update: Tue 22 Jul 2025 03:01:20 +0000
Files and hashes: 1: 00-mvj9cOPS7fgYrZwd0f0lhoEg.crl (hash: 72aB//7QqWD4JGdVjeh+snWzsxMlaRMybzZrusSFCTQ=)
2: NqFx58VddClRGkaq4vH0spxB4sY.roa (hash: +1mQ81/UVGy7/f9fmdLWXPkvY0wtPU2QaCzUYGQfgPM=)
3: l-051BYsRCxKE3vQ5NqqDTviFr4.roa (hash: zt5p627DRZYw9RNnukf8GDpw31GizuJMWnR2o5lMps4=)
4: lrUiZniRQz-h8c2XhwOWkweOdEA.roa (hash: d49AW/uRjxvRRJYubTh5j7tar5tvmS5hfgjaKWxZ/ps=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 22 Jul 2025 03:01:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:2a:ed:c0:4d:1e:33:15:c6:c0:0f:3b:5d:f4:23:c8:92
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d34fa6be3f5c38f4bb7e062b6707747f4961a048
Validity
Not Before: Jul 21 03:01:20 2025 GMT
Not After : Jul 22 03:01:20 2025 GMT
Subject: CN=2091e1ec8284d94f3c78457eea00a1e51cf8f9e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:89:34:e9:ef:e9:39:92:97:94:9f:89:b2:5f:
97:5a:33:fd:7a:d9:82:b2:a9:36:c3:c1:a6:9a:94:
01:13:4a:c9:6e:a9:ef:d1:4a:14:94:fd:ce:96:92:
29:cc:b5:df:f8:2d:0a:8b:fb:f3:23:02:4a:f5:64:
a0:e7:4d:15:42:7c:cb:77:f1:35:2a:01:38:9f:b1:
cf:15:60:04:f2:dd:89:67:1c:53:ff:b1:3d:c5:19:
99:b1:20:53:ab:77:5d:ea:d7:57:d9:62:b0:d7:e0:
e2:4f:4d:2a:0f:13:6b:ff:4a:b2:7a:75:4b:7a:a7:
a3:cc:55:11:f5:49:da:dc:d3:50:fe:cc:4e:09:87:
72:22:2e:a4:f2:28:a8:51:77:e0:06:47:ad:c6:dd:
b7:14:2c:eb:d7:49:57:5e:3e:b8:3b:d9:5b:bc:57:
46:fe:f4:f8:05:a9:9d:fd:fe:0f:35:65:af:d0:af:
af:8d:d9:a6:9b:49:a0:22:9c:6d:b1:d1:f7:fb:fd:
97:3d:5d:01:d7:b8:d2:29:05:b2:9a:6c:17:de:8e:
03:ae:1b:4d:e7:c9:33:37:c3:95:aa:26:15:6b:5a:
06:61:09:22:f6:a6:4a:a2:f7:0f:45:ec:8f:18:e7:
a5:a2:b6:04:33:e7:77:53:ce:d1:a6:66:f7:2a:71:
e5:03
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
20:91:E1:EC:82:84:D9:4F:3C:78:45:7E:EA:00:A1:E5:1C:F8:F9:E1
X509v3 Authority Key Identifier:
keyid:D3:4F:A6:BE:3F:5C:38:F4:BB:7E:06:2B:67:07:74:7F:49:61:A0:48
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/00-mvj9cOPS7fgYrZwd0f0lhoEg.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/04/3bc707-76e7-4987-befa-981184dee131/1/00-mvj9cOPS7fgYrZwd0f0lhoEg.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6d:88:7e:b4:f0:c5:45:a6:af:eb:06:97:2e:fc:07:a3:a5:78:
d8:7c:ea:f7:79:e1:2f:da:e3:4e:e9:b0:bf:eb:78:a9:66:1d:
43:90:3d:d0:ec:24:00:54:e8:9e:88:ee:41:09:67:b0:50:0d:
e3:c0:0e:50:5b:9b:b7:19:82:73:8e:98:a6:be:d1:c8:b8:de:
2d:85:88:68:cc:d3:96:6f:86:b8:85:6c:74:56:3d:d0:bd:e9:
2e:53:59:cb:79:23:29:37:33:88:53:2f:b5:fd:8c:6c:ac:c2:
76:8b:5d:8e:8a:eb:eb:7b:da:de:46:8f:4c:45:e6:0b:d3:a2:
49:ff:0f:24:ee:93:b6:d3:b0:3f:02:78:88:bf:4d:35:57:f8:
26:db:c2:d9:2e:d0:0b:85:d9:db:6d:69:c5:71:4e:6e:44:67:
26:bf:a7:49:25:09:c1:77:03:0b:99:e8:6a:0a:45:1e:8a:49:
04:af:32:ac:48:d1:09:97:43:7b:0e:eb:00:43:c0:f3:f9:2c:
b3:b7:df:96:63:ad:69:90:97:e0:2b:29:1c:03:7a:0e:b3:b2:
6c:83:a7:b7:51:f9:66:4d:11:e7:46:1e:83:2a:a6:b4:d8:c0:
dc:94:e3:45:25:31:fa:37:8c:ab:c7:38:90:80:e1:10:46:42:
e7:96:30:ee
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZgq7cBNHjMVxsAPO130I8iSMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQzNGZhNmJlM2Y1YzM4ZjRiYjdlMDYyYjY3MDc3NDdmNDk2
MWEwNDgwHhcNMjUwNzIxMDMwMTIwWhcNMjUwNzIyMDMwMTIwWjAzMTEwLwYDVQQD
EygyMDkxZTFlYzgyODRkOTRmM2M3ODQ1N2VlYTAwYTFlNTFjZjhmOWUxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtok06e/pOZKXlJ+Jsl+XWjP9etmC
sqk2w8GmmpQBE0rJbqnv0UoUlP3OlpIpzLXf+C0Ki/vzIwJK9WSg500VQnzLd/E1
KgE4n7HPFWAE8t2JZxxT/7E9xRmZsSBTq3dd6tdX2WKw1+DiT00qDxNr/0qyenVL
eqejzFUR9Una3NNQ/sxOCYdyIi6k8iioUXfgBketxt23FCzr10lXXj64O9lbvFdG
/vT4Bamd/f4PNWWv0K+vjdmmm0mgIpxtsdH3+/2XPV0B17jSKQWymmwX3o4DrhtN
58kzN8OVqiYVa1oGYQki9qZKovcPReyPGOelorYEM+d3U87Rpmb3KnHlAwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCCR4eyChNlPPHhFfuoAoeUc+PnhMB8GA1UdIwQY
MBaAFNNPpr4/XDj0u34GK2cHdH9JYaBIMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEt
OTgxMTg0ZGVlMTMxLzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8wNC8zYmM3MDctNzZlNy00OTg3LWJlZmEtOTgxMTg0ZGVlMTMx
LzEvMDAtbXZqOWNPUFM3ZmdZclp3ZDBmMGxob0VnLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAbYh+tPDF
Raav6waXLvwHo6V42Hzq93nhL9rjTumwv+t4qWYdQ5A90OwkAFTonojuQQlnsFAN
48AOUFubtxmCc46Ypr7RyLjeLYWIaMzTlm+GuIVsdFY90L3pLlNZy3kjKTcziFMv
tf2MbKzCdotdjorr63va3kaPTEXmC9OiSf8PJO6TttOwPwJ4iL9NNVf4JtvC2S7Q
C4XZ221pxXFObkRnJr+nSSUJwXcDC5noagpFHopJBK8yrEjRCZdDew7rAEPA8/ks
s7fflmOtaZCX4CspHAN6DrOybIOnt1H5Zk0R50YegyqmtNjA3JTjRSUx+jeMq8c4
kIDhEEZC55Yw7g==
-----END CERTIFICATE-----
Generated at Mon Jul 21 12:39:58 2025 by rpki-client