Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
File: unnFAIApfLnMDMk07jifUMPnPUo.mft (raw, json)
Hash identifier: 4/AWiRBVFq5pmx0ac6LoNTEnJOg+EUeKBTfE7ruWLG8=
Subject key identifier: BC:18:8B:67:5A:46:4C:C3:AB:45:22:97:83:2A:18:C8:E0:78:B3:83
Authority key identifier: BA:79:C5:00:80:29:7C:B9:CC:0C:C9:34:EE:38:9F:50:C3:E7:3D:4A
Certificate issuer: /CN=ba79c50080297cb9cc0cc934ee389f50c3e73d4a
Certificate serial: 0197692A03DD3C19E759325EE8EE320C66F6
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
Manifest number: 045B
Signing time: Fri 13 Jun 2025 12:00:50 +0000
Manifest this update: Fri 13 Jun 2025 12:00:50 +0000
Manifest next update: Sat 14 Jun 2025 12:00:50 +0000
Files and hashes: 1: CpPRk_TNW4CH4jbImpFoaI2OcL4.roa (hash: eYYsy6V5aRdmdwv40uWtw/bgoED55t23eDlp8kMf818=)
2: unnFAIApfLnMDMk07jifUMPnPUo.crl (hash: fSRNKQVj94aiiroxIlhmg/fWvc1FjuOlvTFsu+LvClg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.crl
rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 12:00:50 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:69:2a:03:dd:3c:19:e7:59:32:5e:e8:ee:32:0c:66:f6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ba79c50080297cb9cc0cc934ee389f50c3e73d4a
Validity
Not Before: Jun 13 12:00:50 2025 GMT
Not After : Jun 14 12:00:50 2025 GMT
Subject: CN=bc188b675a464cc3ab452297832a18c8e078b383
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:99:d3:4e:bd:19:83:d2:7d:75:24:30:97:11:b7:
68:4c:aa:43:21:f8:25:47:b8:dd:8a:5b:06:78:2b:
79:ed:ba:28:c4:ab:a7:86:8a:17:9a:bd:80:d5:eb:
97:d7:58:ff:2c:0c:53:59:c8:1e:14:21:b3:a7:1d:
32:ec:94:30:f5:bb:ea:3b:d1:62:b0:bd:33:cc:ad:
0f:58:f1:98:04:6c:e3:a0:96:d1:1d:26:13:83:15:
8e:52:28:2d:c7:0d:a7:c8:88:f7:67:c2:9b:4f:ba:
d7:62:1d:4a:47:c9:4e:25:67:81:77:31:c1:dc:4c:
a9:a2:6b:cf:07:cc:a0:c7:09:6b:f5:02:19:d7:cd:
65:fe:f2:e2:ad:d3:fa:4d:8c:2b:45:dc:ee:7d:ee:
a4:8d:1d:31:c7:56:d6:76:ce:fc:33:df:cc:ba:dd:
f5:fe:17:2f:11:c1:b0:5f:26:ab:ef:bd:95:1d:af:
ba:19:79:b0:55:ef:b4:5d:db:78:99:48:e5:69:97:
21:ae:72:ef:e6:9a:02:e8:37:a6:e6:33:6a:54:04:
01:59:f5:7d:64:ca:4e:08:1a:39:26:77:65:15:ef:
af:9b:4e:65:c1:fb:ae:b7:1b:80:15:dc:be:08:0a:
38:38:71:ec:38:0b:14:02:15:62:37:f3:7f:9f:a1:
22:25
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BC:18:8B:67:5A:46:4C:C3:AB:45:22:97:83:2A:18:C8:E0:78:B3:83
X509v3 Authority Key Identifier:
keyid:BA:79:C5:00:80:29:7C:B9:CC:0C:C9:34:EE:38:9F:50:C3:E7:3D:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/unnFAIApfLnMDMk07jifUMPnPUo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/11/a621a8-e079-4a14-98ba-e36a9793ea6d/1/unnFAIApfLnMDMk07jifUMPnPUo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:ab:4e:b4:22:93:1a:fd:06:b3:86:c0:0c:3d:e4:1d:77:55:
0a:36:d3:63:d3:1e:32:07:7f:0e:bf:84:9b:ee:a0:5f:1e:68:
d3:9a:3f:f4:98:41:6f:51:16:d3:d8:7f:16:a6:b1:84:0d:a7:
8b:1d:0c:95:18:f8:aa:1f:d2:e3:c8:b4:3c:3b:94:e1:69:aa:
df:73:2b:f2:d7:39:bb:b9:6f:69:02:3b:ab:5d:60:ad:8c:ae:
7b:0d:0b:64:cb:dd:96:0d:98:50:3e:ee:72:08:0e:3b:8b:9a:
6a:78:12:02:19:c4:56:e1:c0:a5:f0:b0:b9:94:9d:57:77:c3:
ff:09:02:43:85:97:d3:6d:e6:bd:af:94:54:80:be:ce:22:11:
9b:21:54:18:70:6e:9f:e9:76:28:9f:e1:98:85:e7:e2:be:30:
6e:ad:da:3b:da:df:b8:77:a5:6b:45:39:2b:35:ea:d1:5d:fe:
4f:04:c8:30:36:a7:27:0c:38:c2:44:5f:99:4b:2d:bd:8f:2a:
4c:5e:8b:76:ae:6f:d0:c3:1a:6c:85:9c:2f:21:22:d1:eb:ef:
50:69:7e:b5:c7:df:bd:ce:73:bf:a5:b0:51:3d:96:c3:3d:f8:
4d:ab:53:ed:6b:4f:8b:42:5c:fd:d4:77:df:27:91:b6:dc:47:
fa:66:3a:da
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdpKgPdPBnnWTJe6O4yDGb2MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJhNzljNTAwODAyOTdjYjljYzBjYzkzNGVlMzg5ZjUwYzNl
NzNkNGEwHhcNMjUwNjEzMTIwMDUwWhcNMjUwNjE0MTIwMDUwWjAzMTEwLwYDVQQD
EyhiYzE4OGI2NzVhNDY0Y2MzYWI0NTIyOTc4MzJhMThjOGUwNzhiMzgzMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAmdNOvRmD0n11JDCXEbdoTKpDIfgl
R7jdilsGeCt57booxKunhooXmr2A1euX11j/LAxTWcgeFCGzpx0y7JQw9bvqO9Fi
sL0zzK0PWPGYBGzjoJbRHSYTgxWOUigtxw2nyIj3Z8KbT7rXYh1KR8lOJWeBdzHB
3EypomvPB8ygxwlr9QIZ181l/vLirdP6TYwrRdzufe6kjR0xx1bWds78M9/Mut31
/hcvEcGwXyar772VHa+6GXmwVe+0Xdt4mUjlaZchrnLv5poC6Dem5jNqVAQBWfV9
ZMpOCBo5JndlFe+vm05lwfuutxuAFdy+CAo4OHHsOAsUAhViN/N/n6EiJQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLwYi2daRkzDq0Uil4MqGMjgeLODMB8GA1UdIwQY
MBaAFLp5xQCAKXy5zAzJNO44n1DD5z1KMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdW5uRkFJQXBmTG5NRE1rMDdqaWZVTVBuUFVvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMS9hNjIxYTgtZTA3OS00YTE0LTk4YmEt
ZTM2YTk3OTNlYTZkLzEvdW5uRkFJQXBmTG5NRE1rMDdqaWZVTVBuUFVvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMS9hNjIxYTgtZTA3OS00YTE0LTk4YmEtZTM2YTk3OTNlYTZk
LzEvdW5uRkFJQXBmTG5NRE1rMDdqaWZVTVBuUFVvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL6tOtCKT
Gv0Gs4bADD3kHXdVCjbTY9MeMgd/Dr+Em+6gXx5o05o/9JhBb1EW09h/FqaxhA2n
ix0MlRj4qh/S48i0PDuU4Wmq33Mr8tc5u7lvaQI7q11grYyuew0LZMvdlg2YUD7u
cggOO4uaangSAhnEVuHApfCwuZSdV3fD/wkCQ4WX023mva+UVIC+ziIRmyFUGHBu
n+l2KJ/hmIXn4r4wbq3aO9rfuHela0U5KzXq0V3+TwTIMDanJww4wkRfmUstvY8q
TF6Ldq5v0MMabIWcLyEi0evvUGl+tcffvc5zv6WwUT2Wwz34TatT7WtPi0Jc/dR3
3yeRttxH+mY62g==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:24:45 2025 by rpki-client