Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
File: apN9la67vmK5DyTepNZjFwpmWew.mft (raw, json)
Hash identifier: yWMsRS85dMS4okTp3+NcXe8dfPtP8pMzUVXXhAGMk2Q=
Subject key identifier: BE:98:75:A4:27:76:34:96:85:74:A9:F8:DC:64:02:22:FF:11:34:0F
Authority key identifier: 6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
Certificate issuer: /CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Certificate serial: 0197722CC67D9A570BA7519D600DEE44B0DF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
Manifest number: 0C60
Signing time: Sun 15 Jun 2025 06:00:26 +0000
Manifest this update: Sun 15 Jun 2025 06:00:26 +0000
Manifest next update: Mon 16 Jun 2025 06:00:26 +0000
Files and hashes: 1: apN9la67vmK5DyTepNZjFwpmWew.crl (hash: sBdX2STRPCzWq/hM1Zh1Xohba/Ve8vfmYCdKiRVMfEg=)
2: yLRog1k-iJohsHlS9HFe5cUcYWg.roa (hash: ZlXdhSl4IFvEbzgGzHY+LvPAZzUFdSUq8xFm3+GUTOI=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 22:19:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:72:2c:c6:7d:9a:57:0b:a7:51:9d:60:0d:ee:44:b0:df
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6a937d95aebbbe62b90f24dea4d663170a6659ec
Validity
Not Before: Jun 15 06:00:26 2025 GMT
Not After : Jun 16 06:00:26 2025 GMT
Subject: CN=be9875a4277634968574a9f8dc640222ff11340f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:af:ac:4e:16:0f:a0:8b:7b:81:4c:b0:d9:aa:45:
a6:27:dd:54:0f:70:4d:f2:08:a0:41:2f:5d:71:78:
dc:9c:8e:1d:65:b7:cf:00:85:77:bc:fb:14:4a:62:
dc:fa:51:64:43:29:d0:2e:66:ea:72:f1:48:d3:22:
14:87:99:4f:44:97:7e:4f:3c:7b:b7:53:64:80:38:
4a:74:53:05:c5:d3:7b:ac:cb:00:9a:ef:82:ab:18:
c2:86:5b:5a:09:b8:14:5b:a2:dd:53:43:f3:15:83:
74:80:25:b7:a2:34:5f:32:01:49:0f:f3:8d:b6:62:
5f:46:fc:4b:84:84:d2:58:1f:6b:66:16:5c:30:f9:
30:08:b6:2f:cc:68:0e:f3:a4:a0:a4:57:0d:a3:cb:
12:a0:fd:c4:06:91:c4:a3:45:c6:51:6a:a4:de:4f:
0f:45:92:5a:4e:b1:1f:08:d4:6a:26:47:59:13:12:
ce:ca:53:db:26:6f:cb:11:43:c9:65:9d:0e:be:1c:
55:0a:6b:ee:26:21:fc:4a:c2:d3:91:a6:a6:b8:41:
57:81:d1:2e:e6:17:ef:06:b7:cd:c1:f2:b2:02:74:
fc:d1:59:21:b2:22:56:2d:b2:2a:c1:44:dd:eb:e3:
ae:63:87:48:84:a1:52:40:87:dc:73:25:3c:f1:47:
0b:23
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
BE:98:75:A4:27:76:34:96:85:74:A9:F8:DC:64:02:22:FF:11:34:0F
X509v3 Authority Key Identifier:
keyid:6A:93:7D:95:AE:BB:BE:62:B9:0F:24:DE:A4:D6:63:17:0A:66:59:EC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/apN9la67vmK5DyTepNZjFwpmWew.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/8e/6c5cd2-1920-4564-bc2c-94177f8d877c/1/apN9la67vmK5DyTepNZjFwpmWew.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
00:e7:25:d9:e6:bc:78:db:68:f3:a4:ed:8a:92:df:49:dd:0d:
cb:40:b6:ba:1a:56:e3:a4:02:e2:cb:a5:78:0a:c1:50:15:fa:
e0:8a:33:6b:81:7d:65:2a:52:fe:57:30:00:f8:eb:21:23:57:
73:7d:95:bb:f7:e6:9a:e6:93:5c:0f:3c:b8:5e:71:29:d2:5c:
bc:97:d6:84:5b:e0:91:41:ff:70:56:b0:51:41:61:c9:da:53:
a2:9c:d9:19:8d:d6:cc:72:15:88:d3:bb:80:12:cf:4b:e1:cf:
91:76:91:23:4e:cb:70:81:d0:f9:8f:06:86:1d:4a:94:0d:e2:
06:bd:58:51:bd:95:63:66:6f:48:79:69:87:e3:58:3b:e0:c6:
22:c2:99:a1:d5:de:b4:b2:ee:e0:4c:e5:9f:5e:b2:51:cb:42:
e2:c6:b7:93:15:bf:d8:65:2c:57:f4:0d:1d:36:e1:15:4e:0f:
1e:1e:3a:41:fa:a1:2e:23:c1:94:18:df:11:84:e9:86:42:ac:
94:d5:2f:1e:74:26:ee:be:3d:59:05:10:45:06:86:a7:34:a2:
8b:49:78:88:20:bf:ce:e5:26:bf:c7:b7:54:f5:01:f5:70:aa:
ee:fa:7a:51:2c:05:f4:da:79:af:bf:67:d4:4a:90:4d:b2:6d:
af:8f:3a:4e
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdyLMZ9mlcLp1GdYA3uRLDfMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDZhOTM3ZDk1YWViYmJlNjJiOTBmMjRkZWE0ZDY2MzE3MGE2
NjU5ZWMwHhcNMjUwNjE1MDYwMDI2WhcNMjUwNjE2MDYwMDI2WjAzMTEwLwYDVQQD
EyhiZTk4NzVhNDI3NzYzNDk2ODU3NGE5ZjhkYzY0MDIyMmZmMTEzNDBmMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAr6xOFg+gi3uBTLDZqkWmJ91UD3BN
8gigQS9dcXjcnI4dZbfPAIV3vPsUSmLc+lFkQynQLmbqcvFI0yIUh5lPRJd+Tzx7
t1NkgDhKdFMFxdN7rMsAmu+CqxjChltaCbgUW6LdU0PzFYN0gCW3ojRfMgFJD/ON
tmJfRvxLhITSWB9rZhZcMPkwCLYvzGgO86SgpFcNo8sSoP3EBpHEo0XGUWqk3k8P
RZJaTrEfCNRqJkdZExLOylPbJm/LEUPJZZ0OvhxVCmvuJiH8SsLTkaamuEFXgdEu
5hfvBrfNwfKyAnT80VkhsiJWLbIqwUTd6+OuY4dIhKFSQIfccyU88UcLIwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFL6YdaQndjSWhXSp+NxkAiL/ETQPMB8GA1UdIwQY
MBaAFGqTfZWuu75iuQ8k3qTWYxcKZlnsMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3LmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC84ZS82YzVjZDItMTkyMC00NTY0LWJjMmMt
OTQxNzdmOGQ4NzdjLzEvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3Lm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC84ZS82YzVjZDItMTkyMC00NTY0LWJjMmMtOTQxNzdmOGQ4Nzdj
LzEvYXBOOWxhNjd2bUs1RHlUZXBOWmpGd3BtV2V3LmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAAOcl2ea8
eNto86TtipLfSd0Ny0C2uhpW46QC4suleArBUBX64Ioza4F9ZSpS/lcwAPjrISNX
c32Vu/fmmuaTXA88uF5xKdJcvJfWhFvgkUH/cFawUUFhydpTopzZGY3WzHIViNO7
gBLPS+HPkXaRI07LcIHQ+Y8Ghh1KlA3iBr1YUb2VY2ZvSHlph+NYO+DGIsKZodXe
tLLu4Ezln16yUctC4sa3kxW/2GUsV/QNHTbhFU4PHh46QfqhLiPBlBjfEYTphkKs
lNUvHnQm7r49WQUQRQaGpzSii0l4iCC/zuUmv8e3VPUB9XCq7vp6USwF9Np5r79n
1EqQTbJtr486Tg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 07:33:03 2025 by rpki-client