Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
File: U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft (raw, json)
Hash identifier: jS8DbgYisOQAF0sswghp7Vl+eal8mAW8bRii9g3+fJQ=
Subject key identifier: B9:E5:EF:DF:95:A3:5C:DE:5E:04:58:16:C6:97:FB:73:0D:8C:D8:70
Authority key identifier: 53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
Certificate issuer: /CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Certificate serial: 01976D3E4F1F59A8B91767092ABBFDDD97AB
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
Manifest number: 12DC
Signing time: Sat 14 Jun 2025 07:01:29 +0000
Manifest this update: Sat 14 Jun 2025 07:01:29 +0000
Manifest next update: Sun 15 Jun 2025 07:01:29 +0000
Files and hashes: 1: U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl (hash: 0wpBoe/i6GqIJ1/RfNPZ3PGt6OImplrNNCtWi4TK2xU=)
2: lbTglUB_cuWwuUtQ0HuYFd1iErc.roa (hash: SqLRBaYjg0lLeWRsw+zkUvg9dbqxK2qZeJXDb+7pMGY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 01:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:6d:3e:4f:1f:59:a8:b9:17:67:09:2a:bb:fd:dd:97:ab
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53b8b4cea94c867d34c2bff9ace7640bff51d06b
Validity
Not Before: Jun 14 07:01:29 2025 GMT
Not After : Jun 15 07:01:29 2025 GMT
Subject: CN=b9e5efdf95a35cde5e045816c697fb730d8cd870
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:e6:18:cd:a7:14:d6:26:98:bb:a7:a3:e2:05:
86:c9:87:8e:7b:05:b0:7c:8e:b5:45:9a:c4:92:2d:
40:46:a6:5f:cf:ff:21:64:dd:f7:31:97:7e:0e:58:
f5:58:89:46:37:ac:67:5a:c3:3c:8d:20:c3:b5:42:
90:42:07:05:c0:ce:ea:3c:da:97:19:b3:c9:1d:82:
9d:61:d0:c3:ee:2a:7b:bc:26:70:29:96:5d:f1:58:
c1:6a:1d:b5:08:56:f2:b4:0b:c0:13:74:5d:9e:8d:
19:8f:b7:a7:c5:20:63:1b:8b:bd:26:26:a5:61:e4:
d4:87:1c:97:69:14:6a:26:43:13:79:c9:03:4f:65:
f4:48:75:54:a6:d2:1d:38:f4:5f:10:c8:8c:0c:6d:
47:49:b0:62:e2:0a:6c:49:b9:4b:91:8d:30:15:fd:
0a:19:ec:c3:fd:97:48:ae:70:0b:bf:75:27:6f:02:
98:02:11:3e:75:0f:b1:b2:3c:6e:d1:dd:d5:54:45:
11:74:4b:72:1e:7c:dd:df:73:9d:e3:d1:06:76:b8:
04:0f:cb:b0:81:e8:6e:24:0d:ef:63:9c:af:df:fb:
5e:dd:99:19:42:c7:da:2b:08:1b:4b:89:1a:11:c9:
61:c4:5d:b2:db:d9:a8:8e:45:f3:53:07:02:9b:27:
ed:15
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
B9:E5:EF:DF:95:A3:5C:DE:5E:04:58:16:C6:97:FB:73:0D:8C:D8:70
X509v3 Authority Key Identifier:
keyid:53:B8:B4:CE:A9:4C:86:7D:34:C2:BF:F9:AC:E7:64:0B:FF:51:D0:6B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/U7i0zqlMhn00wr_5rOdkC_9R0Gs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/92/df94ff-de9c-48a8-976d-965f1763782c/1/U7i0zqlMhn00wr_5rOdkC_9R0Gs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
1e:c9:54:bc:37:01:d7:21:5c:a1:89:01:e6:4a:5b:06:be:d9:
51:7e:de:dc:4f:8e:77:44:52:4c:85:4a:7c:09:3e:2e:e6:7b:
ca:cb:b6:92:e6:50:70:00:12:86:3a:22:24:89:51:21:50:d4:
4c:61:1e:1c:53:55:0f:de:ec:6e:1b:b4:53:86:78:5a:07:ed:
ab:78:78:d4:3b:dd:a5:24:6e:c0:c1:88:c0:12:40:f4:a7:33:
cb:7b:1a:c6:62:42:53:1a:bb:e8:69:43:a9:6f:ed:1f:96:14:
4e:ea:3e:31:b2:9d:69:a8:fa:08:b8:0c:93:a3:83:f0:c3:53:
0c:62:b8:3a:23:a0:fe:c0:69:30:7e:e6:1b:88:14:2c:6a:7a:
16:16:85:34:0d:ac:27:99:eb:ed:2e:64:be:93:7c:5c:65:52:
26:4d:90:e9:7a:65:f2:08:91:59:f6:57:cb:2c:94:89:53:a0:
f4:ee:03:cf:d4:0d:e3:21:70:23:e0:91:d1:88:08:e2:0a:48:
71:2a:98:01:79:d6:f9:68:10:7f:91:f2:9f:48:a7:3c:bb:e5:
02:ca:8b:15:8d:80:cd:8f:70:94:c0:68:b4:08:bf:2e:e4:0e:
6c:90:01:a9:05:bb:08:41:61:60:46:b7:12:fe:9a:40:0d:d7:
4e:e2:e3:78
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdtPk8fWai5F2cJKrv93ZerMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDUzYjhiNGNlYTk0Yzg2N2QzNGMyYmZmOWFjZTc2NDBiZmY1
MWQwNmIwHhcNMjUwNjE0MDcwMTI5WhcNMjUwNjE1MDcwMTI5WjAzMTEwLwYDVQQD
EyhiOWU1ZWZkZjk1YTM1Y2RlNWUwNDU4MTZjNjk3ZmI3MzBkOGNkODcwMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAo+YYzacU1iaYu6ej4gWGyYeOewWw
fI61RZrEki1ARqZfz/8hZN33MZd+Dlj1WIlGN6xnWsM8jSDDtUKQQgcFwM7qPNqX
GbPJHYKdYdDD7ip7vCZwKZZd8VjBah21CFbytAvAE3Rdno0Zj7enxSBjG4u9Jial
YeTUhxyXaRRqJkMTeckDT2X0SHVUptIdOPRfEMiMDG1HSbBi4gpsSblLkY0wFf0K
GezD/ZdIrnALv3UnbwKYAhE+dQ+xsjxu0d3VVEURdEtyHnzd33Od49EGdrgED8uw
gehuJA3vY5yv3/te3ZkZQsfaKwgbS4kaEclhxF2y29mojkXzUwcCmyftFQIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFLnl79+Vo1zeXgRYFsaX+3MNjNhwMB8GA1UdIwQY
MBaAFFO4tM6pTIZ9NMK/+aznZAv/UdBrMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Mi9kZjk0ZmYtZGU5Yy00OGE4LTk3NmQt
OTY1ZjE3NjM3ODJjLzEvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Mi9kZjk0ZmYtZGU5Yy00OGE4LTk3NmQtOTY1ZjE3NjM3ODJj
LzEvVTdpMHpxbE1objAwd3JfNXJPZGtDXzlSMEdzLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAHslUvDcB
1yFcoYkB5kpbBr7ZUX7e3E+Od0RSTIVKfAk+LuZ7ysu2kuZQcAAShjoiJIlRIVDU
TGEeHFNVD97sbhu0U4Z4Wgftq3h41DvdpSRuwMGIwBJA9Kczy3saxmJCUxq76GlD
qW/tH5YUTuo+MbKdaaj6CLgMk6OD8MNTDGK4OiOg/sBpMH7mG4gULGp6FhaFNA2s
J5nr7S5kvpN8XGVSJk2Q6Xpl8giRWfZXyyyUiVOg9O4Dz9QN4yFwI+CR0YgI4gpI
cSqYAXnW+WgQf5Hyn0inPLvlAsqLFY2AzY9wlMBotAi/LuQObJABqQW7CEFhYEa3
Ev6aQA3XTuLjeA==
-----END CERTIFICATE-----
Generated at Sat Jun 14 12:24:41 2025 by rpki-client