Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
File: 25v841gk9uybXJ85qBFQzhYYEic.mft (raw, json)
Hash identifier: B7br8+gJRyYa3TbIHdMPt2IelFGGgk9Yxnh+++Zdm3I=
Subject key identifier: 50:53:F4:9E:36:EA:84:25:50:40:FD:E2:74:7F:FB:D7:28:97:2E:DA
Authority key identifier: DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
Certificate issuer: /CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Certificate serial: 01976BBD0C5141FF927B37434BF0010A5AEB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
Manifest number: 0212
Signing time: Sat 14 Jun 2025 00:00:40 +0000
Manifest this update: Sat 14 Jun 2025 00:00:40 +0000
Manifest next update: Sun 15 Jun 2025 00:00:40 +0000
Files and hashes: 1: 0Bo64BgX0hylRoEuTO1mVFUAcSM.roa (hash: k/E5TUmiripioDJT6E/uQgRfu9E1lOiyhVTdC1Kwllc=)
2: 25v841gk9uybXJ85qBFQzhYYEic.crl (hash: YhqVlj8d7qAOZTly0NfGHyTcn3YS088y1Z9fcWjHTZI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 00:00:40 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6b:bd:0c:51:41:ff:92:7b:37:43:4b:f0:01:0a:5a:eb
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=db9bfce35824f6ec9b5c9f39a81150ce16181227
Validity
Not Before: Jun 14 00:00:40 2025 GMT
Not After : Jun 15 00:00:40 2025 GMT
Subject: CN=5053f49e36ea84255040fde2747ffbd728972eda
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:ab:e7:2b:06:ed:d2:ba:1c:3b:d0:a5:b9:bb:
2b:2f:e2:c3:b6:73:91:e0:60:f7:52:81:50:0a:94:
62:04:a2:a2:f8:80:f6:89:c9:4e:15:76:54:27:48:
6d:af:5b:06:f7:52:87:a4:74:75:b0:c8:86:6b:2f:
45:13:a3:4c:9e:ed:17:2e:cb:05:1f:84:ef:df:3d:
ec:d3:82:08:e2:f3:78:d2:19:36:11:d2:52:16:41:
ba:7f:a6:df:82:cc:f5:52:62:16:7d:5d:18:8b:12:
70:b9:fd:c5:a7:60:e2:83:4a:8d:cd:97:16:2b:08:
a2:1a:06:36:05:3c:32:6a:b0:d4:81:d4:0a:ec:51:
6d:f2:48:3c:1d:44:07:79:bd:16:7c:b5:3c:1b:57:
06:be:c2:25:1b:ef:37:34:7b:f6:86:f1:a9:ef:59:
0b:81:1f:b0:56:54:19:0e:1b:cc:f7:3b:ac:eb:a2:
ee:22:c7:8e:74:3e:90:ae:ce:d7:f7:6b:9a:ae:95:
4e:14:0d:26:12:b1:58:dc:29:2f:be:26:91:ef:0b:
47:9f:e0:df:79:a8:82:e0:47:0f:7a:e4:ea:21:de:
7a:4b:05:36:e2:ac:6c:fe:50:32:a5:d3:d7:29:3a:
0c:b9:8d:bc:8e:b8:47:74:de:92:f3:0a:a1:e2:6a:
11:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:53:F4:9E:36:EA:84:25:50:40:FD:E2:74:7F:FB:D7:28:97:2E:DA
X509v3 Authority Key Identifier:
keyid:DB:9B:FC:E3:58:24:F6:EC:9B:5C:9F:39:A8:11:50:CE:16:18:12:27
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/25v841gk9uybXJ85qBFQzhYYEic.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/4a/b38707-39ce-4ccb-97a0-9b70d60c4800/1/25v841gk9uybXJ85qBFQzhYYEic.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
09:09:14:bc:f9:8c:e7:ff:09:e2:ab:64:16:fc:b6:d4:19:0c:
16:4e:f4:a3:47:ac:f1:5e:6a:d0:b6:09:fc:0d:03:98:93:1e:
76:1f:56:1c:26:06:74:8e:11:75:8b:73:65:d9:bd:10:f5:df:
c2:c7:c8:cc:2d:b8:8e:65:02:e2:bd:88:72:b2:72:38:fb:3a:
48:bf:fb:62:28:e4:3a:76:18:22:ef:f3:98:ff:b1:d7:aa:1a:
b5:89:d2:51:49:45:73:b8:72:72:d1:b1:70:a8:a8:31:69:3e:
f2:85:32:a5:7a:5c:bd:4c:6e:9e:9d:d7:ac:c0:dc:b0:5f:b6:
5b:58:5b:65:3b:66:4f:e6:e0:61:87:81:c8:fd:ca:8b:83:93:
5b:dc:19:e7:15:14:5f:f2:be:4f:c7:5b:ba:d6:b7:0e:26:19:
d7:22:f3:31:77:6c:eb:92:64:b7:d8:bb:1b:82:bb:54:13:03:
bf:5b:28:58:9e:66:b2:2a:b3:ec:45:39:95:5a:2c:91:61:08:
fe:c8:c1:8b:d5:47:92:2f:9e:f2:2c:f6:2c:f0:c3:95:5a:af:
e5:ab:69:df:c2:de:62:e4:af:9d:ca:36:86:fa:1c:4a:29:af:
a8:40:48:53:1d:be:56:41:49:c6:1e:dd:7d:ed:b9:b7:2c:79:
42:54:01:5a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdrvQxRQf+SezdDS/ABClrrMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGRiOWJmY2UzNTgyNGY2ZWM5YjVjOWYzOWE4MTE1MGNlMTYx
ODEyMjcwHhcNMjUwNjE0MDAwMDQwWhcNMjUwNjE1MDAwMDQwWjAzMTEwLwYDVQQD
Eyg1MDUzZjQ5ZTM2ZWE4NDI1NTA0MGZkZTI3NDdmZmJkNzI4OTcyZWRhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAx6vnKwbt0rocO9ClubsrL+LDtnOR
4GD3UoFQCpRiBKKi+ID2iclOFXZUJ0htr1sG91KHpHR1sMiGay9FE6NMnu0XLssF
H4Tv3z3s04II4vN40hk2EdJSFkG6f6bfgsz1UmIWfV0YixJwuf3Fp2Dig0qNzZcW
KwiiGgY2BTwyarDUgdQK7FFt8kg8HUQHeb0WfLU8G1cGvsIlG+83NHv2hvGp71kL
gR+wVlQZDhvM9zus66LuIseOdD6Qrs7X92uarpVOFA0mErFY3CkvviaR7wtHn+Df
eaiC4EcPeuTqId56SwU24qxs/lAypdPXKToMuY28jrhHdN6S8wqh4moRGwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFBT9J426oQlUED94nR/+9coly7aMB8GA1UdIwQY
MBaAFNub/ONYJPbsm1yfOagRUM4WGBInMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAt
OWI3MGQ2MGM0ODAwLzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80YS9iMzg3MDctMzljZS00Y2NiLTk3YTAtOWI3MGQ2MGM0ODAw
LzEvMjV2ODQxZ2s5dXliWEo4NXFCRlF6aFlZRWljLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEACQkUvPmM
5/8J4qtkFvy21BkMFk70o0es8V5q0LYJ/A0DmJMedh9WHCYGdI4RdYtzZdm9EPXf
wsfIzC24jmUC4r2IcrJyOPs6SL/7YijkOnYYIu/zmP+x16oatYnSUUlFc7hyctGx
cKioMWk+8oUypXpcvUxunp3XrMDcsF+2W1hbZTtmT+bgYYeByP3Ki4OTW9wZ5xUU
X/K+T8dbuta3DiYZ1yLzMXds65Jkt9i7G4K7VBMDv1soWJ5msiqz7EU5lVoskWEI
/sjBi9VHki+e8iz2LPDDlVqv5atp38LeYuSvnco2hvocSimvqEBIUx2+VkFJxh7d
fe25tyx5QlQBWg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 10:40:53 2025 by rpki-client