Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
File: RmJSHrWLRbDFosy-ODMVznnX7qU.mft (raw, json)
Hash identifier: Yb6yk+/84Mb1+Lg7cj+tuR9Hd9ZU6X9KlhngMybYxWU=
Subject key identifier: 21:15:4E:38:5E:C4:5D:40:36:FC:87:89:5B:67:F0:C1:E4:DA:E3:E1
Authority key identifier: 46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
Certificate issuer: /CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Certificate serial: 01974AE898F0F3074BD826EF461D8AFD21B6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
Manifest number: 03D5
Signing time: Sat 07 Jun 2025 15:00:46 +0000
Manifest this update: Sat 07 Jun 2025 15:00:46 +0000
Manifest next update: Sun 08 Jun 2025 15:00:46 +0000
Files and hashes: 1: FMOrAvuXC1st0AxiGEbiYaRYpDg.roa (hash: OmIWmIcqWrtJmv8GjH0kjZnCnt6Sjb2fVpbncWqIDDs=)
2: RmJSHrWLRbDFosy-ODMVznnX7qU.crl (hash: +BaF+19jlKFkme1GLSJ9HFgo1UQ2CPZC4GVgmopY1M0=)
3: Rn8OIh8zHAwmG50kXHn-kNbTEto.roa (hash: RiLsXz+R4XXCz86+60MDV16LzwORDjEzlHMC7VSLj30=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 15:00:46 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:4a:e8:98:f0:f3:07:4b:d8:26:ef:46:1d:8a:fd:21:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4662521eb58b45b0c5a2ccbe383315ce79d7eea5
Validity
Not Before: Jun 7 15:00:46 2025 GMT
Not After : Jun 8 15:00:46 2025 GMT
Subject: CN=21154e385ec45d4036fc87895b67f0c1e4dae3e1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cb:e1:0b:84:dd:54:a8:26:71:8b:86:32:75:b2:
14:1e:c2:03:7b:c3:6f:f2:6a:1f:10:a6:c2:7b:0e:
0a:ac:d2:6d:fd:ee:d2:60:8d:0f:40:91:db:2c:76:
6f:04:c4:96:ed:18:17:67:98:d0:70:c5:3a:ba:7d:
ca:e7:fb:96:1e:2c:1f:18:0c:71:6f:53:0f:5d:b3:
6a:a8:fe:e2:5a:4b:ff:e4:35:46:2e:b7:d2:e7:4a:
97:72:3b:fd:e0:7f:a9:59:71:8a:11:8a:e5:fa:0c:
67:78:34:ab:6c:0d:40:07:9a:72:92:c0:ed:a7:7f:
36:94:a1:eb:3f:40:2d:71:1f:ca:40:fa:15:89:19:
d2:fa:a9:d6:76:75:02:f1:22:b9:81:a7:6b:96:8d:
46:3b:cf:13:28:00:d1:e4:c1:95:f0:e2:31:4a:e7:
d9:82:02:c6:28:23:10:79:1f:40:c1:23:e2:78:09:
87:d6:74:7b:a7:d2:34:11:c0:0f:24:b2:0f:97:5a:
94:68:86:11:df:f6:0c:68:5a:94:3c:c5:54:7f:4e:
69:c6:58:d5:ea:27:0f:ca:ec:74:87:c5:8f:4f:a9:
17:25:1d:16:ae:cd:23:00:4b:0f:d9:b1:b9:e0:1f:
de:11:05:29:d9:ac:9c:3c:6d:63:70:05:c3:0a:18:
0e:45
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
21:15:4E:38:5E:C4:5D:40:36:FC:87:89:5B:67:F0:C1:E4:DA:E3:E1
X509v3 Authority Key Identifier:
keyid:46:62:52:1E:B5:8B:45:B0:C5:A2:CC:BE:38:33:15:CE:79:D7:EE:A5
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RmJSHrWLRbDFosy-ODMVznnX7qU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/72c984-1410-45ec-86c5-8ab86937410a/1/RmJSHrWLRbDFosy-ODMVznnX7qU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
70:23:ff:d3:de:61:a2:f4:9b:60:78:8b:21:2a:aa:45:43:5c:
f4:a9:7d:ff:7a:dc:93:8a:a4:2d:5a:bf:cd:99:64:62:63:b1:
d5:6d:b9:55:97:83:a7:c8:34:01:2a:54:53:88:b5:46:e8:19:
04:bf:41:e2:16:cd:5a:be:cf:0d:34:b5:41:2b:e2:1f:0b:5a:
a9:20:b5:a9:2f:e0:98:46:ea:4b:ba:48:b7:48:87:1a:3f:66:
ff:01:a3:81:6d:46:76:de:fb:7d:9d:d5:fa:12:53:e9:df:3b:
6b:60:62:da:be:49:44:66:48:83:46:7b:77:d8:c6:e8:30:ef:
3b:62:3c:c6:83:2b:7f:6a:23:47:ab:4d:d0:93:e7:7d:bd:2f:
8d:fb:16:e7:a0:50:21:44:17:6c:e3:50:26:4a:73:3a:13:13:
33:ca:61:cf:a5:96:78:7a:7b:d6:98:e2:c0:79:64:75:ce:de:
08:bd:ff:00:7e:07:90:2c:f0:3e:83:f5:c2:8f:67:3b:3c:e6:
fa:50:28:86:b6:d4:18:7c:be:dc:e5:54:d3:94:02:c4:b3:c8:
fc:d7:dc:8f:e3:ce:f3:ba:d6:bd:f0:49:20:24:d8:8e:be:df:
19:33:96:50:bc:b8:d5:ce:32:da:22:af:e5:a4:ee:00:4a:dd:
70:a2:52:66
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdK6Jjw8wdL2CbvRh2K/SG2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2NjI1MjFlYjU4YjQ1YjBjNWEyY2NiZTM4MzMxNWNlNzlk
N2VlYTUwHhcNMjUwNjA3MTUwMDQ2WhcNMjUwNjA4MTUwMDQ2WjAzMTEwLwYDVQQD
EygyMTE1NGUzODVlYzQ1ZDQwMzZmYzg3ODk1YjY3ZjBjMWU0ZGFlM2UxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAy+ELhN1UqCZxi4YydbIUHsIDe8Nv
8mofEKbCew4KrNJt/e7SYI0PQJHbLHZvBMSW7RgXZ5jQcMU6un3K5/uWHiwfGAxx
b1MPXbNqqP7iWkv/5DVGLrfS50qXcjv94H+pWXGKEYrl+gxneDSrbA1AB5pyksDt
p382lKHrP0AtcR/KQPoViRnS+qnWdnUC8SK5gadrlo1GO88TKADR5MGV8OIxSufZ
ggLGKCMQeR9AwSPieAmH1nR7p9I0EcAPJLIPl1qUaIYR3/YMaFqUPMVUf05pxljV
6icPyux0h8WPT6kXJR0Wrs0jAEsP2bG54B/eEQUp2aycPG1jcAXDChgORQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFCEVTjhexF1ANvyHiVtn8MHk2uPhMB8GA1UdIwQY
MBaAFEZiUh61i0WwxaLMvjgzFc551+6lMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUt
OGFiODY5Mzc0MTBhLzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi83MmM5ODQtMTQxMC00NWVjLTg2YzUtOGFiODY5Mzc0MTBh
LzEvUm1KU0hyV0xSYkRGb3N5LU9ETVZ6bm5YN3FVLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAcCP/095h
ovSbYHiLISqqRUNc9Kl9/3rck4qkLVq/zZlkYmOx1W25VZeDp8g0ASpUU4i1RugZ
BL9B4hbNWr7PDTS1QSviHwtaqSC1qS/gmEbqS7pIt0iHGj9m/wGjgW1Gdt77fZ3V
+hJT6d87a2Bi2r5JRGZIg0Z7d9jG6DDvO2I8xoMrf2ojR6tN0JPnfb0vjfsW56BQ
IUQXbONQJkpzOhMTM8phz6WWeHp71pjiwHlkdc7eCL3/AH4HkCzwPoP1wo9nOzzm
+lAohrbUGHy+3OVU05QCxLPI/Nfcj+PO87rWvfBJICTYjr7fGTOWULy41c4y2iKv
5aTuAErdcKJSZg==
-----END CERTIFICATE-----
Generated at Sat Jun 7 23:15:28 2025 by rpki-client