Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
File: RwSF9erGdaJBq24C2OU90oVW0u4.mft (raw, json)
Hash identifier: kR3Y3Jh7QUho9dFLM95jWLX/GeYEAJZOMac40N7NA4g=
Subject key identifier: 14:E0:1D:77:62:0E:5D:01:F3:D7:F1:2C:9E:18:F2:FF:34:76:39:24
Authority key identifier: 47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
Certificate issuer: /CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Certificate serial: 019750469C404D7E12D43729C0C49E282E25
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
Manifest number: C6
Signing time: Sun 08 Jun 2025 16:01:34 +0000
Manifest this update: Sun 08 Jun 2025 16:01:34 +0000
Manifest next update: Mon 09 Jun 2025 16:01:34 +0000
Files and hashes: 1: 1-ytWl0hX9ynA9JXKT1kDTjFFd_k.roa (hash: SVFx2HIlhTnZm/5An2t1/eTf/PAIAECB7vLR+zIL0/U=)
2: 4lqvUj_aarjM1QCov1WKcZ47cD4.roa (hash: CUeCuFIy+7/m+7Rp9JxCjE4itMo0nF9rOUfz1A83JwI=)
3: RwSF9erGdaJBq24C2OU90oVW0u4.crl (hash: nRmTI7f5XNXihRYxBoP6pzPDPhT/QRkgiLpYuyWkZEE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 09 Jun 2025 16:01:34 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:50:46:9c:40:4d:7e:12:d4:37:29:c0:c4:9e:28:2e:25
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=470485f5eac675a241ab6e02d8e53dd28556d2ee
Validity
Not Before: Jun 8 16:01:34 2025 GMT
Not After : Jun 9 16:01:34 2025 GMT
Subject: CN=14e01d77620e5d01f3d7f12c9e18f2ff34763924
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a5:47:ec:95:2f:d6:1e:6a:c6:45:48:6e:19:a3:
32:3d:ae:81:ef:51:1e:b6:9a:bd:7a:69:a4:95:0e:
6a:79:ce:94:74:44:23:aa:30:94:72:47:96:bd:7e:
5d:89:63:b1:10:d3:36:82:6a:a6:61:4f:fc:ea:4d:
e9:cc:53:06:a8:39:e2:b5:7d:21:1f:08:77:cc:63:
ca:9e:58:88:9b:cd:ae:b7:49:ff:9c:6c:76:f4:34:
33:72:cf:85:07:91:03:8d:ac:f7:f3:e9:af:0f:1f:
33:0b:fb:ca:02:d3:d6:30:2d:a7:3b:b6:5c:2b:0e:
22:c3:4c:e4:39:e5:54:c7:cd:92:52:b6:54:72:94:
90:2d:b5:82:42:ef:b1:c2:a4:53:5e:dc:ab:23:26:
84:94:87:68:78:87:e2:68:2c:ae:eb:78:d1:82:82:
4b:fd:17:1e:94:99:a8:52:a5:59:b6:09:45:60:f8:
90:93:b4:db:43:5c:ca:f7:e5:84:ba:56:7e:a7:ba:
a1:98:aa:94:fc:4c:29:07:94:84:01:7a:5a:2d:88:
67:81:63:a6:84:ec:2f:4a:5e:34:79:8a:e8:e0:35:
b5:3b:5b:17:4e:ba:93:f3:d9:ad:d7:e7:03:23:aa:
77:4c:0e:42:fe:e6:b6:12:b9:50:3b:47:2b:c8:4d:
a3:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
14:E0:1D:77:62:0E:5D:01:F3:D7:F1:2C:9E:18:F2:FF:34:76:39:24
X509v3 Authority Key Identifier:
keyid:47:04:85:F5:EA:C6:75:A2:41:AB:6E:02:D8:E5:3D:D2:85:56:D2:EE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RwSF9erGdaJBq24C2OU90oVW0u4.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ef/c60d81-7142-4a5b-9b50-0077c2bdbf37/1/RwSF9erGdaJBq24C2OU90oVW0u4.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
24:92:4a:07:bf:92:ad:3c:49:db:b3:03:ef:c6:4d:80:67:fb:
0f:ea:99:de:0e:f6:97:86:ff:bf:0b:a5:2d:f8:eb:e0:b8:59:
34:ee:3b:6d:fc:44:c9:a5:cc:ba:c7:6f:56:ac:33:cc:da:2a:
dd:8e:e3:cd:82:ae:79:0e:30:0c:db:b1:34:d0:99:37:56:91:
b6:a4:fc:d3:cb:f2:29:d5:6e:03:f8:f1:0a:3b:25:1a:ca:a4:
03:36:36:3f:46:a7:29:73:03:b1:59:58:22:b1:a6:73:cf:62:
5e:58:4a:df:4e:38:b3:49:65:96:c3:fc:b2:f4:76:09:6d:1a:
a7:f2:21:a0:84:d5:26:9c:60:06:19:a5:17:b4:13:8c:58:19:
da:6e:6e:13:ea:be:28:4d:00:ff:80:75:ea:a9:48:8b:c1:8c:
e1:5a:f2:58:79:31:53:21:cf:b3:b0:26:89:62:77:26:2c:82:
aa:1f:57:12:89:b4:6d:71:19:5f:21:44:53:7b:c1:38:23:5a:
41:32:b8:74:50:93:12:a2:23:31:fe:3e:ea:ec:f6:db:0a:1f:
ab:76:61:06:d1:64:54:ac:7a:16:08:a2:b2:71:be:81:b5:e2:
7b:87:76:3e:a4:14:62:35:1e:9e:de:fc:e4:c8:21:38:f1:37:
7f:ed:e8:67
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdQRpxATX4S1DcpwMSeKC4lMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ3MDQ4NWY1ZWFjNjc1YTI0MWFiNmUwMmQ4ZTUzZGQyODU1
NmQyZWUwHhcNMjUwNjA4MTYwMTM0WhcNMjUwNjA5MTYwMTM0WjAzMTEwLwYDVQQD
EygxNGUwMWQ3NzYyMGU1ZDAxZjNkN2YxMmM5ZTE4ZjJmZjM0NzYzOTI0MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEApUfslS/WHmrGRUhuGaMyPa6B71Ee
tpq9emmklQ5qec6UdEQjqjCUckeWvX5diWOxENM2gmqmYU/86k3pzFMGqDnitX0h
Hwh3zGPKnliIm82ut0n/nGx29DQzcs+FB5EDjaz38+mvDx8zC/vKAtPWMC2nO7Zc
Kw4iw0zkOeVUx82SUrZUcpSQLbWCQu+xwqRTXtyrIyaElIdoeIfiaCyu63jRgoJL
/RcelJmoUqVZtglFYPiQk7TbQ1zK9+WEulZ+p7qhmKqU/EwpB5SEAXpaLYhngWOm
hOwvSl40eYro4DW1O1sXTrqT89mt1+cDI6p3TA5C/ua2ErlQO0cryE2jMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBTgHXdiDl0B89fxLJ4Y8v80djkkMB8GA1UdIwQY
MBaAFEcEhfXqxnWiQatuAtjlPdKFVtLuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9lZi9jNjBkODEtNzE0Mi00YTViLTliNTAt
MDA3N2MyYmRiZjM3LzEvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9lZi9jNjBkODEtNzE0Mi00YTViLTliNTAtMDA3N2MyYmRiZjM3
LzEvUndTRjllckdkYUpCcTI0QzJPVTkwb1ZXMHU0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAJJJKB7+S
rTxJ27MD78ZNgGf7D+qZ3g72l4b/vwulLfjr4LhZNO47bfxEyaXMusdvVqwzzNoq
3Y7jzYKueQ4wDNuxNNCZN1aRtqT808vyKdVuA/jxCjslGsqkAzY2P0anKXMDsVlY
IrGmc89iXlhK3044s0lllsP8svR2CW0ap/IhoITVJpxgBhmlF7QTjFgZ2m5uE+q+
KE0A/4B16qlIi8GM4VryWHkxUyHPs7AmiWJ3JiyCqh9XEom0bXEZXyFEU3vBOCNa
QTK4dFCTEqIjMf4+6uz22wofq3ZhBtFkVKx6FgiisnG+gbXie4d2PqQUYjUent78
5MghOPE3f+3oZw==
-----END CERTIFICATE-----
Generated at Sun Jun 8 23:09:53 2025 by rpki-client