Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
File: 0mF9FdtY_jBi0brb4E0wwZSd1f8.mft (raw, json)
Hash identifier: aqqxkjm0SeAutCSQeH4IyK93D4rE3s9fegPcKBRgNnI=
Subject key identifier: 8B:82:25:FD:79:C2:A5:9B:75:AC:F9:ED:13:3A:0C:49:CA:47:61:BD
Authority key identifier: D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
Certificate issuer: /CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Certificate serial: 01974E202CB231CBECCB1DD267C46009CCC7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
Manifest number: 157A
Signing time: Sun 08 Jun 2025 06:00:20 +0000
Manifest this update: Sun 08 Jun 2025 06:00:20 +0000
Manifest next update: Mon 09 Jun 2025 06:00:20 +0000
Files and hashes: 1: 0mF9FdtY_jBi0brb4E0wwZSd1f8.crl (hash: N2rnjZjygmmarlL0MyV5WfwlrPfLSPxaWAtL6YOZyOo=)
2: j-Iupp3EcWQfbMD2aDvdXh5buVM.roa (hash: vNF4TPFh0oVURLAenwqLDdq2RvvuTpEILFtX5lE+Y4U=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 03:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4e:20:2c:b2:31:cb:ec:cb:1d:d2:67:c4:60:09:cc:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d2617d15db58fe3062d1badbe04d30c1949dd5ff
Validity
Not Before: Jun 8 06:00:20 2025 GMT
Not After : Jun 9 06:00:20 2025 GMT
Subject: CN=8b8225fd79c2a59b75acf9ed133a0c49ca4761bd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b1:07:37:4c:10:0b:74:44:4b:d0:fc:22:93:c9:
8b:15:a3:66:10:ee:34:64:5d:e8:b4:02:c8:5b:46:
03:f0:60:23:68:00:5d:31:4e:c9:49:df:4b:77:01:
79:f7:66:60:07:ae:f1:a2:38:6b:eb:b5:2d:3f:fd:
fe:39:89:9f:a6:54:24:72:19:46:1c:3f:f2:d3:4f:
7d:35:d4:91:27:33:66:31:7c:68:4c:51:22:60:79:
ee:92:aa:d1:34:4c:b5:05:83:de:5b:89:ba:90:31:
fb:59:03:48:c6:ef:c4:16:0b:d2:32:9a:09:c6:df:
90:25:ba:01:11:b3:6a:e9:3e:84:a4:95:34:0d:97:
6a:79:cd:8f:3b:8a:8f:89:76:57:75:cc:a6:f6:22:
b1:6f:23:29:f9:50:45:b1:43:79:a4:4c:d9:db:60:
56:ef:32:26:4e:08:01:a6:01:4d:cd:e9:15:c8:b6:
bc:e5:0c:a1:6e:95:5b:5c:94:e0:18:11:75:c1:45:
40:0d:de:2b:34:50:63:b4:28:b9:90:60:df:49:61:
e8:ae:6e:c8:4a:5c:2c:df:d2:55:25:ca:0e:6c:09:
8c:05:4c:dc:38:27:dc:19:a6:d9:bd:33:03:70:2a:
e9:ef:c6:d9:a9:89:1c:f8:e1:f6:86:bc:a3:3d:ef:
25:93
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:82:25:FD:79:C2:A5:9B:75:AC:F9:ED:13:3A:0C:49:CA:47:61:BD
X509v3 Authority Key Identifier:
keyid:D2:61:7D:15:DB:58:FE:30:62:D1:BA:DB:E0:4D:30:C1:94:9D:D5:FF
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/0mF9FdtY_jBi0brb4E0wwZSd1f8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/cc/cbca0b-6453-494c-8727-57e08f61f2ec/1/0mF9FdtY_jBi0brb4E0wwZSd1f8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:14:0f:07:5c:f4:da:6e:26:5c:0a:03:22:28:d8:d3:84:f7:
eb:3e:fa:0c:ab:e8:11:75:e0:9c:23:98:4d:66:5a:78:40:59:
d4:ca:c4:9e:33:15:d2:6c:c4:1f:d1:a1:9d:0c:3e:d4:b5:1e:
94:09:24:21:d0:55:80:0d:48:51:1d:5a:75:86:df:5e:6b:0c:
30:70:29:b1:65:cf:c5:81:10:da:ab:b7:8c:60:c1:23:f4:6f:
82:09:d1:5e:d6:69:ca:2a:99:b4:88:41:b0:27:69:5c:5e:d2:
1f:df:5e:5f:20:0b:ef:68:4d:3b:4d:f3:92:6c:ce:88:b5:77:
22:3f:35:a9:37:a6:f7:f5:a9:00:9f:9b:f5:36:ba:64:4a:b2:
69:02:46:0b:b3:84:61:9a:df:82:36:43:e3:26:29:7c:8c:72:
fa:df:f6:31:a9:9c:42:34:1b:23:f8:72:82:38:b9:05:c8:b4:
fa:65:9a:60:27:1e:5b:ed:0d:a9:73:4d:2e:59:c4:a5:63:8c:
48:84:8b:67:72:3c:07:18:94:14:80:cb:01:dd:f4:59:bd:55:
8c:93:21:7e:1a:c8:13:7a:a8:08:60:58:fa:6a:98:3b:18:53:
41:9e:4a:39:61:64:f3:2a:55:cf:1e:77:b7:0c:7e:56:aa:77:
6e:c3:4b:6f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdOICyyMcvsyx3SZ8RgCczHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQyNjE3ZDE1ZGI1OGZlMzA2MmQxYmFkYmUwNGQzMGMxOTQ5
ZGQ1ZmYwHhcNMjUwNjA4MDYwMDIwWhcNMjUwNjA5MDYwMDIwWjAzMTEwLwYDVQQD
Eyg4YjgyMjVmZDc5YzJhNTliNzVhY2Y5ZWQxMzNhMGM0OWNhNDc2MWJkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsQc3TBALdERL0Pwik8mLFaNmEO40
ZF3otALIW0YD8GAjaABdMU7JSd9LdwF592ZgB67xojhr67UtP/3+OYmfplQkchlG
HD/y0099NdSRJzNmMXxoTFEiYHnukqrRNEy1BYPeW4m6kDH7WQNIxu/EFgvSMpoJ
xt+QJboBEbNq6T6EpJU0DZdqec2PO4qPiXZXdcym9iKxbyMp+VBFsUN5pEzZ22BW
7zImTggBpgFNzekVyLa85QyhbpVbXJTgGBF1wUVADd4rNFBjtCi5kGDfSWHorm7I
Slws39JVJcoObAmMBUzcOCfcGabZvTMDcCrp78bZqYkc+OH2hryjPe8lkwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIuCJf15wqWbdaz57RM6DEnKR2G9MB8GA1UdIwQY
MBaAFNJhfRXbWP4wYtG62+BNMMGUndX/MA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9jYy9jYmNhMGItNjQ1My00OTRjLTg3Mjct
NTdlMDhmNjFmMmVjLzEvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9jYy9jYmNhMGItNjQ1My00OTRjLTg3MjctNTdlMDhmNjFmMmVj
LzEvMG1GOUZkdFlfakJpMGJyYjRFMHd3WlNkMWY4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJBQPB1z0
2m4mXAoDIijY04T36z76DKvoEXXgnCOYTWZaeEBZ1MrEnjMV0mzEH9GhnQw+1LUe
lAkkIdBVgA1IUR1adYbfXmsMMHApsWXPxYEQ2qu3jGDBI/RvggnRXtZpyiqZtIhB
sCdpXF7SH99eXyAL72hNO03zkmzOiLV3Ij81qTem9/WpAJ+b9Ta6ZEqyaQJGC7OE
YZrfgjZD4yYpfIxy+t/2MamcQjQbI/hygji5Bci0+mWaYCceW+0NqXNNLlnEpWOM
SISLZ3I8BxiUFIDLAd30Wb1VjJMhfhrIE3qoCGBY+mqYOxhTQZ5KOWFk8ypVzx53
twx+Vqp3bsNLbw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 08:55:50 2025 by rpki-client