Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
File: V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft (raw, json)
Hash identifier: 9ms0VIQQUv52x9RAk/2wryv6pFoee3UNjROH4neJFbs=
Subject key identifier: F5:94:03:B2:B3:35:31:82:F8:E3:B8:80:FA:F5:CD:1C:07:18:B5:2B
Authority key identifier: 57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
Certificate issuer: /CN=576d59494a0a927f7a68f909ecef577cd503db1c
Certificate serial: 019779AFB8E51DF417D95063A71FB9FA3A00
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
Manifest number: 1599
Signing time: Mon 16 Jun 2025 17:00:48 +0000
Manifest this update: Mon 16 Jun 2025 17:00:48 +0000
Manifest next update: Tue 17 Jun 2025 17:00:48 +0000
Files and hashes: 1: EjNs4c7ExfB-Xn86trYUTIGxY9M.roa (hash: 5gdWhqxScCqY+ac2NlShb0emeLCeoscJIL/u5Z1pQss=)
2: FQ_8F69qJ1OIvrywFvryFirKQj8.roa (hash: q2ovk1tVG4lGYgmszBcNRyfEZ8Wo4tad3oDRiuzylzY=)
3: V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl (hash: lJu/mb12mZEYorVZEt2kMssMQyAN2R8XDsRnMZAsGKI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 14:25:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:af:b8:e5:1d:f4:17:d9:50:63:a7:1f:b9:fa:3a:00
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=576d59494a0a927f7a68f909ecef577cd503db1c
Validity
Not Before: Jun 16 17:00:48 2025 GMT
Not After : Jun 17 17:00:48 2025 GMT
Subject: CN=f59403b2b3353182f8e3b880faf5cd1c0718b52b
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:96:71:0d:99:3d:8c:22:99:05:d2:8d:a9:a3:ae:
95:34:d9:0e:e2:f2:6e:f4:a7:8c:17:eb:a0:c6:72:
ff:a6:b6:92:ff:68:20:b4:59:cc:09:29:bf:af:76:
80:64:58:28:63:20:e8:bb:47:5a:80:37:a7:e9:e7:
e3:74:80:57:89:7f:6d:f3:59:db:00:d0:b3:36:ea:
e3:2e:75:6e:c5:db:3f:c8:b3:84:d3:89:9c:1b:ee:
b2:0c:6e:d4:08:9d:e2:45:fe:31:67:ae:d3:85:23:
8e:99:3b:df:ba:6d:1e:a0:c1:08:5c:53:d6:48:d2:
56:1e:22:29:7c:d0:4a:5f:06:22:e9:a8:db:3f:42:
15:5d:0f:56:bc:10:f1:77:76:52:c5:8b:38:e8:32:
0d:b3:61:56:7f:58:5c:28:9b:7e:02:c7:55:5b:10:
ae:3c:e1:17:36:03:05:4d:5e:06:69:9f:9d:47:84:
96:ab:aa:63:3e:e0:47:2d:61:db:4c:e5:46:41:26:
8b:2f:64:a7:2f:19:fa:2e:d2:bc:3f:cd:46:28:da:
cb:53:ba:c3:92:39:98:b8:93:1e:3f:0f:75:0d:ed:
6c:a8:d1:0c:25:0d:78:e1:39:7a:2d:30:a0:ac:f5:
58:ac:10:74:dc:7f:ee:70:c6:c1:be:8b:ba:25:2b:
32:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F5:94:03:B2:B3:35:31:82:F8:E3:B8:80:FA:F5:CD:1C:07:18:B5:2B
X509v3 Authority Key Identifier:
keyid:57:6D:59:49:4A:0A:92:7F:7A:68:F9:09:EC:EF:57:7C:D5:03:DB:1C
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/V21ZSUoKkn96aPkJ7O9XfNUD2xw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/42/a89644-9316-4e8b-81a4-1f19a8bda3ed/1/V21ZSUoKkn96aPkJ7O9XfNUD2xw.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
44:b1:c8:91:84:e2:08:20:2c:66:19:41:8a:7e:ef:4f:2e:fc:
70:6e:47:c0:b6:22:83:c9:a6:ab:51:a4:d1:8f:6a:4c:8c:50:
76:5d:18:e9:d9:77:7c:c4:22:58:04:2f:10:ae:fb:97:29:e5:
f4:db:e1:0f:55:52:59:a0:bc:17:3e:ed:80:e3:ab:d9:6e:74:
af:20:30:f9:51:79:e3:d2:fb:c7:48:82:37:0c:00:dc:e6:a3:
70:91:37:c4:ef:05:ca:d3:ed:e2:31:89:d5:28:58:44:e9:7d:
7c:4f:8b:e8:79:9e:e6:7c:b3:d0:3c:22:d5:cc:bf:ff:47:73:
73:d9:c2:f3:22:e3:21:69:ce:0b:f4:01:0b:74:50:78:c1:5f:
1a:4b:fa:97:33:ae:f2:1d:57:ce:57:6d:c6:e5:1d:57:77:85:
91:33:11:f8:77:34:5b:db:7f:6a:71:9c:74:34:21:b5:d6:80:
85:d2:e4:82:7c:5e:a2:24:b0:28:0d:8b:d9:af:6a:f4:a9:c4:
9d:39:e7:c9:3c:e5:ec:e2:5a:25:bc:49:ab:75:06:65:91:7f:
ba:99:85:a6:88:21:99:20:c2:a5:ca:e4:dc:28:b4:fa:27:53:
81:ee:31:79:5c:f8:37:84:b3:5e:9b:ae:a4:11:ca:48:f9:4b:
28:cb:a4:f5
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd5r7jlHfQX2VBjpx+5+joAMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDU3NmQ1OTQ5NGEwYTkyN2Y3YTY4ZjkwOWVjZWY1NzdjZDUw
M2RiMWMwHhcNMjUwNjE2MTcwMDQ4WhcNMjUwNjE3MTcwMDQ4WjAzMTEwLwYDVQQD
EyhmNTk0MDNiMmIzMzUzMTgyZjhlM2I4ODBmYWY1Y2QxYzA3MThiNTJiMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAlnENmT2MIpkF0o2po66VNNkO4vJu
9KeMF+ugxnL/praS/2ggtFnMCSm/r3aAZFgoYyDou0dagDen6efjdIBXiX9t81nb
ANCzNurjLnVuxds/yLOE04mcG+6yDG7UCJ3iRf4xZ67ThSOOmTvfum0eoMEIXFPW
SNJWHiIpfNBKXwYi6ajbP0IVXQ9WvBDxd3ZSxYs46DINs2FWf1hcKJt+AsdVWxCu
POEXNgMFTV4GaZ+dR4SWq6pjPuBHLWHbTOVGQSaLL2SnLxn6LtK8P81GKNrLU7rD
kjmYuJMePw91De1sqNEMJQ144Tl6LTCgrPVYrBB03H/ucMbBvou6JSsykQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFPWUA7KzNTGC+OO4gPr1zRwHGLUrMB8GA1UdIwQY
MBaAFFdtWUlKCpJ/emj5CezvV3zVA9scMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVjIxWlNVb0trbjk2YVBrSjdPOVhmTlVEMnh3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80Mi9hODk2NDQtOTMxNi00ZThiLTgxYTQt
MWYxOWE4YmRhM2VkLzEvVjIxWlNVb0trbjk2YVBrSjdPOVhmTlVEMnh3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80Mi9hODk2NDQtOTMxNi00ZThiLTgxYTQtMWYxOWE4YmRhM2Vk
LzEvVjIxWlNVb0trbjk2YVBrSjdPOVhmTlVEMnh3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEARLHIkYTi
CCAsZhlBin7vTy78cG5HwLYig8mmq1Gk0Y9qTIxQdl0Y6dl3fMQiWAQvEK77lynl
9NvhD1VSWaC8Fz7tgOOr2W50ryAw+VF549L7x0iCNwwA3OajcJE3xO8FytPt4jGJ
1ShYROl9fE+L6Hme5nyz0Dwi1cy//0dzc9nC8yLjIWnOC/QBC3RQeMFfGkv6lzOu
8h1XzldtxuUdV3eFkTMR+Hc0W9t/anGcdDQhtdaAhdLkgnxeoiSwKA2L2a9q9KnE
nTnnyTzl7OJaJbxJq3UGZZF/upmFpoghmSDCpcrk3Ci0+idTge4xeVz4N4SzXpuu
pBHKSPlLKMuk9Q==
-----END CERTIFICATE-----
Generated at Mon Jun 16 23:39:03 2025 by rpki-client