Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
File: MHoDlQLUamuZCREM4qsTlod70I4.mft (raw, json)
Hash identifier: iiQ4ElPpSqNlYbLEE7a1o2mYkclV5wh372lsXTMSjQE=
Subject key identifier: 42:49:F3:A0:DA:1E:E4:2C:F9:50:A3:45:F4:6A:48:42:FD:E4:21:06
Authority key identifier: 30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
Certificate issuer: /CN=307a039502d46a6b9909110ce2ab1396877bd08e
Certificate serial: 019849D39E14528BF8C8731E4308FF2B42DE
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
Manifest number: 0A60
Signing time: Sun 27 Jul 2025 03:01:02 +0000
Manifest this update: Sun 27 Jul 2025 03:01:02 +0000
Manifest next update: Mon 28 Jul 2025 03:01:02 +0000
Files and hashes: 1: Ly1MWymIvXOCybb36lr4yOkjsU8.roa (hash: VpBFbk8tqcALSJaD09pM7y3kJlzVLbs+HEbBlDB9T94=)
2: MHoDlQLUamuZCREM4qsTlod70I4.crl (hash: zVWgLgvGDt3eoz6vAewq6WDRJ4dJgpxs7Qk5QDRmbDU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 27 Jul 2025 20:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:d3:9e:14:52:8b:f8:c8:73:1e:43:08:ff:2b:42:de
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=307a039502d46a6b9909110ce2ab1396877bd08e
Validity
Not Before: Jul 27 03:01:02 2025 GMT
Not After : Jul 28 03:01:02 2025 GMT
Subject: CN=4249f3a0da1ee42cf950a345f46a4842fde42106
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:e3:81:a7:66:8d:c8:8b:5e:a5:a6:33:a4:3a:
43:38:ac:00:6d:d5:27:4e:87:60:c7:80:11:fa:a7:
f1:84:51:e0:a7:4c:9e:fd:1c:a9:ec:c2:96:a5:6f:
e6:5e:20:84:ee:aa:d2:0a:12:4b:4e:3f:5e:aa:b5:
35:59:8d:1b:3c:89:ff:ec:a7:68:25:f1:78:14:5d:
05:2b:9d:50:af:3e:58:09:d1:07:f3:18:57:70:87:
57:a5:ff:5a:ac:53:34:fb:58:38:a0:4e:98:24:55:
ab:68:a0:f5:f2:d4:5b:f2:3b:91:2b:a8:bc:65:42:
54:e0:78:26:e5:3b:9c:4a:2a:13:e2:d3:bf:b0:3d:
fd:80:c9:43:2f:d1:b4:d5:2b:04:2e:6f:6b:c6:00:
70:1c:00:41:4a:af:ae:e1:41:d2:c6:b2:ce:09:6c:
9b:60:ab:da:9d:7e:0a:78:bf:2a:dc:49:6e:4c:33:
98:da:c8:8e:eb:fd:69:05:d3:63:55:85:0b:d9:ab:
a5:67:fb:03:78:da:36:cc:25:4d:1f:13:51:cd:ee:
57:2c:f2:03:93:53:f0:f9:0f:59:1e:ca:fd:c8:0f:
c3:c8:9d:88:b9:23:3d:51:81:a4:00:a9:ac:13:3b:
ae:c5:76:6c:b4:c0:1e:c1:35:8a:f6:5d:c2:aa:9f:
d4:e5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
42:49:F3:A0:DA:1E:E4:2C:F9:50:A3:45:F4:6A:48:42:FD:E4:21:06
X509v3 Authority Key Identifier:
keyid:30:7A:03:95:02:D4:6A:6B:99:09:11:0C:E2:AB:13:96:87:7B:D0:8E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MHoDlQLUamuZCREM4qsTlod70I4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/d51211-d0bb-4a57-9390-ce2a496fee86/1/MHoDlQLUamuZCREM4qsTlod70I4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
6b:6a:5f:c9:b4:d9:d0:26:fa:36:70:15:a3:15:22:b7:19:24:
be:b6:b9:42:e3:b7:a6:af:47:54:f2:4f:8f:59:5a:dd:9c:c6:
4a:38:e6:b8:0b:73:46:90:a8:8e:09:88:6e:0e:18:e9:f1:d7:
fe:a9:35:47:01:b6:2e:0d:d3:4f:d9:dc:9a:cd:93:69:4c:de:
58:b6:5e:cb:2c:65:57:36:3c:e3:ec:f3:ca:95:81:62:09:d0:
bf:00:3f:92:db:24:16:50:3d:88:23:d2:5a:49:23:de:67:1a:
2a:67:18:b6:28:76:29:f1:57:03:e1:18:46:30:0c:74:59:db:
54:46:f3:71:00:eb:d5:46:3e:aa:89:fe:ec:d7:d6:ad:6c:d9:
44:a7:6f:1a:46:8d:95:9e:d5:8a:10:25:e1:70:af:fb:74:b4:
e7:59:76:06:48:51:a1:f7:3f:43:ef:dd:3e:d2:d2:4f:59:9f:
7f:27:b7:6c:d1:c7:fd:20:2c:62:04:9a:45:86:c2:f4:6d:c9:
40:e4:26:49:76:34:3d:de:ba:e8:62:d5:e0:19:bc:ba:a0:eb:
df:39:db:ba:5f:77:17:37:0c:da:60:af:e2:f0:db:9d:03:e2:
e5:c8:ca:bb:16:ec:9b:db:4b:f1:f0:01:29:e3:b0:80:25:07:
91:13:6b:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJ054UUov4yHMeQwj/K0LeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMwN2EwMzk1MDJkNDZhNmI5OTA5MTEwY2UyYWIxMzk2ODc3
YmQwOGUwHhcNMjUwNzI3MDMwMTAyWhcNMjUwNzI4MDMwMTAyWjAzMTEwLwYDVQQD
Eyg0MjQ5ZjNhMGRhMWVlNDJjZjk1MGEzNDVmNDZhNDg0MmZkZTQyMTA2MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr+OBp2aNyItepaYzpDpDOKwAbdUn
Todgx4AR+qfxhFHgp0ye/Ryp7MKWpW/mXiCE7qrSChJLTj9eqrU1WY0bPIn/7Kdo
JfF4FF0FK51Qrz5YCdEH8xhXcIdXpf9arFM0+1g4oE6YJFWraKD18tRb8juRK6i8
ZUJU4Hgm5TucSioT4tO/sD39gMlDL9G01SsELm9rxgBwHABBSq+u4UHSxrLOCWyb
YKvanX4KeL8q3EluTDOY2siO6/1pBdNjVYUL2aulZ/sDeNo2zCVNHxNRze5XLPID
k1Pw+Q9ZHsr9yA/DyJ2IuSM9UYGkAKmsEzuuxXZstMAewTWK9l3Cqp/U5QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEJJ86DaHuQs+VCjRfRqSEL95CEGMB8GA1UdIwQY
MBaAFDB6A5UC1GprmQkRDOKrE5aHe9COMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9kNTEyMTEtZDBiYi00YTU3LTkzOTAt
Y2UyYTQ5NmZlZTg2LzEvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9kNTEyMTEtZDBiYi00YTU3LTkzOTAtY2UyYTQ5NmZlZTg2
LzEvTUhvRGxRTFVhbXVaQ1JFTTRxc1Rsb2Q3MEk0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAa2pfybTZ
0Cb6NnAVoxUitxkkvra5QuO3pq9HVPJPj1la3ZzGSjjmuAtzRpCojgmIbg4Y6fHX
/qk1RwG2Lg3TT9ncms2TaUzeWLZeyyxlVzY84+zzypWBYgnQvwA/ktskFlA9iCPS
Wkkj3mcaKmcYtih2KfFXA+EYRjAMdFnbVEbzcQDr1UY+qon+7NfWrWzZRKdvGkaN
lZ7VihAl4XCv+3S051l2BkhRofc/Q+/dPtLST1mffye3bNHH/SAsYgSaRYbC9G3J
QOQmSXY0Pd666GLV4Bm8uqDr3znbul93FzcM2mCv4vDbnQPi5cjKuxbsm9tL8fAB
KeOwgCUHkRNr9g==
-----END CERTIFICATE-----
Generated at Sun Jul 27 05:22:25 2025 by rpki-client