Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
File: RA6IwxN_ipFffaG1wDQcoYwsI0w.mft (raw, json)
Hash identifier: IKdurYEip7fP0vnM90Bi84hb6xr7G9oRN1quT0lTKQM=
Subject key identifier: 41:3B:A9:DC:81:55:A1:18:CB:40:B0:C2:D2:AA:2F:BF:50:3B:BC:4B
Authority key identifier: 44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
Certificate issuer: /CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Certificate serial: 01974F32FB99C993E615AFA39BE493821F15
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
Manifest number: A3
Signing time: Sun 08 Jun 2025 11:00:30 +0000
Manifest this update: Sun 08 Jun 2025 11:00:30 +0000
Manifest next update: Mon 09 Jun 2025 11:00:30 +0000
Files and hashes: 1: ERKKjb9maK6l2D8S98DiUvq_sHY.roa (hash: K5h5Qq2Di55EgzF5bOxkfD2fsAbyW8q02xX4iijsUmk=)
2: RA6IwxN_ipFffaG1wDQcoYwsI0w.crl (hash: eDsTpSwQe6pOqQ7K1bDUY0keGEk9BDUzQHQcgxfBwwI=)
3: uC4_l-E2xjwrvlqz30Q-HpJhGxI.roa (hash: eCi9fijMSbE+YJ8x/iuJrnNqx//o/hxhFT+nJZyvJ+A=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 11:00:30 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4f:32:fb:99:c9:93:e6:15:af:a3:9b:e4:93:82:1f:15
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=440e88c3137f8a915f7da1b5c0341ca18c2c234c
Validity
Not Before: Jun 8 11:00:30 2025 GMT
Not After : Jun 9 11:00:30 2025 GMT
Subject: CN=413ba9dc8155a118cb40b0c2d2aa2fbf503bbc4b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e3:bd:54:a0:9c:be:1d:b8:30:9f:b7:bb:88:fc:
73:f9:51:c5:af:59:ab:7e:48:7a:ee:4d:a8:b2:0e:
02:ef:bb:98:90:17:de:88:d7:4b:03:52:82:a7:bb:
f8:9c:b3:45:e0:e5:6a:43:64:74:36:6a:f3:2f:c5:
32:81:04:0e:12:14:a3:8a:49:30:98:d2:ea:08:60:
cb:ba:65:1b:66:06:cd:8d:28:d4:fa:63:f0:c2:68:
28:6c:0e:15:c5:34:33:17:2d:7d:23:07:4a:4f:de:
ce:25:6c:c5:95:a1:81:49:7a:d9:44:4f:5e:88:47:
82:37:28:b9:5b:5d:bb:63:a6:0c:9b:50:7f:a3:68:
aa:6c:8f:01:22:ba:4e:ff:fd:09:e4:88:80:f3:1c:
29:64:31:64:05:6d:06:77:20:b7:f0:6c:ba:cf:38:
19:14:87:9d:40:26:28:38:ad:b6:8d:04:af:63:1f:
25:bc:3d:59:58:fb:e6:6a:20:d9:95:62:b5:9e:07:
81:a2:7a:59:f0:91:bf:ce:48:d2:9e:8b:77:82:fa:
d2:5d:62:7c:5c:2a:c2:02:2d:69:57:62:e4:61:04:
40:6e:b0:33:12:c2:90:6b:cc:ad:2d:71:06:30:a9:
08:40:f5:1f:35:24:c4:ed:c9:a9:c0:85:94:a4:46:
e7:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
41:3B:A9:DC:81:55:A1:18:CB:40:B0:C2:D2:AA:2F:BF:50:3B:BC:4B
X509v3 Authority Key Identifier:
keyid:44:0E:88:C3:13:7F:8A:91:5F:7D:A1:B5:C0:34:1C:A1:8C:2C:23:4C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RA6IwxN_ipFffaG1wDQcoYwsI0w.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4b/0789aa-9e73-45ee-91b6-143ff60d9991/1/RA6IwxN_ipFffaG1wDQcoYwsI0w.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
05:e8:c2:39:11:20:fa:e7:77:04:06:fa:bf:f7:00:32:c2:bf:
91:5b:f5:d9:99:ad:fb:48:fb:b2:69:46:8b:6d:de:bc:a5:6d:
f1:85:11:a1:eb:c9:4a:0e:f8:ac:f2:d7:92:2a:4c:b4:93:1f:
fc:a8:ac:02:70:17:07:92:12:0b:d4:e1:26:ff:e6:8c:99:d4:
8e:0a:cb:4b:ff:80:3a:fd:b3:4e:f3:32:9e:da:9e:08:61:bb:
aa:d2:2d:4a:87:3a:99:1f:e3:6a:cc:44:e3:af:98:c4:3a:f8:
a8:f0:ae:e5:8a:be:36:4f:d0:49:bc:bb:c8:89:2a:f0:06:6a:
1c:b6:e6:05:c8:c3:eb:82:f8:ff:54:4f:24:f3:e3:91:0e:2e:
80:fa:c0:a4:c2:93:11:f7:40:75:84:f6:f9:0e:ce:b3:88:14:
2f:68:6f:d4:9e:95:e5:f3:be:2f:3f:7d:78:3d:cb:48:aa:b0:
25:70:06:4b:a6:48:d8:cc:50:f3:40:0e:7f:40:0d:a9:9b:0a:
8e:cd:df:69:e3:7c:3b:27:81:d1:d4:4f:33:24:11:d7:2a:68:
97:26:af:08:3b:66:d1:ad:9d:f2:06:d0:2d:06:bb:dc:3a:29:
95:57:09:1f:e8:6d:4a:ea:13:0f:4d:f8:47:aa:fa:57:a7:e5:
33:f4:c1:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdPMvuZyZPmFa+jm+STgh8VMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ0MGU4OGMzMTM3ZjhhOTE1ZjdkYTFiNWMwMzQxY2ExOGMy
YzIzNGMwHhcNMjUwNjA4MTEwMDMwWhcNMjUwNjA5MTEwMDMwWjAzMTEwLwYDVQQD
Eyg0MTNiYTlkYzgxNTVhMTE4Y2I0MGIwYzJkMmFhMmZiZjUwM2JiYzRiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA471UoJy+Hbgwn7e7iPxz+VHFr1mr
fkh67k2osg4C77uYkBfeiNdLA1KCp7v4nLNF4OVqQ2R0NmrzL8UygQQOEhSjikkw
mNLqCGDLumUbZgbNjSjU+mPwwmgobA4VxTQzFy19IwdKT97OJWzFlaGBSXrZRE9e
iEeCNyi5W127Y6YMm1B/o2iqbI8BIrpO//0J5IiA8xwpZDFkBW0GdyC38Gy6zzgZ
FIedQCYoOK22jQSvYx8lvD1ZWPvmaiDZlWK1ngeBonpZ8JG/zkjSnot3gvrSXWJ8
XCrCAi1pV2LkYQRAbrAzEsKQa8ytLXEGMKkIQPUfNSTE7cmpwIWUpEbnjwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFEE7qdyBVaEYy0CwwtKqL79QO7xLMB8GA1UdIwQY
MBaAFEQOiMMTf4qRX32htcA0HKGMLCNMMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Yi8wNzg5YWEtOWU3My00NWVlLTkxYjYt
MTQzZmY2MGQ5OTkxLzEvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Yi8wNzg5YWEtOWU3My00NWVlLTkxYjYtMTQzZmY2MGQ5OTkx
LzEvUkE2SXd4Tl9pcEZmZmFHMXdEUWNvWXdzSTB3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEABejCOREg
+ud3BAb6v/cAMsK/kVv12Zmt+0j7smlGi23evKVt8YURoevJSg74rPLXkipMtJMf
/KisAnAXB5ISC9ThJv/mjJnUjgrLS/+AOv2zTvMyntqeCGG7qtItSoc6mR/jasxE
46+YxDr4qPCu5Yq+Nk/QSby7yIkq8AZqHLbmBcjD64L4/1RPJPPjkQ4ugPrApMKT
EfdAdYT2+Q7Os4gUL2hv1J6V5fO+Lz99eD3LSKqwJXAGS6ZI2MxQ80AOf0ANqZsK
js3faeN8OyeB0dRPMyQR1ypolyavCDtm0a2d8gbQLQa73DoplVcJH+htSuoTD034
R6r6V6flM/TBTg==
-----END CERTIFICATE-----
Generated at Sun Jun 8 14:50:22 2025 by rpki-client