Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
File: sWq92UIPBLqcHNLDTcezUpiK-Nk.mft (raw, json)
Hash identifier: 7wmrN2TJKydJOiRzciWEX+m71k6HNp7rb08uQaU9HnY=
Subject key identifier: BB:F5:C4:B4:AA:9F:7F:B5:4C:4C:C2:AD:C1:62:88:9C:DD:4A:51:8A
Authority key identifier: B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
Certificate issuer: /CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Certificate serial: 01976CCF6C6B532945924E60DFE8B7029762
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
Manifest number: 12CB
Signing time: Sat 14 Jun 2025 05:00:22 +0000
Manifest this update: Sat 14 Jun 2025 05:00:22 +0000
Manifest next update: Sun 15 Jun 2025 05:00:22 +0000
Files and hashes: 1: SX7CKkNX5ke670AWCb1741Boh3c.roa (hash: /+lvUIY6Nj8pitkJ880DAygWMpOJMtNOHpSYINj0dno=)
2: sWq92UIPBLqcHNLDTcezUpiK-Nk.crl (hash: rIWN0xHfHgGl/UZXu3Ul4KXtq/0RSudilmVJoMROT70=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:6c:6b:53:29:45:92:4e:60:df:e8:b7:02:97:62
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b16abdd9420f04ba9c1cd2c34dc7b352988af8d9
Validity
Not Before: Jun 14 05:00:22 2025 GMT
Not After : Jun 15 05:00:22 2025 GMT
Subject: CN=bbf5c4b4aa9f7fb54c4cc2adc162889cdd4a518a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b2:3f:67:74:e8:d9:56:08:ca:e5:86:58:94:48:
7d:7c:e2:91:e6:72:d6:e0:14:b5:38:01:4b:70:5b:
b2:a5:f8:6e:87:6e:f3:a6:3e:8e:08:0b:4e:41:5d:
24:81:b8:e0:ec:ed:e6:d4:46:b1:71:92:80:67:47:
ef:24:70:21:5c:3c:ae:e1:3a:db:36:4b:1a:c5:81:
94:fc:c2:1b:b2:a1:17:0f:61:2d:12:1f:4a:1a:cd:
ee:75:9b:cc:c8:8c:b0:8e:c3:a5:bd:2f:44:48:a9:
d2:22:7e:0a:e0:30:69:09:7e:2c:27:84:3e:22:1f:
62:e0:84:90:a1:d5:16:b7:c7:0c:1d:7f:db:42:16:
24:6f:f8:d9:6c:1b:31:01:ce:ad:c8:6f:8d:a9:76:
45:c6:72:14:5e:a2:27:09:16:73:aa:17:b9:c7:11:
28:8c:e4:23:8f:a1:30:6c:e0:6e:c6:6d:fd:0e:92:
f7:f3:0c:4b:c4:f7:2a:46:26:a0:7f:9d:c1:15:96:
77:c0:a2:32:ac:04:c4:6e:8a:b1:e8:a4:7f:31:48:
fb:77:1c:27:a0:19:56:77:4a:61:04:47:af:11:3e:
51:7c:6f:18:81:45:fd:be:62:66:13:0f:20:ed:a4:
4f:96:4c:44:39:48:ce:a8:04:d8:92:77:7f:5a:df:
53:ef
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BB:F5:C4:B4:AA:9F:7F:B5:4C:4C:C2:AD:C1:62:88:9C:DD:4A:51:8A
X509v3 Authority Key Identifier:
keyid:B1:6A:BD:D9:42:0F:04:BA:9C:1C:D2:C3:4D:C7:B3:52:98:8A:F8:D9
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/sWq92UIPBLqcHNLDTcezUpiK-Nk.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/12/2adc39-3630-425f-af29-fbb0d3c10423/1/sWq92UIPBLqcHNLDTcezUpiK-Nk.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
08:32:46:09:04:fd:82:8c:f3:00:b8:c5:67:ba:7e:ee:3a:01:
02:68:4b:2b:3c:12:2c:61:2d:67:9b:5e:fb:75:92:f8:bb:57:
0b:14:ce:0e:41:cc:1e:fa:c2:7e:40:59:7b:af:19:c8:bf:c4:
71:ce:1a:d4:ca:7e:8d:90:dc:d3:aa:bc:f5:57:76:5a:da:0a:
fd:cb:23:00:38:62:c6:22:f7:bb:a3:1f:95:5a:e3:17:4d:a5:
3e:4c:bd:c7:87:0e:20:d9:7c:13:6e:18:0b:19:13:9e:1e:ae:
0c:72:17:7a:7c:1e:dc:7d:fc:cd:a0:1b:94:17:99:ae:1b:2f:
11:a8:a9:65:84:8a:18:a1:33:94:87:41:a0:69:c3:bc:8b:9e:
c2:ac:8d:0d:1f:18:47:70:6a:47:2d:94:23:e3:63:0c:f1:3a:
09:2b:b2:a7:4f:9a:74:69:9b:41:00:36:fb:78:c2:39:e0:fa:
21:51:3c:08:81:13:22:24:0f:80:d3:67:2b:3f:83:9f:37:09:
c2:40:de:01:1e:a1:c7:e5:1e:9d:ec:ca:aa:dd:16:8b:57:8c:
7f:20:bc:e4:c1:39:1c:ea:d9:75:bb:82:5a:82:2e:10:29:07:
9b:4f:bd:9c:f0:3c:fc:2b:42:01:d4:36:f5:9a:ee:18:65:86:
ab:b8:33:22
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz2xrUylFkk5g3+i3ApdiMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGIxNmFiZGQ5NDIwZjA0YmE5YzFjZDJjMzRkYzdiMzUyOTg4
YWY4ZDkwHhcNMjUwNjE0MDUwMDIyWhcNMjUwNjE1MDUwMDIyWjAzMTEwLwYDVQQD
EyhiYmY1YzRiNGFhOWY3ZmI1NGM0Y2MyYWRjMTYyODg5Y2RkNGE1MThhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAsj9ndOjZVgjK5YZYlEh9fOKR5nLW
4BS1OAFLcFuypfhuh27zpj6OCAtOQV0kgbjg7O3m1EaxcZKAZ0fvJHAhXDyu4Trb
NksaxYGU/MIbsqEXD2EtEh9KGs3udZvMyIywjsOlvS9ESKnSIn4K4DBpCX4sJ4Q+
Ih9i4ISQodUWt8cMHX/bQhYkb/jZbBsxAc6tyG+NqXZFxnIUXqInCRZzqhe5xxEo
jOQjj6EwbOBuxm39DpL38wxLxPcqRiagf53BFZZ3wKIyrATEboqx6KR/MUj7dxwn
oBlWd0phBEevET5RfG8YgUX9vmJmEw8g7aRPlkxEOUjOqATYknd/Wt9T7wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLv1xLSqn3+1TEzCrcFiiJzdSlGKMB8GA1UdIwQY
MBaAFLFqvdlCDwS6nBzSw03Hs1KYivjZMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjkt
ZmJiMGQzYzEwNDIzLzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8xMi8yYWRjMzktMzYzMC00MjVmLWFmMjktZmJiMGQzYzEwNDIz
LzEvc1dxOTJVSVBCTHFjSE5MRFRjZXpVcGlLLU5rLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACDJGCQT9
gozzALjFZ7p+7joBAmhLKzwSLGEtZ5te+3WS+LtXCxTODkHMHvrCfkBZe68ZyL/E
cc4a1Mp+jZDc06q89Vd2WtoK/csjADhixiL3u6MflVrjF02lPky9x4cOINl8E24Y
CxkTnh6uDHIXenwe3H38zaAblBeZrhsvEaipZYSKGKEzlIdBoGnDvIuewqyNDR8Y
R3BqRy2UI+NjDPE6CSuyp0+adGmbQQA2+3jCOeD6IVE8CIETIiQPgNNnKz+DnzcJ
wkDeAR6hx+UenezKqt0Wi1eMfyC85ME5HOrZdbuCWoIuECkHm0+9nPA8/CtCAdQ2
9ZruGGWGq7gzIg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:02:33 2025 by rpki-client