Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
File: tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft (raw, json)
Hash identifier: 4VgqNCT96cBI4jKtmRMEmfbJ+3X+P4CTYEE0y24WmlA=
Subject key identifier: F8:B2:15:BF:5E:ED:EA:15:4A:BB:37:E5:42:75:D6:29:DD:DC:46:03
Authority key identifier: B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
Certificate issuer: /CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Certificate serial: 01974A0CD039EC42A63AC3C064BB122670ED
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
Manifest number: 157B
Signing time: Sat 07 Jun 2025 11:00:43 +0000
Manifest this update: Sat 07 Jun 2025 11:00:43 +0000
Manifest next update: Sun 08 Jun 2025 11:00:43 +0000
Files and hashes: 1: bCO5bqFLQTtaSqSwTRLhrpm3wCA.roa (hash: xHiR4ALGk4+cM6JODCM19LWc7pantvAdvK3viET0qj4=)
2: tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl (hash: jg4L9c3Zj2WdRGCCyAQzbJR+kSGiLguXmwtu+9FcT2I=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:0c:d0:39:ec:42:a6:3a:c3:c0:64:bb:12:26:70:ed
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b4cd96b27e8843504bb5bd55c329ec02db9f0ffd
Validity
Not Before: Jun 7 11:00:43 2025 GMT
Not After : Jun 8 11:00:43 2025 GMT
Subject: CN=f8b215bf5eedea154abb37e54275d629dddc4603
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:fc:4b:3c:a8:cd:2d:ce:4c:98:fd:2c:63:a4:
a6:ff:34:ff:f3:fa:60:3d:02:b1:39:dc:41:24:e5:
e0:8a:6a:d6:fd:d3:90:12:2f:36:de:e2:c8:d8:a2:
ed:cb:fa:39:85:4e:05:9e:7b:69:b5:13:a9:a9:df:
10:6f:8b:69:8a:dd:2f:16:db:5e:8f:b7:bc:36:4b:
ab:57:a8:c5:c4:a4:be:0e:04:a7:8b:0e:a4:75:fa:
98:e8:39:b8:d1:08:43:35:79:89:db:90:44:84:bc:
af:08:e7:9f:f1:4c:2f:6e:a7:4e:61:d8:09:02:b9:
69:b2:df:dc:42:73:29:3c:3f:4f:22:dc:0a:b7:1b:
bf:0e:1f:76:49:11:35:f5:f9:f4:67:fa:5c:a6:95:
db:b1:f6:7e:81:e7:0b:36:d8:e5:62:17:1a:d5:02:
be:fa:91:f0:14:a6:c7:bf:64:e3:06:d0:8d:2a:98:
32:1c:60:3d:6d:28:01:36:a2:dd:8e:4b:e9:b5:e5:
3b:69:27:3d:4c:a8:38:fd:59:ae:3b:93:40:0d:da:
bc:03:b0:86:04:19:5e:80:eb:16:3f:99:f2:c5:18:
e6:d7:4d:32:58:15:7e:d3:dd:29:82:ac:55:51:9a:
c6:8d:2c:36:ec:49:c0:ba:e8:e6:46:bc:6c:18:be:
37:11
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F8:B2:15:BF:5E:ED:EA:15:4A:BB:37:E5:42:75:D6:29:DD:DC:46:03
X509v3 Authority Key Identifier:
keyid:B4:CD:96:B2:7E:88:43:50:4B:B5:BD:55:C3:29:EC:02:DB:9F:0F:FD
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tM2Wsn6IQ1BLtb1VwynsAtufD_0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/5c/19ddad-c458-441e-984e-573f17d2aef3/1/tM2Wsn6IQ1BLtb1VwynsAtufD_0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
72:37:8e:fd:9a:93:be:84:17:1c:46:5b:83:f5:0c:33:c6:cf:
70:f2:7d:62:1f:e4:59:c4:8a:d2:aa:3b:97:b0:6c:c9:a9:9d:
45:9b:46:d5:46:f6:5a:3a:3e:cc:64:82:1a:3c:34:bd:ce:6f:
a2:e5:97:e8:7c:38:95:d3:32:6f:26:90:3e:1b:b4:70:92:07:
01:85:a5:60:e3:c3:9c:00:14:e2:a0:97:90:5d:51:6d:82:10:
4b:0b:23:78:c9:cb:64:b4:9d:46:12:f5:38:8b:31:45:ce:1b:
1a:54:a9:d9:18:da:69:0a:9d:e8:3b:84:6d:ac:4d:ec:77:6f:
67:11:0c:d2:f0:c5:e2:f1:b1:7c:8c:4b:d6:c1:e3:a2:34:48:
4e:77:1b:a4:75:03:c3:5a:cf:73:98:0c:1a:93:62:d0:5d:43:
f5:8b:58:78:fd:79:cf:2b:67:e6:6b:76:63:40:ff:d4:8e:79:
fd:15:7a:55:a5:47:62:e2:dc:fe:1b:d5:ee:39:3a:77:51:5d:
d9:c3:83:e9:c9:97:fc:5f:2c:a9:ef:02:0b:be:fc:b5:91:00:
bc:8c:0a:c7:fe:2a:27:46:eb:fe:cb:b0:30:7d:05:00:e7:2c:
9e:73:55:6c:3c:99:8e:d9:16:8b:bf:28:27:12:df:e4:db:b9:
5f:90:00:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdKDNA57EKmOsPAZLsSJnDtMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGI0Y2Q5NmIyN2U4ODQzNTA0YmI1YmQ1NWMzMjllYzAyZGI5
ZjBmZmQwHhcNMjUwNjA3MTEwMDQzWhcNMjUwNjA4MTEwMDQzWjAzMTEwLwYDVQQD
EyhmOGIyMTViZjVlZWRlYTE1NGFiYjM3ZTU0Mjc1ZDYyOWRkZGM0NjAzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAu/xLPKjNLc5MmP0sY6Sm/zT/8/pg
PQKxOdxBJOXgimrW/dOQEi823uLI2KLty/o5hU4FnntptROpqd8Qb4tpit0vFtte
j7e8NkurV6jFxKS+DgSniw6kdfqY6Dm40QhDNXmJ25BEhLyvCOef8UwvbqdOYdgJ
Arlpst/cQnMpPD9PItwKtxu/Dh92SRE19fn0Z/pcppXbsfZ+gecLNtjlYhca1QK+
+pHwFKbHv2TjBtCNKpgyHGA9bSgBNqLdjkvpteU7aSc9TKg4/VmuO5NADdq8A7CG
BBlegOsWP5nyxRjm100yWBV+090pgqxVUZrGjSw27EnAuujmRrxsGL43EQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPiyFb9e7eoVSrs35UJ11ind3EYDMB8GA1UdIwQY
MBaAFLTNlrJ+iENQS7W9VcMp7ALbnw/9MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC81Yy8xOWRkYWQtYzQ1OC00NDFlLTk4NGUt
NTczZjE3ZDJhZWYzLzEvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC81Yy8xOWRkYWQtYzQ1OC00NDFlLTk4NGUtNTczZjE3ZDJhZWYz
LzEvdE0yV3NuNklRMUJMdGIxVnd5bnNBdHVmRF8wLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcjeO/ZqT
voQXHEZbg/UMM8bPcPJ9Yh/kWcSK0qo7l7BsyamdRZtG1Ub2Wjo+zGSCGjw0vc5v
ouWX6Hw4ldMybyaQPhu0cJIHAYWlYOPDnAAU4qCXkF1RbYIQSwsjeMnLZLSdRhL1
OIsxRc4bGlSp2RjaaQqd6DuEbaxN7HdvZxEM0vDF4vGxfIxL1sHjojRITncbpHUD
w1rPc5gMGpNi0F1D9YtYeP15zytn5mt2Y0D/1I55/RV6VaVHYuLc/hvV7jk6d1Fd
2cOD6cmX/F8sqe8CC778tZEAvIwKx/4qJ0br/suwMH0FAOcsnnNVbDyZjtkWi78o
JxLf5Nu5X5AArg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:11:24 2025 by rpki-client