Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
File: x2oNsIMDONLSlh5Mj_sKtaA__l8.mft (raw, json)
Hash identifier: AziZVph22hy5iPS8y8BdyXs7HhkJcFEolj6GTeLl+q4=
Subject key identifier: 3F:3D:6A:36:47:1A:F8:2B:4F:9A:E9:CB:D1:0C:95:80:58:40:4B:3D
Authority key identifier: C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
Certificate issuer: /CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Certificate serial: 019749D626AD4BD5069CCCCD3641A6DB3FDB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
Manifest number: 1008
Signing time: Sat 07 Jun 2025 10:01:00 +0000
Manifest this update: Sat 07 Jun 2025 10:01:00 +0000
Manifest next update: Sun 08 Jun 2025 10:01:00 +0000
Files and hashes: 1: Ff3N8PO1mcQncsXGHiQUjQO2nRw.roa (hash: iiJaJiMdSghzZUoCo21ZColIpsI+U3kb/p0Er1rgouw=)
2: x2oNsIMDONLSlh5Mj_sKtaA__l8.crl (hash: feSAcUL+pKIVgP+ntP36AcDCz4OQhmtyoUf4K7h5hgE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 09:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:d6:26:ad:4b:d5:06:9c:cc:cd:36:41:a6:db:3f:db
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=c76a0db0830338d2d2961e4c8ffb0ab5a03ffe5f
Validity
Not Before: Jun 7 10:01:00 2025 GMT
Not After : Jun 8 10:01:00 2025 GMT
Subject: CN=3f3d6a36471af82b4f9ae9cbd10c958058404b3d
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:d8:a6:6f:3c:c3:e5:76:20:15:e3:80:2c:1a:
ec:c9:3d:f1:03:21:c6:a5:cc:2a:31:d6:c1:93:53:
51:25:b9:e3:e9:7e:1e:04:82:39:7e:90:76:2f:63:
8d:08:88:a4:a3:1a:00:e1:d4:87:eb:32:c0:ff:16:
7a:4f:a4:19:98:47:19:47:39:90:a9:9c:0c:3e:6e:
14:86:1f:88:7f:f5:e2:45:8a:8f:d0:cf:86:8d:c1:
8b:4d:7b:d2:81:6b:c7:f1:7d:ae:b3:19:7b:ff:12:
a1:28:55:8d:11:65:87:ff:6b:55:e7:ac:d4:67:5e:
8d:80:6e:b4:47:ff:07:d9:14:59:92:15:0a:97:1a:
50:31:84:a4:2e:97:ca:ca:d1:a7:a3:13:67:15:4b:
c3:d7:d6:60:cf:30:91:fd:38:31:1b:0b:47:73:bd:
b3:ab:c6:45:53:94:31:a7:88:c3:83:94:a2:fd:84:
f1:9a:85:c4:a2:d1:c6:31:87:63:0b:3c:25:1a:c1:
f6:42:7b:54:54:b7:ab:af:b1:2d:71:8a:74:f4:e7:
d8:92:1c:a0:3a:ac:2b:5a:b2:d1:47:e2:1d:43:78:
53:44:b7:a0:b5:5e:96:0f:c9:b1:b1:70:98:74:5c:
12:34:78:47:f4:a7:96:2a:ca:30:16:1d:6f:71:6b:
d6:d3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
3F:3D:6A:36:47:1A:F8:2B:4F:9A:E9:CB:D1:0C:95:80:58:40:4B:3D
X509v3 Authority Key Identifier:
keyid:C7:6A:0D:B0:83:03:38:D2:D2:96:1E:4C:8F:FB:0A:B5:A0:3F:FE:5F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/x2oNsIMDONLSlh5Mj_sKtaA__l8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/93/f7189f-9d3b-4fa9-b2c1-5217df3691ab/1/x2oNsIMDONLSlh5Mj_sKtaA__l8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
02:54:1c:93:99:2b:1b:0c:49:5e:45:ce:0c:9e:6e:5e:d0:89:
d8:76:9c:d6:c6:8c:3f:46:b1:4d:e1:83:eb:11:b8:d6:b1:73:
2f:81:39:35:24:33:02:97:ba:22:62:0c:a5:15:71:a4:2f:00:
77:96:0e:dd:9b:4e:05:1c:df:26:d8:dd:be:09:f2:4c:db:40:
53:cc:e2:be:2e:f5:05:0b:c3:e5:17:03:44:09:ed:4d:1f:c3:
6b:2a:f2:5a:78:63:03:c6:d0:0b:24:78:f7:bb:26:9c:38:a0:
bf:28:00:10:56:27:63:2a:90:4b:2e:a2:79:33:db:36:d3:27:
d9:0e:d4:ca:ee:12:ad:41:82:32:6f:af:2a:8a:96:cf:ee:19:
df:57:74:f2:23:df:a8:c4:c9:e3:7a:75:57:06:08:e2:84:97:
cb:f7:5f:0e:6a:0b:0c:a0:e2:04:cb:40:49:f4:86:1b:b9:cc:
b6:e8:4b:28:76:dd:b9:58:81:c9:bb:b8:61:ad:ac:c3:ea:e2:
a0:7b:d2:85:52:b4:c1:77:a7:ea:d4:6b:fb:79:ac:40:82:21:
4b:f4:69:96:6d:b2:4c:e6:85:ac:c3:0f:a9:08:69:bb:4f:b0:
fb:75:88:ae:40:1a:20:08:cb:17:d7:a9:23:2d:8a:1e:2e:d4:
fe:f2:88:72
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJ1iatS9UGnMzNNkGm2z/bMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGM3NmEwZGIwODMwMzM4ZDJkMjk2MWU0YzhmZmIwYWI1YTAz
ZmZlNWYwHhcNMjUwNjA3MTAwMTAwWhcNMjUwNjA4MTAwMTAwWjAzMTEwLwYDVQQD
EygzZjNkNmEzNjQ3MWFmODJiNGY5YWU5Y2JkMTBjOTU4MDU4NDA0YjNkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAstimbzzD5XYgFeOALBrsyT3xAyHG
pcwqMdbBk1NRJbnj6X4eBII5fpB2L2ONCIikoxoA4dSH6zLA/xZ6T6QZmEcZRzmQ
qZwMPm4Uhh+If/XiRYqP0M+GjcGLTXvSgWvH8X2usxl7/xKhKFWNEWWH/2tV56zU
Z16NgG60R/8H2RRZkhUKlxpQMYSkLpfKytGnoxNnFUvD19ZgzzCR/TgxGwtHc72z
q8ZFU5Qxp4jDg5Si/YTxmoXEotHGMYdjCzwlGsH2QntUVLerr7EtcYp09OfYkhyg
OqwrWrLRR+IdQ3hTRLegtV6WD8mxsXCYdFwSNHhH9KeWKsowFh1vcWvW0wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFD89ajZHGvgrT5rpy9EMlYBYQEs9MB8GA1UdIwQY
MBaAFMdqDbCDAzjS0pYeTI/7CrWgP/5fMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQveDJvTnNJTURPTkxTbGg1TWpfc0t0YUFfX2w4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85My9mNzE4OWYtOWQzYi00ZmE5LWIyYzEt
NTIxN2RmMzY5MWFiLzEveDJvTnNJTURPTkxTbGg1TWpfc0t0YUFfX2w4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85My9mNzE4OWYtOWQzYi00ZmE5LWIyYzEtNTIxN2RmMzY5MWFi
LzEveDJvTnNJTURPTkxTbGg1TWpfc0t0YUFfX2w4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAlQck5kr
GwxJXkXODJ5uXtCJ2Hac1saMP0axTeGD6xG41rFzL4E5NSQzApe6ImIMpRVxpC8A
d5YO3ZtOBRzfJtjdvgnyTNtAU8zivi71BQvD5RcDRAntTR/DayryWnhjA8bQCyR4
97smnDigvygAEFYnYyqQSy6ieTPbNtMn2Q7Uyu4SrUGCMm+vKoqWz+4Z31d08iPf
qMTJ43p1VwYI4oSXy/dfDmoLDKDiBMtASfSGG7nMtuhLKHbduViBybu4Ya2sw+ri
oHvShVK0wXen6tRr+3msQIIhS/Rplm2yTOaFrMMPqQhpu0+w+3WIrkAaIAjLF9ep
Iy2KHi7U/vKIcg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 14:46:26 2025 by rpki-client