Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
File: C89yHHHIrnyvcG2d8zWLEtVLTZA.mft (raw, json)
Hash identifier: ApcassTd7b8F1KRzM6w7dRM4bxfzM82I+AW5jUzitls=
Subject key identifier: F1:6E:E4:59:A0:47:BD:7B:08:31:8B:E8:79:38:41:F6:35:59:33:58
Authority key identifier: 0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
Certificate issuer: /CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Certificate serial: 01973FF75CA36B834688EEE9B420930729E5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
Manifest number: 099F
Signing time: Thu 05 Jun 2025 12:01:04 +0000
Manifest this update: Thu 05 Jun 2025 12:01:04 +0000
Manifest next update: Fri 06 Jun 2025 12:01:04 +0000
Files and hashes: 1: 0Xw-5taoVNUPecPoG5bobjuIIc0.roa (hash: +uWkqdxHbLpuSBqT73af2/Y6rs7b1vl0IQ82rcCeayY=)
2: C89yHHHIrnyvcG2d8zWLEtVLTZA.crl (hash: 67IhcaAuoco4Z1nCseC+ERvHpUHNpiod4L4/z4xknuw=)
3: SYHyceqFtkyCyptfpg33iZNyTQg.roa (hash: nT6QUh5lUAAZS2ytChv8ohZK4q1mifNi1Au5J9VAH8E=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 06 Jun 2025 12:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:3f:f7:5c:a3:6b:83:46:88:ee:e9:b4:20:93:07:29:e5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=0bcf721c71c8ae7caf706d9df3358b12d54b4d90
Validity
Not Before: Jun 5 12:01:04 2025 GMT
Not After : Jun 6 12:01:04 2025 GMT
Subject: CN=f16ee459a047bd7b08318be8793841f635593358
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:48:65:b4:94:a4:20:05:f3:56:d0:70:7a:d8:
a7:44:ba:98:2a:79:ec:dc:09:04:44:f0:2f:42:ce:
38:12:ed:d4:ec:52:8a:a9:64:e5:fc:5a:10:c4:b1:
79:c4:f9:5a:67:bc:6c:21:da:c7:2b:8e:49:23:c9:
5f:9e:ca:7e:0a:82:2a:69:87:58:38:91:0c:64:0e:
c9:a4:bc:e5:17:5a:97:77:15:99:b2:36:78:3b:1b:
09:56:e6:c0:7e:68:6f:4a:e9:59:79:c6:53:4f:50:
06:19:d7:84:bf:1b:30:dd:03:85:e5:d9:12:b2:4a:
73:9f:6b:42:9e:81:e1:72:a4:3c:b3:5c:c2:5c:18:
3c:2b:99:fd:a5:29:34:e1:a5:4d:db:ef:a9:c5:93:
cf:a1:d8:27:20:7c:04:93:c4:33:37:12:3f:54:98:
eb:fb:5f:64:ed:bd:d5:fc:fc:48:b4:c0:8c:31:4e:
e7:c5:02:18:fa:46:b9:f8:d8:58:ec:f2:79:c3:d7:
bf:02:f8:8c:46:b1:5b:8f:dd:d1:38:f3:d8:16:d1:
3b:0c:81:a1:6f:60:da:01:21:d4:61:2e:8a:e4:88:
1a:c3:8b:6f:64:86:f6:27:36:34:5f:0f:4c:74:0e:
20:7b:0b:0c:ee:89:e5:db:ba:4f:f3:ef:8a:a4:0f:
0a:1d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F1:6E:E4:59:A0:47:BD:7B:08:31:8B:E8:79:38:41:F6:35:59:33:58
X509v3 Authority Key Identifier:
keyid:0B:CF:72:1C:71:C8:AE:7C:AF:70:6D:9D:F3:35:8B:12:D5:4B:4D:90
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/C89yHHHIrnyvcG2d8zWLEtVLTZA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/b3/0ee11f-41b7-4ac9-9b16-d9eb8d57366c/1/C89yHHHIrnyvcG2d8zWLEtVLTZA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
b1:59:18:5a:a9:51:96:00:5f:90:e3:ab:9e:55:e2:87:7e:d0:
93:cf:0e:24:1b:f2:c1:85:9d:9e:de:59:78:f7:76:bd:a7:2f:
a2:07:9d:7f:77:08:d8:6a:3a:59:5a:99:bb:22:14:79:56:63:
19:f7:91:ff:99:e8:de:56:50:04:0d:2b:00:96:6a:83:e8:44:
b0:66:43:c2:c5:4e:c1:3f:08:dd:50:7c:dd:28:64:32:45:23:
bd:71:c5:40:13:81:90:24:8f:90:b8:b0:ad:b3:bb:b4:3d:fb:
7c:51:65:fb:9f:40:ae:00:86:cb:a1:2d:94:60:a6:f2:7f:6a:
05:58:54:b6:85:f1:13:d0:e1:af:c9:68:90:2d:d7:e3:9e:ea:
57:56:2d:94:fe:04:8b:74:1f:76:f0:4a:51:f7:da:07:9e:44:
e6:46:f7:81:89:21:14:24:9f:18:24:16:30:d1:2b:78:46:c7:
1f:0d:bb:3e:67:be:d9:eb:54:0f:20:b6:05:3f:47:53:6d:2f:
5e:4d:20:8c:2f:8f:79:0c:51:42:ad:55:8a:42:25:c5:e0:dc:
dc:8d:3f:a2:ea:5b:78:a6:15:30:58:de:65:df:86:1e:98:c5:
11:b8:73:fd:68:9b:fc:6a:13:13:ca:0f:23:f6:84:bb:6d:a4:
b8:51:98:a4
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZc/91yja4NGiO7ptCCTBynlMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDBiY2Y3MjFjNzFjOGFlN2NhZjcwNmQ5ZGYzMzU4YjEyZDU0
YjRkOTAwHhcNMjUwNjA1MTIwMTA0WhcNMjUwNjA2MTIwMTA0WjAzMTEwLwYDVQQD
EyhmMTZlZTQ1OWEwNDdiZDdiMDgzMThiZTg3OTM4NDFmNjM1NTkzMzU4MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAuUhltJSkIAXzVtBwetinRLqYKnns
3AkERPAvQs44Eu3U7FKKqWTl/FoQxLF5xPlaZ7xsIdrHK45JI8lfnsp+CoIqaYdY
OJEMZA7JpLzlF1qXdxWZsjZ4OxsJVubAfmhvSulZecZTT1AGGdeEvxsw3QOF5dkS
skpzn2tCnoHhcqQ8s1zCXBg8K5n9pSk04aVN2++pxZPPodgnIHwEk8QzNxI/VJjr
+19k7b3V/PxItMCMMU7nxQIY+ka5+NhY7PJ5w9e/AviMRrFbj93ROPPYFtE7DIGh
b2DaASHUYS6K5Igaw4tvZIb2JzY0Xw9MdA4gewsM7onl27pP8++KpA8KHQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPFu5FmgR717CDGL6Hk4QfY1WTNYMB8GA1UdIwQY
MBaAFAvPchxxyK58r3BtnfM1ixLVS02QMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYt
ZDllYjhkNTczNjZjLzEvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9iMy8wZWUxMWYtNDFiNy00YWM5LTliMTYtZDllYjhkNTczNjZj
LzEvQzg5eUhISElybnl2Y0cyZDh6V0xFdFZMVFpBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAsVkYWqlR
lgBfkOOrnlXih37Qk88OJBvywYWdnt5ZePd2vacvogedf3cI2Go6WVqZuyIUeVZj
GfeR/5no3lZQBA0rAJZqg+hEsGZDwsVOwT8I3VB83ShkMkUjvXHFQBOBkCSPkLiw
rbO7tD37fFFl+59ArgCGy6EtlGCm8n9qBVhUtoXxE9Dhr8lokC3X457qV1YtlP4E
i3QfdvBKUffaB55E5kb3gYkhFCSfGCQWMNEreEbHHw27Pme+2etUDyC2BT9HU20v
Xk0gjC+PeQxRQq1VikIlxeDc3I0/oupbeKYVMFjeZd+GHpjFEbhz/Wib/GoTE8oP
I/aEu22kuFGYpA==
-----END CERTIFICATE-----
Generated at Thu Jun 5 18:10:40 2025 by rpki-client