Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
File: RVffPlRtVtu10jD2EcckxZmnIlE.mft (raw, json)
Hash identifier: 0kAg9l+Fw4UgRGF1m+QzfcspLM4bcXS7O25v6Cgw7QM=
Subject key identifier: BA:FE:3A:51:B3:A0:1D:2C:22:CB:1F:B2:A5:9C:CE:86:4A:6B:52:B3
Authority key identifier: 45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
Certificate issuer: /CN=4557df3e546d56dbb5d230f611c724c599a72251
Certificate serial: 0197504599155C0F944C65984AF9E7C8DF20
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
Manifest number: 0667
Signing time: Sun 08 Jun 2025 16:00:27 +0000
Manifest this update: Sun 08 Jun 2025 16:00:27 +0000
Manifest next update: Mon 09 Jun 2025 16:00:27 +0000
Files and hashes: 1: 8bsQRC6tEXl8CBwmVFzVd76zzgI.roa (hash: C8qiZHuVAIBOKIv/baZ/CLEIEY2S6o8WOpdp6qtA5us=)
2: RVffPlRtVtu10jD2EcckxZmnIlE.crl (hash: NnqvxXlehMXCSKupTWVYP9shWDuUZjC99BaKHfIMRFY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:45:99:15:5c:0f:94:4c:65:98:4a:f9:e7:c8:df:20
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4557df3e546d56dbb5d230f611c724c599a72251
Validity
Not Before: Jun 8 16:00:27 2025 GMT
Not After : Jun 9 16:00:27 2025 GMT
Subject: CN=bafe3a51b3a01d2c22cb1fb2a59cce864a6b52b3
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:e7:93:c8:7c:6f:50:c8:90:39:05:d3:7c:e0:
87:5c:2b:80:df:40:65:6e:b5:a3:18:35:20:10:b9:
5d:25:ef:a1:ad:2e:d3:45:97:48:2c:3e:35:77:71:
01:02:e9:e1:a1:07:fc:c8:dc:a7:de:08:ed:44:8d:
be:23:8d:9b:bb:ca:25:af:db:00:7d:b0:89:b3:29:
50:51:aa:fa:31:ad:da:ab:42:09:14:d7:e8:f3:e1:
8d:9b:ff:d2:55:a4:48:b7:98:03:34:4a:f9:96:33:
9e:c0:29:a8:92:cd:d7:c9:9e:41:2b:5a:df:b3:e3:
ec:1d:7b:f1:77:bb:50:c6:c0:6f:40:e3:e1:46:74:
8b:f1:9d:b0:c8:81:0d:21:84:18:fd:6d:9c:3b:de:
9b:b2:1c:f4:ac:fa:6e:6c:cc:b6:e9:b2:88:f2:3b:
b2:2c:7d:3a:4a:22:55:a9:73:39:35:1c:14:04:bb:
fd:70:a0:2b:77:56:14:da:e3:d0:a7:78:a5:c7:63:
f1:b2:cd:d7:c8:92:f1:07:87:5a:1f:bf:db:c7:7b:
61:96:03:74:22:4c:7c:ec:83:b0:96:1a:89:0d:67:
99:71:17:b3:50:cf:f5:5d:42:fe:38:0b:8f:1b:61:
27:65:59:38:57:a2:d0:86:b2:27:dd:0b:64:a8:5a:
62:19
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BA:FE:3A:51:B3:A0:1D:2C:22:CB:1F:B2:A5:9C:CE:86:4A:6B:52:B3
X509v3 Authority Key Identifier:
keyid:45:57:DF:3E:54:6D:56:DB:B5:D2:30:F6:11:C7:24:C5:99:A7:22:51
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RVffPlRtVtu10jD2EcckxZmnIlE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/9e/cac593-6074-4221-befd-0a892ab47db3/1/RVffPlRtVtu10jD2EcckxZmnIlE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
89:8f:c9:f2:a5:70:e9:0b:2d:9a:e1:99:4e:91:c1:e0:4f:44:
54:33:eb:3d:95:28:60:f5:ae:49:9c:cc:1e:b0:7a:f2:5e:16:
9e:ce:1a:9a:6f:ff:3a:82:64:33:ab:1d:c9:88:22:ca:db:d0:
75:f0:67:8e:3f:29:da:a2:5f:67:ab:77:e7:dc:bd:ec:52:d4:
3f:24:19:d3:4e:f6:4b:47:f3:98:c1:80:58:99:fd:d1:3a:2c:
82:57:35:3a:ca:ab:0b:94:70:4a:42:19:ee:8e:fe:4b:1e:2f:
5d:fb:a8:d4:b4:79:6a:9c:4d:93:95:54:87:3c:4d:e9:5d:93:
55:bc:50:98:49:e3:a6:9a:3d:7a:18:c2:e0:71:23:eb:90:6f:
62:be:3f:1b:6f:cc:85:1b:6e:c7:5b:41:2b:86:c2:98:4d:4f:
bf:70:77:27:bc:6a:dc:4c:ae:eb:4d:ac:56:e6:2e:fd:4a:e7:
1a:3e:e8:a4:15:70:1b:93:a3:29:b8:9e:f7:2d:5d:2c:52:be:
87:d1:b5:51:fa:ea:a2:79:13:63:06:47:a4:09:54:1b:cc:b1:
ae:ab:0b:3d:23:3a:e3:23:57:f7:1a:a3:a7:5c:b6:23:60:78:
a2:11:f1:31:88:85:b9:f8:99:80:d4:07:9a:0a:e9:9e:c4:e6:
5a:b8:d1:f6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRZkVXA+UTGWYSvnnyN8gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ1NTdkZjNlNTQ2ZDU2ZGJiNWQyMzBmNjExYzcyNGM1OTlh
NzIyNTEwHhcNMjUwNjA4MTYwMDI3WhcNMjUwNjA5MTYwMDI3WjAzMTEwLwYDVQQD
EyhiYWZlM2E1MWIzYTAxZDJjMjJjYjFmYjJhNTljY2U4NjRhNmI1MmIzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAz+eTyHxvUMiQOQXTfOCHXCuA30Bl
brWjGDUgELldJe+hrS7TRZdILD41d3EBAunhoQf8yNyn3gjtRI2+I42bu8olr9sA
fbCJsylQUar6Ma3aq0IJFNfo8+GNm//SVaRIt5gDNEr5ljOewCmoks3XyZ5BK1rf
s+PsHXvxd7tQxsBvQOPhRnSL8Z2wyIENIYQY/W2cO96bshz0rPpubMy26bKI8juy
LH06SiJVqXM5NRwUBLv9cKArd1YU2uPQp3ilx2Pxss3XyJLxB4daH7/bx3thlgN0
Ikx87IOwlhqJDWeZcRezUM/1XUL+OAuPG2EnZVk4V6LQhrIn3QtkqFpiGQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLr+OlGzoB0sIssfsqWczoZKa1KzMB8GA1UdIwQY
MBaAFEVX3z5UbVbbtdIw9hHHJMWZpyJRMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQt
MGE4OTJhYjQ3ZGIzLzEvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85ZS9jYWM1OTMtNjA3NC00MjIxLWJlZmQtMGE4OTJhYjQ3ZGIz
LzEvUlZmZlBsUnRWdHUxMGpEMkVjY2t4Wm1uSWxFLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAiY/J8qVw
6QstmuGZTpHB4E9EVDPrPZUoYPWuSZzMHrB68l4Wns4amm//OoJkM6sdyYgiytvQ
dfBnjj8p2qJfZ6t359y97FLUPyQZ0072S0fzmMGAWJn90Tosglc1OsqrC5RwSkIZ
7o7+Sx4vXfuo1LR5apxNk5VUhzxN6V2TVbxQmEnjppo9ehjC4HEj65BvYr4/G2/M
hRtux1tBK4bCmE1Pv3B3J7xq3Eyu602sVuYu/UrnGj7opBVwG5OjKbie9y1dLFK+
h9G1UfrqonkTYwZHpAlUG8yxrqsLPSM64yNX9xqjp1y2I2B4ohHxMYiFufiZgNQH
mgrpnsTmWrjR9g==
-----END CERTIFICATE-----
Generated at Sun Jun 8 19:59:26 2025 by rpki-client