Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
File: c0-mGwhlEDj6-B6_El7IRbGWGIM.mft (raw, json)
Hash identifier: 8QmAPCnrkN6QehbIKNeaaqgMbHX2JMHAztvsSG9ZZnI=
Subject key identifier: A0:24:A7:F6:79:3C:07:FB:6C:C8:AF:70:D4:22:A6:98:AC:98:A8:12
Authority key identifier: 73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
Certificate issuer: /CN=734fa61b08651038faf81ebf125ec845b1961883
Certificate serial: 0197469ED540B9FB482958B598053F3F1453
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
Manifest number: 068A
Signing time: Fri 06 Jun 2025 19:01:43 +0000
Manifest this update: Fri 06 Jun 2025 19:01:43 +0000
Manifest next update: Sat 07 Jun 2025 19:01:43 +0000
Files and hashes: 1: Ef_L0S4-Bp45a4AhicIQvktRdz4.roa (hash: /8pqkPBMXDiyNztqWEzFfiF8Q4r48DyQf1X0AGe+tXU=)
2: KD8apQsVPJ4S-o7CJiMR0Jx51PQ.roa (hash: 8wRRkrMsyRGit65zp+ividrP3xMpOsDdKqxjsreQ+LE=)
3: c0-mGwhlEDj6-B6_El7IRbGWGIM.crl (hash: U3XsVcMgPaYQeiDG2z9U0XLDSa+Koy67ThTk7yhq+Zc=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 15:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:46:9e:d5:40:b9:fb:48:29:58:b5:98:05:3f:3f:14:53
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=734fa61b08651038faf81ebf125ec845b1961883
Validity
Not Before: Jun 6 19:01:43 2025 GMT
Not After : Jun 7 19:01:43 2025 GMT
Subject: CN=a024a7f6793c07fb6cc8af70d422a698ac98a812
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:da:16:70:06:9c:7c:ba:0a:2a:4d:9b:db:df:6c:
c8:d0:fe:f5:a9:23:a8:dd:99:a1:11:82:10:36:3b:
54:35:ee:c6:71:ca:dd:91:5d:43:7e:46:23:1b:da:
66:f4:15:36:c3:c4:45:0a:c6:4f:c2:2d:68:69:85:
22:f5:5c:15:26:db:a9:87:d2:fa:2c:47:1f:fc:eb:
5d:a0:a6:bb:62:b6:44:6a:b6:66:4d:f5:0c:40:6c:
f3:4d:5d:74:ea:c4:69:3b:34:14:4e:6f:f7:da:cd:
8d:92:7a:9f:af:f2:68:f4:18:85:0a:3f:2d:1a:9e:
f2:41:56:1d:96:56:fb:5a:7a:80:a2:a0:4e:e6:c0:
9a:cd:e5:bc:28:b5:61:e4:e5:7d:2c:a7:00:05:99:
f2:ea:71:c7:e7:26:e0:9a:53:58:80:b8:9b:3e:e0:
a2:23:3c:4d:00:e8:e2:c6:e9:0a:2c:66:25:15:04:
18:80:7f:8a:73:42:b0:c2:24:53:d8:f9:ee:31:36:
c5:37:59:3c:ff:51:1a:2a:d9:2d:5a:10:e8:f1:bf:
14:20:6e:ed:67:01:21:fc:7e:d9:e7:28:b5:0b:47:
07:7b:80:a2:7a:e6:a0:36:e9:0d:25:7e:26:57:ab:
6e:52:1d:55:d6:99:e9:fa:b0:dd:24:50:93:a9:29:
43:df
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A0:24:A7:F6:79:3C:07:FB:6C:C8:AF:70:D4:22:A6:98:AC:98:A8:12
X509v3 Authority Key Identifier:
keyid:73:4F:A6:1B:08:65:10:38:FA:F8:1E:BF:12:5E:C8:45:B1:96:18:83
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c0-mGwhlEDj6-B6_El7IRbGWGIM.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/2f/4459b4-1838-4231-bd2c-40c0a652450a/1/c0-mGwhlEDj6-B6_El7IRbGWGIM.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
19:b5:b5:fa:aa:f8:e1:d6:3c:ea:23:57:e3:cf:9b:42:a0:89:
e4:84:d0:b9:d3:fe:6d:4e:0b:0e:05:16:ff:8d:bd:58:58:79:
e3:fe:f9:4e:56:00:22:6b:b1:6c:1b:8b:b9:9b:01:29:ea:96:
19:a4:91:a1:bd:1c:20:54:02:a7:e9:8a:86:64:b3:d6:a6:0f:
58:41:71:20:d9:36:f5:4e:56:26:12:55:21:1d:57:78:95:d8:
f6:a7:a5:63:1a:e9:c2:99:3b:00:40:89:c4:ee:ff:2c:3e:84:
9e:c7:fc:da:96:6b:ae:57:45:e2:78:46:04:6e:de:f9:b9:fb:
a4:71:bd:8b:01:5e:34:46:ae:a0:00:9d:c1:74:f8:4e:93:4a:
43:01:57:0d:64:28:3f:f1:45:bf:9c:51:14:35:84:02:7f:31:
40:3e:97:06:e7:d5:ba:3d:b0:7c:be:7e:d7:d0:2e:5a:19:fc:
b2:a5:a3:22:71:bf:e9:ff:f5:4a:9a:0e:1b:8a:3f:e9:46:58:
fb:65:a4:a2:99:f7:62:c1:7d:2c:c5:05:95:35:f9:3c:82:b4:
7c:d7:9b:98:94:13:68:9d:cf:35:e3:7c:81:ad:2a:3e:38:48:
8d:8b:48:27:0c:fa:cc:23:74:42:c3:1d:06:32:73:a5:5a:01:
68:fd:5f:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdGntVAuftIKVi1mAU/PxRTMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNGZhNjFiMDg2NTEwMzhmYWY4MWViZjEyNWVjODQ1YjE5
NjE4ODMwHhcNMjUwNjA2MTkwMTQzWhcNMjUwNjA3MTkwMTQzWjAzMTEwLwYDVQQD
EyhhMDI0YTdmNjc5M2MwN2ZiNmNjOGFmNzBkNDIyYTY5OGFjOThhODEyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2hZwBpx8ugoqTZvb32zI0P71qSOo
3ZmhEYIQNjtUNe7GccrdkV1DfkYjG9pm9BU2w8RFCsZPwi1oaYUi9VwVJtuph9L6
LEcf/OtdoKa7YrZEarZmTfUMQGzzTV106sRpOzQUTm/32s2Nknqfr/Jo9BiFCj8t
Gp7yQVYdllb7WnqAoqBO5sCazeW8KLVh5OV9LKcABZny6nHH5ybgmlNYgLibPuCi
IzxNAOjixukKLGYlFQQYgH+Kc0KwwiRT2PnuMTbFN1k8/1EaKtktWhDo8b8UIG7t
ZwEh/H7Z5yi1C0cHe4CieuagNukNJX4mV6tuUh1V1pnp+rDdJFCTqSlD3wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKAkp/Z5PAf7bMivcNQippismKgSMB8GA1UdIwQY
MBaAFHNPphsIZRA4+vgevxJeyEWxlhiDMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yZi80NDU5YjQtMTgzOC00MjMxLWJkMmMt
NDBjMGE2NTI0NTBhLzEvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yZi80NDU5YjQtMTgzOC00MjMxLWJkMmMtNDBjMGE2NTI0NTBh
LzEvYzAtbUd3aGxFRGo2LUI2X0VsN0lSYkdXR0lNLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAGbW1+qr4
4dY86iNX48+bQqCJ5ITQudP+bU4LDgUW/429WFh54/75TlYAImuxbBuLuZsBKeqW
GaSRob0cIFQCp+mKhmSz1qYPWEFxINk29U5WJhJVIR1XeJXY9qelYxrpwpk7AECJ
xO7/LD6Ensf82pZrrldF4nhGBG7e+bn7pHG9iwFeNEauoACdwXT4TpNKQwFXDWQo
P/FFv5xRFDWEAn8xQD6XBufVuj2wfL5+19AuWhn8sqWjInG/6f/1SpoOG4o/6UZY
+2Wkopn3YsF9LMUFlTX5PIK0fNebmJQTaJ3PNeN8ga0qPjhIjYtIJwz6zCN0QsMd
BjJzpVoBaP1f9w==
-----END CERTIFICATE-----
Generated at Sat Jun 7 01:13:10 2025 by rpki-client