Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
File: adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft (raw, json)
Hash identifier: qAkFpJP9+Fdc0ehXx2CzkUUN/GDVvNAxHiwkW0ze6Qw=
Subject key identifier: 3D:F8:65:58:F3:49:62:BA:56:7C:60:C6:60:97:C2:E6:E2:56:91:99
Authority key identifier: 69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
Certificate issuer: /CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Certificate serial: 01974E8E2378747DAA971A974EB14C7BF1DC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
Manifest number: 0EBE
Signing time: Sun 08 Jun 2025 08:00:27 +0000
Manifest this update: Sun 08 Jun 2025 08:00:27 +0000
Manifest next update: Mon 09 Jun 2025 08:00:27 +0000
Files and hashes: 1: OTybeQSqUNtNYhW7lIqMu8Xbs9U.roa (hash: qhQfPgHQL0RGn7gt2AnYjMV/XyhTZwosQOVt3JjZawg=)
2: adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl (hash: al7L4hBbBucQcATIm8fHiDw0WJSv4c9mZ5GMO0GmpLE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:8e:23:78:74:7d:aa:97:1a:97:4e:b1:4c:7b:f1:dc
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=69d6048571d87eabc4bed1a7cdff83587fb89664
Validity
Not Before: Jun 8 08:00:27 2025 GMT
Not After : Jun 9 08:00:27 2025 GMT
Subject: CN=3df86558f34962ba567c60c66097c2e6e2569199
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a9:05:98:8a:6d:69:18:a1:2d:9f:c3:b6:da:c8:
f9:8b:37:70:fe:b4:54:af:a2:ea:8c:6d:59:38:7e:
85:8c:da:98:60:4b:d3:b1:ad:2d:99:54:7a:75:fa:
d1:5a:d6:8d:9f:ca:78:37:e3:a1:b0:0f:cb:44:3c:
03:1d:b2:1e:8e:0f:45:2b:f5:92:37:db:40:12:33:
40:f5:9f:c6:2f:6d:3d:f5:41:61:a6:98:72:3c:03:
3a:2b:99:5d:3c:76:7c:87:10:04:c0:7e:35:0e:62:
25:e1:d6:b8:26:4c:9e:8e:15:0a:6e:57:65:1d:75:
15:56:68:44:21:74:49:47:dc:34:8c:f9:a2:34:dc:
09:bd:fe:3d:d0:c3:66:a2:9b:17:1c:21:d6:5c:00:
a9:12:57:d8:71:d8:96:e3:86:94:1d:4e:59:47:4a:
96:21:b0:03:a7:7c:97:f9:8f:89:a6:45:ff:2c:dd:
14:6d:c5:b1:ea:1b:fb:55:a3:fb:78:db:72:70:a6:
d6:0b:66:47:ee:4a:cd:22:46:46:5b:5e:96:a9:f8:
5c:07:53:63:ad:51:e3:f0:59:b6:a9:ba:e1:bf:06:
74:af:89:87:c7:43:63:89:c6:2c:88:94:79:b6:63:
57:d1:83:c2:d9:e5:d6:da:7d:f8:2d:4e:1a:77:bb:
02:c9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3D:F8:65:58:F3:49:62:BA:56:7C:60:C6:60:97:C2:E6:E2:56:91:99
X509v3 Authority Key Identifier:
keyid:69:D6:04:85:71:D8:7E:AB:C4:BE:D1:A7:CD:FF:83:58:7F:B8:96:64
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/adYEhXHYfqvEvtGnzf-DWH-4lmQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/11cdf2-ca30-4718-ac80-f196fd0a497b/1/adYEhXHYfqvEvtGnzf-DWH-4lmQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ad:ae:e2:2a:9b:97:72:f1:20:c5:c8:0b:e5:8d:b9:10:a3:5a:
6c:e2:e3:54:42:7a:fd:7b:84:91:0e:c5:4a:c9:6b:f4:8c:9a:
f9:5a:46:0f:c3:66:8a:a4:37:f4:7d:c6:4f:38:e8:29:f2:3a:
98:d2:96:28:70:42:da:84:99:98:74:dd:a5:81:3e:de:59:73:
db:78:34:13:03:27:60:72:08:85:a9:77:42:c0:d7:f6:bb:a8:
25:b6:29:9c:bc:0a:8e:4f:1f:96:78:a7:d6:7a:9c:6b:d4:f3:
f4:43:a7:ff:3e:53:0d:42:e7:0f:de:4f:ee:7c:dc:6a:fe:f5:
dc:37:5b:2b:18:95:56:c0:67:b0:b1:61:83:53:e9:57:3b:e9:
fa:65:e7:36:e0:3e:90:90:db:25:0c:dc:0f:ce:da:3a:c4:3d:
fd:71:2d:d6:81:8d:12:5d:1b:b3:76:db:de:c7:2c:48:99:30:
26:2a:ed:29:bb:3b:2d:17:6f:e7:bc:44:c2:09:34:11:9a:06:
9a:50:b5:12:00:db:50:0e:db:e0:ae:45:e9:b8:7d:33:7d:af:
9a:74:d1:60:2f:7e:c9:cb:a4:f2:2f:f8:d5:15:7f:1e:fe:47:
0d:a3:88:72:8c:29:20:d9:b6:35:e9:8c:11:57:12:e0:0d:87:
3d:4e:a3:b6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOjiN4dH2qlxqXTrFMe/HcMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY5ZDYwNDg1NzFkODdlYWJjNGJlZDFhN2NkZmY4MzU4N2Zi
ODk2NjQwHhcNMjUwNjA4MDgwMDI3WhcNMjUwNjA5MDgwMDI3WjAzMTEwLwYDVQQD
EygzZGY4NjU1OGYzNDk2MmJhNTY3YzYwYzY2MDk3YzJlNmUyNTY5MTk5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAqQWYim1pGKEtn8O22sj5izdw/rRU
r6LqjG1ZOH6FjNqYYEvTsa0tmVR6dfrRWtaNn8p4N+OhsA/LRDwDHbIejg9FK/WS
N9tAEjNA9Z/GL2099UFhpphyPAM6K5ldPHZ8hxAEwH41DmIl4da4JkyejhUKbldl
HXUVVmhEIXRJR9w0jPmiNNwJvf490MNmopsXHCHWXACpElfYcdiW44aUHU5ZR0qW
IbADp3yX+Y+JpkX/LN0UbcWx6hv7VaP7eNtycKbWC2ZH7krNIkZGW16WqfhcB1Nj
rVHj8Fm2qbrhvwZ0r4mHx0NjicYsiJR5tmNX0YPC2eXW2n34LU4ad7sCyQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD34ZVjzSWK6VnxgxmCXwubiVpGZMB8GA1UdIwQY
MBaAFGnWBIVx2H6rxL7Rp83/g1h/uJZkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS8xMWNkZjItY2EzMC00NzE4LWFjODAt
ZjE5NmZkMGE0OTdiLzEvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS8xMWNkZjItY2EzMC00NzE4LWFjODAtZjE5NmZkMGE0OTdi
LzEvYWRZRWhYSFlmcXZFdnRHbnpmLURXSC00bG1RLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAra7iKpuX
cvEgxcgL5Y25EKNabOLjVEJ6/XuEkQ7FSslr9Iya+VpGD8NmiqQ39H3GTzjoKfI6
mNKWKHBC2oSZmHTdpYE+3llz23g0EwMnYHIIhal3QsDX9ruoJbYpnLwKjk8flnin
1nqca9Tz9EOn/z5TDULnD95P7nzcav713DdbKxiVVsBnsLFhg1PpVzvp+mXnNuA+
kJDbJQzcD87aOsQ9/XEt1oGNEl0bs3bb3scsSJkwJirtKbs7LRdv57xEwgk0EZoG
mlC1EgDbUA7b4K5F6bh9M32vmnTRYC9+ycuk8i/41RV/Hv5HDaOIcowpINm2NemM
EVcS4A2HPU6jtg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 12:50:17 2025 by rpki-client