Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
File: _sTvIAvJ0n6e1_O8a1wFKS2EMro.mft (raw, json)
Hash identifier: 81Go+p85YeCQ1LOBHpxguHm/IjvV94Qh3O8f+gZaBSM=
Subject key identifier: AC:34:2B:D7:4E:D5:77:63:4A:3C:E7:D5:6A:6D:86:FB:FA:8B:C2:6B
Authority key identifier: FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
Certificate issuer: /CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Certificate serial: 01974742C4C30FE2F5A3AA3C6181B3989CF7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
Manifest number: 0299
Signing time: Fri 06 Jun 2025 22:00:47 +0000
Manifest this update: Fri 06 Jun 2025 22:00:47 +0000
Manifest next update: Sat 07 Jun 2025 22:00:47 +0000
Files and hashes: 1: A-WEqq-qnquQ-k-HUeyR2Ta7Ai0.roa (hash: ulBE+6XQU+CVKwFHEP6pOstPObSTz9LyM8DJtWKzepw=)
2: _sTvIAvJ0n6e1_O8a1wFKS2EMro.crl (hash: dNzcqYT6ADYrDOwblZQlLR6KmFudziyVUaHFQOLooBA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 22:00:47 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:42:c4:c3:0f:e2:f5:a3:aa:3c:61:81:b3:98:9c:f7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=fec4ef200bc9d27e9ed7f3bc6b5c05292d8432ba
Validity
Not Before: Jun 6 22:00:47 2025 GMT
Not After : Jun 7 22:00:47 2025 GMT
Subject: CN=ac342bd74ed577634a3ce7d56a6d86fbfa8bc26b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c5:49:c0:f0:0b:38:dc:c9:4b:ab:14:e3:d8:74:
73:41:21:40:7c:b4:d4:0a:87:26:3f:71:10:42:1f:
1b:50:08:b0:95:5c:52:e0:4b:01:d7:89:4b:8b:cb:
5f:36:f3:8d:c8:5e:68:3a:20:cb:a2:6a:77:9d:91:
b3:b2:7f:57:88:91:23:4b:13:69:01:55:fa:b3:07:
24:af:f5:e5:77:0d:25:15:ef:76:41:cf:6a:2c:23:
db:84:66:c1:ce:6a:94:0c:10:7a:e2:f7:de:8a:26:
1e:d6:f5:06:2f:d5:39:ed:0e:72:b0:e1:19:5e:a3:
cb:f3:31:f3:56:71:fc:b7:51:b8:c0:c6:1f:3e:94:
5c:fd:7f:7d:a2:83:4e:ab:18:6e:b7:74:ca:34:2c:
35:ca:6d:21:14:05:e4:0e:0a:13:37:8c:38:81:aa:
46:f0:05:3e:bd:62:8b:7a:7c:2d:5c:3b:34:46:db:
1d:7f:2e:79:b9:98:37:a1:dc:f1:7f:ce:62:6d:ce:
2f:1f:64:a5:1a:99:3b:a6:b8:f4:f4:1b:f6:ee:ad:
ea:bc:7c:ea:95:9e:97:ed:1b:d8:89:f6:04:26:ca:
5c:f2:e9:01:a8:5f:a8:6a:fa:15:2f:49:8a:96:ec:
b2:ca:53:d1:42:ae:bd:f7:51:94:5a:e3:ca:be:f9:
8c:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AC:34:2B:D7:4E:D5:77:63:4A:3C:E7:D5:6A:6D:86:FB:FA:8B:C2:6B
X509v3 Authority Key Identifier:
keyid:FE:C4:EF:20:0B:C9:D2:7E:9E:D7:F3:BC:6B:5C:05:29:2D:84:32:BA
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/_sTvIAvJ0n6e1_O8a1wFKS2EMro.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/44/c05b86-6f16-4964-a503-5eccec8d93b4/1/_sTvIAvJ0n6e1_O8a1wFKS2EMro.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
4e:4a:ff:d6:6e:19:89:51:c5:ae:20:2d:4d:6c:5e:b9:af:f7:
85:9b:5d:af:a2:4e:23:c8:91:9c:e5:ec:25:b4:d0:cc:a1:7c:
2b:a7:43:7f:e4:83:e2:43:0a:3d:ad:d3:3b:b7:15:64:f1:86:
6c:7a:56:a9:14:1b:f5:91:fc:8f:0b:22:ff:99:5e:9b:d0:87:
b4:94:bc:68:3c:fb:9d:59:d3:2f:f2:fc:ff:fb:6c:93:b5:1d:
13:66:b6:46:84:a9:4a:5f:70:9c:21:0b:12:a3:03:7f:cb:76:
d6:33:9d:92:f1:7d:7f:8d:a5:38:69:e1:86:5f:e3:bc:3e:e9:
29:7b:b8:b1:52:65:b0:c5:ed:d8:1c:61:aa:a1:28:b9:81:c9:
89:ab:9b:e4:d1:35:20:86:4d:df:e3:c0:79:b7:a6:b4:cf:1f:
92:3e:d5:65:3e:1d:41:01:7b:de:7e:5b:af:ed:a9:0b:c4:1d:
38:98:aa:da:ec:fb:cf:ec:67:da:9e:7b:76:ca:e9:f6:a8:25:
69:8d:31:d9:7c:bb:04:bc:93:93:d2:e6:7a:5a:ce:91:f8:16:
39:03:37:71:c0:91:88:02:28:b7:5b:4c:50:f7:3b:53:90:67:
f9:91:56:d3:04:9f:e4:34:1b:8c:c9:9b:c7:e1:c2:54:3e:04:
93:b9:ef:3d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHQsTDD+L1o6o8YYGzmJz3MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGZlYzRlZjIwMGJjOWQyN2U5ZWQ3ZjNiYzZiNWMwNTI5MmQ4
NDMyYmEwHhcNMjUwNjA2MjIwMDQ3WhcNMjUwNjA3MjIwMDQ3WjAzMTEwLwYDVQQD
EyhhYzM0MmJkNzRlZDU3NzYzNGEzY2U3ZDU2YTZkODZmYmZhOGJjMjZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxUnA8As43MlLqxTj2HRzQSFAfLTU
CocmP3EQQh8bUAiwlVxS4EsB14lLi8tfNvONyF5oOiDLomp3nZGzsn9XiJEjSxNp
AVX6swckr/Xldw0lFe92Qc9qLCPbhGbBzmqUDBB64vfeiiYe1vUGL9U57Q5ysOEZ
XqPL8zHzVnH8t1G4wMYfPpRc/X99ooNOqxhut3TKNCw1ym0hFAXkDgoTN4w4gapG
8AU+vWKLenwtXDs0Rtsdfy55uZg3odzxf85ibc4vH2SlGpk7prj09Bv27q3qvHzq
lZ6X7RvYifYEJspc8ukBqF+oavoVL0mKluyyylPRQq6991GUWuPKvvmMqQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFKw0K9dO1XdjSjzn1Wpthvv6i8JrMB8GA1UdIwQY
MBaAFP7E7yALydJ+ntfzvGtcBSkthDK6MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMt
NWVjY2VjOGQ5M2I0LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80NC9jMDViODYtNmYxNi00OTY0LWE1MDMtNWVjY2VjOGQ5M2I0
LzEvX3NUdklBdkowbjZlMV9POGExd0ZLUzJFTXJvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEATkr/1m4Z
iVHFriAtTWxeua/3hZtdr6JOI8iRnOXsJbTQzKF8K6dDf+SD4kMKPa3TO7cVZPGG
bHpWqRQb9ZH8jwsi/5lem9CHtJS8aDz7nVnTL/L8//tsk7UdE2a2RoSpSl9wnCEL
EqMDf8t21jOdkvF9f42lOGnhhl/jvD7pKXu4sVJlsMXt2BxhqqEouYHJiaub5NE1
IIZN3+PAebemtM8fkj7VZT4dQQF73n5br+2pC8QdOJiq2uz7z+xn2p57dsrp9qgl
aY0x2Xy7BLyTk9LmelrOkfgWOQM3ccCRiAIot1tMUPc7U5Bn+ZFW0wSf5DQbjMmb
x+HCVD4Ek7nvPQ==
-----END CERTIFICATE-----
Generated at Sat Jun 7 07:45:09 2025 by rpki-client