Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
File: rmrw1fOCidNMIbpnxMOXh6QqZp4.mft (raw, json)
Hash identifier: Sq+9YXGTaeOoCGDdTNgiN7wslE1SYj7dxXlJT5Bo55U=
Subject key identifier: 8B:C9:F6:E1:5D:4D:F2:B4:05:33:5B:47:6F:72:AA:56:4E:F6:17:1F
Authority key identifier: AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
Certificate issuer: /CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Certificate serial: 0197477958B976A4473AE8988D254D4D1258
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
Manifest number: 1578
Signing time: Fri 06 Jun 2025 23:00:24 +0000
Manifest this update: Fri 06 Jun 2025 23:00:24 +0000
Manifest next update: Sat 07 Jun 2025 23:00:24 +0000
Files and hashes: 1: W8HdoS1T8uaMpM9YFeme5afjmm8.roa (hash: MVcxUXAqk+tB4gBwDZOl3zZvyfrQXKh2vGJmtjrVMqc=)
2: dC665gBaSCufZLjae0l6pAdLs6Q.roa (hash: kur7Pc6RtMGt0xkEhTapoaHBlvXxGfD2IjX+NyztpmY=)
3: rmrw1fOCidNMIbpnxMOXh6QqZp4.crl (hash: 6gSr63rpJnhpZV180RnA+4TeJSZgOyS7DkHOwpprNrk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 07 Jun 2025 23:00:24 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:47:79:58:b9:76:a4:47:3a:e8:98:8d:25:4d:4d:12:58
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ae6af0d5f38289d34c21ba67c4c39787a42a669e
Validity
Not Before: Jun 6 23:00:24 2025 GMT
Not After : Jun 7 23:00:24 2025 GMT
Subject: CN=8bc9f6e15d4df2b405335b476f72aa564ef6171f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b0:39:19:69:d1:07:66:37:54:92:27:1e:e8:5a:
fb:c2:21:e0:d6:a6:bc:19:f7:87:05:80:90:df:e3:
d8:76:ad:b7:f3:7d:c0:37:e9:1f:01:2a:12:3f:55:
ca:05:c9:14:95:4d:1f:12:6a:ff:47:63:40:5c:31:
59:f5:a3:a7:73:db:f2:20:7e:38:94:cf:99:5e:20:
9b:79:b5:6b:af:a7:55:f3:11:0d:29:ae:c6:5a:08:
51:cd:34:f6:fb:e9:af:26:0e:1b:5f:e9:2a:30:3d:
43:6c:f2:bb:ad:97:bc:5c:34:f7:ba:66:55:60:d8:
78:25:8a:bd:8b:32:e0:5a:87:2a:fb:00:ab:77:37:
53:82:71:e8:a0:fa:3b:8e:de:de:59:7f:d3:cb:b9:
f6:d1:c0:50:dc:da:fd:f9:da:8d:2a:17:9b:61:0a:
6e:d8:75:03:7e:e8:c7:0b:1b:57:c4:2f:55:a6:75:
ab:ee:ef:d9:e8:22:6c:10:6b:e1:a4:d9:02:49:20:
ce:7d:d2:7e:13:78:51:65:58:16:a7:31:20:3a:da:
fe:b0:4c:de:08:a7:61:f9:05:49:27:99:bf:6c:c8:
f0:5d:4a:e2:2f:30:a3:e3:f7:4c:97:6b:2d:48:9f:
f4:e6:dd:e9:68:48:96:17:44:8b:34:56:94:b7:eb:
6b:95
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:C9:F6:E1:5D:4D:F2:B4:05:33:5B:47:6F:72:AA:56:4E:F6:17:1F
X509v3 Authority Key Identifier:
keyid:AE:6A:F0:D5:F3:82:89:D3:4C:21:BA:67:C4:C3:97:87:A4:2A:66:9E
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rmrw1fOCidNMIbpnxMOXh6QqZp4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4e/def555-9651-4e81-828c-7a94da7d9ee2/1/rmrw1fOCidNMIbpnxMOXh6QqZp4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
ae:26:5e:3b:fd:f2:88:db:33:6a:7e:0c:94:dd:36:ae:ad:ff:
85:fc:1e:1f:8b:13:5f:ec:2a:bb:f9:7f:a1:91:f0:68:1f:1b:
51:44:59:90:fe:40:08:ce:c1:fa:7c:e8:4f:f7:b9:54:d1:46:
8e:9a:58:f1:75:3e:97:32:e5:e1:a8:3d:d9:4b:e2:7e:c3:ca:
cf:ac:79:ae:8a:e4:c4:8e:c3:55:18:23:a9:4f:db:e3:81:29:
17:03:57:59:30:2f:89:c2:aa:c3:7b:28:b4:f6:e9:82:02:8c:
29:82:62:c7:c4:fe:61:1b:2b:bb:2f:78:52:6d:95:1f:e4:b0:
6a:67:23:ab:fd:c2:23:e8:fc:61:eb:6f:9d:52:5f:9c:ae:ba:
e9:18:33:dd:9e:8d:cf:1b:48:f0:48:83:49:a3:3e:65:29:d5:
19:28:a2:ca:52:14:7e:49:d5:c7:15:ad:c8:e0:b3:a9:a8:73:
df:17:32:65:cf:39:3a:2d:fb:52:2f:5f:2c:bb:7f:e5:be:35:
f1:3b:b1:0b:0f:a3:1c:d3:ec:27:bb:b1:f4:fc:61:c3:e2:bc:
14:1e:7c:ea:0c:a4:7d:ef:35:a7:79:9b:d7:7d:3b:24:09:8a:
58:a5:be:80:01:70:a1:00:fc:21:f4:90:9b:22:32:a0:8c:f2:
68:ec:cb:8e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdHeVi5dqRHOuiYjSVNTRJYMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlNmFmMGQ1ZjM4Mjg5ZDM0YzIxYmE2N2M0YzM5Nzg3YTQy
YTY2OWUwHhcNMjUwNjA2MjMwMDI0WhcNMjUwNjA3MjMwMDI0WjAzMTEwLwYDVQQD
Eyg4YmM5ZjZlMTVkNGRmMmI0MDUzMzViNDc2ZjcyYWE1NjRlZjYxNzFmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsDkZadEHZjdUkice6Fr7wiHg1qa8
GfeHBYCQ3+PYdq23833AN+kfASoSP1XKBckUlU0fEmr/R2NAXDFZ9aOnc9vyIH44
lM+ZXiCbebVrr6dV8xENKa7GWghRzTT2++mvJg4bX+kqMD1DbPK7rZe8XDT3umZV
YNh4JYq9izLgWocq+wCrdzdTgnHooPo7jt7eWX/Ty7n20cBQ3Nr9+dqNKhebYQpu
2HUDfujHCxtXxC9VpnWr7u/Z6CJsEGvhpNkCSSDOfdJ+E3hRZVgWpzEgOtr+sEze
CKdh+QVJJ5m/bMjwXUriLzCj4/dMl2stSJ/05t3paEiWF0SLNFaUt+trlQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIvJ9uFdTfK0BTNbR29yqlZO9hcfMB8GA1UdIwQY
MBaAFK5q8NXzgonTTCG6Z8TDl4ekKmaeMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80ZS9kZWY1NTUtOTY1MS00ZTgxLTgyOGMt
N2E5NGRhN2Q5ZWUyLzEvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80ZS9kZWY1NTUtOTY1MS00ZTgxLTgyOGMtN2E5NGRhN2Q5ZWUy
LzEvcm1ydzFmT0NpZE5NSWJwbnhNT1hoNlFxWnA0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAriZeO/3y
iNszan4MlN02rq3/hfweH4sTX+wqu/l/oZHwaB8bUURZkP5ACM7B+nzoT/e5VNFG
jppY8XU+lzLl4ag92UvifsPKz6x5rorkxI7DVRgjqU/b44EpFwNXWTAvicKqw3so
tPbpggKMKYJix8T+YRsruy94Um2VH+Swamcjq/3CI+j8YetvnVJfnK666Rgz3Z6N
zxtI8EiDSaM+ZSnVGSiiylIUfknVxxWtyOCzqahz3xcyZc85Oi37Ui9fLLt/5b41
8TuxCw+jHNPsJ7ux9Pxhw+K8FB586gykfe81p3mb1307JAmKWKW+gAFwoQD8IfSQ
myIyoIzyaOzLjg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 09:15:36 2025 by rpki-client