Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
File: rRfnAW-VOg5izKRWb_nRBSww8lo.mft (raw, json)
Hash identifier: 7+7uq8X7Yax8XVwpjTmGXH35sDHer3d7O9rSZwLlEr4=
Subject key identifier: 34:89:97:1F:DB:07:BF:35:09:15:20:56:A0:D7:5D:88:3B:59:82:B2
Authority key identifier: AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
Certificate issuer: /CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Certificate serial: 019779E6AC0553DDDE294B49463E0B4A343F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
Manifest number: 04CB
Signing time: Mon 16 Jun 2025 18:00:49 +0000
Manifest this update: Mon 16 Jun 2025 18:00:49 +0000
Manifest next update: Tue 17 Jun 2025 18:00:49 +0000
Files and hashes: 1: AsUkbA5N2PUwSi47FKCaYRJKFUs.roa (hash: pCCYd/C+MlVrRZtG5LOO+Gem9dQw10KaWQbtM9c+M54=)
2: h73Bb2bBsx_sZgOVLIvtxZLolnY.roa (hash: x94KOnEBWaX982PvdAszj32cQ+ALwtBcUGMJov9xLw4=)
3: rRfnAW-VOg5izKRWb_nRBSww8lo.crl (hash: tUyGOLiknebDf3PHvbNMzQS5neWi3LMv3MqUvU4WaSE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 17 Jun 2025 18:00:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:79:e6:ac:05:53:dd:de:29:4b:49:46:3e:0b:4a:34:3f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=ad17e7016f953a0e62cca4566ff9d1052c30f25a
Validity
Not Before: Jun 16 18:00:49 2025 GMT
Not After : Jun 17 18:00:49 2025 GMT
Subject: CN=3489971fdb07bf3509152056a0d75d883b5982b2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9f:a6:f6:0e:ab:f1:94:ae:16:65:f1:0b:fd:b6:
85:df:87:3c:a4:df:41:85:7b:0d:f0:fd:8f:28:e2:
36:7e:ae:24:36:96:f8:17:eb:29:35:2d:47:96:68:
ec:f1:f3:1d:39:c3:56:b5:f2:8f:80:5f:75:85:34:
c6:49:66:55:5d:f1:5e:63:37:5a:cc:73:b7:ca:9b:
08:a8:33:22:e9:88:e7:28:96:87:ae:68:20:33:05:
b8:4b:43:0f:0b:f7:dd:ad:d8:b5:9c:44:e6:ef:e2:
24:86:ab:03:7e:dd:cf:93:2d:08:ff:4b:a0:5a:91:
d0:65:4e:c3:e3:72:62:fa:2f:8c:14:60:90:d7:ab:
4c:a6:ac:38:ae:21:d9:67:83:66:6f:5a:09:18:b1:
fd:89:a7:e2:f1:12:5d:81:eb:d3:32:8f:79:a4:4a:
af:35:b5:04:f4:0e:fe:25:f7:16:6b:7a:98:ed:e4:
75:d9:86:61:28:ad:58:67:39:6e:a9:7a:b6:75:c5:
95:83:d0:e7:bd:a6:9d:aa:d8:b6:ea:e1:07:e1:96:
2f:ce:05:bd:e5:4c:aa:25:69:b1:ef:8b:3c:69:fb:
39:a5:cb:29:5b:34:0f:ec:76:42:56:c2:67:a1:47:
71:bf:35:89:1b:23:8c:e5:3a:b8:64:72:f0:15:3e:
10:87
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
34:89:97:1F:DB:07:BF:35:09:15:20:56:A0:D7:5D:88:3B:59:82:B2
X509v3 Authority Key Identifier:
keyid:AD:17:E7:01:6F:95:3A:0E:62:CC:A4:56:6F:F9:D1:05:2C:30:F2:5A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rRfnAW-VOg5izKRWb_nRBSww8lo.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/63/83c881-bef7-4f79-90ba-5590768de2cf/1/rRfnAW-VOg5izKRWb_nRBSww8lo.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
cb:53:28:52:e6:4b:f8:28:92:49:c4:10:e5:46:98:f2:a7:94:
9c:c3:a5:25:36:03:e8:74:6b:6b:91:3d:05:ad:f1:02:3b:4c:
4d:6f:57:b8:e9:2d:8f:c9:93:95:0f:20:c5:ca:f2:73:db:7d:
75:0e:f9:48:ab:0f:a7:b5:b4:42:64:da:48:cf:6c:c1:a6:c8:
2c:ac:cf:22:55:48:78:37:6f:41:21:cb:7d:c3:b2:a9:90:ec:
fc:e0:5b:d0:c9:7b:fe:05:9a:c5:7e:c2:d3:05:bc:c6:7c:d5:
e7:52:1a:b0:2e:18:04:69:76:ff:5b:36:30:f2:0b:85:4a:a5:
85:7a:80:f7:a5:f6:83:7b:84:ec:94:2c:f3:6a:19:c5:f8:8e:
e5:35:b2:32:34:c5:a4:b4:c5:c9:73:53:69:ca:b4:0e:7d:f1:
99:36:6b:11:1f:eb:92:84:75:d4:b9:c9:d1:5d:8c:87:1a:d6:
68:28:9a:93:de:e3:73:a9:c8:34:19:b9:ac:43:ba:0d:22:52:
70:d2:41:31:96:82:41:60:74:4b:6e:6e:2b:de:57:3e:9b:b8:
51:41:66:8a:53:f2:70:03:38:14:3f:18:c5:1e:95:23:57:cb:
1d:a4:5e:75:61:44:6b:ac:78:82:d7:21:56:8d:66:45:e5:d2:
4c:6f:24:c6
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZd55qwFU93eKUtJRj4LSjQ/MA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFkMTdlNzAxNmY5NTNhMGU2MmNjYTQ1NjZmZjlkMTA1MmMz
MGYyNWEwHhcNMjUwNjE2MTgwMDQ5WhcNMjUwNjE3MTgwMDQ5WjAzMTEwLwYDVQQD
EygzNDg5OTcxZmRiMDdiZjM1MDkxNTIwNTZhMGQ3NWQ4ODNiNTk4MmIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAn6b2DqvxlK4WZfEL/baF34c8pN9B
hXsN8P2PKOI2fq4kNpb4F+spNS1Hlmjs8fMdOcNWtfKPgF91hTTGSWZVXfFeYzda
zHO3ypsIqDMi6YjnKJaHrmggMwW4S0MPC/fdrdi1nETm7+IkhqsDft3Pky0I/0ug
WpHQZU7D43Ji+i+MFGCQ16tMpqw4riHZZ4Nmb1oJGLH9iafi8RJdgevTMo95pEqv
NbUE9A7+JfcWa3qY7eR12YZhKK1YZzluqXq2dcWVg9Dnvaadqti26uEH4ZYvzgW9
5UyqJWmx74s8afs5pcspWzQP7HZCVsJnoUdxvzWJGyOM5Tq4ZHLwFT4QhwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDSJlx/bB781CRUgVqDXXYg7WYKyMB8GA1UdIwQY
MBaAFK0X5wFvlToOYsykVm/50QUsMPJaMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEt
NTU5MDc2OGRlMmNmLzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82My84M2M4ODEtYmVmNy00Zjc5LTkwYmEtNTU5MDc2OGRlMmNm
LzEvclJmbkFXLVZPZzVpektSV2JfblJCU3d3OGxvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAy1MoUuZL
+CiSScQQ5UaY8qeUnMOlJTYD6HRra5E9Ba3xAjtMTW9XuOktj8mTlQ8gxcryc9t9
dQ75SKsPp7W0QmTaSM9swabILKzPIlVIeDdvQSHLfcOyqZDs/OBb0Ml7/gWaxX7C
0wW8xnzV51IasC4YBGl2/1s2MPILhUqlhXqA96X2g3uE7JQs82oZxfiO5TWyMjTF
pLTFyXNTacq0Dn3xmTZrER/rkoR11LnJ0V2MhxrWaCiak97jc6nINBm5rEO6DSJS
cNJBMZaCQWB0S25uK95XPpu4UUFmilPycAM4FD8YxR6VI1fLHaRedWFEa6x4gtch
Vo1mReXSTG8kxg==
-----END CERTIFICATE-----
Generated at Tue Jun 17 03:42:33 2025 by rpki-client