Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
File: RciwwWM2uTM7RE_x4YzHjXanw_Y.mft (raw, json)
Hash identifier: cona3d0xBX9FoyCGxHdBYsU+NALssnOuCw0CPkQUmGQ=
Subject key identifier: 50:68:65:E5:95:20:A0:DF:E8:32:17:7B:56:D4:DB:F9:6E:9C:04:1A
Authority key identifier: 45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
Certificate issuer: /CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Certificate serial: 0198499C529FA6DEF68E66DFE4D1597DC0A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
Manifest number: 0249
Signing time: Sun 27 Jul 2025 02:00:38 +0000
Manifest this update: Sun 27 Jul 2025 02:00:38 +0000
Manifest next update: Mon 28 Jul 2025 02:00:38 +0000
Files and hashes: 1: NP3I33PqiM24AyrvrXcXkrcATEY.roa (hash: suQmPgK0ZMnJeCcPsZiWpQadlCgzQA44K74kBySWlDw=)
2: RciwwWM2uTM7RE_x4YzHjXanw_Y.crl (hash: +G7gy/NOf9Cynvj6gY3aDP3rMnjXicIEORv5rTGoaHE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 28 Jul 2025 00:00:05 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:49:9c:52:9f:a6:de:f6:8e:66:df:e4:d1:59:7d:c0:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=45c8b0c16336b9333b444ff1e18cc78d76a7c3f6
Validity
Not Before: Jul 27 02:00:38 2025 GMT
Not After : Jul 28 02:00:38 2025 GMT
Subject: CN=506865e59520a0dfe832177b56d4dbf96e9c041a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:52:87:e3:cb:8f:49:2a:77:ef:9b:46:d0:2f:
4e:6a:46:e8:d0:4a:33:e1:e0:5f:e3:02:d1:e3:b6:
1f:d0:65:d5:b6:a4:1e:3c:ff:6b:83:10:f4:36:a2:
90:23:02:22:6f:4b:52:73:b5:50:04:21:55:15:40:
52:df:1d:19:f4:e5:e1:a3:9c:00:45:36:23:a7:8a:
0c:77:7b:fa:cc:2f:b3:24:aa:30:43:eb:fd:28:0d:
f1:15:bb:db:53:8d:2d:0e:b5:cb:73:13:78:18:7d:
43:db:d6:0d:b2:bf:50:9b:20:c4:fe:b7:39:47:83:
ce:c8:b7:53:53:21:69:47:06:6e:7b:af:ba:ce:c1:
24:ae:17:d0:59:51:b7:e9:ee:4b:0d:a6:a1:44:97:
44:cc:98:ac:2f:35:43:65:eb:6f:70:81:4b:8a:f0:
c8:9e:41:b4:f0:aa:b2:d9:17:2b:8f:36:b2:c5:13:
63:da:0e:c2:ea:01:c8:d7:0b:05:10:95:07:8b:85:
dc:75:11:d7:71:03:75:c5:65:fa:80:b1:5f:51:00:
42:f2:f5:0b:3d:a6:81:64:f6:82:17:eb:88:9f:70:
44:b1:79:23:36:82:88:5e:32:2f:60:52:96:e7:2a:
6c:79:36:8f:a3:58:8c:5e:86:22:fe:02:07:75:f5:
7b:69
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:68:65:E5:95:20:A0:DF:E8:32:17:7B:56:D4:DB:F9:6E:9C:04:1A
X509v3 Authority Key Identifier:
keyid:45:C8:B0:C1:63:36:B9:33:3B:44:4F:F1:E1:8C:C7:8D:76:A7:C3:F6
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RciwwWM2uTM7RE_x4YzHjXanw_Y.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d8/e2a15c-add0-48d6-b04f-cdfef6d5f9b9/1/RciwwWM2uTM7RE_x4YzHjXanw_Y.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
91:c0:c2:7f:bc:7c:00:ff:8d:ed:6d:16:25:4e:6c:29:ba:87:
c0:0d:60:0d:c7:40:d8:05:83:5c:4c:02:61:cc:83:84:87:73:
27:c0:76:ec:5f:6f:71:07:ce:23:c6:57:68:35:03:4a:14:04:
c2:fd:59:18:39:1a:92:00:7e:97:59:52:4c:6a:6e:d9:e9:08:
02:f4:9a:ee:6f:82:00:52:35:83:b3:8c:24:79:51:cb:3c:85:
e8:4e:b7:de:4a:b7:00:29:2f:be:4e:81:a2:f1:73:3d:aa:0e:
c9:d4:20:3f:d6:b1:9e:00:95:d0:dd:dc:12:6f:f7:ab:28:cc:
31:bf:33:6b:43:08:8c:3e:91:c5:35:8a:e2:97:58:f5:a8:9f:
1d:91:fd:0d:1d:66:cf:5c:b8:d5:4e:7c:dc:fe:0c:0b:82:88:
a4:b0:d1:dc:85:de:0e:af:9a:fa:68:ba:6b:d4:a9:70:f3:93:
21:82:76:23:b7:7f:0c:40:06:76:74:c6:08:a1:08:b9:7b:d8:
f9:42:91:ff:40:7b:ae:3e:9f:8a:3e:fb:0d:47:e7:e1:af:e0:
a0:36:bf:7e:27:fd:36:a4:f3:fd:19:fc:ef:d4:86:53:28:3c:
ab:2d:78:d5:87:20:ee:8f:3f:f5:8e:2b:44:35:bf:d0:10:bb:
56:4b:5d:04
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZhJnFKfpt72jmbf5NFZfcCkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1YzhiMGMxNjMzNmI5MzMzYjQ0NGZmMWUxOGNjNzhkNzZh
N2MzZjYwHhcNMjUwNzI3MDIwMDM4WhcNMjUwNzI4MDIwMDM4WjAzMTEwLwYDVQQD
Eyg1MDY4NjVlNTk1MjBhMGRmZTgzMjE3N2I1NmQ0ZGJmOTZlOWMwNDFhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy1KH48uPSSp375tG0C9Oakbo0Eoz
4eBf4wLR47Yf0GXVtqQePP9rgxD0NqKQIwIib0tSc7VQBCFVFUBS3x0Z9OXho5wA
RTYjp4oMd3v6zC+zJKowQ+v9KA3xFbvbU40tDrXLcxN4GH1D29YNsr9QmyDE/rc5
R4POyLdTUyFpRwZue6+6zsEkrhfQWVG36e5LDaahRJdEzJisLzVDZetvcIFLivDI
nkG08Kqy2RcrjzayxRNj2g7C6gHI1wsFEJUHi4XcdRHXcQN1xWX6gLFfUQBC8vUL
PaaBZPaCF+uIn3BEsXkjNoKIXjIvYFKW5ypseTaPo1iMXoYi/gIHdfV7aQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBoZeWVIKDf6DIXe1bU2/lunAQaMB8GA1UdIwQY
MBaAFEXIsMFjNrkzO0RP8eGMx412p8P2MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUmNpd3dXTTJ1VE03UkVfeDRZekhqWGFud19ZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kOC9lMmExNWMtYWRkMC00OGQ2LWIwNGYt
Y2RmZWY2ZDVmOWI5LzEvUmNpd3dXTTJ1VE03UkVfeDRZekhqWGFud19ZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kOC9lMmExNWMtYWRkMC00OGQ2LWIwNGYtY2RmZWY2ZDVmOWI5
LzEvUmNpd3dXTTJ1VE03UkVfeDRZekhqWGFud19ZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAkcDCf7x8
AP+N7W0WJU5sKbqHwA1gDcdA2AWDXEwCYcyDhIdzJ8B27F9vcQfOI8ZXaDUDShQE
wv1ZGDkakgB+l1lSTGpu2ekIAvSa7m+CAFI1g7OMJHlRyzyF6E633kq3ACkvvk6B
ovFzPaoOydQgP9axngCV0N3cEm/3qyjMMb8za0MIjD6RxTWK4pdY9aifHZH9DR1m
z1y41U583P4MC4KIpLDR3IXeDq+a+mi6a9SpcPOTIYJ2I7d/DEAGdnTGCKEIuXvY
+UKR/0B7rj6fij77DUfn4a/goDa/fif9NqTz/Rn879SGUyg8qy141Ycg7o8/9Y4r
RDW/0BC7VktdBA==
-----END CERTIFICATE-----
Generated at Sun Jul 27 07:13:17 2025 by rpki-client