Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
File: rPsCQyaIZ0JgxtASpZfXC81RScQ.mft (raw, json)
Hash identifier: GoiiHBmFpmb+D96FXEor6JFDiEwpZmcxdbgOEs5oBic=
Subject key identifier: 90:53:9F:82:BE:64:C1:BD:D5:85:03:47:11:12:99:7D:86:D5:B2:5B
Authority key identifier: AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
Certificate issuer: /CN=acfb02432688674260c6d012a597d70bcd5149c4
Certificate serial: 01984A780ED5103C7EF8A46ABEC2729C3E35
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
Manifest number: 1604
Signing time: Sun 27 Jul 2025 06:00:38 +0000
Manifest this update: Sun 27 Jul 2025 06:00:38 +0000
Manifest next update: Mon 28 Jul 2025 06:00:38 +0000
Files and hashes: 1: A88LbPdx-8cfYkVb8yLzaoaOIc8.roa (hash: vbrcMRJHvTfymU9cXgb/J1eu18qmF5+dFVWeyuuyCEU=)
2: rPsCQyaIZ0JgxtASpZfXC81RScQ.crl (hash: 2E+oZkl2rKLfnMHKkvwEIjTg61v7g5B4mr5kuYW4AMM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:4a:78:0e:d5:10:3c:7e:f8:a4:6a:be:c2:72:9c:3e:35
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=acfb02432688674260c6d012a597d70bcd5149c4
Validity
Not Before: Jul 27 06:00:38 2025 GMT
Not After : Jul 28 06:00:38 2025 GMT
Subject: CN=90539f82be64c1bdd58503471112997d86d5b25b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:f4:49:36:d4:40:6b:7b:47:56:43:9f:4e:35:
d7:5e:2b:84:58:35:40:9f:4e:e0:e8:eb:af:7b:ed:
9a:bf:ce:3c:58:eb:4f:de:43:29:3f:af:68:a4:48:
07:3b:7f:d1:ce:f4:5e:76:19:89:de:45:6f:cf:16:
9f:b9:c0:e9:57:7c:81:bb:0b:35:ea:10:b6:f4:7b:
03:fe:67:f6:7f:38:3b:91:1a:e7:67:cc:f3:0b:2b:
6f:97:28:61:b5:55:89:40:10:01:c8:54:d8:3d:89:
07:a2:19:bc:bd:af:b6:ae:46:be:44:ae:b3:e6:96:
90:68:34:2c:4b:97:a7:c4:11:a4:7f:d8:18:ee:76:
40:8f:1e:02:32:4f:cd:0b:13:0e:ec:4b:04:5c:8f:
1f:79:d2:58:e9:fc:fc:dc:83:06:6f:13:90:d5:98:
87:99:90:97:b4:80:8f:1a:85:fd:ba:c9:a5:cc:dc:
25:aa:98:d9:c9:50:f0:44:1b:f3:84:87:e4:74:6c:
fa:73:23:e5:2f:e6:45:37:75:05:5c:30:7c:e1:fe:
a7:17:22:eb:83:51:b3:28:bb:d4:ae:40:02:3b:07:
28:c7:af:bc:de:ae:af:0a:1b:ae:13:3a:f7:00:2f:
4a:7e:d0:3c:9a:31:73:70:10:07:e2:30:65:e8:0e:
3f:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:53:9F:82:BE:64:C1:BD:D5:85:03:47:11:12:99:7D:86:D5:B2:5B
X509v3 Authority Key Identifier:
keyid:AC:FB:02:43:26:88:67:42:60:C6:D0:12:A5:97:D7:0B:CD:51:49:C4
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rPsCQyaIZ0JgxtASpZfXC81RScQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/80/a41794-d619-4c74-824d-31d7010a7256/1/rPsCQyaIZ0JgxtASpZfXC81RScQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:60:89:45:3d:72:36:d0:15:27:a4:b8:67:3e:99:96:42:4a:
b2:01:86:ab:4a:42:cf:20:2a:c0:b9:5a:be:e8:5c:73:96:cd:
c2:4b:5c:cd:c3:ee:32:ee:c3:34:f5:af:68:a2:dd:80:bd:f0:
81:d6:cd:69:4e:50:b4:d1:cf:6f:30:43:17:a2:35:9b:59:a1:
81:56:fb:83:9c:d5:64:29:96:a3:76:c0:bd:f0:48:6d:43:45:
7b:b5:70:c3:5e:fb:fd:10:ee:42:8a:a3:c3:80:12:c2:dc:1c:
13:f7:03:70:ec:c2:76:a6:91:2d:39:95:f7:6a:c8:ec:c4:41:
e4:f8:83:c6:d7:ef:4d:ba:33:b6:13:cb:6c:5b:31:f9:b3:eb:
64:9d:75:1c:54:14:5b:40:71:28:52:38:33:7f:57:7e:a7:45:
54:61:a1:cb:c9:3d:6b:5c:91:59:5d:c8:cf:f4:af:f7:1b:c6:
a9:51:7b:08:99:0c:ec:67:09:fe:37:51:b5:f1:6e:09:76:b7:
5f:5d:ca:8e:42:a2:3f:ee:ca:67:67:43:6e:8c:36:64:6e:8c:
88:83:94:b6:9a:39:19:2c:af:b8:c2:80:a1:7d:15:2f:0d:cd:
89:8e:94:f3:41:b7:8b:64:97:5c:37:81:22:b2:53:8c:f0:38:
c2:82:f0:26
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhKeA7VEDx++KRqvsJynD41MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFjZmIwMjQzMjY4ODY3NDI2MGM2ZDAxMmE1OTdkNzBiY2Q1
MTQ5YzQwHhcNMjUwNzI3MDYwMDM4WhcNMjUwNzI4MDYwMDM4WjAzMTEwLwYDVQQD
Eyg5MDUzOWY4MmJlNjRjMWJkZDU4NTAzNDcxMTEyOTk3ZDg2ZDViMjViMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxfRJNtRAa3tHVkOfTjXXXiuEWDVA
n07g6Ouve+2av848WOtP3kMpP69opEgHO3/RzvRedhmJ3kVvzxafucDpV3yBuws1
6hC29HsD/mf2fzg7kRrnZ8zzCytvlyhhtVWJQBAByFTYPYkHohm8va+2rka+RK6z
5paQaDQsS5enxBGkf9gY7nZAjx4CMk/NCxMO7EsEXI8fedJY6fz83IMGbxOQ1ZiH
mZCXtICPGoX9usmlzNwlqpjZyVDwRBvzhIfkdGz6cyPlL+ZFN3UFXDB84f6nFyLr
g1GzKLvUrkACOwcox6+83q6vChuuEzr3AC9KftA8mjFzcBAH4jBl6A4/aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFJBTn4K+ZMG91YUDRxESmX2G1bJbMB8GA1UdIwQY
MBaAFKz7AkMmiGdCYMbQEqWX1wvNUUnEMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclBzQ1F5YUlaMEpneHRBU3BaZlhDODFSU2NRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84MC9hNDE3OTQtZDYxOS00Yzc0LTgyNGQt
MzFkNzAxMGE3MjU2LzEvclBzQ1F5YUlaMEpneHRBU3BaZlhDODFSU2NRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84MC9hNDE3OTQtZDYxOS00Yzc0LTgyNGQtMzFkNzAxMGE3MjU2
LzEvclBzQ1F5YUlaMEpneHRBU3BaZlhDODFSU2NRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL2CJRT1y
NtAVJ6S4Zz6ZlkJKsgGGq0pCzyAqwLlavuhcc5bNwktczcPuMu7DNPWvaKLdgL3w
gdbNaU5QtNHPbzBDF6I1m1mhgVb7g5zVZCmWo3bAvfBIbUNFe7Vww177/RDuQoqj
w4ASwtwcE/cDcOzCdqaRLTmV92rI7MRB5PiDxtfvTbozthPLbFsx+bPrZJ11HFQU
W0BxKFI4M39XfqdFVGGhy8k9a1yRWV3Iz/Sv9xvGqVF7CJkM7GcJ/jdRtfFuCXa3
X13KjkKiP+7KZ2dDbow2ZG6MiIOUtpo5GSyvuMKAoX0VLw3NiY6U80G3i2SXXDeB
IrJTjPA4woLwJg==
-----END CERTIFICATE-----
Generated at Sun Jul 27 08:39:45 2025 by rpki-client