Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
File: 15ToHXL1nGWg0YFEobJgeYNTa0o.mft (raw, json)
Hash identifier: eD/gEWoxhBHpu4UIn7BkAxNvS+f2DheL2CQgvoyqzxw=
Subject key identifier: 5B:3A:30:F9:A9:07:42:77:99:00:6E:08:8E:EC:40:79:AF:A3:40:FD
Authority key identifier: D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
Certificate issuer: /CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Certificate serial: 0197711B56B7D23BBC450DF75A5674E57A63
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
Manifest number: 0C9A
Signing time: Sun 15 Jun 2025 01:01:46 +0000
Manifest this update: Sun 15 Jun 2025 01:01:46 +0000
Manifest next update: Mon 16 Jun 2025 01:01:46 +0000
Files and hashes: 1: 15ToHXL1nGWg0YFEobJgeYNTa0o.crl (hash: kDJhdwnkiB4zUF4zgjOCZmwHlag96xwDmIUsGjg4uTg=)
2: 74Pc-d1cIDB2cJwPwMZKRC2SHlY.roa (hash: BNXJ9UQTlJTDJF7YHXiQBgrxMV0S9TBmp+TiB2lnrCw=)
3: ATm3n0KFZ5OKTQtdaMLYTaNNVew.roa (hash: 2UTJGztOoJrr9yNdFqpMauhjZZvVEquE5BNwI7gR6Xg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 15 Jun 2025 19:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:97:71:1b:56:b7:d2:3b:bc:45:0d:f7:5a:56:74:e5:7a:63
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=d794e81d72f59c65a0d18144a1b2607983536b4a
Validity
Not Before: Jun 15 01:01:46 2025 GMT
Not After : Jun 16 01:01:46 2025 GMT
Subject: CN=5b3a30f9a907427799006e088eec4079afa340fd
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:c8:78:34:ad:ec:23:f4:d3:45:09:38:8a:8f:
c2:52:df:1c:12:da:c1:00:84:be:69:bc:b7:d3:86:
12:4d:57:3a:04:63:0f:4e:3c:f9:9b:7b:68:f7:00:
16:b5:5c:ee:fc:ad:73:03:03:1e:aa:a8:5b:12:d2:
b2:60:ea:3b:ca:75:38:2e:cf:e0:d4:18:98:f3:54:
3f:d2:9e:4a:37:48:a1:7b:f1:ba:f8:e7:47:78:50:
88:c5:60:0e:fb:a4:28:54:59:93:fd:7c:bd:51:57:
18:6d:f9:7a:c5:c1:92:6e:c5:7a:12:11:38:d4:86:
a5:4f:1c:f6:64:60:b5:d4:1b:4c:54:28:bd:85:4a:
d5:16:04:14:da:62:29:bd:a3:06:09:50:ad:57:f3:
2f:b7:1e:16:56:86:33:23:7c:e7:00:b9:c4:00:4c:
3c:15:b0:ab:ff:a1:f7:97:5d:4b:b2:28:ad:eb:b7:
72:1f:2e:24:de:a2:35:d5:38:24:cb:2b:69:c4:88:
d2:72:a9:ba:49:7a:05:d0:e5:3e:7b:f7:5d:28:8b:
73:9e:fb:ab:4a:55:4b:ee:a6:da:5d:41:5c:7a:22:
52:87:f2:85:d6:37:d6:71:90:d0:98:f3:e3:f7:04:
be:52:89:8c:21:43:cd:3a:01:b9:7c:bb:64:c2:49:
d9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5B:3A:30:F9:A9:07:42:77:99:00:6E:08:8E:EC:40:79:AF:A3:40:FD
X509v3 Authority Key Identifier:
keyid:D7:94:E8:1D:72:F5:9C:65:A0:D1:81:44:A1:B2:60:79:83:53:6B:4A
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/15ToHXL1nGWg0YFEobJgeYNTa0o.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/97/f6a124-7f01-4e40-b796-cca52b626fca/1/15ToHXL1nGWg0YFEobJgeYNTa0o.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
9a:b1:94:c3:ee:f6:f6:e6:14:cb:c4:2f:71:99:c4:8f:fc:be:
da:8b:db:28:de:99:51:b1:0c:6a:43:6c:b6:a9:f5:eb:5f:40:
d0:9c:0d:a0:9c:4f:19:f3:8f:70:f3:db:be:c5:f3:0a:c7:9c:
2e:4a:44:ff:4e:ae:68:0b:89:4d:29:bb:6f:90:e1:b4:21:6b:
c3:08:ce:df:f4:fb:b6:df:57:cf:82:da:07:40:b9:82:ba:8f:
8c:e3:8d:e3:a5:2c:8d:56:bb:88:4d:2a:02:db:d7:53:87:17:
14:36:87:94:73:b8:a5:af:34:d6:8c:e8:12:64:1c:81:c1:a1:
9f:0f:a1:aa:ab:e7:40:5b:5b:1f:2a:06:4c:00:7f:bb:2c:a1:
67:8c:9d:c0:4b:83:c6:4d:a9:8d:60:e6:86:f5:b2:36:ba:5b:
26:2c:26:a5:f0:24:fc:78:6d:de:e2:b1:0b:1a:49:e9:cf:2f:
bb:63:0f:a4:0f:cd:cb:17:7f:c5:a7:b8:92:db:96:0e:91:43:
98:3f:3e:71:79:f9:a6:f5:ef:30:fa:60:d2:60:e7:d9:87:d5:
a1:fe:d0:0b:f4:0c:ec:73:28:e6:6a:f1:31:61:30:3e:b1:95:
31:3c:07:f4:7b:23:4c:01:08:a0:90:68:c2:cd:34:83:0f:7f:
f8:b7:fc:2a
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZdxG1a30ju8RQ33WlZ05XpjMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKGQ3OTRlODFkNzJmNTljNjVhMGQxODE0NGExYjI2MDc5ODM1
MzZiNGEwHhcNMjUwNjE1MDEwMTQ2WhcNMjUwNjE2MDEwMTQ2WjAzMTEwLwYDVQQD
Eyg1YjNhMzBmOWE5MDc0Mjc3OTkwMDZlMDg4ZWVjNDA3OWFmYTM0MGZkMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAt8h4NK3sI/TTRQk4io/CUt8cEtrB
AIS+aby304YSTVc6BGMPTjz5m3to9wAWtVzu/K1zAwMeqqhbEtKyYOo7ynU4Ls/g
1BiY81Q/0p5KN0ihe/G6+OdHeFCIxWAO+6QoVFmT/Xy9UVcYbfl6xcGSbsV6EhE4
1IalTxz2ZGC11BtMVCi9hUrVFgQU2mIpvaMGCVCtV/Mvtx4WVoYzI3znALnEAEw8
FbCr/6H3l11Lsiit67dyHy4k3qI11TgkyytpxIjScqm6SXoF0OU+e/ddKItznvur
SlVL7qbaXUFceiJSh/KF1jfWcZDQmPPj9wS+UomMIUPNOgG5fLtkwknZMwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFFs6MPmpB0J3mQBuCI7sQHmvo0D9MB8GA1UdIwQY
MBaAFNeU6B1y9ZxloNGBRKGyYHmDU2tKMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYt
Y2NhNTJiNjI2ZmNhLzEvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC85Ny9mNmExMjQtN2YwMS00ZTQwLWI3OTYtY2NhNTJiNjI2ZmNh
LzEvMTVUb0hYTDFuR1dnMFlGRW9iSmdlWU5UYTBvLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAmrGUw+72
9uYUy8QvcZnEj/y+2ovbKN6ZUbEMakNstqn1619A0JwNoJxPGfOPcPPbvsXzCsec
LkpE/06uaAuJTSm7b5DhtCFrwwjO3/T7tt9Xz4LaB0C5grqPjOON46UsjVa7iE0q
AtvXU4cXFDaHlHO4pa801ozoEmQcgcGhnw+hqqvnQFtbHyoGTAB/uyyhZ4ydwEuD
xk2pjWDmhvWyNrpbJiwmpfAk/Hht3uKxCxpJ6c8vu2MPpA/Nyxd/xae4ktuWDpFD
mD8+cXn5pvXvMPpg0mDn2YfVof7QC/QM7HMo5mrxMWEwPrGVMTwH9HsjTAEIoJBo
ws00gw9/+Lf8Kg==
-----END CERTIFICATE-----
Generated at Sun Jun 15 04:17:44 2025 by rpki-client