Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: IE7YTX7Q9TwXo+Xo2eOPMtG+g4AhyFMx4cxai3hqwH4=
Subject key identifier: E7:FB:EA:62:18:3D:6A:36:78:B6:BA:B8:E3:51:E6:57:CE:61:E3:FB
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 01975D5C988DFD00604571877D842AF9736C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0A70
Signing time: Wed 11 Jun 2025 05:00:38 +0000
Manifest this update: Wed 11 Jun 2025 05:00:38 +0000
Manifest next update: Thu 12 Jun 2025 05:00:38 +0000
Files and hashes: 1: F66nmw_9gnfRz1vGxzlxmQMgQys.roa (hash: V2QUSY1nIUt0LG1yVgyvdzAwGo/lvS6oHhY3urqyJbE=)
2: IdMP5mSXjXy5RCG7h8iUYBC-7wU.roa (hash: Ak+0cLrZuuXp8cAQmKH4z3k18zZ0o3zgplicC1IedBk=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: srwr1M6ru1bJvvveEhw1Iuv6W08m5CwmtsiuK4eoRro=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 12 Jun 2025 05:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:5d:5c:98:8d:fd:00:60:45:71:87:7d:84:2a:f9:73:6c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Jun 11 05:00:38 2025 GMT
Not After : Jun 12 05:00:38 2025 GMT
Subject: CN=e7fbea62183d6a3678b6bab8e351e657ce61e3fb
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:b7:69:0e:e7:e8:3e:d1:6f:d5:e2:c5:4a:b0:
2f:2f:00:31:28:21:d8:76:7d:a9:67:2c:2c:2c:9a:
c5:ac:ed:5c:4d:8e:93:b6:a8:5b:a9:e6:cf:2f:24:
44:d8:98:05:6c:6c:20:2e:74:41:ca:9b:b4:45:1a:
81:2c:44:18:8a:26:1a:d8:44:84:6a:d2:3e:77:64:
5b:35:af:1b:c6:45:e3:ee:6f:ff:93:9f:37:86:93:
22:fb:72:f5:32:ad:e5:ba:2e:97:14:ff:8b:fe:da:
f4:3c:c4:0e:bd:d3:f9:b3:b7:0e:4e:41:7f:07:7b:
a1:f3:18:13:c8:4a:9f:99:3a:a6:15:18:ed:a9:20:
e7:5c:36:6c:0f:77:2a:f7:45:0b:09:b3:93:ad:ad:
cf:62:7d:3e:65:54:41:68:5b:33:12:f2:03:64:fd:
46:b7:e8:4c:6c:95:17:64:c6:dc:8d:22:6e:f2:93:
37:85:fd:03:80:51:ad:80:78:2b:e0:42:1b:89:7e:
38:5d:4f:56:d6:78:33:df:4d:f9:06:bd:b1:ea:ab:
f4:0a:65:00:96:56:62:b8:e0:06:b3:fb:ad:75:c2:
ff:9f:ba:f8:42:c3:c7:9e:f6:df:ba:62:17:7b:ff:
57:b5:98:f4:db:99:24:02:f8:02:b2:fe:ae:ea:f2:
cc:0f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E7:FB:EA:62:18:3D:6A:36:78:B6:BA:B8:E3:51:E6:57:CE:61:E3:FB
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
96:ea:39:39:46:69:42:cc:eb:58:c9:55:8b:87:d2:6f:82:c7:
ea:78:49:da:3b:32:58:1b:16:61:4e:a2:31:bb:ed:e4:4f:51:
c0:fa:d4:10:54:15:fb:51:a2:71:9a:bf:81:c9:9a:9c:c5:ab:
2a:03:42:bb:9a:23:19:18:3c:3a:70:77:a8:4c:da:be:20:b0:
4b:6f:ec:f6:f0:ce:91:80:82:24:84:11:9b:61:2b:9d:e5:3b:
5b:1e:03:6b:e0:18:cb:58:09:0f:fa:52:61:b4:75:3f:9d:2d:
e8:ed:ef:b5:92:30:ed:17:16:a7:df:ce:86:60:8b:98:4e:ca:
56:22:20:db:27:56:42:9c:60:b4:65:60:e7:53:6d:ec:c8:8a:
9c:2a:d2:3b:4b:c0:53:fb:cf:b8:6f:23:10:a2:33:a8:d7:cb:
19:67:b1:a9:c7:92:06:6b:6c:cb:6f:8a:2c:4e:9e:45:d5:f7:
ce:0b:bb:b5:0e:d3:01:ae:77:01:b6:c3:13:00:a8:e9:01:a8:
ef:32:05:49:31:90:5b:17:f9:99:f3:5b:41:ca:93:a4:95:fe:
16:df:06:0b:c7:ee:c5:70:b6:51:93:2f:e9:f1:aa:08:7c:13:
0d:63:e5:31:ec:54:f8:01:71:40:b8:a1:24:a5:8c:39:56:50:
b3:45:9d:58
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZddXJiN/QBgRXGHfYQq+XNsMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4Y2VmNzIyZGFiZTU5NzVjYTRmOWJhODYxNjM4OGVjNmM2
NTZhMjAwHhcNMjUwNjExMDUwMDM4WhcNMjUwNjEyMDUwMDM4WjAzMTEwLwYDVQQD
EyhlN2ZiZWE2MjE4M2Q2YTM2NzhiNmJhYjhlMzUxZTY1N2NlNjFlM2ZiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxrdpDufoPtFv1eLFSrAvLwAxKCHY
dn2pZywsLJrFrO1cTY6TtqhbqebPLyRE2JgFbGwgLnRBypu0RRqBLEQYiiYa2ESE
atI+d2RbNa8bxkXj7m//k583hpMi+3L1Mq3lui6XFP+L/tr0PMQOvdP5s7cOTkF/
B3uh8xgTyEqfmTqmFRjtqSDnXDZsD3cq90ULCbOTra3PYn0+ZVRBaFszEvIDZP1G
t+hMbJUXZMbcjSJu8pM3hf0DgFGtgHgr4EIbiX44XU9W1ngz3035Br2x6qv0CmUA
llZiuOAGs/utdcL/n7r4QsPHnvbfumIXe/9XtZj025kkAvgCsv6u6vLMDwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOf76mIYPWo2eLa6uONR5lfOYeP7MB8GA1UdIwQY
MBaAFGjO9yLavll1yk+bqGFjiOxsZWogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2It
Y2Q2NzdhYjQzMWFhLzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2ItY2Q2NzdhYjQzMWFh
LzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAluo5OUZp
QszrWMlVi4fSb4LH6nhJ2jsyWBsWYU6iMbvt5E9RwPrUEFQV+1GicZq/gcmanMWr
KgNCu5ojGRg8OnB3qEzaviCwS2/s9vDOkYCCJIQRm2ErneU7Wx4Da+AYy1gJD/pS
YbR1P50t6O3vtZIw7RcWp9/OhmCLmE7KViIg2ydWQpxgtGVg51Nt7MiKnCrSO0vA
U/vPuG8jEKIzqNfLGWexqceSBmtsy2+KLE6eRdX3zgu7tQ7TAa53AbbDEwCo6QGo
7zIFSTGQWxf5mfNbQcqTpJX+Ft8GC8fuxXC2UZMv6fGqCHwTDWPlMexU+AFxQLih
JKWMOVZQs0WdWA==
-----END CERTIFICATE-----
Generated at Wed Jun 11 11:14:18 2025 by rpki-client