Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
File: rvy2RB1w0usQ12M9pzGaPT_5d64.mft (raw, json)
Hash identifier: cZ2TaqK2MYraiaB1V3PiFSzqpxAJGZatNgJ5daQzK3E=
Subject key identifier: 86:78:88:3E:13:3D:96:93:25:A1:05:7E:AA:CA:5A:F0:3A:51:0E:C9
Authority key identifier: AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
Certificate issuer: /CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Certificate serial: 019771BF85449873ED92FB8D8D166FC2BA9F
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
Manifest number: 0608
Signing time: Sun 15 Jun 2025 04:01:06 +0000
Manifest this update: Sun 15 Jun 2025 04:01:06 +0000
Manifest next update: Mon 16 Jun 2025 04:01:06 +0000
Files and hashes: 1: OywOw90-BmuDTm7-vAr4oYdaiWc.roa (hash: 8bINvDgAJsHgmIljWuh30WywbwSEgdwt4RUZy9xG14w=)
2: rvy2RB1w0usQ12M9pzGaPT_5d64.crl (hash: UFtBoc57nuI0Ih7BwR5ykWXCyB2GcgXT3pIQ/Dz638Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:bf:85:44:98:73:ed:92:fb:8d:8d:16:6f:c2:ba:9f
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=aefcb6441d70d2eb10d7633da7319a3d3ff977ae
Validity
Not Before: Jun 15 04:01:06 2025 GMT
Not After : Jun 16 04:01:06 2025 GMT
Subject: CN=8678883e133d969325a1057eaaca5af03a510ec9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:63:2a:0d:0d:d7:69:60:88:2a:3d:76:58:21:
f5:5c:b8:15:86:00:b5:28:0f:73:ed:bd:ba:c6:92:
39:7d:c0:c3:25:a6:9f:bb:26:cc:20:2d:14:91:e5:
f7:75:86:b7:df:44:a3:23:f2:88:d5:c2:73:b4:9a:
43:fc:fb:3c:d1:ff:99:05:71:ac:57:4a:7d:d9:98:
9c:4c:b3:94:77:84:86:58:81:83:36:88:f6:72:3c:
df:fb:40:44:c3:ca:85:a8:9a:80:18:ff:57:64:2b:
14:36:58:e2:d0:e6:c4:c9:82:66:43:44:47:62:01:
2e:6d:d7:84:75:5a:08:75:29:34:cd:77:e6:04:83:
bc:ee:a1:6b:3a:77:2c:95:ef:3a:01:24:31:79:dd:
81:ce:2c:6d:42:b9:8a:8a:a4:10:e3:1b:c6:4a:46:
67:9e:b8:f4:65:40:06:84:ce:f0:d1:9a:fa:c9:e3:
78:15:92:ce:f6:e2:2e:c4:ad:fb:20:04:ea:d1:11:
e3:de:dc:ce:07:1a:ac:18:6f:04:00:89:2a:a4:b5:
67:ce:c6:e7:d4:0f:cb:89:39:52:a1:0f:11:fe:36:
54:c8:68:e4:44:b2:68:0e:0d:76:ab:01:e5:e2:f8:
64:26:cc:f0:b0:13:65:51:99:17:26:4b:76:2a:5c:
1d:55
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
86:78:88:3E:13:3D:96:93:25:A1:05:7E:AA:CA:5A:F0:3A:51:0E:C9
X509v3 Authority Key Identifier:
keyid:AE:FC:B6:44:1D:70:D2:EB:10:D7:63:3D:A7:31:9A:3D:3F:F9:77:AE
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/rvy2RB1w0usQ12M9pzGaPT_5d64.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8c/33ad44-786c-4643-9de2-34f722b08def/1/rvy2RB1w0usQ12M9pzGaPT_5d64.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
62:60:b1:e9:8e:d7:e7:bc:b4:00:c8:01:36:26:72:56:75:aa:
f1:42:8d:2b:aa:f5:81:a5:4d:42:3e:02:ed:98:a2:03:83:cd:
dc:f1:77:5d:9c:fa:9a:9d:f9:0d:69:73:6d:50:d5:56:11:a3:
b4:21:fc:b7:67:79:91:df:10:a1:20:96:07:01:2f:84:cf:8e:
e1:5d:c1:39:f0:90:f0:20:da:f4:13:ee:76:76:4b:00:36:96:
7a:76:9c:2e:07:5d:85:a1:7e:17:7f:af:25:b8:1d:14:6b:76:
d2:62:fe:6e:a4:a2:39:a2:9e:21:93:61:7e:a6:2a:b2:77:02:
9e:13:ca:e1:44:02:4c:24:aa:ea:35:ca:cf:fa:7c:8b:95:00:
d2:b3:ce:18:f5:05:d6:23:9b:b9:bb:15:71:14:a2:d4:bd:05:
84:cb:2c:d5:0c:c2:e7:5a:a7:14:7b:45:fb:2a:44:cf:57:10:
a0:7d:86:a3:18:f0:07:db:bd:20:45:6b:9c:4f:3c:ac:dc:21:
51:13:9b:4d:aa:fd:4b:ab:b8:c1:be:f6:73:ae:96:66:88:56:
68:8c:c8:fa:10:95:9f:9b:f9:d8:4f:60:7d:cb:22:fa:6c:c5:
21:fa:30:84:5f:33:64:39:6e:a8:2f:c2:3e:51:87:05:60:db:
20:e1:4b:d8
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxv4VEmHPtkvuNjRZvwrqfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGFlZmNiNjQ0MWQ3MGQyZWIxMGQ3NjMzZGE3MzE5YTNkM2Zm
OTc3YWUwHhcNMjUwNjE1MDQwMTA2WhcNMjUwNjE2MDQwMTA2WjAzMTEwLwYDVQQD
Eyg4Njc4ODgzZTEzM2Q5NjkzMjVhMTA1N2VhYWNhNWFmMDNhNTEwZWM5MIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAxmMqDQ3XaWCIKj12WCH1XLgVhgC1
KA9z7b26xpI5fcDDJaafuybMIC0UkeX3dYa330SjI/KI1cJztJpD/Ps80f+ZBXGs
V0p92ZicTLOUd4SGWIGDNoj2cjzf+0BEw8qFqJqAGP9XZCsUNlji0ObEyYJmQ0RH
YgEubdeEdVoIdSk0zXfmBIO87qFrOncsle86ASQxed2BzixtQrmKiqQQ4xvGSkZn
nrj0ZUAGhM7w0Zr6yeN4FZLO9uIuxK37IATq0RHj3tzOBxqsGG8EAIkqpLVnzsbn
1A/LiTlSoQ8R/jZUyGjkRLJoDg12qwHl4vhkJszwsBNlUZkXJkt2KlwdVQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFIZ4iD4TPZaTJaEFfqrKWvA6UQ7JMB8GA1UdIwQY
MBaAFK78tkQdcNLrENdjPacxmj0/+XeuMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvcnZ5MlJCMXcwdXNRMTJNOXB6R2FQVF81ZDY0LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84Yy8zM2FkNDQtNzg2Yy00NjQzLTlkZTIt
MzRmNzIyYjA4ZGVmLzEvcnZ5MlJCMXcwdXNRMTJNOXB6R2FQVF81ZDY0Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84Yy8zM2FkNDQtNzg2Yy00NjQzLTlkZTItMzRmNzIyYjA4ZGVm
LzEvcnZ5MlJCMXcwdXNRMTJNOXB6R2FQVF81ZDY0LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAYmCx6Y7X
57y0AMgBNiZyVnWq8UKNK6r1gaVNQj4C7ZiiA4PN3PF3XZz6mp35DWlzbVDVVhGj
tCH8t2d5kd8QoSCWBwEvhM+O4V3BOfCQ8CDa9BPudnZLADaWenacLgddhaF+F3+v
JbgdFGt20mL+bqSiOaKeIZNhfqYqsncCnhPK4UQCTCSq6jXKz/p8i5UA0rPOGPUF
1iObubsVcRSi1L0FhMss1QzC51qnFHtF+ypEz1cQoH2GoxjwB9u9IEVrnE88rNwh
URObTar9S6u4wb72c66WZohWaIzI+hCVn5v52E9gfcsi+mzFIfowhF8zZDluqC/C
PlGHBWDbIOFL2A==
-----END CERTIFICATE-----
Generated at Sun Jun 15 09:13:36 2025 by rpki-client