Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
File: RpNQgcd6h0XntiuTuC2iliN5suI.mft (raw, json)
Hash identifier: e3DdkdV0ucUMUhLXRkmUHCAJ0b/FI/5P8KQ2gqKamVw=
Subject key identifier: 65:3E:16:DF:39:0F:9B:60:6B:C8:4A:5D:08:EF:74:41:F5:1D:E3:DC
Authority key identifier: 46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
Certificate issuer: /CN=46935081c77a8745e7b62b93b82da2962379b2e2
Certificate serial: 019770758727EC15D124B89B0656002B0160
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
Manifest number: 1591
Signing time: Sat 14 Jun 2025 22:00:39 +0000
Manifest this update: Sat 14 Jun 2025 22:00:39 +0000
Manifest next update: Sun 15 Jun 2025 22:00:39 +0000
Files and hashes: 1: 5S9DzB-Zkm3msjgPAbdmsNofi_E.roa (hash: JVrfzyFqi2bm7cADIRU0rzxEk+g6lOHGxW3e0YIX/NA=)
2: RpNQgcd6h0XntiuTuC2iliN5suI.crl (hash: 0S19ZcI1oHzkkoXLovlyPoaqhnrJ6W+Gj6ISXSGrsgY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:00:39 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:70:75:87:27:ec:15:d1:24:b8:9b:06:56:00:2b:01:60
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=46935081c77a8745e7b62b93b82da2962379b2e2
Validity
Not Before: Jun 14 22:00:39 2025 GMT
Not After : Jun 15 22:00:39 2025 GMT
Subject: CN=653e16df390f9b606bc84a5d08ef7441f51de3dc
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:87:9e:1d:b5:34:ed:a1:b6:1c:11:69:b1:47:69:
3b:5c:87:96:7a:50:36:ac:7c:0e:2b:9c:b5:83:1f:
75:86:f4:8f:87:2d:04:10:91:06:37:eb:38:99:13:
cf:d8:6e:e6:e3:7f:db:dd:70:fb:d3:2a:8a:45:0d:
f7:9d:d3:46:5b:19:3c:fc:db:78:b2:06:63:29:0f:
f7:61:0f:66:56:7e:3d:d7:01:aa:29:44:db:03:79:
73:54:b2:79:d5:72:17:55:a8:56:b4:e6:1a:7b:55:
d9:51:65:0b:79:79:02:4e:5b:3d:c4:30:ad:d2:81:
c5:54:6b:aa:5e:8f:f5:6f:56:3e:f0:a9:45:c0:63:
cd:cb:d7:01:0c:00:a9:4f:36:2e:13:6e:cf:ad:45:
fe:85:eb:17:34:d0:aa:f8:9f:2e:5f:28:18:d5:45:
45:bd:64:6d:eb:bd:2e:03:f4:4c:af:8d:da:1e:46:
96:f3:d2:86:30:b6:45:76:74:0d:52:7b:c4:18:3f:
65:93:ee:59:d1:a6:bc:bd:3f:71:49:c6:2c:90:6f:
d8:35:89:2c:75:e9:35:f6:5c:29:a7:3f:58:41:9e:
27:41:48:d6:1d:69:8f:d6:02:dd:ec:3e:3b:62:25:
f1:09:ab:29:75:2c:eb:26:87:84:14:45:d7:55:f1:
76:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
65:3E:16:DF:39:0F:9B:60:6B:C8:4A:5D:08:EF:74:41:F5:1D:E3:DC
X509v3 Authority Key Identifier:
keyid:46:93:50:81:C7:7A:87:45:E7:B6:2B:93:B8:2D:A2:96:23:79:B2:E2
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/RpNQgcd6h0XntiuTuC2iliN5suI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/6e/90606e-9316-4ea3-bc74-a35c27d95186/1/RpNQgcd6h0XntiuTuC2iliN5suI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
93:c1:6f:6a:b1:33:ea:0c:84:13:b3:2f:53:51:15:e9:76:5b:
e6:92:13:26:cd:2f:c1:2d:c2:39:ea:f9:4d:ac:06:be:ea:09:
e0:73:5b:fd:03:3e:5e:9e:7c:3c:dd:05:34:8d:8d:7b:13:00:
e5:b9:96:3e:e1:23:1f:b9:58:5c:ee:e0:d1:71:e1:4d:02:a2:
11:91:88:2d:1f:dd:01:c4:b7:ad:91:b6:db:c3:41:fc:f1:1f:
07:5c:62:29:ed:a6:f4:74:7b:17:a5:41:e9:ca:0f:c8:28:53:
99:27:5e:5c:ca:1d:64:9d:43:67:72:b1:d4:d8:bb:4a:40:98:
e8:b9:8a:2f:cd:8b:87:0e:91:13:9e:2a:76:61:f7:0a:d8:98:
86:ed:61:76:d2:e0:40:3c:dd:ab:fe:91:28:d4:31:73:e0:4e:
4d:ea:82:a7:94:06:9e:98:5e:7c:71:ae:f9:16:95:ae:a2:49:
87:e3:7e:e3:22:73:37:9a:65:38:15:75:f6:5b:2b:3b:ad:bf:
82:07:92:06:06:21:c1:1d:b8:cb:b6:b1:7e:e2:ab:34:58:b3:
01:22:24:36:1a:90:c8:c4:fe:eb:59:ae:1b:67:8c:7f:74:e4:
d1:20:f4:75:9a:e1:1c:74:ae:43:f5:27:eb:18:c4:10:e9:ae:
97:1e:a6:fb
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdwdYcn7BXRJLibBlYAKwFgMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDQ2OTM1MDgxYzc3YTg3NDVlN2I2MmI5M2I4MmRhMjk2MjM3
OWIyZTIwHhcNMjUwNjE0MjIwMDM5WhcNMjUwNjE1MjIwMDM5WjAzMTEwLwYDVQQD
Eyg2NTNlMTZkZjM5MGY5YjYwNmJjODRhNWQwOGVmNzQ0MWY1MWRlM2RjMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAh54dtTTtobYcEWmxR2k7XIeWelA2
rHwOK5y1gx91hvSPhy0EEJEGN+s4mRPP2G7m43/b3XD70yqKRQ33ndNGWxk8/Nt4
sgZjKQ/3YQ9mVn491wGqKUTbA3lzVLJ51XIXVahWtOYae1XZUWULeXkCTls9xDCt
0oHFVGuqXo/1b1Y+8KlFwGPNy9cBDACpTzYuE27PrUX+hesXNNCq+J8uXygY1UVF
vWRt670uA/RMr43aHkaW89KGMLZFdnQNUnvEGD9lk+5Z0aa8vT9xScYskG/YNYks
dek19lwppz9YQZ4nQUjWHWmP1gLd7D47YiXxCaspdSzrJoeEFEXXVfF2WQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFGU+Ft85D5tga8hKXQjvdEH1HePcMB8GA1UdIwQY
MBaAFEaTUIHHeodF57Yrk7gtopYjebLiMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQt
YTM1YzI3ZDk1MTg2LzEvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC82ZS85MDYwNmUtOTMxNi00ZWEzLWJjNzQtYTM1YzI3ZDk1MTg2
LzEvUnBOUWdjZDZoMFhudGl1VHVDMmlsaU41c3VJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAk8FvarEz
6gyEE7MvU1EV6XZb5pITJs0vwS3COer5TawGvuoJ4HNb/QM+Xp58PN0FNI2NexMA
5bmWPuEjH7lYXO7g0XHhTQKiEZGILR/dAcS3rZG228NB/PEfB1xiKe2m9HR7F6VB
6coPyChTmSdeXModZJ1DZ3Kx1Ni7SkCY6LmKL82Lhw6RE54qdmH3CtiYhu1hdtLg
QDzdq/6RKNQxc+BOTeqCp5QGnphefHGu+RaVrqJJh+N+4yJzN5plOBV19lsrO62/
ggeSBgYhwR24y7axfuKrNFizASIkNhqQyMT+61muG2eMf3Tk0SD0dZrhHHSuQ/Un
6xjEEOmulx6m+w==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:47:24 2025 by rpki-client