Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
File: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft (raw, json)
Hash identifier: +vo2Sh5yewrNzKvAyCDpO7+BUgQ5Q1RpwMd4b6gysr8=
Subject key identifier: C2:3B:81:D8:39:8D:3C:61:06:7A:B5:1F:D1:11:A5:74:CF:83:17:D4
Authority key identifier: D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
Certificate issuer: /CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Certificate serial: 019761392E90D20EAD30DDA111835128F23F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
Manifest number: 158A
Signing time: Wed 11 Jun 2025 23:00:26 +0000
Manifest this update: Wed 11 Jun 2025 23:00:26 +0000
Manifest next update: Thu 12 Jun 2025 23:00:26 +0000
Files and hashes: 1: 0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl (hash: 5qucKYp7a7BHeh0iivPhruhcXJS/8vulVyXloEk8ObU=)
2: 2sMuB3L4wKNk6KQ1vUkgecapqPs.roa (hash: a+lo4xla0hStaCSeWZ2tmrm8LUp0PkG7cZXb4aMXUeo=)
3: CANBUB1YKbCmA7ScoDWaXGtX2uc.roa (hash: aie8Fma/xfSFGEQSDW4nRAqWZZILRzEAkJDRNa0r8qI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 23:00:26 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:61:39:2e:90:d2:0e:ad:30:dd:a1:11:83:51:28:f2:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d05a85c45bf53c3d88a76695aafebbd4aa77bbc1
Validity
Not Before: Jun 11 23:00:26 2025 GMT
Not After : Jun 12 23:00:26 2025 GMT
Subject: CN=c23b81d8398d3c61067ab51fd111a574cf8317d4
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:6c:cc:56:df:0d:f6:32:be:50:bb:3f:39:63:
36:46:a2:37:a8:b0:a6:70:27:ee:c7:15:7e:ab:17:
68:5c:d3:e8:ca:d4:8e:a0:5a:51:be:a3:43:32:f2:
0a:25:93:8c:0a:0c:61:3f:af:59:f2:10:1f:6a:fb:
57:25:d7:09:d3:c4:ba:74:0a:d5:fe:a8:30:a8:29:
3e:6d:f3:52:85:2f:e3:f2:de:2d:9b:6e:63:59:31:
31:66:e9:a3:95:5b:6e:99:97:bf:56:84:72:cf:5c:
96:ab:b7:85:6b:75:24:e8:10:f4:45:2b:13:1b:1e:
e1:f8:90:fb:95:90:b6:2d:b3:12:ac:7c:69:55:aa:
0e:be:8f:c5:da:e2:11:06:8b:06:78:74:fc:45:74:
39:8f:94:41:17:76:fc:56:49:c7:92:00:e2:a8:b4:
eb:0d:69:b6:b1:d7:b8:3f:b4:59:d1:9d:37:10:41:
3d:5b:09:a2:da:74:b7:93:26:7b:b7:d0:81:7b:33:
6e:b8:ae:8c:d9:af:a1:a3:9c:f1:06:b4:7c:d5:d6:
17:8b:7a:ce:c9:63:55:6e:06:91:c7:43:f1:ae:ba:
49:5e:f0:52:a1:ba:71:c8:aa:8c:df:98:7a:d5:14:
13:9e:d8:ac:50:92:b5:aa:de:5f:0a:04:1d:02:ce:
f7:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
C2:3B:81:D8:39:8D:3C:61:06:7A:B5:1F:D1:11:A5:74:CF:83:17:D4
X509v3 Authority Key Identifier:
keyid:D0:5A:85:C4:5B:F5:3C:3D:88:A7:66:95:AA:FE:BB:D4:AA:77:BB:C1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0FqFxFv1PD2Ip2aVqv671Kp3u8E.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/75/549477-4a82-42bc-839e-4f9840defa1f/1/0FqFxFv1PD2Ip2aVqv671Kp3u8E.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
95:fd:ec:af:19:a7:d0:01:a8:7a:65:3d:21:1c:e5:fd:d3:d0:
11:e5:83:38:f6:22:0e:0f:a8:3c:fd:f3:60:bd:a2:ea:e0:f7:
f6:f9:95:39:fd:0b:7f:43:38:7f:05:bd:4b:fe:be:7b:24:06:
ca:8e:48:a3:a1:06:e6:23:e6:9c:ea:b9:8b:a8:5b:1a:d3:8b:
6e:63:aa:82:9f:c8:03:96:94:8a:73:a4:8e:64:ef:63:b6:16:
bd:34:2f:a6:81:7f:5d:53:45:25:d4:ef:47:d9:51:9b:10:da:
9c:f1:d0:a2:e1:78:ab:87:83:59:26:c1:aa:12:5d:3f:c8:80:
90:73:9a:a1:a5:4c:69:33:1f:6c:a9:ed:ab:fa:92:e7:4b:3c:
d0:43:d4:40:60:06:c4:44:e8:d3:29:a8:9e:c0:76:da:57:a5:
76:c3:96:62:3b:fc:d8:62:eb:0f:90:86:75:2b:cf:18:b3:e6:
24:6a:1f:6d:0d:85:9f:54:28:4e:dd:dc:2a:cb:c5:30:1f:3f:
dc:f6:25:3a:ba:28:2d:95:f3:a9:b6:8c:aa:ce:49:b4:a0:3d:
b7:3a:76:38:25:a6:c8:d2:67:2a:3a:d0:13:66:a3:42:6f:40:
02:43:45:60:4d:68:4c:59:3e:e4:78:a3:36:31:a7:42:2c:a0:
52:60:89:8d
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdhOS6Q0g6tMN2hEYNRKPI/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQwNWE4NWM0NWJmNTNjM2Q4OGE3NjY5NWFhZmViYmQ0YWE3
N2JiYzEwHhcNMjUwNjExMjMwMDI2WhcNMjUwNjEyMjMwMDI2WjAzMTEwLwYDVQQD
EyhjMjNiODFkODM5OGQzYzYxMDY3YWI1MWZkMTExYTU3NGNmODMxN2Q0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr2zMVt8N9jK+ULs/OWM2RqI3qLCm
cCfuxxV+qxdoXNPoytSOoFpRvqNDMvIKJZOMCgxhP69Z8hAfavtXJdcJ08S6dArV
/qgwqCk+bfNShS/j8t4tm25jWTExZumjlVtumZe/VoRyz1yWq7eFa3Uk6BD0RSsT
Gx7h+JD7lZC2LbMSrHxpVaoOvo/F2uIRBosGeHT8RXQ5j5RBF3b8VknHkgDiqLTr
DWm2sde4P7RZ0Z03EEE9Wwmi2nS3kyZ7t9CBezNuuK6M2a+ho5zxBrR81dYXi3rO
yWNVbgaRx0PxrrpJXvBSobpxyKqM35h61RQTntisUJK1qt5fCgQdAs73fwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFMI7gdg5jTxhBnq1H9ERpXTPgxfUMB8GA1UdIwQY
MBaAFNBahcRb9Tw9iKdmlar+u9Sqd7vBMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC83NS81NDk0NzctNGE4Mi00MmJjLTgzOWUt
NGY5ODQwZGVmYTFmLzEvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC83NS81NDk0NzctNGE4Mi00MmJjLTgzOWUtNGY5ODQwZGVmYTFm
LzEvMEZxRnhGdjFQRDJJcDJhVnF2NjcxS3AzdThFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAlf3srxmn
0AGoemU9IRzl/dPQEeWDOPYiDg+oPP3zYL2i6uD39vmVOf0Lf0M4fwW9S/6+eyQG
yo5Io6EG5iPmnOq5i6hbGtOLbmOqgp/IA5aUinOkjmTvY7YWvTQvpoF/XVNFJdTv
R9lRmxDanPHQouF4q4eDWSbBqhJdP8iAkHOaoaVMaTMfbKntq/qS50s80EPUQGAG
xETo0ymonsB22leldsOWYjv82GLrD5CGdSvPGLPmJGofbQ2Fn1QoTt3cKsvFMB8/
3PYlOrooLZXzqbaMqs5JtKA9tzp2OCWmyNJnKjrQE2ajQm9AAkNFYE1oTFk+5Hij
NjGnQiygUmCJjQ==
-----END CERTIFICATE-----
Generated at Thu Jun 12 09:13:45 2025 by rpki-client