Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
File: x24D_30L_eMoOcKP7IHGJ1wE0z8.mft (raw, json)
Hash identifier: k5H8MOvQ/bpEDa/aSOIkU1OVAxhXs6ntrCn4a/7J0Ys=
Subject key identifier: CB:DC:54:C5:68:8B:88:6D:84:5B:5C:1F:1F:84:FD:81:4A:8B:5B:C1
Authority key identifier: C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
Certificate issuer: /CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Certificate serial: 01976E5041AEFD68A7B3F55C111F66C712A4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 12:00:42 +0000
Manifest this update: Sat 14 Jun 2025 12:00:42 +0000
Manifest next update: Sun 15 Jun 2025 12:00:42 +0000
Files and hashes: 1: N35ogLyeBi2BuFWlUXcGcxqHzqk.roa (hash: KCN204MjqT3ieOgIgu9cP0A/BCFFBOWU+ExI90E1Oec=)
2: gMMT4CFkCWRYtDrF3UxIZfPsxKc.roa (hash: 2/OhbtZSnC9mHzUn7UoTXNOmX1wP26fthpipUmjf41Y=)
3: x24D_30L_eMoOcKP7IHGJ1wE0z8.crl (hash: easiKg9sLWbr1pTuVlogsu7w6x+e/S+YWRRfcogkh1E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl
rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:41:ae:fd:68:a7:b3:f5:5c:11:1f:66:c7:12:a4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76e03ff7d0bfde32839c28fec81c6275c04d33f
Validity
Not Before: Jun 14 12:00:42 2025 GMT
Not After : Jun 15 12:00:42 2025 GMT
Subject: CN=cbdc54c5688b886d845b5c1f1f84fd814a8b5bc1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:02:5e:53:fe:bf:b1:b5:5b:f4:38:5e:7e:
75:52:ec:e8:e4:57:5b:2a:c4:f6:4d:bf:1f:54:57:
ae:06:26:52:74:ac:aa:90:55:ae:93:07:8f:f7:07:
06:10:ce:15:58:0d:e5:c7:38:d7:6d:e0:cf:da:a6:
db:17:ba:0e:f8:02:d8:ba:48:1e:8a:91:af:74:68:
45:0a:77:e9:32:b4:10:b4:f1:b8:5d:cc:bb:98:8d:
30:2b:e5:62:b6:04:b5:34:a7:eb:5a:6f:a6:8b:ce:
99:03:be:07:26:c7:15:e8:54:64:4b:02:4f:1b:5d:
9a:3b:3f:46:df:30:e7:79:dd:a9:23:df:9a:fd:2a:
80:af:58:ac:89:d1:c5:b4:8d:74:b0:42:fb:ac:8c:
ae:02:23:27:37:c4:5a:fd:5c:7c:c8:8b:e6:49:0a:
7c:59:d5:2a:68:cb:4c:f0:89:3e:cc:0f:f6:5e:ae:
f2:b6:b4:01:28:0c:8d:92:6d:9f:80:aa:9c:38:72:
09:55:22:5a:c2:50:2f:6f:fe:75:7e:cb:06:11:10:
09:0a:c6:33:87:bc:b9:fe:86:34:75:95:34:7b:b1:
27:66:41:26:25:38:ba:78:a1:41:ba:29:38:18:3f:
bd:25:73:b1:5e:f4:ee:da:4d:91:1e:4c:fb:9b:77:
df:51
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
CB:DC:54:C5:68:8B:88:6D:84:5B:5C:1F:1F:84:FD:81:4A:8B:5B:C1
X509v3 Authority Key Identifier:
keyid:C7:6E:03:FF:7D:0B:FD:E3:28:39:C2:8F:EC:81:C6:27:5C:04:D3:3F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x24D_30L_eMoOcKP7IHGJ1wE0z8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/58/3347f7-5259-4238-adb6-835de0f5892e/1/x24D_30L_eMoOcKP7IHGJ1wE0z8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
25:0f:5d:33:20:02:3d:65:87:c4:04:ce:c5:e2:8a:90:76:b5:
bb:42:82:83:c0:0a:ee:9c:30:0d:bb:c0:1c:6f:7c:cd:30:98:
c1:49:04:4a:42:4b:e4:9d:92:2f:ca:ac:63:16:45:51:0d:10:
c2:05:b1:8e:da:59:8b:7d:9b:dc:63:79:0b:91:08:19:4a:79:
ca:64:05:85:f1:d7:0b:ac:4a:63:d0:18:bc:7f:50:ca:65:8d:
27:2b:18:eb:f8:99:c7:c7:2c:2c:5e:41:22:7f:6b:28:dc:ce:
54:3f:1a:ba:df:6e:e3:17:dd:3d:4f:dc:ab:5f:6d:b3:f7:8d:
37:2c:6a:b7:5d:82:4e:1e:8f:83:0b:a0:4f:fa:a6:04:6a:80:
2d:ac:9f:95:47:0f:40:5a:03:38:4c:c0:db:75:d3:50:be:c8:
6c:14:4c:b0:6e:11:1e:47:28:50:89:de:a4:45:e7:00:13:cd:
b8:99:2d:50:bd:5d:fa:ce:a1:39:37:79:57:f1:ea:c2:37:e8:
a8:34:54:41:6c:56:f5:18:e1:5f:a4:f4:23:75:09:43:9e:7a:
11:52:ea:79:91:9c:43:cb:03:06:70:62:ad:25:49:7f:13:14:
af:72:9b:f7:be:c5:5f:36:48:28:6c:ef:75:b1:a8:12:21:e2:
64:1c:8a:f7
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduUEGu/Wins/VcER9mxxKkMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmUwM2ZmN2QwYmZkZTMyODM5YzI4ZmVjODFjNjI3NWMw
NGQzM2YwHhcNMjUwNjE0MTIwMDQyWhcNMjUwNjE1MTIwMDQyWjAzMTEwLwYDVQQD
EyhjYmRjNTRjNTY4OGI4ODZkODQ1YjVjMWYxZjg0ZmQ4MTRhOGI1YmMxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAv1gCXlP+v7G1W/Q4Xn51Uuzo5Fdb
KsT2Tb8fVFeuBiZSdKyqkFWukweP9wcGEM4VWA3lxzjXbeDP2qbbF7oO+ALYukge
ipGvdGhFCnfpMrQQtPG4Xcy7mI0wK+VitgS1NKfrWm+mi86ZA74HJscV6FRkSwJP
G12aOz9G3zDned2pI9+a/SqAr1isidHFtI10sEL7rIyuAiMnN8Ra/Vx8yIvmSQp8
WdUqaMtM8Ik+zA/2Xq7ytrQBKAyNkm2fgKqcOHIJVSJawlAvb/51fssGERAJCsYz
h7y5/oY0dZU0e7EnZkEmJTi6eKFBuik4GD+9JXOxXvTu2k2RHkz7m3ffUQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMvcVMVoi4hthFtcHx+E/YFKi1vBMB8GA1UdIwQY
MBaAFMduA/99C/3jKDnCj+yBxidcBNM/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81OC8zMzQ3ZjctNTI1OS00MjM4LWFkYjYt
ODM1ZGUwZjU4OTJlLzEveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81OC8zMzQ3ZjctNTI1OS00MjM4LWFkYjYtODM1ZGUwZjU4OTJl
LzEveDI0RF8zMExfZU1vT2NLUDdJSEdKMXdFMHo4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJQ9dMyAC
PWWHxATOxeKKkHa1u0KCg8AK7pwwDbvAHG98zTCYwUkESkJL5J2SL8qsYxZFUQ0Q
wgWxjtpZi32b3GN5C5EIGUp5ymQFhfHXC6xKY9AYvH9QymWNJysY6/iZx8csLF5B
In9rKNzOVD8aut9u4xfdPU/cq19ts/eNNyxqt12CTh6PgwugT/qmBGqALayflUcP
QFoDOEzA23XTUL7IbBRMsG4RHkcoUInepEXnABPNuJktUL1d+s6hOTd5V/Hqwjfo
qDRUQWxW9RjhX6T0I3UJQ556EVLqeZGcQ8sDBnBirSVJfxMUr3Kb977FXzZIKGzv
dbGoEiHiZByK9w==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:05:37 2025 by rpki-client