Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
File: md6y4fhaF9okDPyBbZcsheQR5iQ.mft (raw, json)
Hash identifier: PlutC/DOomldm2dKdi2fS2AFoL99SNDuefAHOQY93tA=
Subject key identifier: 78:71:49:02:87:EB:C2:DB:60:38:18:B4:8F:E9:7E:BA:26:8F:2D:CA
Authority key identifier: 99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
Certificate issuer: /CN=99deb2e1f85a17da240cfc816d972c85e411e624
Certificate serial: 019771F5FA476DB14F7EF67DDCFC8EA1D11E
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
Manifest number: 1593
Signing time: Sun 15 Jun 2025 05:00:35 +0000
Manifest this update: Sun 15 Jun 2025 05:00:35 +0000
Manifest next update: Mon 16 Jun 2025 05:00:35 +0000
Files and hashes: 1: G9mF37Fb91r0jC33-YcK9r4IAmk.roa (hash: MaEVR8Nlqavgaakwb2T4C4sUXoGT+mVODKAXw14Vucs=)
2: md6y4fhaF9okDPyBbZcsheQR5iQ.crl (hash: AB9015FcP+6wOogHqtaZRNclvFy4L5g7Nqhd+hk0AqQ=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl
rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:f5:fa:47:6d:b1:4f:7e:f6:7d:dc:fc:8e:a1:d1:1e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=99deb2e1f85a17da240cfc816d972c85e411e624
Validity
Not Before: Jun 15 05:00:35 2025 GMT
Not After : Jun 16 05:00:35 2025 GMT
Subject: CN=7871490287ebc2db603818b48fe97eba268f2dca
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:0b:20:61:8b:39:d5:48:0e:a5:28:84:e6:e9:
61:37:0f:83:f1:de:ca:90:ca:9b:75:fd:de:48:cb:
bb:10:f2:21:28:b0:38:43:35:70:28:c9:e8:8d:51:
c6:71:22:3b:bc:c0:11:54:e6:5f:65:fa:f9:c9:ba:
72:8c:28:81:d5:5a:7d:18:8e:60:b5:94:64:c8:ef:
cd:1b:7a:47:5b:ef:b2:58:e5:82:1f:59:a9:51:34:
71:bd:17:ee:15:a7:a3:88:f2:90:c5:0f:68:39:05:
aa:c6:1a:b2:8f:5d:91:6a:5d:8f:65:80:75:48:de:
96:cb:82:27:7a:47:87:4a:46:34:5e:6e:06:4f:1f:
5d:5c:4f:63:a5:2c:cd:d7:d4:73:6c:7f:6f:90:c1:
79:d2:86:0a:88:b4:56:41:e0:9d:c5:ab:a0:a2:c9:
a6:99:4f:72:13:9d:a8:ec:0b:8a:32:fb:e2:bd:0e:
5b:a4:0a:2a:4e:06:94:9d:c7:be:fc:ec:11:ff:80:
2f:61:69:a9:31:4c:6a:7d:76:de:76:e3:5c:32:0b:
43:b3:63:97:f4:66:79:06:48:3c:98:00:44:6f:b7:
d5:cf:21:d7:1b:98:21:9d:8b:a8:c7:16:aa:ee:06:
d1:c0:12:7b:ba:81:f6:34:f3:8a:4d:df:f8:ca:b7:
67:f3
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
78:71:49:02:87:EB:C2:DB:60:38:18:B4:8F:E9:7E:BA:26:8F:2D:CA
X509v3 Authority Key Identifier:
keyid:99:DE:B2:E1:F8:5A:17:DA:24:0C:FC:81:6D:97:2C:85:E4:11:E6:24
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/md6y4fhaF9okDPyBbZcsheQR5iQ.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/23/7c91ca-55f7-43a4-b950-8dc94e89bf03/1/md6y4fhaF9okDPyBbZcsheQR5iQ.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2f:b7:76:b5:e5:67:21:40:82:e1:64:8c:51:16:b9:2f:9c:84:
bc:08:af:77:be:fc:9c:43:a0:c5:ae:0c:9e:53:a1:05:e9:12:
2d:c2:ca:b6:47:e4:3c:74:12:61:34:30:96:ba:07:7a:35:ec:
36:95:ca:84:7d:25:a3:71:66:6d:54:9a:af:38:78:4b:cc:a3:
ff:61:d0:c1:91:b4:c7:21:84:05:3c:51:95:3d:00:f1:05:c8:
2e:99:35:12:76:b5:52:c7:5f:2f:30:38:32:61:fc:61:e0:7c:
07:43:4d:e4:c3:88:4a:ac:3f:65:1c:f4:ff:1c:95:65:7a:24:
f7:c9:eb:12:37:07:4d:c3:fb:ad:a5:18:3a:10:b3:bf:34:1f:
4a:15:c5:84:14:b4:cd:20:90:aa:01:aa:7d:8d:a7:3b:00:65:
2a:85:e9:43:ca:6f:33:f2:41:d0:52:db:7b:2e:8e:bb:68:8f:
97:2e:61:f9:53:b7:14:29:35:a5:02:00:67:6d:4d:28:2e:da:
09:e8:52:0c:f6:c3:f2:b6:88:b3:ff:17:4c:ba:06:3f:4a:78:
f0:23:54:c1:04:b0:fd:5d:c9:52:90:c7:64:44:8b:0e:09:99:
b0:a7:71:23:4e:a9:4a:fc:d9:57:ad:c9:03:df:ea:60:63:96:
f0:93:6e:18
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdx9fpHbbFPfvZ93PyOodEeMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDk5ZGViMmUxZjg1YTE3ZGEyNDBjZmM4MTZkOTcyYzg1ZTQx
MWU2MjQwHhcNMjUwNjE1MDUwMDM1WhcNMjUwNjE2MDUwMDM1WjAzMTEwLwYDVQQD
Eyg3ODcxNDkwMjg3ZWJjMmRiNjAzODE4YjQ4ZmU5N2ViYTI2OGYyZGNhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtwsgYYs51UgOpSiE5ulhNw+D8d7K
kMqbdf3eSMu7EPIhKLA4QzVwKMnojVHGcSI7vMARVOZfZfr5ybpyjCiB1Vp9GI5g
tZRkyO/NG3pHW++yWOWCH1mpUTRxvRfuFaejiPKQxQ9oOQWqxhqyj12Ral2PZYB1
SN6Wy4InekeHSkY0Xm4GTx9dXE9jpSzN19RzbH9vkMF50oYKiLRWQeCdxaugosmm
mU9yE52o7AuKMvvivQ5bpAoqTgaUnce+/OwR/4AvYWmpMUxqfXbeduNcMgtDs2OX
9GZ5Bkg8mABEb7fVzyHXG5ghnYuoxxaq7gbRwBJ7uoH2NPOKTd/4yrdn8wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFHhxSQKH68LbYDgYtI/pfromjy3KMB8GA1UdIwQY
MBaAFJnesuH4WhfaJAz8gW2XLIXkEeYkMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvbWQ2eTRmaGFGOW9rRFB5QmJaY3NoZVFSNWlRLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8yMy83YzkxY2EtNTVmNy00M2E0LWI5NTAt
OGRjOTRlODliZjAzLzEvbWQ2eTRmaGFGOW9rRFB5QmJaY3NoZVFSNWlRLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8yMy83YzkxY2EtNTVmNy00M2E0LWI5NTAtOGRjOTRlODliZjAz
LzEvbWQ2eTRmaGFGOW9rRFB5QmJaY3NoZVFSNWlRLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAL7d2teVn
IUCC4WSMURa5L5yEvAivd778nEOgxa4MnlOhBekSLcLKtkfkPHQSYTQwlroHejXs
NpXKhH0lo3FmbVSarzh4S8yj/2HQwZG0xyGEBTxRlT0A8QXILpk1Ena1UsdfLzA4
MmH8YeB8B0NN5MOISqw/ZRz0/xyVZXok98nrEjcHTcP7raUYOhCzvzQfShXFhBS0
zSCQqgGqfY2nOwBlKoXpQ8pvM/JB0FLbey6Ou2iPly5h+VO3FCk1pQIAZ21NKC7a
CehSDPbD8raIs/8XTLoGP0p48CNUwQSw/V3JUpDHZESLDgmZsKdxI06pSvzZV63J
A9/qYGOW8JNuGA==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:31:48 2025 by rpki-client