Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
File: u0oK8VYzLTx-y1hfruOpDZvyoJY.mft (raw, json)
Hash identifier: DmcP1lrhVJcOCLqCvhtSNDwk4vHJlnMwvYP4a5KpQDw=
Subject key identifier: 59:C2:80:0C:F7:EB:9F:34:4D:57:1D:20:14:29:70:D5:7A:92:36:22
Authority key identifier: BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
Certificate issuer: /CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Certificate serial: 019782B2C084C425A096CE2F8DEE5CC92AB0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
Manifest number: 12B9
Signing time: Wed 18 Jun 2025 11:00:42 +0000
Manifest this update: Wed 18 Jun 2025 11:00:42 +0000
Manifest next update: Thu 19 Jun 2025 11:00:42 +0000
Files and hashes: 1: b3ZtzLlxeNLOehH6AKtYdH5OpTQ.roa (hash: KgbQQ56PF7r41MO3Zy3vYzefbru0LRGx/vG1JD/z6f0=)
2: bW9q1xazXYiVEag1HYCLt--dBC0.roa (hash: wNhTvIanJ1l0YImMDQYRtPwse6zs1La1STbUdSSY9lE=)
3: u0oK8VYzLTx-y1hfruOpDZvyoJY.crl (hash: ibzc8NVbf6z/FQwqmwGYNahZARdcnh7+2AgcN+MKWCE=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 19 Jun 2025 11:00:42 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:82:b2:c0:84:c4:25:a0:96:ce:2f:8d:ee:5c:c9:2a:b0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=bb4a0af156332d3c7ecb585faee3a90d9bf2a096
Validity
Not Before: Jun 18 11:00:42 2025 GMT
Not After : Jun 19 11:00:42 2025 GMT
Subject: CN=59c2800cf7eb9f344d571d20142970d57a923622
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:d1:fe:2f:02:b0:2e:83:c4:d4:32:f4:98:b7:
c2:3f:9b:8e:d4:fb:c7:5f:96:74:5f:03:3c:d3:b8:
d9:12:d8:d1:7d:84:0d:c8:62:ce:c2:72:c8:29:bc:
4d:c7:4a:07:84:d0:e7:9b:9e:97:da:1f:7f:1d:d9:
71:bb:5e:4d:e7:b6:69:9d:2a:1d:10:b4:a9:c6:48:
5d:0e:3c:7b:55:66:02:6a:6c:fe:4d:5c:c4:50:76:
55:1e:c7:eb:88:1d:67:99:a5:e2:7f:22:d2:76:15:
6c:68:df:85:ae:fd:14:1c:ca:84:ed:c2:11:f7:6e:
53:9f:3c:8e:93:7a:f0:54:59:74:22:67:8c:6c:65:
98:e5:40:e3:6e:b1:7a:cc:f3:e5:80:8a:d1:22:72:
ee:6a:33:9d:be:ab:26:30:1e:7f:a7:51:3f:e1:29:
0d:1d:5b:aa:2d:e0:de:ec:95:05:42:00:15:13:62:
53:23:58:c8:59:84:80:28:fc:34:1c:40:b7:cf:0a:
cc:05:10:cf:b7:80:b7:d4:89:59:09:8b:4d:2b:72:
d5:3a:23:32:98:c3:d4:d4:10:ea:17:cb:29:a7:c9:
3e:fb:0b:cb:0c:30:e8:3b:9f:b7:f1:91:d3:e8:3f:
a6:93:c0:8b:76:4e:09:ef:6d:df:e2:6f:73:6c:3c:
1d:9b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
59:C2:80:0C:F7:EB:9F:34:4D:57:1D:20:14:29:70:D5:7A:92:36:22
X509v3 Authority Key Identifier:
keyid:BB:4A:0A:F1:56:33:2D:3C:7E:CB:58:5F:AE:E3:A9:0D:9B:F2:A0:96
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/u0oK8VYzLTx-y1hfruOpDZvyoJY.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/86/1b0998-ab81-4cce-8c46-f212666725b4/1/u0oK8VYzLTx-y1hfruOpDZvyoJY.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
0d:70:ea:0f:c2:65:60:72:f7:92:88:4e:11:37:2c:c8:6d:fb:
2d:93:26:8a:68:b0:68:0e:3c:3d:06:ba:8a:ee:4a:2b:9e:82:
67:d5:a3:6b:0d:68:ac:41:9d:2c:9d:6a:ce:04:0a:57:f0:a6:
03:49:78:ad:57:c3:0d:44:36:3c:74:86:79:0f:d9:14:9c:66:
ea:8a:a1:ea:55:5d:0c:f2:71:cc:a3:ef:18:57:b7:f0:77:65:
15:dc:70:86:07:71:7d:93:be:09:df:58:45:5f:6a:95:81:ef:
bb:f3:fe:a4:ec:97:42:d9:03:03:12:17:84:cf:f6:d8:41:f4:
18:e0:49:d2:fb:17:96:ca:f2:61:09:65:62:58:26:9d:50:1b:
5a:27:ca:e2:94:07:e2:8f:6f:95:41:e0:fc:c5:04:12:12:fb:
06:6e:d4:17:1e:16:64:80:90:64:f7:46:ec:37:c3:f9:26:2b:
e1:50:af:f5:fa:84:33:1c:16:bb:85:b7:a6:bc:c7:e4:18:60:
53:75:e5:f1:e0:04:9e:7d:8a:a3:86:75:fd:f4:25:50:39:a3:
44:56:a0:a1:a4:d0:81:81:2d:3f:49:e1:5f:7d:75:a7:03:97:
f4:b9:6f:27:b2:1a:dd:72:1e:bb:53:45:76:bd:96:6a:14:24:
98:5c:87:5b
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZeCssCExCWgls4vje5cySqwMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGJiNGEwYWYxNTYzMzJkM2M3ZWNiNTg1ZmFlZTNhOTBkOWJm
MmEwOTYwHhcNMjUwNjE4MTEwMDQyWhcNMjUwNjE5MTEwMDQyWjAzMTEwLwYDVQQD
Eyg1OWMyODAwY2Y3ZWI5ZjM0NGQ1NzFkMjAxNDI5NzBkNTdhOTIzNjIyMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAttH+LwKwLoPE1DL0mLfCP5uO1PvH
X5Z0XwM807jZEtjRfYQNyGLOwnLIKbxNx0oHhNDnm56X2h9/Hdlxu15N57ZpnSod
ELSpxkhdDjx7VWYCamz+TVzEUHZVHsfriB1nmaXifyLSdhVsaN+Frv0UHMqE7cIR
925TnzyOk3rwVFl0ImeMbGWY5UDjbrF6zPPlgIrRInLuajOdvqsmMB5/p1E/4SkN
HVuqLeDe7JUFQgAVE2JTI1jIWYSAKPw0HEC3zwrMBRDPt4C31IlZCYtNK3LVOiMy
mMPU1BDqF8spp8k++wvLDDDoO5+38ZHT6D+mk8CLdk4J723f4m9zbDwdmwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFnCgAz36580TVcdIBQpcNV6kjYiMB8GA1UdIwQY
MBaAFLtKCvFWMy08fstYX67jqQ2b8qCWMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYt
ZjIxMjY2NjcyNWI0LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Ni8xYjA5OTgtYWI4MS00Y2NlLThjNDYtZjIxMjY2NjcyNWI0
LzEvdTBvSzhWWXpMVHgteTFoZnJ1T3BEWnZ5b0pZLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEADXDqD8Jl
YHL3kohOETcsyG37LZMmimiwaA48PQa6iu5KK56CZ9Wjaw1orEGdLJ1qzgQKV/Cm
A0l4rVfDDUQ2PHSGeQ/ZFJxm6oqh6lVdDPJxzKPvGFe38HdlFdxwhgdxfZO+Cd9Y
RV9qlYHvu/P+pOyXQtkDAxIXhM/22EH0GOBJ0vsXlsryYQllYlgmnVAbWifK4pQH
4o9vlUHg/MUEEhL7Bm7UFx4WZICQZPdG7DfD+SYr4VCv9fqEMxwWu4W3przH5Bhg
U3Xl8eAEnn2Ko4Z1/fQlUDmjRFagoaTQgYEtP0nhX311pwOX9LlvJ7Ia3XIeu1NF
dr2WahQkmFyHWw==
-----END CERTIFICATE-----
Generated at Wed Jun 18 21:30:41 2025 by rpki-client