Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
File: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft (raw, json)
Hash identifier: 2VDZubHa7i3DAzItjvc3gbPijsx5ZY/aT89y0H9GhSY=
Subject key identifier: 38:13:40:00:97:42:22:99:44:85:C4:6C:5E:21:7F:1E:81:7A:B4:A7
Authority key identifier: 6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
Certificate issuer: /CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Certificate serial: 01976E509376DB420C7FE77A38BFD7EA689C
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
Manifest number: 1592
Signing time: Sat 14 Jun 2025 12:01:03 +0000
Manifest this update: Sat 14 Jun 2025 12:01:03 +0000
Manifest next update: Sun 15 Jun 2025 12:01:03 +0000
Files and hashes: 1: XlEutT53Peaefw9BWBX8iOxdk0o.roa (hash: 3n8+7Yj6dfwFUOHjwioNJb1p8k9ewBTtziMwK34FcCQ=)
2: _GNQSp_bGjydsnVDpRHY8XNNqhs.roa (hash: pDYhj1QM7SQ6UTwVMyRGZcrJ6AnEuDllBqLjotU+jDg=)
3: a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl (hash: PpJFApKweX1FUGnUGbcR/lmYq+GN0jmeMI2aucLepHA=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 10:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6e:50:93:76:db:42:0c:7f:e7:7a:38:bf:d7:ea:68:9c
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6bb95cfc2d187f40530ef083bbd10c88c4956c1d
Validity
Not Before: Jun 14 12:01:03 2025 GMT
Not After : Jun 15 12:01:03 2025 GMT
Subject: CN=38134000974222994485c46c5e217f1e817ab4a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:5e:8c:d5:06:87:fc:5b:68:33:17:85:8a:3b:
c9:a3:10:d9:a9:da:f7:1c:8b:29:7c:d1:2e:14:58:
ba:8c:c7:54:21:e9:84:3b:ab:63:6b:75:16:a2:e1:
92:25:10:95:c1:a6:36:b4:4c:2f:7f:c6:2b:00:4b:
f3:64:a1:43:f1:de:8e:d2:32:a7:ad:87:fa:c2:c0:
9e:5e:7c:07:fe:97:41:d1:f1:cf:af:fe:bc:a6:f0:
b5:65:cf:63:7e:50:a4:3d:63:7e:5f:ca:c8:45:d7:
d4:8c:7c:55:85:76:86:b9:03:2f:d7:a3:49:fd:8f:
12:16:59:d3:8d:2c:a6:0d:86:17:83:71:d5:8f:bf:
fb:ea:5a:14:32:51:53:2f:b7:78:d4:90:4b:43:46:
46:42:fd:97:26:c8:b3:73:de:cc:b6:ac:4e:48:39:
2b:25:1e:f5:fa:61:ee:09:74:e7:80:bd:ba:4a:07:
01:d6:39:62:5f:ba:88:6d:ea:80:53:05:4a:61:0a:
8b:ec:15:01:b2:b5:b3:00:6a:a6:3f:a1:5c:a8:65:
f7:16:c4:22:29:6c:a0:05:b1:91:12:6c:fd:9e:69:
13:98:18:41:3d:72:2d:f6:ec:fb:d3:17:c6:15:fa:
f5:ec:a8:a4:19:41:d1:a6:27:b2:f5:d1:2a:d9:f2:
16:91
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
38:13:40:00:97:42:22:99:44:85:C4:6C:5E:21:7F:1E:81:7A:B4:A7
X509v3 Authority Key Identifier:
keyid:6B:B9:5C:FC:2D:18:7F:40:53:0E:F0:83:BB:D1:0C:88:C4:95:6C:1D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/69/547a7f-4baf-4b7e-afb8-466013435079/1/a7lc_C0Yf0BTDvCDu9EMiMSVbB0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
5a:0a:ab:18:6c:03:79:13:46:d3:a4:9b:0b:82:a6:b1:bb:15:
be:4a:3a:43:06:b5:47:ba:72:50:fe:ba:2f:69:c7:82:e5:17:
3a:60:61:d4:86:0b:ed:dc:a5:b9:e1:0c:d9:51:1d:8d:f1:8f:
f9:d9:8f:88:e6:94:5e:2d:e7:f3:e7:1f:f6:4c:0c:47:37:69:
bc:ca:ab:9f:8e:c3:77:13:68:4c:86:3d:0f:d3:b0:5c:de:32:
37:3f:d1:6e:83:eb:3e:fd:39:7a:d4:84:84:8c:45:a4:c3:1c:
29:79:ec:f3:f4:9d:45:1b:fd:28:94:63:10:7b:42:b1:bc:0e:
7a:4b:ec:2d:62:2c:e2:b0:de:ee:3c:b0:13:30:6b:79:5b:55:
57:ea:74:60:f9:5c:08:fb:e9:b8:f4:f7:a8:5f:f2:99:17:3b:
9e:3d:2f:fc:45:e8:b5:57:22:06:cc:cb:40:1e:6a:d7:9e:22:
fd:78:4a:19:c6:48:a2:2c:46:ea:4f:da:0f:6e:74:36:5f:c7:
ea:3a:c5:21:af:da:8d:9b:30:3b:9d:f0:4b:5a:bf:e8:f6:3b:
22:73:59:ba:cc:fb:32:6a:50:6c:c6:9f:07:ad:a6:69:1b:6c:
03:20:3b:82:05:2b:59:50:5b:fd:81:f9:c7:94:22:38:aa:30:
e8:d6:ec:ae
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZduUJN220IMf+d6OL/X6micMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZiYjk1Y2ZjMmQxODdmNDA1MzBlZjA4M2JiZDEwYzg4YzQ5
NTZjMWQwHhcNMjUwNjE0MTIwMTAzWhcNMjUwNjE1MTIwMTAzWjAzMTEwLwYDVQQD
EygzODEzNDAwMDk3NDIyMjk5NDQ4NWM0NmM1ZTIxN2YxZTgxN2FiNGE3MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAp16M1QaH/FtoMxeFijvJoxDZqdr3
HIspfNEuFFi6jMdUIemEO6tja3UWouGSJRCVwaY2tEwvf8YrAEvzZKFD8d6O0jKn
rYf6wsCeXnwH/pdB0fHPr/68pvC1Zc9jflCkPWN+X8rIRdfUjHxVhXaGuQMv16NJ
/Y8SFlnTjSymDYYXg3HVj7/76loUMlFTL7d41JBLQ0ZGQv2XJsizc97MtqxOSDkr
JR71+mHuCXTngL26SgcB1jliX7qIbeqAUwVKYQqL7BUBsrWzAGqmP6FcqGX3FsQi
KWygBbGREmz9nmkTmBhBPXIt9uz70xfGFfr17KikGUHRpiey9dEq2fIWkQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFDgTQACXQiKZRIXEbF4hfx6BerSnMB8GA1UdIwQY
MBaAFGu5XPwtGH9AUw7wg7vRDIjElWwdMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgt
NDY2MDEzNDM1MDc5LzEvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82OS81NDdhN2YtNGJhZi00YjdlLWFmYjgtNDY2MDEzNDM1MDc5
LzEvYTdsY19DMFlmMEJURHZDRHU5RU1pTVNWYkIwLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAWgqrGGwD
eRNG06SbC4KmsbsVvko6Qwa1R7pyUP66L2nHguUXOmBh1IYL7dylueEM2VEdjfGP
+dmPiOaUXi3n8+cf9kwMRzdpvMqrn47DdxNoTIY9D9OwXN4yNz/RboPrPv05etSE
hIxFpMMcKXns8/SdRRv9KJRjEHtCsbwOekvsLWIs4rDe7jywEzBreVtVV+p0YPlc
CPvpuPT3qF/ymRc7nj0v/EXotVciBszLQB5q154i/XhKGcZIoixG6k/aD250Nl/H
6jrFIa/ajZswO53wS1q/6PY7InNZusz7MmpQbMafB62maRtsAyA7ggUrWVBb/YH5
x5QiOKow6Nbsrg==
-----END CERTIFICATE-----
Generated at Sat Jun 14 20:16:54 2025 by rpki-client