Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
File: 996iwVmT1oMXUKpjDg5oDZ7viIo.mft (raw, json)
Hash identifier: MJlaVm6D+EU37ptQUcp5igDm5iRtneA65poGdkfQ9Vk=
Subject key identifier: FD:99:68:6B:0D:01:44:5C:77:2F:9D:28:12:95:38:3F:67:E4:09:21
Authority key identifier: F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
Certificate issuer: /CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Certificate serial: 01976CCF9338BEA8A4917DBFC52EAC3442C7
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
Manifest number: 44
Signing time: Sat 14 Jun 2025 05:00:32 +0000
Manifest this update: Sat 14 Jun 2025 05:00:32 +0000
Manifest next update: Sun 15 Jun 2025 05:00:32 +0000
Files and hashes: 1: 996iwVmT1oMXUKpjDg5oDZ7viIo.crl (hash: sYC3Kq1LxlGXPp9i46qhVHykKocYP22x+b0vorT70cs=)
2: Q_OYedJWMY4R6WjcRHhbze4rY30.roa (hash: I5gaAF/DaFJrmNnPn+q8QcrAIPjnX3NXACdoAl2BzTs=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6c:cf:93:38:be:a8:a4:91:7d:bf:c5:2e:ac:34:42:c7
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=f7dea2c15993d6831750aa630e0e680d9eef888a
Validity
Not Before: Jun 14 05:00:32 2025 GMT
Not After : Jun 15 05:00:32 2025 GMT
Subject: CN=fd99686b0d01445c772f9d281295383f67e40921
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ac:74:40:b0:24:4b:da:e2:f0:c6:72:69:61:5e:
59:5f:1b:af:6a:2d:32:30:b4:46:ac:2a:a7:91:e4:
cb:e5:7d:7b:2a:54:5d:20:ba:b4:1e:f9:c8:55:05:
91:f0:4c:05:ba:b3:7f:58:9c:c4:02:60:16:37:9f:
9a:ff:30:18:34:eb:b8:f2:10:12:b3:f8:e5:76:c8:
f5:90:8c:bb:53:c1:b1:11:59:21:41:60:2a:13:c1:
fe:35:07:db:ee:ed:2c:e2:6a:ad:f2:9d:fe:b8:81:
e1:23:65:ea:0c:08:15:5d:d1:e1:23:98:6c:78:bd:
4f:c6:14:ad:11:0b:35:7d:21:38:80:c6:50:12:13:
04:6c:47:90:3d:e0:4a:36:20:8d:3d:7d:2d:a1:26:
01:7d:e8:43:8a:ca:32:01:df:a0:15:91:36:f3:71:
de:9e:c3:e6:eb:b4:af:77:18:81:b1:7d:5b:99:33:
69:ef:61:98:03:b4:77:ae:a4:e2:ae:dc:f8:2e:0f:
3c:ec:2e:f2:fb:f4:93:a1:0c:52:5f:94:a4:7c:12:
5a:54:99:11:d8:ee:d3:39:c6:69:08:27:82:f4:ab:
57:1d:56:55:0c:16:54:12:2a:e0:16:c4:c7:2c:8d:
a1:5f:f8:31:73:ce:73:f6:bb:f4:88:30:5b:c1:fc:
25:ed
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:99:68:6B:0D:01:44:5C:77:2F:9D:28:12:95:38:3F:67:E4:09:21
X509v3 Authority Key Identifier:
keyid:F7:DE:A2:C1:59:93:D6:83:17:50:AA:63:0E:0E:68:0D:9E:EF:88:8A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/996iwVmT1oMXUKpjDg5oDZ7viIo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/5efa2c-9845-4b07-98d6-38d971c13441/1/996iwVmT1oMXUKpjDg5oDZ7viIo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5e:bc:1f:95:8b:cb:6b:3d:74:89:f0:b4:22:45:4e:1d:62:d4:
38:54:53:3f:4b:9a:29:4d:82:ef:1e:5c:b4:1d:70:8d:53:84:
93:60:78:47:f7:e7:04:a7:0d:4f:b3:00:92:21:d4:a4:15:f2:
24:d7:bd:39:a5:70:4a:4a:24:f3:e0:16:a8:96:17:67:49:20:
ff:82:6a:e2:d3:42:61:b6:97:09:a0:cc:74:28:8e:94:a8:ed:
23:35:e5:84:7d:ea:93:c3:03:22:4b:0e:7d:d5:33:e3:08:e1:
14:cb:10:91:82:a7:9b:b4:23:bb:60:47:28:c8:f7:68:70:10:
04:0b:ad:bf:a4:58:c0:9c:25:d9:fc:2c:97:ce:5c:7e:e2:d6:
9e:9f:a4:77:64:91:5a:47:12:f3:20:b9:d6:9d:78:00:ce:83:
bf:13:04:4e:fb:b0:e0:1a:0f:b0:80:36:b7:09:d8:26:18:3c:
22:b2:ce:98:df:3f:be:62:aa:62:05:8f:aa:d6:c8:ca:fc:4e:
15:9a:96:db:f1:03:fb:4a:f7:81:67:f5:b2:28:fd:dc:c3:49:
4f:e5:19:0e:da:f3:a6:61:1d:0d:da:84:84:20:40:77:48:78:
e4:37:b7:c7:61:ed:b7:af:4a:f4:fd:b1:44:d6:27:47:59:4d:
2c:e8:fb:41
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdsz5M4vqikkX2/xS6sNELHMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGY3ZGVhMmMxNTk5M2Q2ODMxNzUwYWE2MzBlMGU2ODBkOWVl
Zjg4OGEwHhcNMjUwNjE0MDUwMDMyWhcNMjUwNjE1MDUwMDMyWjAzMTEwLwYDVQQD
EyhmZDk5Njg2YjBkMDE0NDVjNzcyZjlkMjgxMjk1MzgzZjY3ZTQwOTIxMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEArHRAsCRL2uLwxnJpYV5ZXxuvai0y
MLRGrCqnkeTL5X17KlRdILq0HvnIVQWR8EwFurN/WJzEAmAWN5+a/zAYNOu48hAS
s/jldsj1kIy7U8GxEVkhQWAqE8H+NQfb7u0s4mqt8p3+uIHhI2XqDAgVXdHhI5hs
eL1PxhStEQs1fSE4gMZQEhMEbEeQPeBKNiCNPX0toSYBfehDisoyAd+gFZE283He
nsPm67SvdxiBsX1bmTNp72GYA7R3rqTirtz4Lg887C7y+/SToQxSX5SkfBJaVJkR
2O7TOcZpCCeC9KtXHVZVDBZUEirgFsTHLI2hX/gxc85z9rv0iDBbwfwl7QIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFP2ZaGsNAURcdy+dKBKVOD9n5AkhMB8GA1UdIwQY
MBaAFPfeosFZk9aDF1CqYw4OaA2e74iKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvOTk2aXdWbVQxb01YVUtwakRnNW9EWjd2aUlvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC81ZWZhMmMtOTg0NS00YjA3LTk4ZDYt
MzhkOTcxYzEzNDQxLzEvOTk2aXdWbVQxb01YVUtwakRnNW9EWjd2aUlvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC81ZWZhMmMtOTg0NS00YjA3LTk4ZDYtMzhkOTcxYzEzNDQx
LzEvOTk2aXdWbVQxb01YVUtwakRnNW9EWjd2aUlvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAXrwflYvL
az10ifC0IkVOHWLUOFRTP0uaKU2C7x5ctB1wjVOEk2B4R/fnBKcNT7MAkiHUpBXy
JNe9OaVwSkok8+AWqJYXZ0kg/4Jq4tNCYbaXCaDMdCiOlKjtIzXlhH3qk8MDIksO
fdUz4wjhFMsQkYKnm7Qju2BHKMj3aHAQBAutv6RYwJwl2fwsl85cfuLWnp+kd2SR
WkcS8yC51p14AM6DvxMETvuw4BoPsIA2twnYJhg8IrLOmN8/vmKqYgWPqtbIyvxO
FZqW2/ED+0r3gWf1sij93MNJT+UZDtrzpmEdDdqEhCBAd0h45De3x2Htt69K9P2x
RNYnR1lNLOj7QQ==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:27:59 2025 by rpki-client