Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
File: Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft (raw, json)
Hash identifier: 7wGokhyFtG6aEoUc6q2hr7FjGMNWCs6OI4yYld7FXD0=
Subject key identifier: 19:67:9B:6B:13:E5:47:A1:47:AD:4D:05:BD:FE:E7:88:DF:C1:89:BE
Authority key identifier: 32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
Certificate issuer: /CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Certificate serial: 01974967A7FC2B4D7C09B71A22EFE0478EA0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
Manifest number: 0320
Signing time: Sat 07 Jun 2025 08:00:19 +0000
Manifest this update: Sat 07 Jun 2025 08:00:19 +0000
Manifest next update: Sun 08 Jun 2025 08:00:19 +0000
Files and hashes: 1: HuIbCcMZ3U5fal8WQko5r7hmFPE.roa (hash: gsiwtZ3Lpg7UUxzfKZ1xNGJGO5Bt4L0AcldZ67+uEoo=)
2: Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl (hash: mwJs4yPyxpYSu8mMYn9TMaM7xRDXD/ZFZZWwuTFT5I0=)
3: fY7PiVaNASL9YPra9k_iCHjE_QA.roa (hash: o0Z+yqTEUGOR+lt86tr/WH+kJG6LQkAy74XbI2VEuOk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 08 Jun 2025 08:00:19 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:49:67:a7:fc:2b:4d:7c:09:b7:1a:22:ef:e0:47:8e:a0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=322d91b4aa96cc5732576d42335fddd0e5d6294f
Validity
Not Before: Jun 7 08:00:19 2025 GMT
Not After : Jun 8 08:00:19 2025 GMT
Subject: CN=19679b6b13e547a147ad4d05bdfee788dfc189be
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d3:c5:d8:f7:df:e6:93:1d:93:7f:eb:9a:93:b2:
0e:47:fe:eb:97:26:33:41:83:bb:6c:c1:2f:75:45:
db:0c:1d:f5:e0:17:b1:0c:5c:d5:bf:e8:2b:3a:15:
76:10:85:a6:f6:4f:8d:ce:c8:2f:7e:68:db:a5:f8:
60:fe:a5:1a:8f:a2:38:fb:c8:22:b3:cf:a9:e3:db:
b5:49:3c:40:d1:23:e7:09:84:01:d3:f5:5d:18:1b:
7d:e8:e1:ff:06:71:b9:87:aa:a4:25:98:26:7d:21:
61:95:b9:9b:53:9a:f5:4d:cb:7b:84:8b:c8:69:09:
8f:5b:c8:9d:9f:9a:f9:1d:55:2f:c2:df:2c:7d:d1:
b1:61:24:ee:12:a0:be:c5:26:4e:67:07:e4:dc:96:
46:7d:5d:66:42:42:9a:53:54:6c:44:70:1e:5e:57:
38:7d:49:31:2b:16:da:60:6b:83:aa:4f:83:0b:ad:
bb:72:b7:bd:bd:0d:5d:84:43:d0:c0:fb:99:88:0b:
32:0c:77:20:83:00:7c:1d:73:57:c1:8d:cf:1a:d4:
74:e1:04:b9:00:31:9f:74:7e:e3:a7:42:47:52:2f:
e9:88:cb:23:87:1d:87:a1:08:de:27:3b:db:7d:28:
df:ac:4d:61:47:c1:5c:48:65:af:f0:b1:b4:7a:2d:
a5:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
19:67:9B:6B:13:E5:47:A1:47:AD:4D:05:BD:FE:E7:88:DF:C1:89:BE
X509v3 Authority Key Identifier:
keyid:32:2D:91:B4:AA:96:CC:57:32:57:6D:42:33:5F:DD:D0:E5:D6:29:4F
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Mi2RtKqWzFcyV21CM1_d0OXWKU8.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f6/9bd122-d6a9-4a40-860b-b0efc01d4f9c/1/Mi2RtKqWzFcyV21CM1_d0OXWKU8.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
07:e2:b4:63:22:66:67:e9:e1:b6:21:59:ef:e9:d6:62:a0:14:
88:b2:8f:f1:a2:fd:39:f4:8c:18:99:b9:f7:8d:bb:b9:75:18:
d9:6b:54:59:18:d8:41:9b:2b:eb:f2:67:37:b4:00:84:30:71:
7f:d7:33:ff:e9:16:08:db:2f:cb:a3:40:0a:48:90:87:94:93:
53:05:54:2d:65:e5:4e:c0:32:5e:56:f5:70:3f:cc:fd:4c:0a:
1b:5c:e4:92:31:d8:9d:bd:98:95:9e:ee:78:69:52:37:e1:6e:
6d:48:ed:2c:88:de:ef:1e:41:a4:75:70:26:ad:1f:bf:ca:9f:
21:72:eb:1a:83:0b:fd:d8:1e:7c:6f:a6:20:23:49:10:a5:17:
aa:71:c8:05:50:1f:85:80:03:aa:6c:4e:9b:d4:f2:7c:b3:1a:
d2:d7:0e:fb:6d:a2:23:dc:8b:e8:3d:31:ae:23:bd:4d:38:02:
5e:38:0e:3c:06:5e:be:be:55:39:55:a0:e6:63:af:e0:9c:67:
18:4b:74:a2:b5:ca:00:93:03:d4:c5:9f:48:30:57:e7:48:8d:
5f:c2:4c:34:57:1e:77:76:9d:c0:3e:f7:fb:6b:60:68:3d:de:
be:07:83:fe:7a:7b:c8:bf:38:43:7c:ab:ed:75:05:7d:2b:13:
63:5c:df:23
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdJZ6f8K018CbcaIu/gR46gMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDMyMmQ5MWI0YWE5NmNjNTczMjU3NmQ0MjMzNWZkZGQwZTVk
NjI5NGYwHhcNMjUwNjA3MDgwMDE5WhcNMjUwNjA4MDgwMDE5WjAzMTEwLwYDVQQD
EygxOTY3OWI2YjEzZTU0N2ExNDdhZDRkMDViZGZlZTc4OGRmYzE4OWJlMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA08XY99/mkx2Tf+uak7IOR/7rlyYz
QYO7bMEvdUXbDB314BexDFzVv+grOhV2EIWm9k+Nzsgvfmjbpfhg/qUaj6I4+8gi
s8+p49u1STxA0SPnCYQB0/VdGBt96OH/BnG5h6qkJZgmfSFhlbmbU5r1Tct7hIvI
aQmPW8idn5r5HVUvwt8sfdGxYSTuEqC+xSZOZwfk3JZGfV1mQkKaU1RsRHAeXlc4
fUkxKxbaYGuDqk+DC627cre9vQ1dhEPQwPuZiAsyDHcggwB8HXNXwY3PGtR04QS5
ADGfdH7jp0JHUi/piMsjhx2HoQjeJzvbfSjfrE1hR8FcSGWv8LG0ei2lAQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFBlnm2sT5UehR61NBb3+54jfwYm+MB8GA1UdIwQY
MBaAFDItkbSqlsxXMldtQjNf3dDl1ilPMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvTWkyUnRLcVd6RmN5VjIxQ00xX2QwT1hXS1U4LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC9mNi85YmQxMjItZDZhOS00YTQwLTg2MGIt
YjBlZmMwMWQ0ZjljLzEvTWkyUnRLcVd6RmN5VjIxQ00xX2QwT1hXS1U4Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC9mNi85YmQxMjItZDZhOS00YTQwLTg2MGItYjBlZmMwMWQ0Zjlj
LzEvTWkyUnRLcVd6RmN5VjIxQ00xX2QwT1hXS1U4LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAB+K0YyJm
Z+nhtiFZ7+nWYqAUiLKP8aL9OfSMGJm59427uXUY2WtUWRjYQZsr6/JnN7QAhDBx
f9cz/+kWCNsvy6NACkiQh5STUwVULWXlTsAyXlb1cD/M/UwKG1zkkjHYnb2YlZ7u
eGlSN+FubUjtLIje7x5BpHVwJq0fv8qfIXLrGoML/dgefG+mICNJEKUXqnHIBVAf
hYADqmxOm9TyfLMa0tcO+22iI9yL6D0xriO9TTgCXjgOPAZevr5VOVWg5mOv4Jxn
GEt0orXKAJMD1MWfSDBX50iNX8JMNFced3adwD73+2tgaD3evgeD/np7yL84Q3yr
7XUFfSsTY1zfIw==
-----END CERTIFICATE-----
Generated at Sat Jun 7 13:44:37 2025 by rpki-client