Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
File: d8LYpgGX_HveZPw_rRDrLaT-h3k.mft (raw, json)
Hash identifier: wVfEvNXYRZH0ZBSSLLy7PZRGBghehJ8zo9XntGVZZkM=
Subject key identifier: E0:F0:6D:AA:7A:43:9A:8C:B8:47:1A:D4:87:50:28:4B:C6:68:B3:17
Authority key identifier: 77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
Certificate issuer: /CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Certificate serial: 019852312A54A716EC4548DD4655BDBEBA38
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
Manifest number: 065B
Signing time: Mon 28 Jul 2025 18:00:10 +0000
Manifest this update: Mon 28 Jul 2025 18:00:10 +0000
Manifest next update: Tue 29 Jul 2025 18:00:10 +0000
Files and hashes: 1: Fio9S4kkM_6MY_PyvY4nnlbZSX0.roa (hash: MLkm/zb7dfsD7k0W1D+pAVDUongRrbvCkAFDtBq/FSI=)
2: d8LYpgGX_HveZPw_rRDrLaT-h3k.crl (hash: LjnhtLHfQVi9PZz0dLTHih6ipkvZDOj8SE7kRHXSzw4=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 29 Jul 2025 18:00:10 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:52:31:2a:54:a7:16:ec:45:48:dd:46:55:bd:be:ba:38
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=77c2d8a60197fc7bde64fc3fad10eb2da4fe8779
Validity
Not Before: Jul 28 18:00:10 2025 GMT
Not After : Jul 29 18:00:10 2025 GMT
Subject: CN=e0f06daa7a439a8cb8471ad48750284bc668b317
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:1f:91:7c:c5:2b:b6:44:2a:01:cd:85:af:4b:
6e:8a:b8:8c:24:f1:1c:8d:a7:be:9b:b4:af:77:19:
9f:b7:64:8b:bb:2c:1d:0d:b5:e0:b2:05:4d:67:43:
ae:3d:eb:93:f0:82:6c:7e:6e:cc:bd:55:c0:cc:e3:
35:a0:0d:9b:df:36:22:e4:bf:49:43:2c:05:a5:5d:
8f:cc:f9:0b:f7:e8:25:e9:c6:18:94:d8:d3:f2:fd:
9e:a0:95:26:f3:27:a4:38:be:b2:c5:d6:be:c3:cc:
1d:91:4c:24:12:77:ce:63:23:96:f1:8c:7a:6a:79:
05:37:99:7e:51:94:ec:b2:95:1b:86:f4:c7:e4:96:
db:78:fb:ae:81:ba:0d:b2:34:d1:4b:2c:5e:6c:9c:
55:36:c8:1b:b0:0e:a5:24:2d:e2:bf:5e:fc:64:7a:
0e:7c:ca:12:e8:83:f5:33:53:9f:45:12:17:5e:8f:
9f:8a:1e:5b:dd:55:34:8e:ee:3a:1e:86:84:50:f6:
84:d3:15:af:00:79:5c:d1:d1:65:ab:21:b6:db:d1:
93:12:44:63:7f:c6:2f:22:98:6f:88:27:9e:b9:19:
55:f9:11:be:bf:51:28:de:d2:78:6d:39:54:14:77:
5c:2a:d4:83:14:ca:6c:98:2c:56:b3:b0:f8:a4:2a:
50:3d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E0:F0:6D:AA:7A:43:9A:8C:B8:47:1A:D4:87:50:28:4B:C6:68:B3:17
X509v3 Authority Key Identifier:
keyid:77:C2:D8:A6:01:97:FC:7B:DE:64:FC:3F:AD:10:EB:2D:A4:FE:87:79
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8LYpgGX_HveZPw_rRDrLaT-h3k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/46/7fb254-417a-4180-a4f0-8f2af9b51c5b/1/d8LYpgGX_HveZPw_rRDrLaT-h3k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:e0:ee:aa:f3:50:c8:5f:74:3c:17:e6:5f:67:ff:d8:c9:ed:
5d:5b:b8:15:d1:f6:82:67:8a:15:9c:a9:fa:5b:43:7b:23:0d:
d7:fd:39:05:e0:f0:73:76:97:bb:8f:c9:14:c9:7e:39:23:35:
55:1e:25:68:53:84:9c:f3:db:c4:01:42:d3:84:cc:b6:cb:58:
f5:34:c2:61:e9:c1:43:60:fc:f4:37:76:19:8c:5d:b2:ee:37:
57:f3:d3:e4:ef:d4:d6:f1:61:2f:e8:d7:c6:44:5e:6c:29:6c:
4f:95:ea:d5:ea:83:f3:82:34:d8:20:f7:54:1a:03:2c:3a:6d:
c5:f8:46:fb:6e:0d:71:a1:66:c2:02:6d:95:69:58:92:54:13:
3f:11:ac:50:2b:ea:7a:cb:1f:5d:5b:31:55:7b:ce:8b:3a:ab:
99:d3:8a:1d:e4:ee:84:f9:17:01:81:4f:7f:dc:fd:9d:9f:ea:
99:51:30:4d:45:8c:c1:60:6c:13:5c:1c:f3:6b:c7:8f:fe:19:
3e:c8:fb:40:86:6f:0d:49:6f:14:58:e1:4b:ad:6c:10:45:2b:
c6:76:78:ac:c8:0c:a3:cb:e0:56:89:57:4a:55:64:78:6e:9b:
42:5b:4c:d1:79:ea:21:15:d4:0b:4b:45:d1:31:29:7f:39:e4:
b6:fc:cf:c2
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhSMSpUpxbsRUjdRlW9vro4MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDc3YzJkOGE2MDE5N2ZjN2JkZTY0ZmMzZmFkMTBlYjJkYTRm
ZTg3NzkwHhcNMjUwNzI4MTgwMDEwWhcNMjUwNzI5MTgwMDEwWjAzMTEwLwYDVQQD
EyhlMGYwNmRhYTdhNDM5YThjYjg0NzFhZDQ4NzUwMjg0YmM2NjhiMzE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAjh+RfMUrtkQqAc2Fr0tuiriMJPEc
jae+m7Svdxmft2SLuywdDbXgsgVNZ0OuPeuT8IJsfm7MvVXAzOM1oA2b3zYi5L9J
QywFpV2PzPkL9+gl6cYYlNjT8v2eoJUm8yekOL6yxda+w8wdkUwkEnfOYyOW8Yx6
ankFN5l+UZTsspUbhvTH5JbbePuugboNsjTRSyxebJxVNsgbsA6lJC3iv178ZHoO
fMoS6IP1M1OfRRIXXo+fih5b3VU0ju46HoaEUPaE0xWvAHlc0dFlqyG229GTEkRj
f8YvIphviCeeuRlV+RG+v1Eo3tJ4bTlUFHdcKtSDFMpsmCxWs7D4pCpQPQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFODwbap6Q5qMuEca1IdQKEvGaLMXMB8GA1UdIwQY
MBaAFHfC2KYBl/x73mT8P60Q6y2k/od5MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Ni83ZmIyNTQtNDE3YS00MTgwLWE0ZjAt
OGYyYWY5YjUxYzViLzEvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Ni83ZmIyNTQtNDE3YS00MTgwLWE0ZjAtOGYyYWY5YjUxYzVi
LzEvZDhMWXBnR1hfSHZlWlB3X3JSRHJMYVQtaDNrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa+DuqvNQ
yF90PBfmX2f/2MntXVu4FdH2gmeKFZyp+ltDeyMN1/05BeDwc3aXu4/JFMl+OSM1
VR4laFOEnPPbxAFC04TMtstY9TTCYenBQ2D89Dd2GYxdsu43V/PT5O/U1vFhL+jX
xkRebClsT5Xq1eqD84I02CD3VBoDLDptxfhG+24NcaFmwgJtlWlYklQTPxGsUCvq
essfXVsxVXvOizqrmdOKHeTuhPkXAYFPf9z9nZ/qmVEwTUWMwWBsE1wc82vHj/4Z
Psj7QIZvDUlvFFjhS61sEEUrxnZ4rMgMo8vgVolXSlVkeG6bQltM0XnqIRXUC0tF
0TEpfznktvzPwg==
-----END CERTIFICATE-----
Generated at Tue Jul 29 03:45:40 2025 by rpki-client