Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
File: aM73Itq-WXXKT5uoYWOI7GxlaiA.mft (raw, json)
Hash identifier: 8JSV4c3+hkB04oZWYaYrDb05+v3qx4Ym1h2DPaN7tbU=
Subject key identifier: 01:D0:51:9F:4B:27:8C:5D:30:A7:8E:40:99:57:1D:30:F9:10:0C:D5
Authority key identifier: 68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
Certificate issuer: /CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Certificate serial: 019753B4CAD42260FCD24DD935E4F0430F72
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
Manifest number: 0A6B
Signing time: Mon 09 Jun 2025 08:00:46 +0000
Manifest this update: Mon 09 Jun 2025 08:00:46 +0000
Manifest next update: Tue 10 Jun 2025 08:00:46 +0000
Files and hashes: 1: F66nmw_9gnfRz1vGxzlxmQMgQys.roa (hash: V2QUSY1nIUt0LG1yVgyvdzAwGo/lvS6oHhY3urqyJbE=)
2: IdMP5mSXjXy5RCG7h8iUYBC-7wU.roa (hash: Ak+0cLrZuuXp8cAQmKH4z3k18zZ0o3zgplicC1IedBk=)
3: aM73Itq-WXXKT5uoYWOI7GxlaiA.crl (hash: IA/r5qxa4CEfrfnDLpXYwX4spPb0AbR01PEhW+arn+g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 10 Jun 2025 02:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:53:b4:ca:d4:22:60:fc:d2:4d:d9:35:e4:f0:43:0f:72
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=68cef722dabe5975ca4f9ba8616388ec6c656a20
Validity
Not Before: Jun 9 08:00:46 2025 GMT
Not After : Jun 10 08:00:46 2025 GMT
Subject: CN=01d0519f4b278c5d30a78e4099571d30f9100cd5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b3:34:6d:38:7d:99:9e:81:fa:64:f4:ec:5e:d2:
9b:b1:74:d0:b3:57:9c:4f:09:75:36:a0:3c:4c:b0:
91:62:1e:05:02:22:b5:91:f1:c8:40:81:c8:7c:ab:
ad:9d:db:a0:a8:6c:00:25:c1:f9:1d:25:33:07:b8:
cf:81:6d:9d:a3:ac:d1:fa:5a:cb:a5:c3:a4:f4:a8:
f0:66:0a:f4:13:b1:40:bb:86:5b:e3:bd:69:4c:80:
4e:b0:89:6f:0c:fd:51:59:1e:da:76:12:62:b1:7a:
e6:82:6f:40:af:8a:31:91:0d:5d:0a:47:dc:f4:00:
e8:df:56:ef:2b:5b:db:fb:35:f8:43:17:c1:38:5e:
6a:4d:96:81:72:38:50:39:e9:7f:6e:92:b0:34:c6:
3c:e6:62:49:1c:b9:ff:2c:0a:53:69:c8:56:67:5c:
88:0f:62:5a:4f:08:a7:4e:92:dc:c6:d3:83:4a:c0:
0e:83:a0:64:05:85:36:cc:28:18:4c:7f:ed:89:ca:
68:3b:cb:65:ec:a1:77:29:e7:e4:12:b0:da:2d:c8:
9f:42:94:24:46:62:b6:4e:9f:ce:eb:5b:f8:ad:b9:
2f:86:c2:c8:f5:87:ba:2b:d2:9c:aa:75:a7:38:cf:
5b:c8:e6:4d:c0:bf:15:ac:7f:78:c1:cf:1c:fc:03:
3a:39
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
01:D0:51:9F:4B:27:8C:5D:30:A7:8E:40:99:57:1D:30:F9:10:0C:D5
X509v3 Authority Key Identifier:
keyid:68:CE:F7:22:DA:BE:59:75:CA:4F:9B:A8:61:63:88:EC:6C:65:6A:20
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/aM73Itq-WXXKT5uoYWOI7GxlaiA.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/d2/790c15-2058-4c39-90cb-cd677ab431aa/1/aM73Itq-WXXKT5uoYWOI7GxlaiA.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
55:f6:9a:05:f1:65:d8:57:b3:f7:c5:f3:06:8d:0a:1b:58:1c:
97:09:4f:24:4c:a7:2f:4c:3c:2d:03:22:53:53:e3:b1:9a:14:
92:62:c7:2f:6d:89:a6:4e:12:be:40:8f:6d:77:3c:c6:06:ab:
bc:90:ef:57:36:b3:29:c7:4f:9b:7e:d2:6c:1d:6e:50:57:d6:
23:4e:b7:24:01:23:19:bd:a7:8b:69:74:7e:05:8b:1e:7c:3c:
d0:a2:3e:91:85:61:c2:27:14:79:b0:d2:c3:f5:9c:e7:d7:29:
7d:37:ad:39:a4:1d:30:16:10:51:ac:2f:fd:34:61:2b:ed:86:
84:7e:af:5a:9e:78:48:f7:ec:91:33:6e:7b:c5:0a:26:16:a5:
e9:28:34:71:aa:0e:1d:a7:82:21:a0:c5:97:11:ee:29:16:46:
93:44:c4:17:76:b2:54:c2:ae:8e:19:c1:af:69:90:42:70:07:
d7:15:82:10:10:0f:28:64:b3:a2:47:6f:a7:7f:24:6a:e8:19:
97:ec:66:86:cf:01:b9:ef:70:4e:ec:5a:5f:f5:ba:16:d4:18:
90:16:25:7e:30:a6:f1:a8:16:70:30:11:d0:50:58:fc:40:8e:
f5:39:a8:87:87:90:98:05:21:0a:e4:47:ba:46:8b:6b:08:fe:
c5:d9:17:3f
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdTtMrUImD80k3ZNeTwQw9yMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDY4Y2VmNzIyZGFiZTU5NzVjYTRmOWJhODYxNjM4OGVjNmM2
NTZhMjAwHhcNMjUwNjA5MDgwMDQ2WhcNMjUwNjEwMDgwMDQ2WjAzMTEwLwYDVQQD
EygwMWQwNTE5ZjRiMjc4YzVkMzBhNzhlNDA5OTU3MWQzMGY5MTAwY2Q1MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAszRtOH2ZnoH6ZPTsXtKbsXTQs1ec
Twl1NqA8TLCRYh4FAiK1kfHIQIHIfKutndugqGwAJcH5HSUzB7jPgW2do6zR+lrL
pcOk9KjwZgr0E7FAu4Zb471pTIBOsIlvDP1RWR7adhJisXrmgm9Ar4oxkQ1dCkfc
9ADo31bvK1vb+zX4QxfBOF5qTZaBcjhQOel/bpKwNMY85mJJHLn/LApTachWZ1yI
D2JaTwinTpLcxtODSsAOg6BkBYU2zCgYTH/ticpoO8tl7KF3KefkErDaLcifQpQk
RmK2Tp/O61v4rbkvhsLI9Ye6K9KcqnWnOM9byOZNwL8VrH94wc8c/AM6OQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFAHQUZ9LJ4xdMKeOQJlXHTD5EAzVMB8GA1UdIwQY
MBaAFGjO9yLavll1yk+bqGFjiOxsZWogMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2It
Y2Q2NzdhYjQzMWFhLzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9kMi83OTBjMTUtMjA1OC00YzM5LTkwY2ItY2Q2NzdhYjQzMWFh
LzEvYU03M0l0cS1XWFhLVDV1b1lXT0k3R3hsYWlBLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAVfaaBfFl
2Fez98XzBo0KG1gclwlPJEynL0w8LQMiU1PjsZoUkmLHL22Jpk4SvkCPbXc8xgar
vJDvVzazKcdPm37SbB1uUFfWI063JAEjGb2ni2l0fgWLHnw80KI+kYVhwicUebDS
w/Wc59cpfTetOaQdMBYQUawv/TRhK+2GhH6vWp54SPfskTNue8UKJhal6Sg0caoO
HaeCIaDFlxHuKRZGk0TEF3ayVMKujhnBr2mQQnAH1xWCEBAPKGSzokdvp38kaugZ
l+xmhs8Bue9wTuxaX/W6FtQYkBYlfjCm8agWcDAR0FBY/ECO9Tmoh4eQmAUhCuRH
ukaLawj+xdkXPw==
-----END CERTIFICATE-----
Generated at Mon Jun 9 12:42:06 2025 by rpki-client