Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
File: c271cwBQxyD4x5BGbri4pI7750k.mft (raw, json)
Hash identifier: xrmE5TTBbViDg5XzR9TE9FVmHzJ0vIdmQGyMZMQaxi4=
Subject key identifier: F0:17:06:C3:71:99:C9:B9:81:9E:24:4A:8C:58:5C:58:F4:4D:21:77
Authority key identifier: 73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
Certificate issuer: /CN=736ef5730050c720f8c790466eb8b8a48efbe749
Certificate serial: 0197684E1B6E69E9A6A86E5DFD129E3CA58C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
Manifest number: 158E
Signing time: Fri 13 Jun 2025 08:00:38 +0000
Manifest this update: Fri 13 Jun 2025 08:00:38 +0000
Manifest next update: Sat 14 Jun 2025 08:00:38 +0000
Files and hashes: 1: U_EXFi0_K3LJzzOGjdd59sx5hhk.roa (hash: InLExGG/VRrfIxx+5P3BkdCZ9LeR0AfhLMm27/EtRM8=)
2: c271cwBQxyD4x5BGbri4pI7750k.crl (hash: AA/+qy6scDCY0y/gqkSRDf0udknU3nGsWptOVvqHEw8=)
3: fpEtFF5tn_F6AS7ORtQk_79zOLM.roa (hash: ecIVoFs7h4RkV6LSwkMSO/FMl9ZMbuW6Wd5+RjOOYhk=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 14 Jun 2025 08:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:68:4e:1b:6e:69:e9:a6:a8:6e:5d:fd:12:9e:3c:a5:8c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=736ef5730050c720f8c790466eb8b8a48efbe749
Validity
Not Before: Jun 13 08:00:38 2025 GMT
Not After : Jun 14 08:00:38 2025 GMT
Subject: CN=f01706c37199c9b9819e244a8c585c58f44d2177
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d6:7c:19:6c:2b:a6:d8:2f:67:34:f8:c9:ea:5e:
35:40:6e:19:be:b7:57:40:e1:00:59:66:ab:15:0b:
dc:05:c3:c2:38:09:1e:5c:20:36:28:30:f7:e9:41:
8e:38:35:b8:95:04:05:65:2c:f5:10:00:d1:7d:80:
ca:d0:bf:9e:79:53:32:c9:45:b9:23:a7:94:90:61:
ff:58:99:3b:f8:a6:68:7d:8a:1a:8f:e9:2e:0b:48:
39:ea:79:c3:e3:c8:d6:8b:99:97:ef:3f:30:2e:1d:
63:07:94:65:3d:92:fb:0c:e4:96:74:ed:8d:3f:b1:
1f:c9:b8:50:d8:8c:81:8e:58:1f:4f:57:51:97:21:
23:c1:f3:86:97:31:b1:3c:3f:ca:79:9b:2e:4f:df:
eb:8d:a9:b8:54:65:e2:d7:76:d5:e7:e8:c2:ae:42:
91:7f:af:d1:06:a4:7c:e4:03:e2:89:ce:78:ea:c5:
05:16:52:73:e8:cf:b3:88:4b:35:dd:18:4d:70:95:
59:51:4a:4f:47:c6:3a:df:c8:31:e2:03:98:1b:77:
2e:96:43:73:72:bb:a5:48:62:2d:1e:00:01:58:50:
66:a2:06:71:2d:b6:be:6d:f5:a0:c1:af:0e:bc:e3:
5d:69:c5:21:10:3f:fe:41:1d:6d:1f:e4:0f:ff:b1:
84:eb
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F0:17:06:C3:71:99:C9:B9:81:9E:24:4A:8C:58:5C:58:F4:4D:21:77
X509v3 Authority Key Identifier:
keyid:73:6E:F5:73:00:50:C7:20:F8:C7:90:46:6E:B8:B8:A4:8E:FB:E7:49
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c271cwBQxyD4x5BGbri4pI7750k.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/3c/849281-a302-4ff8-92e3-3ae4f9cf2683/1/c271cwBQxyD4x5BGbri4pI7750k.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
3f:46:19:e7:06:ad:2e:c2:4e:9a:b6:c4:e6:2d:36:e2:d8:4d:
91:93:1a:30:be:16:37:a4:7b:01:6a:d6:02:1f:6b:22:15:fd:
79:74:30:72:9f:41:80:09:ec:95:f8:38:3f:74:0f:bd:75:2d:
e2:fe:7a:e8:46:8c:db:88:63:82:59:c9:8e:4b:37:66:97:00:
b0:07:8f:33:77:2c:46:f0:19:49:04:c6:f3:77:71:74:e1:94:
27:57:cc:0b:19:9f:c7:4e:43:26:03:bd:04:5e:2f:dc:f1:1c:
c5:60:5b:18:6c:68:b0:ec:8a:92:44:26:77:74:7c:7f:8e:64:
09:de:5e:a2:14:71:47:7a:5c:64:ec:14:b6:83:78:9e:b2:16:
18:c0:6a:e8:0e:70:fb:17:57:11:cd:84:11:6b:02:2f:22:a3:
bf:1e:05:25:23:b8:bf:36:04:ec:5c:ee:2b:9b:4c:c4:85:41:
7e:b2:ea:3c:f0:2e:de:ab:28:7d:49:1f:7a:7e:23:b2:1c:18:
8b:37:20:02:f9:a4:b9:c0:93:61:5d:f0:2f:48:ee:c1:b5:7e:
c2:88:b3:6d:ce:89:73:c8:0f:77:fc:8a:94:b0:8a:93:ee:66:
3d:b8:f0:f1:e5:16:31:95:0f:67:96:01:7a:40:51:7b:b2:b0:
f5:20:3b:bb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdoThtuaemmqG5d/RKePKWMMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDczNmVmNTczMDA1MGM3MjBmOGM3OTA0NjZlYjhiOGE0OGVm
YmU3NDkwHhcNMjUwNjEzMDgwMDM4WhcNMjUwNjE0MDgwMDM4WjAzMTEwLwYDVQQD
EyhmMDE3MDZjMzcxOTljOWI5ODE5ZTI0NGE4YzU4NWM1OGY0NGQyMTc3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA1nwZbCum2C9nNPjJ6l41QG4ZvrdX
QOEAWWarFQvcBcPCOAkeXCA2KDD36UGOODW4lQQFZSz1EADRfYDK0L+eeVMyyUW5
I6eUkGH/WJk7+KZofYoaj+kuC0g56nnD48jWi5mX7z8wLh1jB5RlPZL7DOSWdO2N
P7EfybhQ2IyBjlgfT1dRlyEjwfOGlzGxPD/KeZsuT9/rjam4VGXi13bV5+jCrkKR
f6/RBqR85APiic546sUFFlJz6M+ziEs13RhNcJVZUUpPR8Y638gx4gOYG3culkNz
crulSGItHgABWFBmogZxLba+bfWgwa8OvONdacUhED/+QR1tH+QP/7GE6wIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPAXBsNxmcm5gZ4kSoxYXFj0TSF3MB8GA1UdIwQY
MBaAFHNu9XMAUMcg+MeQRm64uKSO++dJMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zYy84NDkyODEtYTMwMi00ZmY4LTkyZTMt
M2FlNGY5Y2YyNjgzLzEvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC8zYy84NDkyODEtYTMwMi00ZmY4LTkyZTMtM2FlNGY5Y2YyNjgz
LzEvYzI3MWN3QlF4eUQ0eDVCR2JyaTRwSTc3NTBrLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAP0YZ5wat
LsJOmrbE5i024thNkZMaML4WN6R7AWrWAh9rIhX9eXQwcp9BgAnslfg4P3QPvXUt
4v566EaM24hjglnJjks3ZpcAsAePM3csRvAZSQTG83dxdOGUJ1fMCxmfx05DJgO9
BF4v3PEcxWBbGGxosOyKkkQmd3R8f45kCd5eohRxR3pcZOwUtoN4nrIWGMBq6A5w
+xdXEc2EEWsCLyKjvx4FJSO4vzYE7FzuK5tMxIVBfrLqPPAu3qsofUkfen4jshwY
izcgAvmkucCTYV3wL0juwbV+woizbc6Jc8gPd/yKlLCKk+5mPbjw8eUWMZUPZ5YB
ekBRe7Kw9SA7uw==
-----END CERTIFICATE-----
Generated at Fri Jun 13 19:03:24 2025 by rpki-client